Read the findings of the 2022 Web3 Security Report

In the contract `AcceptsDeposit` the role `migrator` has authority over the functions shown in the diagram below.

Any compromise to the `migrator` account may allow the hacker to take advantage of this.

![](https://accelerator-tasks-prod.s3.amazonaws.com/f0b23205b6f640f3868a0d4454c89506/diagrams/centralization-AcceptsDeposit-migrator.svg)

Centralization Risk in AcceptsDeposit.sol

The return value of the transfer()/transferFrom() call is not checked.

```solidity
        IERC20(token).transfer(msg.sender, amount);
```

Unchecked ERC-20 `transfer()`/`transferFrom()` Call

In the contract `PreStaking` the role `onlyManager` has authority over the functions shown in the diagram below.

Any compromise to the `manager` account may allow the hacker to take advantage of this.

![](https://accelerator-tasks-prod.s3.amazonaws.com/f0b23205b6f640f3868a0d4454c89506/diagrams/centralization-PreStaking-manager.svg)

Centralization Risk in PreStaking.sol

In the contract, `PreStaking`, the function `setMigrationContract()` ignores the return value by `depositToken.approve(_migrationContract, type(uint256).max);`

Unused Return Value

In the contract, `MerkleClaim`, the state variable `merkleRoot` stands for an off-chain Merkle tree, which is used to verify whether a given user has the privilege to claim their tokens or virtual balance. The merkleTree can only be set once, so it should be taken into consideration that the merkleTree is correct to avoid massive errors. Also, there is no on-chain view method for the users to check whether they are included in the Merkle tree. This may cause confusion among users.

Unknown Merkle Tree and Parameter `proofs`

The contracts `Airdrop`, `Prestaking`, and `AcceptsDeposits` are serving as the underlying entity to interact with a third party token and to a migration contract. The scope of the audit treats 3rd party entities as black boxes and assume their functional correctness. However, in the real world, 3rd parties can be compromised and this may lead to lost or stolen assets. In addition, upgrades of 3rd parties can possibly create severe impacts, such as increasing fees of 3rd parties, migrating to new LP pools, etc.

Third Party Dependencies

The contract has unlocked compiler version. An unlocked compiler version in the source code of the contract permits the user to compile it at or above a particular version. This, in turn, leads to differences in the generated bytecode between compilations due to differing compiler version numbers. This can lead to an ambiguity when debugging as compiler specific bugs may occur in the codebase that would be hard to identify over a span of multiple compiler versions rather than a specific one.

Unlocked Compiler Version

The function that affects the status of sensitive variables should be able to emit events as notifications to [users].

- `migrateDeposit()`
- `migrateVirtualBalance()`
- `setMigrationContract()`
- `setMerkleRoot()`

Missing Emit Events

Addresses should be checked before assignment or external call to make sure they are not zero addresses.

Missing Input Validation

Project TXA

AcceptsDeposit.sol

Airdrop.sol

MerkleClaim.sol

helpers

PreStaking.sol

ERC777Sender.sol

contracts

IAcceptsDeposit.sol

ERC777Recipient.sol

TokenTestHelper.sol

Phishing scammer Monkey Drainer has pilfered as much as $1M in Ethereum

Ethereum (ETH) Sees High Volatility as U.S. Records Higher-Than-Expected GDP Growth

BTC price struggles at $21K as trader says ‘top is in’ for Bitcoin, Ethereum

3 reasons why it could be a rocky week for Bitcoin, Ethereum and altcoins

Ethereum price hits $1.6K as markets expect the FED to ease the pressure

Ethereum rallies to $1,350, but derivatives metrics remain neutral to bearish

Bitcoin, Ethereum, Crypto News and Price Data - CoinDesk

How Ethereum based BudBlockz (BLUNT) Unites the Crypto and Marijuana Industries | NewsBTC

FTX.US seems to have paused withdrawals on Ethereum hours after filing for bankruptcy

"Ethereum Killer" Solana's Top Spot Threatened by FTX Drama and Emergence of Strong Opponent

Most Hyped Cardano NFT Project Co-Signed by Legendary Ethereum Club

Bitcoin, Ethereum And The FTX Collapse

Ethereum derivatives look bearish, but traders believe the ETH bottom is in

CoinDesk: Bitcoin, Ethereum, Crypto News and Price Data

The New Crypto Project That Swaps Ethereum and BNB for Alternative Investments: HedgeUp

Wormhole Attacker Moves $155 Million of Stolen Funds into Staked Ethereum (stETH)

Ethereum open interest hits $7.7B, raising the chance of a short squeeze above $1.5K

Bitcoin and Ethereum correct as Bitzlato take down, tech layoffs and economic worries dominate headlines

BTC price struggles at $21K as trader says 'top is in' for Bitcoin, Ethereum

Project TXA Token

Mid Market Cap (25%-50% Amongst Projects)

Project TXA

Highlights & Alerts

This is just a placeholder

highlight placeholder lorem Ipsum...

highlight lorem

This is a alert demo

Alert demo

Code Audit History

9

0

3

1

5