Read the findings of the 2022 Web3 Security Report

Utopia Labs (Pentest)

In the contract `PayoutEscrow` the role `_owner` has authority over the functions shown in the diagram below.

![](https://accelerator-tasks-prod.s3.amazonaws.com/248e3cb9cdd4457f9c6cc55cb5211ba4/diagrams/centralization-PayoutEscrow-_owner.svg)

In the contract `PayoutTreasury` the role `_owner` has authority over the functions shown in the diagram below.

![](https://accelerator-tasks-prod.s3.amazonaws.com/248e3cb9cdd4457f9c6cc55cb5211ba4/diagrams/centralization-PayoutTreasury-_owner.svg)

Any compromise to the `_owner` account may allow the hacker to take advantage of this authority and steal all assets from the contract. 

Centralization Related Risks 

The **require** can be used to check for conditions and throw an exception if the condition is not met. It is better to provide a string message containing details about the error that will be passed back to the caller.

Missing Error Messages

In the "createAndTransferPayout" function, the Treasure transfers an extra amount of USDC token to the Escrow contract and uses the "refundStableAmount" function to transfer the redundant back. It appears that the contract can calculate the extra amount of USDC needed for the payout, and the token transfer process can be simplified.

The USDC token transfer process can be simplified. 

There should always be events emitted in the sensitive functions that are controlled by centralization roles.

Missing Emit Events

The contract has unlocked compiler version. An unlocked compiler version in the source code of the contract permits the user to compile it at or above a particular version. This, in turn, leads to differences in the generated bytecode between compilations due to different compiler versions. This can lead to an ambiguity when debugging as compiler specific bugs may occur in the codebase that would be hard to identify over a span of multiple compiler versions rather than a specific one.

Unlocked Compiler Version

Utopia Labs

projects

PayoutTreasury.sol

contracts

Utopia%20Labs

PayoutEscrow.sol

Phishing scammer Monkey Drainer has pilfered as much as $1M in Ethereum

Ethereum (ETH) Sees High Volatility as U.S. Records Higher-Than-Expected GDP Growth

BTC price struggles at $21K as trader says ‘top is in’ for Bitcoin, Ethereum

3 reasons why it could be a rocky week for Bitcoin, Ethereum and altcoins

Ethereum price hits $1.6K as markets expect the FED to ease the pressure

Ethereum rallies to $1,350, but derivatives metrics remain neutral to bearish

Bitcoin, Ethereum, Crypto News and Price Data - CoinDesk

How Ethereum based BudBlockz (BLUNT) Unites the Crypto and Marijuana Industries | NewsBTC

FTX.US seems to have paused withdrawals on Ethereum hours after filing for bankruptcy

SHIB Flips SOL by Market Cap, Solana Projects Likely to Move to Ethereum: Crypto Expert

"Ethereum Killer" Solana's Top Spot Threatened by FTX Drama and Emergence of Strong Opponent

Most Hyped Cardano NFT Project Co-Signed by Legendary Ethereum Club

Bitcoin, Ethereum And The FTX Collapse

Ethereum derivatives look bearish, but traders believe the ETH bottom is in

CoinDesk: Bitcoin, Ethereum, Crypto News and Price Data

The New Crypto Project That Swaps Ethereum and BNB for Alternative Investments: HedgeUp

Wormhole Attacker Moves $155 Million of Stolen Funds into Staked Ethereum (stETH)

Ethereum open interest hits $7.7B, raising the chance of a short squeeze above $1.5K

Bitcoin and Ethereum correct as Bitzlato take down, tech layoffs and economic worries dominate headlines

Utopia Labs

Highlights & Alerts

This is just a placeholder

highlight placeholder lorem Ipsum...

highlight lorem

This is a alert demo

Alert demo

Code Audit History

25

0

0

0

20