Read the findings of the 2022 Web3 Security Report

`ANKTPreSale` is an upgradeable contract, the owner can upgrade the contract without the community's commitment. If an attacker compromises the account, he can change the implementation of the contract and drain tokens from the contract.

Centralized Control of Contract Upgrade

The contract has an unlocked compiler version. An unlocked compiler version in the source code of the contract permits the user to compile it at or above a particular version. This, in turn, leads to differences in the generated bytecode between compilations due to differing compiler version numbers. This can lead to ambiguity when debugging as compiler-specific bugs may occur in the codebase that would be hard to identify over a span of multiple compiler versions rather than a specific one.

Unlocked Compiler Version

In the contract `ANKTPreSale`, the role `owner` has authority over the following functions:
- function withdraw(), to transfer all tokens of the current contract to `safeAddress` address.
- function convertAPtoANKT(), to convert Appoints to ` ANKT` tokens.
- function pause(), to pause the contract.
- function unpause, to unpause the contract.
Any compromise to the `owner` account may allow a hacker to take advantage of this authority.

Centralization Related Risks

The given input is missing the check for the non-zero address.

Lack of Zero Address Validation

When transferring standard ERC20 deflationary tokens, the input amount may not be equal to the received amount due to the charged transaction fee. As a result, an inconsistency in the amount will occur and the transaction may fail due to the validation checks.

Incompatibility With Deflationary Tokens

There is no validation between `listofAddresses.length` and `APPoints.length` in function.

Missing Validation for Array Length

The important configuration variables' visibility is set to "private" and the contract doesn't provide a view function for those variables. The community will have a tough time to "DYOR"(Do Your Own Research) to find out what those contract configurations are. This may degrade the project's public reputation. 

Non-Transparent Variable Visibility

The order of external call/transfer, storage manipulation, and event emissions should follow the check-effect-interaction pattern.

Check Effect Interaction Pattern Violated

The `for` loop in the function takes the unbounded array's length as the maximum iteration times. If the size of the array grows large, iterating through the entire array could be an expensive operation considering there are external calls in the `for` loop. Even worse, if the computation for each iteration is extremely complex, it could lead to gas insufficiency.

Potential Gas Exhaustion

The Variables `depositAmount`, could be declared as `constant` since these state variables are never to be changed.


Variable could be declared as `constant`

The return values of function  `updateUserReferral` is not properly handled.

Return value not handled

Literals with many digits are difficult to read and review.

Too Many Digits

Boolean constants can be used directly and do not need to be compared to true or false.

Comparison to A Boolean Constant

The function that is declared `payable` can receive ether. The function `withdraw()` seems not designed for receiving ether, so it is redundant to have the `payable` modifier.

Redundant Modifier `payable`

Users deposit `USDT` tokens to the current contract, however, there is no logic to transferring `ANTK` tokens to users. We would like to confirm with the client if the current implementation aligns with the original project design.

Logic issue of Function `tokeDeposit()`

Ankots of Misteria

ANKTPreSale.sol

Ankots of Misteria 

3.7 Trillion SHIB Moved to Exchanges This Week as SHIB Game Soars to Top 20 in App Store

Game On: Buried treasure games of 2022

Mega Matrix discontinues Mano game, alSpace platform due to regulatory issues

Hasbro Is 'Killing its Golden Goose' Card Game. BofA Downgrades To Sell.

Expert says the Patriot missiles are 'not a game changer.' Hear why

Crypto’s Game Plan After FTX’s Collapse

After Logan Paul's CryptoZoo game failed to let players

Robocallers have upped their scam game and they’re after your crypto

The SEC Chair Issued A Game-Changing Ethereum Warning—Sparking A Major Price Crash

Shiba Eternity Game: Australia Might Be "Last Test Location," Says SHIB Lead Dev

Game Space Invest $3 Million in KEY3.id, a Permanently Free DID Protocol

The Fool's Game Of Annual Crypto Price Predictions

Rally in Crypto Game Axie's AXS Token Faces Skepticism From Derivative Traders

BC.GAME is Hosting A Huge Lottery Event to Celebrate Argentina's Historic Win

Why crypto fraud is a game of whack-a-mole

‘It’s Not Priced In’—Crypto Braced For $300 Million Game-Changer As The Price Of Bitcoin, Ethereum, BNB, XRP, Solana, Cardano And Dogecoin Swing

first game from Shrike Tabletop is a tactical, ANTIFA-pu

Gala Games Buys Walking Dead Empires Game Studio, Token Surges 17%

Shiba Eternity Game Devs Now Accept Ideas from Users: Details

This CEO Claims SHIB Is Pyramid Scheme, John Deaton Shares Why SEC Is Wrong About XRP Status, Shiba Eternity Game Gets Upgrade: Crypto News Digest by U.Today

Ankots of Misteria

Highlights & Alerts

This is just a placeholder

highlight placeholder lorem Ipsum...

highlight lorem

This is a alert demo

Alert demo

Code Audit History

15

0

2

2

11