In the contract `Ownable`, the role `_owner` has authority over the following functions:
- function renounceOwnership()

In the contract `Token`, the role `_owner` has authority over the following functions:
- function excludeFromFee(address account)
- function includeInFee(address account)
- function exAutoPair(address account)
- function inAutoPair(address account)

Any compromise to the `_owner` account may allow the hacker to take advantage of this authority.

Centralization Related Risks

All of the `BIB` tokens are sent to the `ownerAddres` when deploying the contract. This could be a centralization risk as the `ownerAddres` can distribute all tokens without obtaining the consensus of the community.

Initial Token Distribution

Some BIB transactions will be charged fees including deva/burn fee（each one is 1%）. If at least one of the sender and recipient is in `_isExcludedFromFee` or both not in `_isAutoPair`, no fees will be charged. Burn fee will be sent to `burnAddress`. Deva fee will be sent to `devaAddress`.

Finance Model

There should always be events emitted in the sensitive functions that are controlled by centralization roles.

Missing Emit Events

`public` functions that are never called by the contract could be declared as `external`. `external` functions are more efficient than `public` functions.

Improper Usage of `public` and `external` Type

The linked variables could be declared as `constant` since these state variables are never modified.

Variables That Could Be Declared as `constant`

BIB Ⅱ

Token.sol

The contract has unlocked compiler version. An unlocked compiler version in the source code of the contract permits the user to compile it at or above a particular version. This, in turn, leads to differences in the generated bytecode between compilations due to differing compiler version numbers. This can lead to an ambiguity when debugging as compiler specific bugs may occur in the codebase that would be hard to identify over a span of multiple compiler versions rather than a specific one.

Unlocked Compiler Version

All of the `12738.7e8` tokens are sent to the contract deployer when deploying the contract. This could be a centralization risk as the deployer can distribute `12738.7e8` tokens without obtaining the consensus of the community.

The linked statements do not affect the functionality of the codebase and appear to be either leftovers from test code or older functionality.

Redundant Statements

Within the `_transfer()` function, a portion of the transferred quantity will be transferred to `teamer`. As a result, over time the `teamer` address will accumulate a significant portion of `BIB` tokens. If the `teamer` is an EOA (Externally Owned Account), mishandling of its private key can have devastating consequences to the project as a whole.

Centralized Risk In `_transfer()`

The functions which are never called internally within the contract should have external visibility for gas optimization.

File: projects/BIB/contracts/BIB.sol (Line 59, Contract `BIB`)
```solidity
    function setTeamer(address _teamer) public onlyOwner {
```


---
File: projects/BIB/contracts/BIB.sol (Line 63, Contract `BIB`)
```solidity
    function decimals() public view virtual override returns (uint8) {
```


Function Should Be Declared External

Addresses should be checked before assignment or external call to make sure they are not zero addresses.

File: projects/BIB/contracts/BIB.sol (Line 60, Function `BIB.setTeamer`)
```solidity
        teamer = _teamer;
```
- `_teamer` is not zero-checked before being used.



Missing Zero Address Validation

In the contract `BIB` the role `_owner` has authority over the functions shown in the diagram below.

Any compromise to the `_owner` account may allow the hacker to take advantage of this authority.

![](https://accelerator-tasks-prod.s3.amazonaws.com/a282931d23d94922ae3d5c3e3c47d02d/diagrams/centralization-BIB-_owner.svg)

Centralization Risk in BIB.sol

The linked variables assigned in the constructor can be declared as `immutable`. Immutable state variables can be assigned during contract creation but will remain constant throughout the lifetime of a deployed contract. A big advantage of immutable variables is that reading them is significantly cheaper than reading from regular state variables since they will not be stored in storage.

Variables That Could Be Declared as Immutable

contracts

ERC20.sol

projects

SafeMath.sol

Ownable.sol

BIB.sol

IERC20.sol

Context.sol

IERC20Metadata.sol

Binance CEO, Coinbase exec feature in Masterclass crypto crash-course

Binance proof-of-reserves audit shows BTC is overcollaterised

CryptoQuant gives Binance clean bill of health

Binance Cuts Ties with WazirX, Cancels Its Wallet Service

TrueFi (TRU) up 64%, Here's Why and What Binance Had to Do With It

Crypto Flipsider News – Binance Adds Apple Pay; Ethereum 2022 Roundup; SOL Falls 97%; Turkey CNBC Test; FBI Probing 3Commas

Binance Coin Price Prediction as BNB Pumps Up 17% in a Week – Time to Buy?

Binance receives green light for crypto services in Dubai

Shiba Inu (SHIB) Community Signing Petition That Asks Binance to List BONE

Bitcoin Withdrawals to Be Temporarily Suspended on Binance on This Date

Binance Continues Market Dominance with Massive Bitcoin Spot Trading Volume

Binance Announces New Transaction Limit By Fiat Partner, What Could This Mean For BNB?

FTX Token price risks 30% plunge as a 23M FTT 'part' moves to Binance - Crypto Capital Today

Hundreds of Millions of XRP Moved from Binance, Here's What Happened Here

Mazars halts work for crypto firms including Binance

Binance Coin Shows Weakness As Price Sits On Key Support; Is $200 Possible?

Binance intends to acquire Bankman-Fried's FTX amid 'significant liquidity crunch'

Binance Dominates Bitcoin And Crypto Market Like Mt. Gox Once Did: Research

Crypto Exchange Binance to Suspend US Dollar Bank Transfers This Week

Crypto Flipsider News – Bitcoin (BTC) Drops; Lightning Network Bug; Binance Buy Banks; Robinhood’s Revenue Falls; Alameda Illiquid Assets

Sam Bankman-Fried Apologises, Tells Binance ‘You Won’

Want To Know How CertiK Performs An Audit?

Want To Secure Your Wallet, Exchange or Dapp? Check Out Our Web 3 Pentesting

BIB

Highlights & Alerts

This is just a placeholder

highlight placeholder lorem Ipsum...

highlight lorem

This is a alert demo

Alert demo

Code Audit History

6

0

5

0

1

Products & Technology

Bug Bounty

Smart Contract Audit

SkyTrace

L1 Chain Audit

Incident Response

Skynet

KYC

Advisory Services

Penetration Testing

Sky Harbor

Formal Verification

Featured Ecosystems

BNB Chain

Ethereum

Avalanche

Solana

Algorand

NEAR

Cosmos

Polygon

Aptos

Company

About

Testimonials

Partnership

We're Hiring

Disclaimer

Resources

BIB