Digcrypto - Audit

CertiK21 Sep 2022Files named in the report

CertiK reviewed Digcrypto (Digcrypto - Audit) on 21 Sep 2022: 9 findings, 0 critical; 4 marked fixed, 2 acknowledged, 3 open.

No open critical findings

Open the report Open Digcrypto’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings9

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	3	0	1
Medium	0	0	3
Low	0	2	0

LowPotential Flashloan AttackAcknowledged

Flash loans are a way to borrow large amounts of money for a certain fee. The requirement is that the loans need to be returned within the same transaction in a block. If not, the transaction will be reverted. An attacker can use the borrowed money as the initial funds for an exploit to enlarge the profit and/or manipulate the token price in the decentralized exchanges. We find that the `valueToStake` rely on price calculations that are based on-chain, meaning that they would be susceptible to flash-loan attacks by manipulating the price of given pairs to the attacker's benefit. A user can reach higher tier with fewer tokens as he can use flashloan to manipulate the price of the TKN pool behind.

LowUser does not profit in the staking processAcknowledged

In function `unstake`, user is able to get his deposits back. However, he does not get any reward, so there is no incentive for a user to participate in staking.