Read the findings of the 2022 Web3 Security Report

To bridge the gap in trust between the administrators need to express a sincere attitude regarding the consideration of the administrator teamʼs anonymity.\
The `owner` of `StabledocStaking` has the responsibility to notify users about the following capabilities:
- set `emergencyWithdrawable` through `setEmergencyWithdrawable()`
- add a new LP to the pool through `add()`
- update the given pool's SDT allocation point and `IRewarder` contract through `set()`
- withdraw SDT reward through `withdrawSdtReward()`
- set `isBlackListed` through `setBlackListed()`

The `owner` of `Ownable` has the responsibility to notify users about the following capabilities:
- renounce ownership through `renounceOwnership()`
- transfer ownership through `transferOwnership()`
  
Any compromise to the privileged account may allow a hacker to take advantage of this authority.

Centralization Related Risks

`public` functions that are never called by the contract could be declared `external`. When the inputs are arrays, `external` functions are more efficient than `public` functions.

Function Visibility Optimization

There's no sanity check to validate if a pool is existing.

Recommended Explicit Pool Validity Checks

When standard ERC20 deflationary tokens are transferred, the expended amount may be less than the received amount due to the transaction fee mechanism. As a result of such inconsistency, the depositing transaction will fail the validation checks in `safeTransferFrom()` and be reverted.

Incompatibility With Deflationary Tokens

The contract is serving as the underlying entity to interact with third-party protocols. The scope of the audit would treat those 3rd party entities as black boxes and assume their functional correctness. However, in the real world, 3rd parties may be compromised and lead to assets being lost or stolen.

Third Party Dependencies

The given input is missing the check for the non-zero address.

Lack of Zero Address Validation

Functions that affect the status of sensitive variables should be able to emit events as notifications to customers.

Missing Emit Events

A boolean is compared to a boolean constant while it can be used directly and does not need to be compared to true or false.

Comparison to A Boolean Constant

All variable types within Solidity are initialized to their default `empty` value, which is usually they zeroed out representation. 

Particularly:
- `uint` / `int`: All `uint` and `int` variable types are initialized at `0`
- `address`: All `address` types are initialized to `address(0)`
- `byte`: All `byte` types are initialized to their `byte(0)` representation
- `bool`: All `bool` types are initialized to `false`
- `ContractType`: All contract types (i.e. for a given `contract ERC20 {}` its contract type is `ERC20`) are initialized to their zeroed out address (i.e. for a given `contract ERC20 {}` its default value is `ERC20(address(0))`)
- `struct`: All `struct` types are initialized with all their members zeroed out according to this table

Redundant Variable Initialization

The `user` parameter in the above code is passed the value of `to`, while the parameter passed in the other  function in the contract is `msg.sender`.

Discussion For Function `onSdtReward()`

stabledoc Token

ReentrancyGuard.sol

SignedSafeMath.sol

Context.sol

token

IBEP20.sol

SafeMath.sol

BoringMath.sol

access

libs

SafeBEP20.sol

IRewarder.sol

StabledocStaking.sol

interfaces

utils

Address.sol

Ownable.sol

math

BEP20

StableDoc

Binance CEO, Coinbase exec feature in Masterclass crypto crash-course

Binance proof-of-reserves audit shows BTC is overcollaterised

CryptoQuant gives Binance clean bill of health

Crypto Flipsider News – Binance Adds Apple Pay; Ethereum 2022 Roundup; SOL Falls 97%; Turkey CNBC Test; FBI Probing 3Commas

Binance receives green light for crypto services in Dubai

Bitcoin Withdrawals to Be Temporarily Suspended on Binance on This Date

Binance Announces New Transaction Limit By Fiat Partner, What Could This Mean For BNB?

FTX Token price risks 30% plunge as a 23M FTT 'part' moves to Binance - Crypto Capital Today

Hundreds of Millions of XRP Moved from Binance, Here's What Happened Here

Mazars halts work for crypto firms including Binance

Binance intends to acquire Bankman-Fried's FTX amid 'significant liquidity crunch'

Binance Dominates Bitcoin And Crypto Market Like Mt. Gox Once Did: Research

Crypto Flipsider News – Bitcoin (BTC) Drops; Lightning Network Bug; Binance Buy Banks; Robinhood’s Revenue Falls; Alameda Illiquid Assets

Sam Bankman-Fried Apologises, Tells Binance ‘You Won’

Bitcoin Worth $2 Billion Transferred from Binance on Market Dip

FTX's Sam Bankman-Fried Tells Binance CZ "You Won," Here's What Happened

Binance confirms it's backing out of deal to buy FTX assets - MarketWatch

Singapore defends its treatment of Binance after FTX ‘debacle’

Crypto News Summary: Binance Launches Oracle, UvToken and Team Finance Exploited, Blockchain.com Debuts Visa Card

Binance proof-of-reserves removed from the auditor's site

Binance Has No Debt And Assets Are Segregated, Report Says

StableDoc Token

StableDoc

Highlights & Alerts

This is just a placeholder

highlight placeholder lorem Ipsum...

highlight lorem

This is a alert demo

Alert demo

Code Audit History

10

0

4

0

6