XHYPE

CertiK30 Jun 2023Files named in the report

Audit

CertiK reviewed XHYPE on 30 Jun 2023: 13 findings, 0 critical; 8 marked fixed, 2 acknowledged, 3 open.

No open critical findings

Open the report Open XHYPE’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings13

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	0	2	2
Medium	0	0	0
Low	3	0	6

LowIncorrect code commentsOpen

In the function `toUint256()`, the code comment for the param `y` is incorrect.

LowRouter And Pair May Not Be Excluded From DividendOpen

In the function `updateUniswapV2Router()`, it is never checked that the new router and pair are excluded from dividends and excluded if they are not already.

LowThird Party DependencyOpen

The contract is serving as the underlying entity to interact with PancakeSwap and reward tokens. The scope of the audit treats third party entities as black boxes and assume their functional correctness. However, in the real world, third parties can be compromised and this may lead to lost or stolen assets. In addition, upgrades of third parties can possibly create severe impacts, such as increasing fees of third parties, migrating to new LP pools, etc.