0% found this document useful (0 votes)
56 views14 pages

Poly Block Audits Report Donaswap

The security audit of the Donaswap smart contracts found some issues ranging from critical to informational and provided recommendations to improve security, such as enhancing coding practices, adding more unit tests, and providing more comments and transparency once the protocol is live. The audit reviewed the smart contract source code using static analysis, manual review, and testnet deployment to discover vulnerabilities and ensure compliance with best practices.

Uploaded by

Rangga anggai
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
0% found this document useful (0 votes)
56 views14 pages

Poly Block Audits Report Donaswap

The security audit of the Donaswap smart contracts found some issues ranging from critical to informational and provided recommendations to improve security, such as enhancing coding practices, adding more unit tests, and providing more comments and transparency once the protocol is live. The audit reviewed the smart contract source code using static analysis, manual review, and testnet deployment to discover vulnerabilities and ensure compliance with best practices.

Uploaded by

Rangga anggai
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 14

{P()LY BL[]CK AUDITS}

Security Assessment

DONASWAP
November 11th, 2021
{P()LY BL[]CK AUDITS} {P()LY BL[]CK AUDITS}

Table of Contents
................................................................................................................................................................. 0
DISCLAIMER .................................................................................................................................................. 2
Summary ..................................................................................................................................................... 3
Audit Details ................................................................................................................................................. 4
Contract Overview.......................................................................................................................................... 5
Contract Functions ......................................................................................................................................... 6
Issues Checking Status .................................................................................................................................... 7
Security Issues ............................................................................................................................................. 9
Smart Contract Owner Functions...................................................................................................................... 10
Top Holders Overview .................................................................................................................................... 11
Conclusion ................................................................................................................................................. 12
KYC Verification Certificate ............................................................................................................................. 13

www.polyblockaudits.com
{P()LY BL[]CK AUDITS} {P()LY BL[]CK AUDITS}

DISCLAIMER
This is a limited report on our findings based on our analysis, in accordance with good industry
practice as at the date of this report, in relation to cybersecurity vulnerabilities and issues in
the framework and algorithms based on smart contracts, the details of which are set out in this
report. In order to get a full view of our analysis, it is crucial for you to read the full report. While
we have done our best in conducting our analysis and producing this report, it is important to
note that you should not rely on this report and cannot claim against us on the basis of what it
says or doesn’t say, or how we produced it, and it is important for you to conduct your own
independent investigations before making any decisions. We go into more detail on this in the
below disclaimer below – please make sure to read it in full.

DISCLAIMER: By reading this report or any part of it, you agree to the terms of this disclaimer.
If you do not agree to the terms, then please immediately cease reading this report, and delete
and destroy any and all copies of this report downloaded and/or printed by you. This report is
provided for information purposes only and on a non-reliance basis, and does not constitute
investment advice. No one shall have any right to rely on the report or its contents, and P()LY
BL[]CK AUDITS and its affiliates (including holding companies, shareholders, subsidiaries,
employees, directors, officers and other representatives) (P()LY BL[]CK AUDITS) owe no duty of
care towards you or any other person, nor does P()LY BL[]CK AUDITS make any warranty or
representation to any person on the accuracy or completeness of the report. The report is
provided "as is", without any conditions, warranties or other terms of any kind except as set
out in this disclaimer, and P()LY BL[]CK AUDITS hereby excludes all representations, warranties,
conditions and other terms (including, without limitation, the warranties implied by law of
satisfactory quality, fitness for purpose and the use of reasonable care and skill) which, but for
this clause, might have effect in relation to the report. Except and only to the extent that it is
prohibited by law, P()LY BL[]CK AUDITS hereby excludes all liability and responsibility, and
neither you nor any other person shall have any claim against P()LY BL[]CK AUDITS, for any
amount or kind of loss or damage that may result to you or any other person (including without
limitation, any direct, indirect, special, punitive, consequential or pure economic loss or
damages, or any loss of income, profits, goodwill, data, contracts, use of money, or business
interruption, and whether in delict, tort (including without limitation negligence), contract,
breach of statutory duty, misrepresentation (whether innocent or negligent) or otherwise
under any claim of any nature whatsoever in any jurisdiction) in any way arising from or
connected with this report and the use, inability to use or the results of use of this report, and
any reliance on this report.
The analysis of the security is purely based on the smart contracts alone. No applications or
operations were reviewed for security. No product code has been reviewed.

