CryptoFy Coin Info

www.cryptofycoin.com

cryptofy coin is a decentrlized metaverse coin that bridge the gap between the virtual world and the real world by aiding seamless, secured and fast transaction. Its very economical and has fast processing power per seconds powered by the cryptofy smart chain (CSC). As we develop and grow, cryptofy coin plans to expand into additional industries, such as the energy agricultural, and oil and gas sectiors. Cryptofy coin is the game-changer

Overall Score
68.14
Poor Excellent
CryptoFy Coin Logo

Real-Time Threat Detection

Real-time threat detection, powered by Cyvers.io, is currently not activated for this project.

This advanced feature provides continuous monitoring and instant alerts to safeguard your assets from potential security threats. Real-time detection enhances your project's security by proactively identifying and mitigating risks. For more information, click here.

TrustNet DataPulse

Smart Contract Audit

Select the audit
Static Analysis Dynamic Analysis Symbolic Execution SWC Check Manual Review
Contract address
0xF0CA...642C
Network
BNB Smart Chain - Mainnet
License N/A
Compiler N/A
Type N/A
Language Solidity
Onboard date 2023/11/08
Revision date In progress

Summary and Final Words

No crucial issues found

The contract does not contain issues of high or medium criticality. This means that no known vulnerabilities were found in the source code.

Contract owner cannot mint

It is not possible to mint new tokens.

Contract owner can blacklist addresses

It is possible to lock user funds by blacklisting addresses.

Contract owner can set high fees

Contract owner is able to set fees above 25%. Very high fees can also prevent token transfer.

Token transfer can be locked

Owner can lock user funds with owner functions.

Token cannot be burned

There is no burn function within the contract.

Ownership is not renounced

Contract can be manipulated by owner functions.

Scope of Work

This audit encompasses the evaluation of the files listed below, each verified with a SHA-1 Hash. The team referenced above has provided the necessary files for assessment.

The auditing process consists of the following systematic steps:

  1. Specification Review: Analyze the provided specifications, source code, and instructions to fully understand the smart contract's size, scope, and functionality.
  2. Manual Code Examination: Conduct a thorough line-by-line review of the source code to identify potential vulnerabilities and areas for improvement.
  3. Specification Alignment: Ensure that the code accurately implements the provided specifications and intended functionalities.
  4. Test Coverage Assessment: Evaluate the extent and effectiveness of test cases in covering the codebase, identifying any gaps in testing.
  5. Symbolic Execution: Analyze the smart contract to determine how various inputs affect execution paths, identifying potential edge cases and vulnerabilities.
  6. Best Practices Evaluation: Assess the smart contracts against established industry and academic best practices to enhance efficiency, maintainability, and security.
  7. Actionable Recommendations: Provide detailed, specific, and actionable steps to secure and optimize the smart contracts.

A file with a different Hash has been intentionally or otherwise modified after the security review. A different Hash may indicate a changed condition or potential vulnerability that was not within the scope of this review.

Final Words

The following provides a concise summary of the audit report, accompanied by insightful comments from the auditor. This overview captures the key findings and observations, offering valuable context and clarity.


Ownership Privileges
  • The owner can set the market pair address.
  • The owner can exclude wallets from transaction limits.
  • The owner can exclude wallets from fees.
  • The owner can set any arbitrary value in buy and sell tax where the amount can be more than 25% or to 100%.
  • The owner can update the distribution settings of liquidity, marketing, and team share.
  • The owner can set any arbitrary value in the max transaction amount, which can lock the transfer of tokens.
  • The owner can enable/disable the wallet limit.
  • The owner can exempt wallets from the max hold wallet limit.
  • The owner can set any arbitrary value in the max wallet limit, including zero.
  • The owner can set any arbitrary value in the minimum swap amount.
  • The owner can update the marketing, development wallet address.
  • The owner can enable/disable swapping.
  • The owner can set any arbitrary value in the swap and liquify limit.
  • The owner can update the dev address.
  • The owner can set any arbitrary value in the block ban.
  • The owner can blacklist wallets from transferring of tokens.
  • The owner can update the router version.
  • The owner can enable/disable trading.

