The DeFi project developed by the Reach team introduces a Discord bot service enabling users to initiate missions. Points accrue based on mission completion, serving as the basis for rewards in `ETH` or `REACH` tokens. The `ReachDistribution` contract outlines reward allocation via a Merkle root. There is also the `ReachFactory` contract which facilitates the deployment of `ReachDistribution` instances. The `Reach` token contract imposes fees on transfers involving DEX pairs. Once a specified fee threshold is reached, it automates a swap to `ETH`, transferring the proceeds to the team's treasury. The Reach team will receive all initial supply and stated that the buy/sell tax will be removed after the token launch (stopping automatic swaps of the fees to ETH) and renouncing the ownership of the contract. The audit team managed to find 19 issues including 3 High and 4 Medium severity issues. We recommend the Reach team address the findings as soon as possible and before any deployments to mainnet. **Update Fix-Review:** The Reach team addressed all issues by either fixing or acknowledging them.
Low | Medium | High | Critical | Total | |
---|---|---|---|---|---|
Not fixed | 1 | 3 | 1 | - | 5 |
Fixed | 11 | 1 | 3 | - | 15 |
Total | 12 | 4 | 4 | 0 | 20 |
# | Github Repository | Commit Hash | File | Url |
---|---|---|---|---|
1 | get-reach-dev/smart-contracts | e7306b8 | contracts/ReachDistribution.sol | Check on Github |