Read the findings of the 2022 Web3 Security Report

In the contract `PRDTPrediction` the role `_owner` has authority over the functions shown in the diagram below.

![](https://accelerator-tasks-prod.s3.amazonaws.com/7344bee6e4494736aae3cab05392835f/diagrams/centralization-PRDTPrediction-_owner.svg)

In the contract `PRDTPrediction` the role `adminAddress` has authority over the functions shown in the diagram below.

![](https://accelerator-tasks-prod.s3.amazonaws.com/7344bee6e4494736aae3cab05392835f/diagrams/centralization-PRDTPrediction-adminAddress.svg)

In the contract `PRDTPrediction` the role `operatorAddress` has authority over the functions shown in the diagram below.

![](https://accelerator-tasks-prod.s3.amazonaws.com/7344bee6e4494736aae3cab05392835f/diagrams/centralization-PRDTPrediction-operatorAddress.svg)

In the contract `PRDTPrediction` the role `pauserAddress` has authority over the functions shown in the diagram below.

![](https://accelerator-tasks-prod.s3.amazonaws.com/7344bee6e4494736aae3cab05392835f/diagrams/centralization-PRDTPrediction-pauserAddress.svg)


Any compromise to the privileged accounts may allow the hacker to take advantage of this authority and update the sensitive settings and execute sensitive functions of the project. 

Centralization Risk in PRDTPrediction.sol

External calls are made inside a *for* loop. This might lead to a denial-of-service attack. If any of the calls fail, it will cause the entire loop to revert.

```solidity=611
address referrerUser = referralSystem.getReferrer(msg.sender);
```



External Call Inside Loop

Currently the contract can only be compiled with optimization mode turned on. Without optimization the compiler error: `CompilerError: Stack too deep when compiling inline assembly: Variable value0 is 1 slot(s) too deep inside the stack.` is generated.

The reason is a limitation in how variables can be referenced in the EVM stack. While you can have more than 16 variables in it, once you try to reference a variable in slot 16 or higher, it will fail.

Contract Cannot Compile Without Optimization Mode

Addresses should be checked before assignment or external calls to make sure they are not zero addresses.

```solidity=158
adminAddress = _admin;
```


---
```solidity=159
operatorAddress = _operator;
```

---
```solidity=360
(bool success, ) = _to.call{value: _amount}("");
```



Missing Zero Address Validation

The linked variables could be declared as `constant` since these state variables are never modified.

Variables That Could Be Declared as `constant`

There should always be events emitted in the sensitive functions that are controlled by centralization roles.

Missing Emit Events

PRDT V2

PRDTPrediction.sol

PRDTV2

projects

`Round` structure prevents contract compiling without optimization mode

Missing or Misleading Error Messages

Inconsistent Comments and Code in `_bettable()`

Missing Input Validation of `setStakingLevelBonuses()` Arguments

Redundant Deletion of Array Before Assignment

`stakingLvl` Becomes Invalid After `stakingBonuses` Size Change

Usage of Magic Numbers instead of `Position.Bull` and `Position.Bear`

The Reward Can't Be Claimed in Case of Big Enough Bet

The Reward is Lower than Expected in Case of Very Small Bet

Missing Emit Event for Changing Sensitive State Variables

Missing Input Validation for Non-Zero Address

Redundant Statements

Inconsistent Logic of Staking Amount

Inconsistent State of `totalStaked`

Missing Input Validation of `setStakingLevel()`

Potential Reentrancy Risk in `PredictionStaker.deposit()`

Unchecked Value of ERC-20 `transfer()`/`transferFrom()` Call

Missing Input Validation of `claimAllPredictions()`

External Call inside a Loop

Potential Reentrancy Risk in `createPrediction()`

`bufferSeconds` Meaning is Volatile

`setBufferSeconds()` and `setIntervalSeconds()` Can Be Called during Unpaused

The Prediction Outcome Can Be Manipulated by an External Attacker by Preventing Call to `executeRound()`

Centralization Risk: Privileged Role `operatorAddress` in Contract `PredictionFactory`

Centralization Risk: Privileged Role `adminAddress` in Contract `PredictionFactory`

Centralization Risk: Privileged Roles `adminAddress` and `operatorAddress` Can Influence the Prediction Outcome in Their Favor

PRDT Finance

PredictionFactory.sol

PRDT Finance 

Binance CEO, Coinbase exec feature in Masterclass crypto crash-course

Bitcoin Price and Ethereum Down 5% amid China Lockdown - Time to Buy?

Binance proof-of-reserves audit shows BTC is overcollaterised

CryptoQuant gives Binance clean bill of health

Ethereum (ETH), Algorand (ALGO) Try to Cover Losses; Chronoly.io (CRNO) Increases Gains With Triple Digit Growth | NewsBTC

Bitcoin Price and Ethereum on the Rise, Maker Price Storms 18%

Bitcoin Price and Ethereum Trade Sideways, Huobi Token Storms 58%

13% of Whole Ethereum (ETH) Supply Staked, But There's Serious Problem with Decentralization

Terra Founder Do Kwon Reportedly Flees Singapore After Arrest Warrant

Australia Could Soon Regulate Stablecoins and the Digital Yuan - DailyCoin

Why Orbeon Protocol (ORBN), Bitcoin (BTC), and Ethereum (ETH) Are Market Leaders | NewsBTC

S. Korean Authorities Ask Interpol to Issue Red Notice for Terra Co-Founder Do Kwon: Report

Crypto Flipsider News – Binance Adds Apple Pay; Ethereum 2022 Roundup; SOL Falls 97%; Turkey CNBC Test; FBI Probing 3Commas

ConsenSys intends to store MetaMask user data for only seven days

Genius Crypto Investments: Oryen (ORY), Solana (SOL), Dogecoin (DOGE) And Fantom (FTM) | NewsBTC

Here's How to Lose $15 Million While Being up 11,000 ETH in Profit, NFT Investor Shows

Vitalik Buterin on Ethereum's (ETH) Privacy: 'Stealth Addresses Can Be Implemented Fairly Quickly Today'

Ethereum (ETH): Are There Reasons to Worry About Altcoin's Next Update?

Bitcoin Below $10K Is Where You Would Really Have Problems: Strategist

Binance receives green light for crypto services in Dubai

Playboy Returns to The Sandbox, Launches First NFT Collection

PRDT Finance

Highlights & Alerts

This is just a placeholder

highlight placeholder lorem Ipsum...

highlight lorem

This is a alert demo

Alert demo

Code Audit History

6

0

2

0

4