Faya World

QuillAudits23 Oct 20231 address on BNB Chain

Audit · firm’s term: audit report

QuillAudits reviewed Faya World on 23 Oct 2023: 3 findings, 0 critical; none marked fixed.

No open critical findings

Open the report Open Faya World’s security record

Report hosted on quillaudits.com.

Trustblock does not review code.

Findings3

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	0	0	0
Medium	0	0	0
Low	3	0	0

LowDonations can’t be sent to the contract.Open

In contract FAYA the constructor is payable so by means when contract is deployed with native token it can be recovered. But after that if someone tries to send native token as the contract doesn’t have a receive() function it won’t be able to accept donations afterwards.

LowUnlocked pragma ( pragma solidity ^0.8.18 )Open

Contracts should be deployed with the same compiler version and flags that they have been tested with thoroughly. Locking the pragma helps to ensure that contracts do not accidentally get deployed using, for example, an outdated compiler version that might introduce bugs that affect the contract system negatively.

LowUse safeTransfer instead of transfer for ERC20 tokens.Open

In contract TokenRecover transfer is used to transfer erc20 tokens to the owner which are sent as donations but using transfer sometimes does not work properly and can give true even if the transaction failed for some tokens such as USDT.