Real Smurf Cat

CertiK1 address on Ethereum

CertiK reviewed Real Smurf Cat on 29 Jul 2024: 5 findings, 0 critical; 2 marked fixed, 2 acknowledged, 1 open.

No open critical findings
Open the reportOpen Real Smurf Cat’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings5

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High101
Medium001
Low020
LowFunction Fails on Valid InputsAcknowledged

It is expected that invocations of `transferFrom(from, dest, amount)` succeed and return `true` if * the value of `amount` does not exceed the balance of address `from`, * the value of `amount` does not exceed the allowance of `msg.sender` for address `from`, * transferring a value of `amount` to the address in `dest` does not lead to an overflow of the recipient's balance, and * the supplied gas suffices to complete the call. Nevertheless, the `transferFrom` function of `SmurfCat` fails in some of those valid cases. It is expected that invocations of the form `transfer(recipient, amount)` succeed and return `true` if * The address in `recipient` is not the zero address, * `amount` does not exceed the balance of address `msg.sender`, * transferring `amount` to the address `recipient` does not lead to an overflow of the recipient's balance, and * the supplied gas suffices to complete the call. Nevertheless, the `transfer` function of `SmurfCat` fails in some of those valid cases.

LowMissing Zero Address ValidationAcknowledged

Addresses are not validated before assignment or external calls, potentially allowing the use of zero addresses and leading to unexpected behavior or vulnerabilities. For example, transferring tokens to a zero address can result in a permanent loss of those tokens. ```solidity=611 uniswapV2Pair = _uniswapV2Pair; ``` - `_uniswapV2Pair` is not zero-checked before being used. If `uniswapV2Pair` is reset to 0, then the trading will be stopped unless the transfer is from or to `owner` address.

Contracts in scope1

AddressChainSource code
0xff836a5821e69066c87e268bc51b849fab94240cChain: EthereumSource code: Verified source

Part of Real Smurf Cat’s security record

Real Smurf Cat
Audits1 audit by 1 firmLast audit Jul 2024, by CertiK.
Critical findingsNo open critical findingsIn 1 report.
Open Real Smurf Cat’s security record

Security firm

CertiK

1,044 projects reviewed · 1,375 reports · latest May 2025

See CertiK’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us