Read the findings of the 2022 Web3 Security Report

All of the `BIO` tokens are sent to the `account` when deploying the contract. This could be a centralization risk as the deployer can distribute `BIO` tokens without obtaining the consensus of the community.

Initial Token Distribution

In the `transfer(address recipient, uint256 amount)` function and the `transferFrom(address sender, address recipient, uint256 amount)` function, none of tokens will be transferred from the sender to the recipient.

Potential Logic Flaw in `transfer` and `transferFrom`

The aforementioned function `mint()` and `burn()` are public to anyone, so a user can call them to mint tokens to anyone and burn anyone's tokens.

Public Functions `mint()` and `burn()`

In the contract, `Ownable`, the role, `_owner`, has authority over the functions shown in the diagram below.

Any compromise to the `_owner` account may allow the hacker to take advantage of this authority.

![](https://accelerator-tasks-prod.s3.amazonaws.com/d212857510294fc7bd499c3ca197a9a5/Ownable-_owner.svg)

In the contract, `Tokenlock`, the role, `_owner`, has authority over the functions shown in the diagram below.

Any compromise to the `_owner` account may allow the hacker to take advantage of this authority and lock/unlock the contract.

![](https://accelerator-tasks-prod.s3.amazonaws.com/d212857510294fc7bd499c3ca197a9a5/Tokenlock-_owner.svg)

In the contract, `UserLock`, the role, `_owner`, has authority over the functions shown in the diagram below.

Any compromise to the `_owner` account may allow the hacker to take advantage of this authority and add/remove a blacklisted member.

![](https://accelerator-tasks-prod.s3.amazonaws.com/d212857510294fc7bd499c3ca197a9a5/UserLock-_owner.svg)

In the contract, `BIO`, the role, `_owner`, has authority over the functions:
- Burn anyone's tokens.
- Mint any amount of tokens to anyone.

Any compromise to the `_owner` account may allow the hacker to take advantage of this authority and add/remove a blacklisted member.

Centralization Risk in BIO.sol

The contract has unlocked compiler version. An unlocked compiler version in the source code of the contract permits the user to compile it at or above a particular version. This, in turn, leads to differences in the generated bytecode between compilations due to different compiler versions. This can lead to an ambiguity when debugging as compiler specific bugs may occur in the codebase that would be hard to identify over a span of multiple compiler versions rather than a specific one.

Unlocked compiler version

```solidity
_totalSupply = _totalSupply.mul(amount);
```
The above calculation of `_totalSupply` is wrong and should be replaced by the below calculation:
```solidity
_totalSupply = _totalSupply.add(amount);
```

Wrong calculation of `_totalSupply`

BIT ONE

contracts

BitOne

BIO.sol

fde9d4813e90e0d5431f6d82ae4a11f24d7c1692

4680eed60d1c62f86e84fa8dbca144c738a9dcbb

d22bcdb73cd351d08e3f5234ef709a804d878507

BITONE 

TRON Founder Justin Sun on Crypto Contagion Concerns

Huobi Token Surges 75% as Tron Founder Justin Sun Calls for Empowering the Exchange Token

Report: Tether freezes $46M of FTX’s USDT on Tron blockchain, setting new precedent

: Tron founder prepared to provide ‘billions’ in aid to FTX

Justin Sun, Tron DAO line up to contribute to Binance recovery fund: Exclusive

Oryen Network Convinces Tamadoge And Tron Holders To Invest After A 100% Price Increase | Bitcoinist.com

Harmony Hackers Cover Tracks by Bridging Portion of $100M Loot to Avalanche, Ethereum and Tron

Solana (SOL) Price Down By -1.6% With Tron (TRX) Down 4.8%; Which Coin Beats Both? | NewsBTC

Buy Big Eyes (BIG), a meme coin creating a sustainable DeFi exceeding the efforts of Monero (XMR) and Tron (TRX) | NewsBTC

Tron Founder Justin Sun Ready To Invest $1 Billion On DCG Assets

Today in Crypto: FTX Resumes Employee Salaries, Huobi Partners with Tron & DMC on Dominica Coin, Ukrainian & Indian CBDCs

FTX Bear Market Sees Investors Flock To The Hideaways (HDWY), Selling Polkadot (DOT) and Tron (TRX) | NewsBTC

Justin Sun’s TRON DAO Buys $1B of Tether (USDT) as it Briefly Falls to $0.97

Can A Brand-New Cryptocurrency, Metacryp, Make A Mark In The Crypto Space While Cardano And Tron Are - Bitcoinist

Apecoin (APE) Flips Bearish Forecasts, Tron (TRX) Unable To As The Hideaways (HDWY) Continues with Presale Success | NewsBTC

Tron Founder Justin Sun's Address Moves Millions into USDC, What's Going On

First Mover Asia: Why Is Tron Founder Justin Sun Keeping Some of His Coins in Valkyrie Digital Assets?

Not Sure About Bitcoin? Try These Alts - Adirize DAO, TRON, and Ethereum | Bitcoinist.com

TRON, Avalanche, and Big Eyes Coin - Three Cryptocurrencies That Could Yield Massive Returns In The Ongoing Bear Market | NewsBTC

Crypto Market Update: Polygon (MATIC) and Tron (TRX) Both Lose to The Hideaways (HDWY) Despite Gains | NewsBTC

Invest in These Cryptos to Secure Your Future: HedgeUp (HDUP), Tron (TRX), And Bitcoin (BTC)

BITONE

Highlights & Alerts

This is just a placeholder

highlight placeholder lorem Ipsum...

highlight lorem

This is a alert demo

Alert demo

Code Audit History

6

0

1

0

5