MUD

In the contract `MudAngelRoundReleaseBank` the role `admin` has authority over the functions shown below. - function icoDeposit() Any compromise to the `admin` account may allow the hacker to take advantage of this authority.

In the contract `MudABRoundReleaseBank` the role `admin` has authority over the functions shown below. - function icoDeposit() Any compromise to the `admin` account may allow the hacker to take advantage of this authority.

In the contract `MudMiningPool` the role `admin` has authority over the functions shown in the diagram below. Any compromise to the `admin` account may allow the hacker to take advantage of this authority.  In the contract `MudMiningPool` the role `miningDappAddress` has authority over the functions shown in the diagram below. Any compromise to the `miningDappAddress` account may allow the hacker to take advantage of this authority. 

In the contract `MudABRoundReleaseBank` the role `admin` has authority over the functions shown below. - function teamMemberDeposit() Any compromise to the `admin` account may allow the hacker to take advantage of this authority.

In the contract `MudTestToken` the role `creator` has authority over the functions shown below. - function icoFinalised() - function icoTransferFrom() Any compromise to the `creator` account may allow the hacker to take advantage of this authority.

All of the 1000000000 `MUD` tokens are sent to the contract deployer when deploying the contract. This could be a centralization risk as the deployer can distribute these tokens without obtaining the consensus of the community.

When transferring deflationary ERC20 tokens, the input amount may not be equal to the received amount due to the charged transaction fee. For example, if a user sends 100 deflationary tokens (with a 10% transaction fee), only 90 tokens actually arrived to the contract. However, a failure to discount such fees may allow the same user to withdraw 100 tokens from the contract, which causes the contract to lose 10 tokens in such a transaction. Reference: https://thoreum-finance.medium.com/what-exploit-happened-today-for-gocerberus-and-garuda-also-for-lokum-ybear-piggy-caramelswap-3943ee23a39f For example: ```solidity=61 token.transferFrom(msg.sender, contractorAddr, amount); ``` - Transferring tokens by `amount`. ```solidity=53 require(amount + token.balanceOf(contractorAddr) <= teamMemberBalance, "amount overflow!"); ``` - The `amount` appears to be used for bookkeeping purposes without compensating the potential transfer fees.

Performing integer division before multiplication truncates the low bits, losing the precision of calculation. ```solidity=86 uint256 freeAmount = (now - bank[addressToCheck].lastTime) / secPerDay * bank[addressToCheck].dailyReleaseAmount; ``` --- ```solidity=106 uint256 freeAmount = (now - bank[msg.sender].lastTime) / secPerDay * bank[msg.sender].dailyReleaseAmount; ``` --- ```solidity=86 uint256 freeAmount = (now - bank[addressToCheck].lastTime) / secPerDay * bank[addressToCheck].dailyReleaseAmount; ``` --- ```solidity=105 uint256 freeAmount = (now - bank[msg.sender].lastTime) / secPerDay * bank[msg.sender].dailyReleaseAmount; ``` --- ```solidity=96 uint256 freeAmount = SafeMath.div(now - bank[addressToCheck].lastTime, secPerDay).mul(bank[addressToCheck].dailyReleaseAmount); ``` --- ```solidity=115 uint256 freeAmount = SafeMath.div(now - bank[msg.sender].lastTime, secPerDay).mul(bank[msg.sender].dailyReleaseAmount); ```

While transferring MUD tokens, it requires the frozen flag is disabled, otherwise, it's not allowed to transfer. Once the frozen flag is enabled, there is no way to disable it. So no transfer could success then.

The functions which are never called internally within the contract should have external visibility for gas optimization. ```solidity=43 function totalSupply() public view returns (uint256) { ``` --- ```solidity=50 function balanceOf(address account) public view returns (uint256) { ``` --- ```solidity=62 function transfer(address recipient, uint256 amount) public returns (bool) { ``` --- ```solidity=70 function allowance(address owner, address spender) public view returns (uint256) { ``` --- ```solidity=81 function approve(address spender, uint256 value) public returns (bool) { ``` --- ```solidity=118 function increaseAllowance(address spender, uint256 addedValue) public returns (bool) { ``` --- ```solidity=137 function decreaseAllowance(address spender, uint256 subtractedValue) public returns (bool) { ``` --- ```solidity=148 function burnFrom(address account, uint256 amount) public { ``` --- ```solidity=27 function name() public view returns (string memory) { ``` --- ```solidity=35 function symbol() public view returns (string memory) { ``` --- ```solidity=33 function mainNetMappingFreeze() public { ``` --- ```solidity=41 function icoFinalised() public returns (bool) { ``` --- ```solidity=63 function icoTransferFrom(address sender, address recipient, uint256 amount) public returns (bool) { ``` --- ```solidity=48 function icoDeposit(address investorAddress, uint256 amount) onlyAdmin public returns (uint256) { ``` --- ```solidity=71 function checkBalance(address addressIn) public view returns (uint256 , uint256 ) { ``` --- ```solidity=100 function releaseToken() public returns (uint256, uint256) { ``` --- ```solidity=49 function icoDeposit(address investorAddress, uint256 amount) onlyAdmin public returns (uint256) { ``` --- ```solidity=71 function checkBalance(address addressIn) public view returns (uint256 , uint256 ) { ``` --- ```solidity=99 function releaseToken() public returns (uint256, uint256) { ``` --- ```solidity=38 function deposit(uint256 amount, uint8 duration) public returns (uint256) { ``` --- ```solidity=62 function breakContract(uint256 contractId) public returns(uint256, uint256) { ``` --- ```solidity=87 function checkBalance(address addressIn) public view returns (uint256, uint256) { ``` --- ```solidity=120 function Withdraw() public returns (uint256, uint256) { ``` --- ```solidity=50 function miningStart() public returns (uint) { ``` --- ```solidity=94 function checkBalance() public view returns (uint256) { ``` --- ```solidity=101 function withdraw() public returns (uint256) { ``` --- ```solidity=50 function teamMemberDeposit(address teamMemberAddress, uint256 amount) onlyAdmin public returns (uint256) { ``` --- ```solidity=71 function checkBalance(address addressIn) public view returns (uint256 , uint256 ) { ``` --- ```solidity=106 function releaseToken() public returns (uint256, uint256) { ```