Citizen Finance - Smart Contract Audit Report

Summary

Citizen Finance Audit Report Citizen Finance is building a multi-chain ecosystem around NFTs.

For this audit, we analyzed Citizen Finance's token contact. The contract was reviewed at commit 3f3ad34dac544ee4854d80a1c146b463a6064145 and again later at commit a9bb4902583de59eb5a704e1997baefccac92fdb.

Notes on the Contract:
  • At the time of deployment, no tokens will exist. They must be minted.
  • Tokens can be minted by admins of the contract at any time, up to a hard-cap on the total supply of 500,000 tokens.
  • Any user may burn their own tokens.
  • The owner can pause admins' ability to mint tokens, and can add/remove admins at any time.
  • Ownership will be transferred to a 3/4 multi-signature wallet. The SuperLauncher team and Citizen Finance team will each hold 2 of the 4 keys.
  • The team has worked with us to improve the security of this contract.
  • The contract utilizes of SafeMath to prevent overflows.
Audit Findings Summary
  • No security issues were identified.
  • As with any presale, ensure trust in the team prior to investing.
  • Further, ensure trust in the team as they can mint tokens up to the hard-cap.
  • Date: May 17th, 2021

Vulnerability CategoryNotesResult
Arbitrary Storage WriteN/APASS
Arbitrary JumpN/APASS
Delegate Call to Untrusted ContractN/APASS
Dependence on Predictable VariablesN/APASS
Deprecated OpcodesN/APASS
Ether ThiefN/APASS
ExceptionsN/APASS
External CallsN/APASS
Integer Over/UnderflowN/APASS
Multiple SendsN/APASS
SuicideN/APASS
State Change External CallsN/APass
Unchecked RetvalN/APASS
User Supplied AssertionN/APASS
Critical Solidity CompilerN/APASS
Overall Contract Safety PASS

ERC20 Token Graph

Multi-file Token


 ($) = payable function
 # = non-constant function
 
 Int = Internal
 Ext = External
 Pub = Public
 
 +  Context 
    - [Int] _msgSender
    - [Int] _msgData

 + [Int] IERC20 
    - [Ext] totalSupply
    - [Ext] balanceOf
    - [Ext] transfer #
    - [Ext] allowance
    - [Ext] approve #
    - [Ext] transferFrom #

 + [Lib] SafeMath 
    - [Int] tryAdd
    - [Int] trySub
    - [Int] tryMul
    - [Int] tryDiv
    - [Int] tryMod
    - [Int] add
    - [Int] sub
    - [Int] mul
    - [Int] div
    - [Int] mod
    - [Int] sub
    - [Int] div
    - [Int] mod

 +  ERC20 (Context, IERC20)
    - [Pub]  #
    - [Pub] name
    - [Pub] symbol
    - [Pub] decimals
    - [Pub] totalSupply
    - [Pub] balanceOf
    - [Pub] transfer #
    - [Pub] allowance
    - [Pub] approve #
    - [Pub] transferFrom #
    - [Pub] increaseAllowance #
    - [Pub] decreaseAllowance #
    - [Int] _transfer #
    - [Int] _mint #
    - [Int] _burn #
    - [Int] _approve #
    - [Int] _setupDecimals #
    - [Int] _beforeTokenTransfer #

 +  ERC20Burnable (Context, ERC20)
    - [Pub] burn #
    - [Pub] burnFrom #

 +  Pausable (Context)
    - [Int]  #
    - [Pub] paused
    - [Int] _pause #
       - modifiers: whenNotPaused
    - [Int] _unpause #
       - modifiers: whenPaused

 + [Lib] EnumerableSet 
    - [Prv] _add #
    - [Prv] _remove #
    - [Prv] _contains
    - [Prv] _length
    - [Prv] _at
    - [Int] add #
    - [Int] remove #
    - [Int] contains
    - [Int] length
    - [Int] at
    - [Int] add #
    - [Int] remove #
    - [Int] contains
    - [Int] length
    - [Int] at
    - [Int] add #
    - [Int] remove #
    - [Int] contains
    - [Int] length
    - [Int] at

 + [Lib] Address 
    - [Int] isContract
    - [Int] sendValue #
    - [Int] functionCall #
    - [Int] functionCall #
    - [Int] functionCallWithValue #
    - [Int] functionCallWithValue #
    - [Int] functionStaticCall
    - [Int] functionStaticCall
    - [Int] functionDelegateCall #
    - [Int] functionDelegateCall #
    - [Prv] _verifyCallResult

 +  AccessControl (Context)
    - [Pub] hasRole
    - [Pub] getRoleMemberCount
    - [Pub] getRoleMember
    - [Pub] getRoleAdmin
    - [Pub] grantRole #
    - [Pub] revokeRole #
    - [Pub] renounceRole #
    - [Int] _setupRole #
    - [Int] _setRoleAdmin #
    - [Prv] _grantRole #
    - [Prv] _revokeRole #

 +  Cifi_Token (ERC20, AccessControl, ERC20Burnable, Pausable)
    - [Pub]  #
       - modifiers: ERC20
    - [Pub] transferOwnership #
       - modifiers: onlyAdminRole
    - [Pub] mint #
       - modifiers: onlyAdminRole,whenNotPaused
    - [Pub] transfer #
    - [Pub] transferFrom #
    - [Ext] pause #
       - modifiers: onlyAdminRole
    - [Ext] unpause #
       - modifiers: onlyAdminRole