Read the findings of the 2022 Web3 Security Report

The contract has unlocked compiler version. An unlocked compiler version in the source code of the contract permits the user to compile it at or above a particular version. This, in turn, leads to differences in the generated bytecode between compilations due to different compiler versions. This can lead to an ambiguity when debugging as compiler specific bugs may occur in the codebase that would be hard to identify over a span of multiple compiler versions rather than a specific one.

Unlocked Compiler Version

In the contract `ERC20`, the role `minter` has authority over the following functions:

- function mint()
- function destroyBlackFunds()
- function redeemBlackFunds()

Any compromise to the `minter` account may allow a hacker to take advantage of this authority and mint arbitrary amounts of tokens to any addresses, which will destroy the project tokenomics.

The role `owner` has authority over the following function:

- function statusCoinWhitelistIs()
  
Also, the external call addresses in this contract can be updated by the contract owner, which means whoever controls the owner account can set the external call contracts to malicious ones.

Centralization Risk in ERC20.sol

`securusProxy` at address `0x176cb6dd9c177804d55b6fb9296dfcb92091b540 ` is not verified on BscScan and the source code is not available. It brings a huge security risk because the token contract performs an external call to the `securusProxy`. 
```solidity=
        if (
            securusProxyTrigger == true &&
            amount > proxyTriggerAmount &&
            nextProxyTriggerBlock < block.timestamp &&
            dontTrigger.isDontTrigger(msg.sender) == false
        ) {
            nextProxyTriggerBlock = block.timestamp.add(nextProxyTrigger);

            securusProxy.triggerProxy();
        }
```
The unverified contract is out of the scope of the audit, and malicious code can potentially be hidden in the unverified contract. 

External Call to Unverified Contracts

In the current implementation, token transfer fee is still collected even if the recipient is set as zero-fee address.
```solidity=
        if (
            (zeroFee.isZeroFeeSender(msg.sender) == false && fee > 0) ||
            (zeroFee.isZeroFeeRecipient(recipient) && fee > 0)
        ) {
            uint256 feeamount = amount.mul(fee).div(10000);
```

Mistake in `ZeroFeeRecipient` check

In the contract `Manager` the role `_owner` has authority over the functions shown in the diagram below.

Any compromise to the `_owner` account may allow the hacker to take advantage of this authority and update the address of the external contract to which the `_transfer()` function in `ERC20.sol` makes calls. The newly updated contract might contain some malicious code that can cause an exploit.

![](https://accelerator-tasks-prod.s3.amazonaws.com/a20350ad815c448c9b35131f637aa298/diagrams/centralization-Manager-_owner.svg)

Centralization Risk in Manager.sol

In the contract `MintRole` the role `_owner` has authority over the functions shown in the diagram below.

Any compromise to the `_owner` account may allow the hacker to take advantage of this authority and grant mint authority to a hacker-controlled address.

![](https://accelerator-tasks-prod.s3.amazonaws.com/a20350ad815c448c9b35131f637aa298/diagrams/centralization-MintRole-_owner.svg)

Centralization Risk in MinterRole.sol

Wrapped Securus

SafeMath.sol

Roles.sol

Pausable.sol

PauserRole.sol

Context.sol

Ownable.sol

Manager.sol

WXSCR.sol

ERC20.sol

MinterRole.sol

SECURUS 

Binance CEO, Coinbase exec feature in Masterclass crypto crash-course

Binance proof-of-reserves audit shows BTC is overcollaterised

CryptoQuant gives Binance clean bill of health

Crypto Flipsider News – Binance Adds Apple Pay; Ethereum 2022 Roundup; SOL Falls 97%; Turkey CNBC Test; FBI Probing 3Commas

Binance receives green light for crypto services in Dubai

Bitcoin Withdrawals to Be Temporarily Suspended on Binance on This Date

Binance Announces New Transaction Limit By Fiat Partner, What Could This Mean For BNB?

FTX Token price risks 30% plunge as a 23M FTT 'part' moves to Binance - Crypto Capital Today

Hundreds of Millions of XRP Moved from Binance, Here's What Happened Here

Mazars halts work for crypto firms including Binance

Binance Coin Shows Weakness As Price Sits On Key Support; Is $200 Possible?

Binance intends to acquire Bankman-Fried's FTX amid 'significant liquidity crunch'

Binance Dominates Bitcoin And Crypto Market Like Mt. Gox Once Did: Research

Crypto Flipsider News – Bitcoin (BTC) Drops; Lightning Network Bug; Binance Buy Banks; Robinhood’s Revenue Falls; Alameda Illiquid Assets

Sam Bankman-Fried Apologises, Tells Binance ‘You Won’

Bitcoin Worth $2 Billion Transferred from Binance on Market Dip

FTX’s ETH Reserves Drop to the Lowest Level Since November 2020 After Binance Begins Dumping all FTX Tokens on its Books

FTX's Sam Bankman-Fried Tells Binance CZ "You Won," Here's What Happened

Binance confirms it's backing out of deal to buy FTX assets - MarketWatch

Singapore defends its treatment of Binance after FTX ‘debacle’

Crypto News Summary: Binance Launches Oracle, UvToken and Team Finance Exploited, Blockchain.com Debuts Visa Card

SECURUS

Highlights & Alerts

This is just a placeholder

highlight placeholder lorem Ipsum...

highlight lorem

This is a alert demo

Alert demo

Code Audit History

6

0

0

4

2