Illuvium ERC20

Off-Chain (Private)

Audited on 2021/03/26

No active critical issues

Summary

We have found only a few low and informational severity issues within the reviewed code. The scope of the review has been limited to the following contracts: `IlluviumERC20.sol` and `AccessControl.sol`. Overall, the code follows best practices and is well documented and well tested. We recommend, however, addressing all the issues before deploying the contracts. **Update:** as of commit `903a787` two issues have been fixed, one issue has been mitigated and the remaining two issues have been acknowledged. We did not evaluate any other changes between this and the initially reviewed commit.

Project

Illuvium

Ethereum

Issues (6)

	Low	Medium	High	Critical	Total
Not fixed	3	-	-	-	3
Fixed	3	-	-	-	3
Total	6	0	0	0	6

Contracts (4)

#	File Name
1	AccessControl.sol
2	token/IlluviumERC20.sol
3	token/ERC20Receiver.sol
4	AddressUtils.sol

#	File Name
1	AccessControl.sol
2	token/IlluviumERC20.sol
3	token/ERC20Receiver.sol
4	AddressUtils.sol

Illuvium ERC20

Summary

Issues (6)

Allowance Double-Spend Exploitnot_fixed/low

Privileged Roles and Ownershipnot_fixed/low

Unsafe way to check if address is contract or EOAnot_fixed/low

Contracts (4)