Audit · firm’s term: audit report
QuillAudits reviewed Growt on 24 Jan 2025: 7 findings, 0 critical; 6 marked fixed, 1 open.
Report hosted on quillaudits.com.
Trustblock does not review code.
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 0 | 0 | 1 |
| Low | 1 | 0 | 5 |
Based on the excel sheet provided by the Growt team, total suppply of Growt tokens(6 decimals) isexpected to be 500000000000000 tokens. But calculations in the Vesting smart contract mints 500000003952000 tokens in end of 67th month.
constructor, releaseTokens and getAvailableTokenAmount functions miss some parts of docstrings.@param and @return tags provide rich documentation for functions about their parameters and return variables. getAvailableTokenAmount function's @dev tag is misleading because it just returns the available number of tokens for a receiver. /** * @dev Function let release available tokens //@audit misleading explanation */ function getAvailableTokenAmount (uint8 vestingPeriod_, address receiver) public view re turns(uint256) {
releaseTokens function in the contract, mints new tokens to certain addresses stored in the contract.Therefore it is making state changes. State changing functions should emit events which is a best smart contract code practice. Release event is defined in the contract but never used in the funtion. event Release( address indexed userAddress, uint256 amount );
constructor of the contract is missing to check the input address params are not zero address.- preSeed_- team_ - marketing_ - liquidity_ - marketMaking_ - airDrop_ - preSeedReward_ - reserve_
In releaseTokens function, Growt tokens are minted after checking the amount of tokens is more thanzero It is cheaper to use != 0 than > 0 for uint256 values .
MONTH constant in the contract is not using the standard solidity [time units].(https://docs.soliditylang.org/en/latest/units-and-global-variables.html#time-units)Recommendation Resolved uint32 internal constant MONTH = 30 * 24 * 3600; // @audit use standard time units for better readability
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (2)
350 projects reviewed · 459 reports · latest Apr 2025
See QuillAudits’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us