W Coin Migration Audit
Audit · firm’s term: audit
QuillAudits reviewed W Chain (W Coin Migration Audit) on 25 Dec 2024: 5 findings, 0 critical; 4 marked fixed, 1 open.
Report hosted on quillaudits.com.
Trustblock does not review code.
Findings5
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 0 | 0 | 1 |
| Low | 1 | 0 | 3 |
LowUse abi.encode instead of abi.encodePackedOpen
abi.encodePacked() should not be used with dynamic types when passing the result to ahash function such as keccak256(). Use abi.encode() instead which will pad items to 32 bytes, which will prevent hash collisions (e.g. abi.encodePacked(0x123,0x456) => 0x123456 =>abi.encodePacked(0x1,0x23456), but abi.encode(0x123,0x456) => 0x0...1230...456). Unless there is a compelling reason, abi.encode should be preferred. If there is only one argument to abi.encodePacked() it can often be cast to bytes() or bytes32() instead. If all arguments are strings and or bytes, bytes.concat() should be used instead.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (1)
- WChainMigration.sol
Part of W Chain’s security record
W ChainSecurity firm
QuillAudits350 projects reviewed · 459 reports · latest Apr 2025
See QuillAudits’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us