Note - This Audit report consists of a security analysis of the CryptoFy coin smart contract. This analysis did not include functional testing (or unit testing) of the contract’s logic. Moreover, we only audited one token contract for the CryptoFy coin team. Other contracts associated with the project were not audited by our team. We recommend investors do their own research before investing.

Files and details

Functions
public

/

State variables
public

/

Total lines
of code

/

Capabilities
Hover on items

/

Findings and Audit result

medium Issues | 3 findings

Pending

#1 medium Issue
Liquidity is transferred to an EOA
CryptofyCoin.sol
L939
Description

The contract's liquidity is automatically added to the 'owner' address, which is not recommended because, in an extreme scenario, this can be used to drain liquidity from the contract.

Pending

#2 medium Issue
Owner is able to lock user funds
CryptofyCoin.sol
L732
L736
L773
L944
Description

The owner can set any arbitrary value in the max wallet and max transaction limit, which can lock the transfer function, and the users will not be able to transfer any funds to any wallet if the value is set to zero. Moreover, the owner can start/stop trading anytime, which will lock user funds. Similarly, the owner can manually add wallet addresses to the 'bots' list, which is a transfer blacklist. Thus, the wallets in this list will not be able to transfer their funds.

Pending

#3 medium Issue
Tax can be set upto 100% or more
CryptofyCoin.sol
L702
L709
Description

The owner can adjust the buy and sell tax to 100% or more. If the tax is set to 100%, it implies that the total amount of tokens you intend to buy/sell will be sent to the address specified as the recipient in the contract. This implies that the recipient will never have the intended amount of tokens in their wallet as it has all been used up in paying the tax.

low Issues | 4 findings

Pending

#1 low Issue
Local variables shadowing
CryptofyCoin.sol
L659
L682
Description

Rename the local variables that shadow another component.

Pending

#2 low Issue
Missing Events Arithmetic
CryptofyCoin.sol
L702-707
L709-714
L716-722
L724-726
L736-738
L740-742
L769-771
Description

Emit an event for critical parameter changes.

Pending

#3 low Issue
Missing Zero Address Validation
CryptofyCoin.sol
L744
L748
L765
Description

Check that the address is not zero.

Pending

#4 low Issue
Floating pragma solidity version.
CryptofyCoin.sol
L6
Description

Adding the constant version of solidity is recommended, as this prevents the unintentional deployment of a contract with an outdated compiler that contains unresolved bugs.

optimization Issues | 2 findings

Pending

#1 optimization Issue
State variables that could be declared constant
CryptofyCoin.sol
L532
L530
L531
L191
L145
Description

Add the `constant` attributes to state variables that never change.

Pending

#2 optimization Issue
Public function that could be declared external
CryptofyCoin.sol
L164-167
L169-173
L175-177
L201-203
L205-207
L209-211
L651-653
L811-814
L677-680
L816-820
L248-252
L254-263
L639-641
L643-645
L647-649
L663-666
L668-671
L673-675
L690-692
L698-700
L752-755
L757-759
L761-763
L777-779
L781-783
L789-806
L944-946
Description

Use the `external` attribute for functions never called from the contract.

informational Issues | 4 findings

Pending

#1 informational Issue
Functions that are not used
CryptofyCoin.sol
L123-140
L106-108
L110-112
L114-116
L118-121
L86-96
L98-104
L14-17
L74-76
L78-81
Description

Remove unused functions.

Pending

#2 informational Issue
Unused state variables
CryptofyCoin.sol
L145
Description

Remove unused state variables.

Pending

#3 informational Issue
Uninitialized state variables
CryptofyCoin.sol
L191
Description

Initialize all the variables. If a variable is meant to be initialized to zero, explicitly set it to zero to improve code readability.

Pending

#4 informational Issue
Unused return values
CryptofyCoin.sol
L929-942
Description

Ensure that all the return values of the function calls are used.