@ratnik
Hello Vitaliy!
Possible vulnerabilities and errors:
Whitelist Check: Make sure that the isEligible function correctly checks the user's presence in the whitelist. It may be necessary to add a check for the existence of tokens of a specific ERC1155 identifier.
Minting Security: In the mint function of the ERC-20 contract, ensure that everything is checked for overflow:
python
self.balances[_to] += _value
self.total_supply += _value
If _value is too large, it could cause an overflow.
Overflow in Rewards: Check the correctness of calculations in the _unstake function to exclude possible overflows:
python
totalOut: uint256 = self.stakedAmount[msg.sender] + timeElapsed * returnPerSlot
Zero Address Check: In the transfer function of the ERC-20 contract, add a check for zero addresses:
python
assert _to != address(0), "Transfer to the zero address"
Time and Blocks Management: In the tests, use the correct methods for managing time and blocks to avoid possible errors when moving timestamps.
0 reply
0 recast
0 reaction