Audit · firm’s term: audit report
QuillAudits reviewed Huddle01 on 11 Sep 2024: 7 findings, 0 critical; 5 marked fixed, 2 open.
Report hosted on quillaudits.com.
Trustblock does not review code.
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 2 | 0 | 0 |
| Low | 0 | 0 | 5 |
The Cash event which gets emitted when the cashier or the contract owner invokes the cashPaymentToken function for withdrawal of the payment tokens. However, this will constantly emit 0 for the saleTokenBalance parameter in the event. There is a need to also rename the paymentTokenBalance parameter in the event to a clarified variable name since it emits the amount to be withdrawn and not the balance of payment token in the contract.
The purpose of the getSaleTokenSold function was to get information of how much sales token has been acquired. However, this function which has an internal visibility and made the Cashable an abstract contract, was clearly defined in the Sale contract yet it was not invoked anywhere. This was declared but left unused.
A variable and modifier were declared but were never used within a function.
This state variable was initialized but there are no functions to further update this variable.
This variable only gets set at the constructor and there is no function to update the salePrice value after deployment.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (2)
350 projects reviewed · 459 reports · latest Apr 2025
See QuillAudits’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us