A place for developers to talk about building on Farcaster.

/dev

If you're a Solidity dev and interested in helping out Degen by auditing or reviewing our Locked Degen ERC-20 contract, we'd love your support. Your help in finding bugs or suggesting code improvements would be greatly appreciated! Thanks!

If you're a Solidity dev and interested in helping out Degen by auditing or reviewing our Locked Degen ERC-20 contract, we'd love your support. Your help in finding bugs or suggesting code improvements would be greatly appreciated! Thanks!

https://github.com/degen-token/degen-smart-contracts/pull/22

some people is asking about it.. and I had to stop my audit.. after found it..

LN 130 - updateLockDuration() function 
This allow the owner to change the locking period.. between 0-365 days.

LN 118 - if (block.timestamp <= depositTimestamps[msg.sender] + lockDuration) revert...

This check on lockDuration in the withdraw function allows the owner to do some tricks with the locking period: 
 - the owner could lock and unlock by managing to do a sandwich: updateLockFunction-withdraw-updateLockFunction, withdrawing without respecting the lock. And, setting it again locking users funds.
- the owner could extend the locking period, from an initial 0 days to 1 year. Locking user funds for 1 year without user "permission".

Alchemist. 
Block Builder. 
Creator.
Degen. 
Ethereum dev. 
Farcaster Framer.

LN 31-32 
    IERC20 public constant TOKEN =
        IERC20(0xfee293840D23B0B2De8C55e1Cf7A9F01C157767c);
        
the address should be DEGEN token address!? (I guess it is okay for testing?)

co-founder of pluto • past ml eng, now aspiring cryptographer

LN 59-62

    /**
     *  @dev Amount of tokens to be locked is zero
     */
    error ZeroAmount();
    
This comment does not represent the functionality. This error is thrown when the amount to WITHDRAW is 0 and has nothing to do with the amount of tokens to be locked.

this is a base Sepolia address, confirmed,

This is the Sepolia Degen token address. It will be updated to the Base Degen token address once we deploy to the Base mainnet.