StWEMIXV6

Centralization Risks in StWEMIXV6.sol

Centralized Control of Contract Upgrade

The function `withdraw()` of the `staking` contract is not  being invoked

Missing Value Assignment Sentences In State Variable Updating Function `setBreaker`

No Upper Limits for Fees

The function `initialize()` may revert

Potential Incorrect Staking Address

`pendingMigrationAmount` is not updated to 0

Front-running Risk

The `withdraw()` function does not match the one in the `NCPStaking` contract

Third-Party Dependency Usage

Missing Zero Address Validation

Missing Check staking amount of this contract

`nonReentrant` Modifier can be Placed and Executed Before Other Modifiers In Functions

Redundant Code

Wemix Retainer 113 Liquid Staking

StWEMIXV6.sol

NCPStaking

WithdrawalNFT

Rewarder

Centralization Related Risks

`setMultiplierPointBasis()` Does Not Settle Rewards With Old `multiplierPointBasis`

No Upper Limit for Fee

Stakers will not be able to withdraw when the pool is removed

Incorrect user account address

Depositors cannot withdraw all their deposits due to incorrect update of `totalDepositors`

Withdraw requests that have not reached the claimable time can be withdrawn

Unused modifier `whenNotLock`

Potential Divide by Zero

Function `setRewardFeeRatio()` can be invoked without any delay

Lacking the condition that the staking amount is greater than 0

Parameter `to` is unused

The function `_updateMP()` is not invoked before updating `rewardDebt`

Usage of `transfer`/`send` for Sending Native Tokens

The different addresses map to the same rewarder count 

Constant token Id

Unused State Variable

Redundant Comparisons

Wemix Retainer 111 Wonder Staking

WithdrawalNFT.sol

NCPStaking.sol

Rewarder.sol

Inherited Contracts Not Initialized In Initializer

Redundant Code Components

Incorrect Error Message

Wemix Retainer 106 DIOS Staking

IDenylist.sol

IEnvStorage.sol

IRewarder.sol

IStaking.sol

IStakingVersion.sol

IWWEMIX.sol

IWeswapRouter.sol

StakingV10.sol

KlevaDistributor

KlevaLocker

KlevaConfig

KlevaToken

Dashboard

ERC20Upgradeable

FeeBox

Faulty liquidity calculations can result in users receiving excess rewards

Users can withdraw all balances due to the lack of a check to withdraw an amount less than their balances if the fee rate is greater than 0

