Fabwelt

CertiK1 address on Polygon (POS)

CertiK reviewed Fabwelt on 12 May 2023: 8 findings, 0 critical; 1 marked fixed, 7 open.

No open critical findings
Open the reportOpen Fabwelt’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings8

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High001
Medium000
Low700
LowCheck Allowance Before TransferOpen

In the function `FabweltToken.transferFrom()`, the function transfers tokens before checking if the message sender has enough of an allowance. ```solidity=541 _transfer(sender, recipient, amount); _approve(sender, _msgSender(), _allowances[sender][_msgSender()].sub(amount, "TOKEN20: transfer amount exceeds allowance")); ``` It would be better to validate the allowance first to reduce gas costs in case it reverts.

LowLack of Event Emissions for Significant TransactiOpen

The following functions update crucial state variables. Events should be emitted to log these updates. - `FabweltToken.deliver()` - `FabweltToken.excludeAccount()` - `FabweltToken.includeAccount()` - `FabweltToken.setAsCharityAccount()` - `FabweltToken.updateFee()`

LowMissing Error MessagesOpen

The **require** statement can be used to check for conditions and throw an exception if the condition is not met. It is better to provide a string message containing details about the error that will be passed back to the caller.

LowRedundant CodeOpen

In the function `FabweltToken._transfer()`, `takeFee` is set to `false` if `recipient` is excluded: ```solidity=649 if (FeeAddress == sender || FeeAddress == recipient || _isExcluded[recipient]) { takeFee = false; } if (StakeAddress == sender || StakeAddress == recipient || _isExcluded[recipient]) { takeFee = false; } ``` Checking `_isExcluded[recipient]` in the second `if` statement is unnecessary because it has been checked in the first `if` statement. In the function `FabweltToken._transfer()`, the condition `!_isExcluded[sender] && !_isExcluded[recipient]` is unnecessary because `FabweltToken._transferStandard()` will be executed in the `else` statement: ```solidity=664 ... else if (!_isExcluded[sender] && !_isExcluded[recipient]) { _transferStandard(sender, recipient, amount); } ... ``` The function `FabweltToken._reflectFee()` contains the following line: ```solidity=745 _tTotal = _tTotal; ``` However, this does not bring any changes. The function `FabweltToken._getTaxFee()` is a private function but never used within the contract.

LowUnlocked Compiler VersionOpen

The contract has an unlocked compiler version. An unlocked compiler version in the source code of the contract permits the user to compile it at or above a particular version. This, in turn, leads to differences in the generated bytecode between compilations due to differing compiler version numbers. This can lead to ambiguity when debugging as compiler-specific bugs may occur in the codebase that would be hard to identify over a span of multiple compiler versions rather than a specific one.

LowUnused Local VariableOpen

In the contract `FabweltToken`, the functions `_transferStandard()`, `_transferToExcluded()`, `_transferFromExcluded()`, and `_transferBothExcluded()` all contain the following line: ```solidity uint256 currentRate = _getRate(); ``` However, the local variable `currentRate` is unused in the above mentioned functions.

LowVariable can be Declared as ConstantOpen

The values of `FabweltToken._GRANULARITY` and `FabweltToken._MAX` are never changed after assignment, so they can be declared as `constant`. A big advantage of constant variables is that reading them is significantly cheaper than reading from regular state variables.

Contracts in scope1

AddressChainSource code
0x23e8b6a3f6891254988b84da3738d2bfe5e703b9Chain: Polygon (POS)Source code: Verified source

Part of Fabwelt’s security record

Fabwelt
Audits1 audit by 1 firmLast audit May 2023, by CertiK.
Critical findingsNo open critical findingsIn 1 report.
Open Fabwelt’s security record

Security firm

CertiK

1,044 projects reviewed · 1,375 reports · latest May 2025

See CertiK’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us