Growt

QuillAuditsFiles named in the report

Audit · firm’s term: audit report

QuillAudits reviewed Growt on 24 Jan 2025: 7 findings, 0 critical; 6 marked fixed, 1 open.

No open critical findings
Open the reportOpen Growt’s security record

Report hosted on quillaudits.com.

Trustblock does not review code.

Findings7

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High000
Medium001
Low105
MediumTotal Amount of token minted exceeds the expected total supplyFixed

Based on the excel sheet provided by the Growt team, total suppply of Growt tokens(6 decimals) isexpected to be 500000000000000 tokens. But calculations in the Vesting smart contract mints 500000003952000 tokens in end of 67th month.

LowMissing and incorrect docstringsFixed

constructor, releaseTokens and getAvailableTokenAmount functions miss some parts of docstrings.@param and @return tags provide rich documentation for functions about their parameters and return variables. getAvailableTokenAmount function's @dev tag is misleading because it just returns the available number of tokens for a receiver. /** * @dev Function let release available tokens //@audit misleading explanation */ function getAvailableTokenAmount (uint8 vestingPeriod_, address receiver) public view re turns(uint256) {

LowMissing Event emissionFixed

releaseTokens function in the contract, mints new tokens to certain addresses stored in the contract.Therefore it is making state changes. State changing functions should emit events which is a best smart contract code practice. Release event is defined in the contract but never used in the funtion. event Release( address indexed userAddress, uint256 amount );

LowMissing zero address checksFixed

constructor of the contract is missing to check the input address params are not zero address.- preSeed_- team_ - marketing_ - liquidity_ - marketMaking_ - airDrop_ - preSeedReward_ - reserve_

LowUse !=0 instead of >0Fixed

In releaseTokens function, Growt tokens are minted after checking the amount of tokens is more thanzero It is cheaper to use != 0 than > 0 for uint256 values .

LowUse standard time literals for better readabilityFixed

MONTH constant in the contract is not using the standard solidity [time units].(https://docs.soliditylang.org/en/latest/units-and-global-variables.html#time-units)Recommendation Resolved uint32 internal constant MONTH = 30 * 24 * 3600; // @audit use standard time units for better readability

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (2)

  • /docs.sol
  • Vesting.sol

Part of Growt’s security record

Growt
Audits1 audit by 1 firmLast audit Jan 2025, by QuillAudits.
Critical findingsNo open critical findingsIn 1 report.
Open Growt’s security record

Security firm

QuillAudits

350 projects reviewed · 459 reports · latest Apr 2025

See QuillAudits’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us