Ownership can be regained after having been renounced

Pause token might impact the distributor contract

Potential No withdrawals if the `KlevaToken` mints to the cap

Inconsistent Access Control

No way to retrieve ETH from the contract

Missing Check  that `distributorId_` is greater than 0

Different pool name can set the same pool id

`approve` return value not checked

Check Effect Interaction Pattern Violated

Third-Party Dependencies

SafeTransfer should be used in place of transfer

Deprecated Usage Of `_setupRole()`

Lack of migration logic when setKlevaDistributor

function may return true even if nothing is executed

Usage of `selfdestruct` or `delegatecall` Within an Upgragdeable Contract

Inconsistent address checking

The use of the function `depositBehalf()`

Wemix Retainer 103 KLEVA Omni

KlevaLockerImpl.sol

KurrencyEarnImpl.sol

WemixfiEarnImpl.sol

KlevaDistributor.sol

KlevaLocker.sol

KlevaToken.sol

IAccessControlUpgradeable.sol

ICEther.sol

ICToken.sol

IDashboard.sol

IERC165Upgradeable.sol

IERC20.sol

IEarnImpl.sol

IEarnRouter.sol

IFeeBox.sol

IKlevaConfig.sol

IKlevaDistributor.sol

IKlevaLocker.sol

IKlevaToken.sol

IKurrencyEarn.sol

IKurrencyPriceCalculator.sol

ISync.sol

IWETH.sol

IkToken.sol

Dashboard.sol

AccessControlUpgradeable.sol

AddressUpgradeable.sol

ContextUpgradeable.sol

ERC165Upgradeable.sol

ERC20Upgradeable.sol

EnumerableSet.sol

Initializable.sol

KlevaConstant.sol

MathUpgradeable.sol

Ownable2StepUpgradeable.sol

PausableUpgradeable.sol

ReentrancyGuardUpgradeable.sol

SafeERC20.sol

Selector.sol

StringsUpgradeable.sol

FeeBox.sol

KlevaConfig.sol

EarnRouter.sol

Centralized Risk

Weak Pseudo Random Number Generator

`_safeMint()` should be used rather than `_mint()` wherever possible

Potential Storage Slot Overwriting Risk in Upgrades

Incompatibility With Deflationary Tokens 

Risks of `abi.encodePacked()` in User-Controlled Signatures

Incorrect Naming Convention Utilization

Wemix Retainer 102 DEX NFT Service

CharacterConst.sol

LibERC721.sol

LibError.sol

LibItemGacha.sol

CharacterFacet.sol

GachaFacet.sol

DiamondCutFacet.sol

DiamondLoupeFacet.sol

OwnershipFacet.sol

IDiamondCut.sol

IDiamondLoupe.sol

IERC165.sol

IERC173.sol

LibDiamond.sol

DiamondInit.sol

Diamond.sol

Minimum start price could be too high

The first bid in a Dutch auction can be lower than the order price

Sellers can set close delay for an ongoing auction

Inadequate checking in `isAuctionStarted()` function 

Get the length of a number

Comment Inconsistency

Incompatibility With Fee on Transfer Tokens

Wemix Retainer 100 PlayNFTMarket (hybrid-auction)

PlayMarketAuctionOrderBase.sol

PlayMarketEnglishAuctionOrderV4.sol

PlayMarketHybridAuctionOrder.sol

Centralization Risks in PlayMarketTokenManagerV3.sol

Inconsistent payment token support

`PlayMarketTokenManagerV3` imports non-upgradable contracts

NFT Tokens May Support Both ERC721 and ERC1155 Standards

Wemix 99 PlayNFTMarket

PlayMarketTokenManagerV3.sol

Unused Return Value

Potential Out-of-Gas Exception

Wemix Retainer 94 DEX V3

MileageAirDrop.sol

PairViewer.sol

Router.sol

Incorrect Price Validation Allows Malicious Bidder to DoS Auctions

Revoked roles retain sensitive privileges

The `marketMinPrice` mapping is used but not set

Renounced role is not removed from admin list

Unprotected Initializer

Unused owner role

Potential function selector collision

Inconsistent Error Message Prefixing in Contracts

Wemix Retainer 88 NILE MarketPlace (hybrid)

GrowthRateManager.sol

GrowthRateV1.sol

OHybridAuctionOrder.sol

HybridAuctionOrder.sol

CHybridAuctionOrder.sol

ExecuteManager.sol

RoleManager.sol

Pause and Unpause Functions Not Exposed

Unclear Usage of `rightMinter` 

Potential Front-running of `lock()` 

initialize() Is Unprotected

Unused Variables

Wemix Retainer 90 KLEVA

KlevaToken_klaytn.sol

KlevaToken_wemix.sol

Centralization Risks

Out of Scope Dependency

Minting Conflict between `mintAuto()` and `mint()` Functions in `Una721` Contract

Inconsistencies in Access Control in `mintAuto()` Function

Reentrancy with token transfer callback hook

Wemix Retainer 87 NightCrow

https://images.ctfassets.net/jqfm0se0f03r/6wrZmEAJZbQeTMPWrx5hPP/f6639c6cbe0a034584713896fe49a4f3/MkwpWfom_400x400.jpeg

WEMIX3.0 is a decentralized blockchain protocol that emphasizes a user-centered experience and leverages the power of platform technology to deliver comprehensive services. Designed as the cornerstone of a seamless, cross-border mega-ecosystem.

WEMIX

WEMIX

Audit History

Skynet

Sentiment Analysis