Read the findings of the 2022 Web3 Security Report

The contract has unlocked compiler versions. An unlocked compiler version in the contract's source code permits the user to compile it at or above a particular version. This, in turn, leads to differences in the generated bytecode between compilations due to differing compiler version numbers. This can lead to ambiguity when debugging as compiler-specific bugs may occur in the codebase that would be difficult to identify over a span of multiple compiler versions rather than a specific one.
Examples:

`pragma solidity ^0.8.2;` `stima.sol#2`
`pragma solidity ^0.8.0;` `ERC20.sol#3`

Unlocked Compiler Version & Version Inconsistency

`public` functions that are never called by the contract could be declared `external`. When the inputs are arrays, `external` functions are more efficient than `public` functions.

Function Visibility Optimization

Functions that affect the status of sensitive variables should be able to emit events as notifications to customers.

Missing Emit Events

The `SNAPSHOT_ROLE` has the responsibility to notify users about the following capabilities:
- creates a new snapshot and returns its snapshot id through `snapshot()`

The `MINTER_ROLE` has the responsibility to notify users about the following capabilities:
- mint uncapped tokens to anyone and mint part tokens to the owner through `mint()`
- release tokens to anyone through `releaseBalance()`
- burn tokens from the holder through `burnFromHold()`

The `DEFAULT_ADMIN_ROLE` has the responsibility to notify users about the following capabilities:
- set `_numenator` and `_denomenator` through `setMinterPart()`
 
Any compromise to the `SNAPSHOT_ROLE`/`MINTER_ROLE`/`DEFAULT_ADMIN_ROLE` account may allow a hacker to take advantage of this authority.

Centralization Related Risks

Mathematical operations in the aforementioned function perform divisions before multiplications. Performing multiplication before division can sometimes avoid loss of precision.

Division Before Multiplication

The `Ownable` contract provides the owner tools to maintain full control over any function they choose. In the `STIMA` contract the `onlyOwner()` modifier is never used. Therefore the owner does not have have complete control of any function. 

Unused `Ownable` Contract

The function `flashFee()` in the contract `ERC20FlashMint` returns the fee applied when doing flash loans. By default this
implementation has 0 fees. However, the function does not be overloaded in the contract `STIMA`.

Discussion For Function `flashFee()`

The function `_beforeTokenTransfer()` is overridden to check that accounts have the necessary balance, not into the hold. The contract `STIMA` inherits from `ERC20Burnable`, so the function `burnFrom()` is public. However, the function `burnFrom()` does not satisfy the check condition of line 53, so tokens are in the hold can be burned.

Lack of Check for Function `burnFrom()`

STIMA | Crypto Value Standard

ERC20Votes.sol

Ownable.sol

AccessControl.sol

draft-ERC20Permit.sol

stima.sol

contracts

ERC20FlashMint.sol

ERC20Snapshot.sol

ERC20Burnable.sol

ERC20.sol

STIMA

Binance CEO, Coinbase exec feature in Masterclass crypto crash-course

Bitcoin Price and Ethereum Down 5% amid China Lockdown - Time to Buy?

U.S. made ‘marginal’ gains in internet freedom, report finds

Binance proof-of-reserves audit shows BTC is overcollaterised

Ethereum (ETH), Algorand (ALGO) Try to Cover Losses; Chronoly.io (CRNO) Increases Gains With Triple Digit Growth | NewsBTC

Bitcoin Price and Ethereum on the Rise, Maker Price Storms 18%

Bitcoin Price and Ethereum Trade Sideways, Huobi Token Storms 58%

13% of Whole Ethereum (ETH) Supply Staked, But There's Serious Problem with Decentralization

Terra Founder Do Kwon Reportedly Flees Singapore After Arrest Warrant

Australia Could Soon Regulate Stablecoins and the Digital Yuan - DailyCoin

The most influential CEOs in markets today - MarketWatch

Why Orbeon Protocol (ORBN), Bitcoin (BTC), and Ethereum (ETH) Are Market Leaders | NewsBTC

S. Korean Authorities Ask Interpol to Issue Red Notice for Terra Co-Founder Do Kwon: Report

Crypto Flipsider News – Binance Adds Apple Pay; Ethereum 2022 Roundup; SOL Falls 97%; Turkey CNBC Test; FBI Probing 3Commas

ConsenSys intends to store MetaMask user data for only seven days

Genius Crypto Investments: Oryen (ORY), Solana (SOL), Dogecoin (DOGE) And Fantom (FTM) | NewsBTC

Vitalik Buterin on Ethereum's (ETH) Privacy: 'Stealth Addresses Can Be Implemented Fairly Quickly Today'

Ethereum (ETH): Are There Reasons to Worry About Altcoin's Next Update?

Bitcoin Below $10K Is Where You Would Really Have Problems: Strategist

Binance receives green light for crypto services in Dubai

Playboy Returns to The Sandbox, Launches First NFT Collection

STIMA

Highlights & Alerts

This is just a placeholder

highlight placeholder lorem Ipsum...

highlight lorem

This is a alert demo

Alert demo

Code Audit History

8

0

2

2

4