Quantstamp has audited Zircuit's ZRC ERC20 Token intended for deployment on Ethereum Mainnet and Zircuit L2. The main ERC20 contract `ZRC.sol` is on Ethereum Mainnet, controlling the total supply. When bridging to L2, tokens will be locked on L1, allowing the bridge to mint and burn tokens in `ZRCL2.sol` , an `ERC20` contract on Zircuit. We have also audited the `BatchTransfer.sol` contract for batch transferring tokens from `msg.sender` to multiple recipients. Additionally, the `Distributor.sol` contract allows the owner to distribute ZRC tokens to recipients on L2, with each address allowed only once. We have not identified any vulnerabilities in the contracts. We appreciate the Zircuit team's prompt communication and clean engineering work. **Fix Review Update**: The customer has acknowledged the finding and suggestions. **On-Chain Review Update**: The Zircuit token was deployed at the following address on Ethereum and Zircuit: `0xfd418e42783382E86Ae91e445406600Ba144D162`. Furthermore, the transfer restriction was lifted and transferal cannot be restricted anymore.
Low | Medium | High | Critical | Total | |
---|---|---|---|---|---|
Not fixed | 1 | - | - | - | 1 |
Fixed | - | - | - | - | 0 |
Total | 1 | 0 | 0 | 0 | 1 |
# | File Name |
---|---|
1 | ZRC.sol |
2 | BatchTransfer.sol |
3 | Distributor.sol |
4 | ZRCL2.sol |