Read the findings of the 2022 Web3 Security Report

The contract has unlocked compiler version. An unlocked compiler version in the source code of the contract permits the user to compile it at or above a particular version. This, in turn, leads to differences in the generated bytecode between compilations due to differing compiler version numbers. This can lead to an ambiguity when debugging as compiler specific bugs may occur in the codebase that would be hard to identify over a span of multiple compiler versions rather than a specific one.

Unlocked Compiler Version

The linked variables assigned in the constructor can be declared as `immutable`. Immutable state variables can be assigned during contract creation but will remain constant throughout the lifetime of a deployed contract. A big advantage of immutable variables is that reading them is significantly cheaper than reading from regular state variables since they will not be stored in storage.

Variables That Could Be Declared As Immutable

According to the logic, if the user withdraws during the penalty period, the user will pay a penalty, but there is no limit to the `penaltyPeriods` and the `penaltyRates`. The initialization of the parameters has no relevant verification, if the setting is wrong, it may cause losses.

`penaltyRates` Lack Of Restrictions

The `_startBlock` is missing the compare with `block.number` and `_penaltyAddress` is missing the check for the non-zero address.

Missing Input Validation

In `constructor`, the judgment condition `_rewardsPerBlockForStaking.length == _numberPeriods` appears repeatedly which is meaningless.

Duplicate Code

The variables `supplyCap`, `nonCirculatingSupply` and `amountTokensToBeMinted` are never used.

Meaningless Variables

The `_startBlock` is missing the compare with `block.number`.

There is a mathematical calculation model in the contract. Although it is not complicated, there may be problems such as loss of precision. When the last person withdraws, the calculated amount may not match the balance in the contract (the error is very small), and the last person may not be able to withdraw due to insufficient contract balance.

Transfers May Fail Due To Precision Issues

ParaState-Addendum

IStakeFor.sol

IMintableERC20.sol

contracts

CompoundStakingReward.sol

TokenDistributor.sol

ParaState

Highlights & Alerts

This is just a placeholder

highlight placeholder lorem Ipsum...

highlight lorem

This is a alert demo

Alert demo

Code Audit History

8

0

1

0

7