HZM Coin

In the function `transferFrom()`, there's a validation to check if in msg.sender is a frozen account, which is as below:

```solidity=487
require(frozenAccount[_msgSender()] == false,"Your account is frozenaccount");
```

However, there is a possibility of bypassing the validation. Assuming Alice's account is frozen by `owner`, Alice can ask Bob for help and approve the maximum allowance to Bob. Then Bob can help transfer the tokens to Alice's other account by calling the function `transferFrom()`.

Possibility Bypass `frozenAccount` Validation

The function `HZMCOIN()` can allow set the token balance for any external caller, as the minting mechanism. This violates the entire tokenomic.

Unrestricted Minting

In the contract `HZMStandardToken` the role `_owner` has authority over the functions shown in the diagram below.

![](https://accelerator-tasks-prod.s3.amazonaws.com/643a2227500d4199871dbfbbd5a823c0/diagrams/centralization-HZMStandardToken-_owner.svg)

In the contract `HZMStandardToken` the role `frozenAccount` has authority over the functions shown in the diagram below.

![](https://accelerator-tasks-prod.s3.amazonaws.com/643a2227500d4199871dbfbbd5a823c0/diagrams/centralization-HZMStandardToken-frozenAccount.svg)

In the contract `Ownable` the role `_owner` has authority over the functions shown in the diagram below.

![](https://accelerator-tasks-prod.s3.amazonaws.com/643a2227500d4199871dbfbbd5a823c0/diagrams/centralization-Ownable-_owner.svg)

In the contract `Ownable` the role `newOwner` has authority over the functions shown in the diagram below.

![](https://accelerator-tasks-prod.s3.amazonaws.com/643a2227500d4199871dbfbbd5a823c0/diagrams/centralization-Ownable-newOwner.svg)

In the contract `Ownable` the role `owner` has authority over the functions shown in the diagram below.

![](https://accelerator-tasks-prod.s3.amazonaws.com/643a2227500d4199871dbfbbd5a823c0/diagrams/centralization-Ownable-owner.svg)

Any compromise to the privileged account may allow the hacker to take advantage of this authority and update the sensitive settings and execute sensitive functions of the project

Centralization Risk in HZMCOIN.sol

All of the HZM tokens are sent to the contract deployer when deploying the contract. This could be a centralization risk as the deployer can distribute HZM tokens without obtaining the consensus of the community.

Initial Token Distribution

In the function `acceptOwnership()`, any external caller can accept the ownership when the address of the external caller is the `newOwner`. However, the `newOwner` can be set nowhere. Therefore, the function `acceptOwnership()` does not funtionally work.

Not Functional `acceptOwnership()`

The linked statements do not affect the functionality of the codebase and appear to be either leftovers from test code or older functionality.

Redundant Code Components

The linked variables could be declared as `constant` since these state variables are never modified.

Variables That Could Be Declared as `constant`

There should always be events emitted in the sensitive functions that are controlled by centralization roles.

Missing Emit Events

The contract has unlocked compiler version. An unlocked compiler version in the source code of the contract permits the user to compile it at or above a particular version. This, in turn, leads to differences in the generated bytecode between compilations due to different compiler versions. This can lead to an ambiguity when debugging as compiler specific bugs may occur in the codebase that would be hard to identify over a span of multiple compiler versions rather than a specific one.

Unlocked Compiler Version

The **require** can be used to check for conditions and throw an exception if the condition is not met. It is better to provide a string message containing details about the error that will be passed back to the caller.

Exchange	Pair	Price	Spread	24H Volume	24H Vol USD	Volume %

No Data

	Address	Percentage	Quantity	Value

No Data

Tx Hash	Caller	Contract	Function	Timestamp

No Data

HZM Coin

Highlights & Alerts

Team Identity Verified By CertiK (KYC)

Positive Community Sentiment (top 25%)

A Highly Centralized Project

Code Audit History

10

0

3

1

6

Skynet

Sentiment Analysis

Market Volatility

On-chain Monitoring

Performance Summary

On-chain Data Charts

Governance & Autonomy

Token Holder Distribution Analysis

Top 100 Token Holders