ChainAudits reviewed Quick Intel (ERC20) on 12 Oct 2024: 2 findings, 0 critical; none marked fixed.
Report hosted on app.chainaudits.io.
Trustblock does not review code.
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 0 | 0 | 0 |
| Low | 2 | 0 | 0 |
Description NatSpec documentation is important in the Solidity ecosystem because it provides clarity, increases maintenance, and encourages security best practices. Recommendation If you have started to comment on your code, comment on all other functions, variables, etc. to improve the readability and maintenance of code in the long run.
Description The smart contract does not import essential dependencies like OpenZeppelin libraries from official, verified npm sources. Instead, it relies on custom or local implementations of widely used utilities. This practice can lead to vulnerabilities or inconsistencies, as it bypasses the benefits of community-reviewed code, security patches, and version control provided by libraries like OpenZeppelin. Recommendation Import critical dependencies directly from verified npm sources (e.g., @openzeppelin/contracts) to ensure you are using the latest, secure versions.
| Address | Chain | Source code |
|---|---|---|
| 0xbcd4…c0b70xbcd4d5ac29e06e4973a1ddcd782cd035d04bc0b7 | Chain: Ethereum | Source code: Verified source |
4 projects reviewed · 4 reports · latest Dec 2024
See ChainAudits’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us