Bridge Oracle (Hybrid Liquidity Mining) - Audit

CertiK18 Apr 2023Files named in the report

CertiK reviewed Bridge (Bridge Oracle (Hybrid Liquidity Mining) - Audit) on 18 Apr 2023: 5 findings, 0 critical; 3 marked fixed, 2 open.

No open critical findings

Open the report Open Bridge’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings5

Statuses are the security firm’s own, from its report.

Severity	Open	Fixed
Critical	0	0
High	1	0
Medium	0	0
Low	1	3

LowIncompatibility With Deflationary TokensFixed

When transferring standard ERC20 deflationary tokens, the input amount may not be equal to the received amount due to the charged transaction fee. As a result, an inconsistency in the amount will occur and the transaction may fail due to the validation checks. For example, if a user sends 100 deflationary tokens (with a 10% transaction fee) to the target contract, only 90 tokens actually arrive to the contract.

LowMissing Check For `bonusEndBlock`Fixed

The function `stopReward()` can be called by the owner to stop the accumulation of rewards. However, if `bonusEndBlock` is already less than `block.number`, then the user may still receive some additional rewards even after `stopReward()` is called. Therefore, it's important to check the current value of `bonusEndBlock` before calling `stopReward()`.

LowTautology or ContradictionFixed

Comparisons that are always true or always false may be incorrect or unnecessary. ```solidity=1181 require(_stakedToken.totalSupply() >= 0); ``` --- ```solidity=1182 require(_rewardToken.totalSupply() >= 0); ```