Hub Token

QuantstampFiles named in the report

Quantstamp reviewed Hub Token on 4 Feb 2019: 3 findings, 0 critical; 2 marked fixed, 1 open.

No open critical findings
Open the reportOpen Hub Token’s security record

Report hosted on certificate.quantstamp.com.

Trustblock does not review code.

Findings3

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High000
Medium000
Low102
LowAllowance Double-Spend ExploitFixed

Description: As it presently is constructed, the contract is vulnerable to the allowance double-spend exploit, as with other ERC20 tokens. Exploit Scenario: 1. Alice allows Bob to transfer N amount of Alice's tokens (N>0) by calling the approve() method on Token smart contract (passing Bob's address and N as method arguments) 2. After some time, Alice decides to change from N to M (M>0) the number of Alice's tokens Bob is allowed to transfer, so she calls the approve() method again, this time passing Bob's address and M as method arguments 3. Bob notices Alice's second transaction before it was mined and quickly sends another transaction that calls the transferFrom() method to transfer N Alice's tokens somewhere 4. If Bob's transaction will be executed before Alice's transaction, then Bob will successfully transfer N Alice's tokens and will gain an ability to transfer another M tokens 5. Before Alice notices any irregularities, Bob calls transferFrom() method again, this time to transfer M Alice's tokens.

LowUnlocked PragmaFixed

Every Solidity file specifies in the header a version number of the format pragma solidity (^)0.4.*. The caret ( ) before the version number implies an unlocked pragma, meaning that the compiler will use the specified version and above, hence the term "unlocked."

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (9)

  • contracts/Migrations.sol
  • contracts/token/ERC20/StandardToken.sol
  • contracts/token/ERC20/ERC20.sol
  • contracts/token/ERC20/HubToken.sol
  • contracts/token/ERC20/BurnableToken.sol
  • contracts/lifecycle/Pausable.sol
  • contracts/MultiSigWallet.sol
  • contracts/math/SafeMath.sol
  • contracts/ownership/Ownable.sol

Part of Hub Token’s security record

Hub Token
Audits1 audit by 1 firmLast audit Feb 2019, by Quantstamp.
Critical findingsNo open critical findingsIn 1 report.
Open Hub Token’s security record

Security firm

Quantstamp

236 projects reviewed · 332 reports · latest Oct 2026

See Quantstamp’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us