Beincom - Audit

CertiK2 Aug 2024Files named in the report

Audit

CertiK reviewed Beincom (Beincom - Audit) on 2 Aug 2024: 5 findings, 0 critical; 2 marked fixed, 3 open.

No open critical findings

Open the report Open Beincom’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings5

Statuses are the security firm’s own, from its report.

Severity	Open	Fixed
Critical	0	0
High	1	0
Medium	0	0
Low	2	2

LowMissing Emit EventsFixed

There should always be events emitted in the sensitive functions that are controlled by centralization roles.

LowValue of COST_OF_POSTFixed

The `COST_OF_POST` has a hard-coded value of 15000, and is used to compare with `userOp.verificationGasLimit` in line 113 as well as being used to calculate the amount of additional token charge in line 149. In the `_postOp()` function, the token `_transfer()` function is called, and its gas cost is not included in the `actualGasCost` and should be accounted for by the `COST_OF_POST`. However, the actual gas cost of the `BicTokenPaymaster`'s token transfer appears to be ~3 times higher than the hardcoded number, based on the hardhat gas report below. ```solidity Solc version: 0.8.23 · Optimizer enabled: true · Runs: 1000000 · Block limit: 30000000 gas │ | Methods │ ·························|··············|·············|·············|··········| | Contract · Method · Min · Max · Avg · | BicTokenPaymaster · transfer · 55475 · 60275 · 58675· ```