vEPOCH is an ERC-20 veToken contract that allows the deposit and lock of a `depositToken` to receive vEPOCH, representing someone's voting power according to the amount and duration of locked deposits. All current depositors can additionally earn rewards, however, without a well-defined release schedule. Overall, the code is well-written but lacks some documentation. We have not found any significant security vulnerabilities but could identify several edge cases with unexpected and unintended behavior. We recommend incorporating all fixes presented in this report.
Low | Medium | High | Critical | Total | |
---|---|---|---|---|---|
Not fixed | 13 | 1 | - | - | 14 |
Fixed | 2 | 1 | 1 | - | 4 |
Total | 15 | 2 | 1 | 0 | 18 |
# | File Name |
---|---|
1 | tree/master/contracts/Vepoch.sol |