Humanity token is an upgradeable ERC-20 token deployed behind a [Transparent Upgradeable Proxy](https://github.com/OpenZeppelin/openzeppelin-contracts/blob/master/contracts/proxy/transparent/TransparentUpgradeableProxy.sol). Currently, the Humanity token restricts token minting and burning to only the Humanity token contract owner. Quantstamp reviewed the `BMToken.sol` and `Proxies.sol` contracts. During the review, the audit team did not identify any critical issues; however, one informational issue is listed regarding adherence to best practices. **Update**: All issues listed in this report have been fixed in commit `4914653776698f470a95ca392f112af603060fba`. **Update 2025-07-11**: The following minor changes occurred in commit `4fd677686f87cd26cbd9ce27842721c6b789293e`: - File name: `BMToken.sol` was changed to `HToken.sol` - License: The `HToken.sol` and `Proxies.sol` contracts changed from unlicensed to MIT - Compiler: The compiler version for `Proxies.sol` was changed from `0.8.0` to `0.8.
Low | Medium | High | Critical | Total | |
---|---|---|---|---|---|
Not fixed | - | - | - | - | 0 |
Fixed | 1 | - | - | - | 1 |
Total | 1 | 0 | 0 | 0 | 1 |
# | File Name |
---|---|
1 | contracts/Proxies.sol |
2 | contracts/HToken.sol |