Audit · firm’s term: audit report
QuillAudits reviewed wesleep.io (We sleep) on 4 Jan 2023: 3 findings, 0 critical; all marked fixed.
Report hosted on quillaudits.com.
Trustblock does not review code.
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 3 |
| Medium | 0 | 0 | 0 |
| Low | 0 | 0 | 0 |
most of the critical functions that make up the contracts fail to check for the possibilities of receiving address zero parameters. This implies that tokens can be sent to the null address which is afterwards irredeemable.
The token contract is written from scratch up and comes with few basic features that allows for transfer of tokens by token owners and also allows token owners to approve spenders to expend their tokens, supposing that spenders are granted enough amounts for spending. However, there are possibilities of front running and race conditions. If a token owner first approves a spender a certain amount and intends to change it later in the future, say to a lesser value. A spender who is aware of this can frontrun the token owner and spend up to the first approval before the changes of approval price is effected.
There were no provided test cases for the codebases carried out by the developers.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (1)
350 projects reviewed · 459 reports · latest Apr 2025
See QuillAudits’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us