KoaCombat

For this audit, we reviewed the project team&#39;s $KOACOMBAT contract at 0x6769d86f9c430f5ac6d9c861a0173613f1c5544c on the Ethereum Mainnet.AUDIT FINDINGS Low findings were identified and the team should consider resolving these issues. In addition, centralized aspects are present. Date: July 5th, 2022.Finding #1 Description: The _takeBurn() function will increase the _tOwned value of the burnAddress if the charityAddress is excluded from rewards rather than if the burnAddress is excluded from rewards. function _takeBurn function totFeesPaid _takeBurn(uint256 uint256 rBurn totFeesPaid.burn burn &#43;&#61; rBurn, uint256 uint256 tBurn tBurn) private &#43;&#61;tBurn tBurn; _isExcluded[charityAddress if _rOwned if(_isExcluded charityAddress])_tOwned private{ _tOwned[burnAddress burnAddress]&#43;&#61; &#43;&#61;tBur tBur _rOwned[burnAddress burnAddress] &#43;&#61; &#43;&#61;rBurn rBurn; } Risk/Impact: If the burnAddress is excluded from rewards, _tOwned of the burnAddress will be increased rather than _rOwned when collecting the burn fee. Recommendation: As the contract is already deployed, the team should never exclude the charityAddress from rewards. Resolution: Resolved. Finding #2 - KoaCombat - Informational Description: Although the _tTotal state variable can never be modified, it is not declared constant. Recommendation: This state variable could be declared constant for additional gas savings on each reference. CONTRACT OVERVIEW<ul><li>The total supply of the token is set to 50 quadrillion $KoaCombat [50,000,000,000,000,000]. </li><li>No mint or burn functions exist, though the circulating supply can be decreased by sending tokens to the 0x..dead address. </li><li>At the time of writing this report, there are 754 total token holders. The token allocation is as follows: </li><li>39.82% of the total supply has been sent to the 0x..dead address. </li><li>13.67% of the total supply is stored in the BrewlabsLockup contract. This contract was not in scope for this audit. </li><li>10.53% of the total supply is in Uniswap liquidity. Of that liquidity, 100% of the LP tokens are stored in a locking contract. </li><li>3.47% of the total supply belongs to the token KoaCombat contract. </li><li>3.38% of the total supply is stored in a separate Please review our BrewlabsLockup contract. This contract was not in scope for this audit. </li><li>The next five holders own a cumulative 8.13% of the total supply. </li></ul>The contract enforces a maximum transaction amount (set by the owner) which imposes a limit to the number of tokens that can be transferred in a single transaction. Blacklisted accounts are prohibited from participating in transfers. The contract features a cool-down mechanism that prevents users from transferring tokens if the cool-down time (set by the owner) since the users&#39; last transfer has not yet elapsed. There is an RFI fee, Liquidity fee, Treasury fee, Charity fee, and Burn fee on all transfers where neither the sender nor the recipient is excluded from fees. The tokens collected through the RFI fee are removed from the circulating supply; This serves as a frictionless fee redistribution that automatically benefits all token holders at the time of each transaction. The Uniswap Pair address is properly excluded from reflections to prevent the-of-liquidity attacks. The Liquidity fee charged during transfers is stored in the contract address. The tokens are swapped for ETH for the purpose of funding Uniswap liquidity when the following conditions are met: <ul><li>The automatic liquidity add functionality is enabled by the team. </li><li>The threshold number of tokens (set by the owner) in the contract address has been reached. </li><li>The contract is not currently performing an automatic liquidity add. </li><li>The caller is not initiating a buy transaction via Uniswap. </li><li>Neither the sender nor the recipient is excluded from fees. </li><li>Liquidity-adds are automatically performed by selling the tokens collected as fees, pairing the received ETH with the token, and adding it as liquidity to the ETH pair. </li><li>The LP tokens received through this process are sent to the Liquidity address set by the team. We recommend that the team lock these newly acquired LP tokens. </li><li>The tokens collected through the Treasury fee and Charity fee are sent to the team&#39;s Treasury wallet and Charity wallet respectively. </li><li>The tokens collected through the Burn fee are sent to the Burn address set by the team. This address is currently set to the 0x..dead address. </li><li>As the contract is deployed with Solidity v0.8.10, it is safe from any possible overflows/underflows. </li><li>The contract complies with the ERC-20 token standard.</li></ul>Ownership Controls: The owner can set each fee to any percentage at any time. The owner can exclude and include accounts from transfer fees and reward distribution. The owner can add/remove accounts from the transfers blacklist at any time. The owner can set the maximum transaction amount to any value at any time. The owner can enable/disable automatic liquidity adds at any time. Please review our The owner can update the threshold number of tokens that triggers an automatic liquidity add to any value at any time. The owner can enable/disable the cool-down mechanism at any time. The owner can set the cool-down time to any value at any time. The owner can withdraw any tokens and ETH from the contract at any time. The owner can airdrop any number of tokens to any number of addresses at any time. The owner can update the Treasury wallet, Charity wallet, Burn address, and Liquidity address to any addresses at any time. The owner can update the Uniswap Pair and Router addresses at any time.ABOUT SOLIDITY FINANCE Solidity Finance was founded in 2020 and quickly grew to have one of the most experienced and well-equipped smart contract auditing teams in the industry. Our team has conducted 1300&#43; solidity smart contract audits covering all major project types and protocols, securing a total of over $10 billion U.S. dollars in on-chain value. Our firm is well-reputed in the community and is trusted as a top smart contract auditing company for the review of solidity code, no matter how complex. Our team of experienced solidity smart contract auditors performs audits for tokens, NFTs, crowdsales, marketplaces, gambling games, financial protocols, and more!WHAT IS A SOLIDITY AUDIT? Typically, a smart contract audit is a comprehensive review process designed to discover logical errors, security vulnerabilities, and optimization opportunities within code. A Solidity Audit takes this a step further by verifying economic logic to ensure the stability of smart contracts and highlighting privileged functionality to create a report that is easy to understand for developers and community members alike.© Solidity Finance LLC. | All rights reserved. Please note we are not associated with the Solidity programming language or the core team which develops the language.KOA COMBAT SOCIAL MEDIA CHANNELSWebsite - https://koacombat.com/ Twitter - https://twitter.com/Koacombat Telegram - https://t.me/KoaCombatOfficial Facebook - https://www.facebook.com/KNOCKOUTARTISTKOACOMBAT Youtube - https://www.youtube.com/channel/UCJGpyKDjJG8zmVvokJhfIcA Instagram - https://www.instagram.com/Koacombat/

KoaCombat Smart Contract Audit Report

KoaCombat_Token

Other articles published on Sep 19, 2022

BrightyPad 🤝 Galaxy Arena

♠️ Golden Ball BSC Auto Liquidity Generator 5% AutoLP♠️

49% of Americans have heard of NFTs, shows Pew Research Centre Survey

Official announcement of the migration to the new INTDESTCOIN smart contract

What is the current state of NFT adoption in Africa?

Bitcoin Mining As a Victim of Verbiage

Join our free newsletter for daily crypto updates!