www.polyblockaudits.com
{P()LY BL[]CK AUDITS} {P()LY BL[]CK AUDITS}

Summary
This report has been prepared for the Donaswap smart contracts, to discover issues and
vulnerabilities in the source code of their Smart Contract as well as any contract dependencies
that were not part of an officially recognized library. A comprehensive examination has been
performed, utilizing Dynamic Analysis, Static Analysis, and Manual Review techniques.

 The auditing process pays special attention to the following considerations:


 Testing the smart contracts against both common and uncommon attack vectors.
 Assessing the code base to ensure compliance with current best practices and industry
standards.
 Ensuring contract logic meets the specifications and intentions of the client. Cross
referencing contract structure and implementation against similar smart contracts
produced by industry leaders.
 Thorough line-by-line manual review of the entire codebase by industry experts.
The security assessment resulted in findings that ranged from critical to informational. We
recommend addressing these findings to ensure a high level of security standards and industry
practices. We suggest recommendations that could better serve the project from the security
perspective:

 Enhance general coding practices for better structures of source codes;


 Add enough unit tests to cover the possible use cases given they are currently missing
in the repository;
 Provide more comments per each function for readability, especially contracts are
verified in public;
 Provide more transparency on privileged activities once the protocol is live.

www.polyblockaudits.com
{P()LY BL[]CK AUDITS} {P()LY BL[]CK AUDITS}

Audit Details

Audited Project: DONASWAP SMART CONTRACT

Audit Methodology: Static Analysis, Manual Review, Testnet Deployment

Project Component: Donaswap.sol

Project Deployer: 0x9b5eb92e35c0f87beba27cee0465b1f6ec3af6cc

Project Contract: 0xbb7af4da2db119fe909f509f533193eb3b883f08

Project Blockchain: Binance Smart Chain

Project Website: https://www.donaswap.com

www.polyblockaudits.com
{P()LY BL[]CK AUDITS} {P()LY BL[]CK AUDITS}

Contract Overview

Project Name: DONASWAP SMART CONTRACT

Contract Address : 0xbb7af4da2db119fe909f509f533193eb3b883f08

Total Supply: 100,000,000,000,000,000

Symbol: DONA

Decimals: 9

Current Holders: 4

Current Transactions: 3

Top Holder 100 Dominance: 100%

Total Tax Fee: 10%

Contract Deployer Address: 0x9b5eb92e35c0f87beba27cee0465b1f6ec3af6cc

Current Contract Owner: 0x9b5eb92e35c0f87beba27cee0465b1f6ec3af6cc

Language: Solidity

Version: 0.8.10

www.polyblockaudits.com
{P()LY BL[]CK AUDITS} {P()LY BL[]CK AUDITS}

Contract Functions
Contract Context { Interface IUniswapV2Factory {

[Internal] _msgSender [External] feeTo


[Internal] _msgData [External] feeToSetter
} [External] getPair
[External] allPairs
Interface IERC20 { [External] allPairsLength
[External] createPair
[External] totalSupply [External] setFeeTo
[External] balanceOf [External] setFeeToSetter
[External] transfer }
[External] allowance
[External] approve Interface IUniswapV2Pair {
[External] transferFrom
} [External] name
[External] symbol
Library Safemath { [External] decimals
[External] totalSupply
[Internal] add [External] balanceOf
[Internal] sub [External] allowance
[Internal] sub [External] approve
[Internal] mul [External] transfer
[Internal] div [External] transferFrom
[Internal] div [External] DOMAIN_SEPARATOR
[Internal] mod [External] PERMIT_TYPEHASH
[Internal] mod [External] nonces
} [External] permit
[External] MINMUM_LIQUIDITY
Address { [External] factory
[Internal] isContract [External] token0
[Internal] sendValue [External] token1
[Internal] functionCall [External] getReserves
[Internal] functionCall [External] price0CumulativeLast
[Internal] functionCallWithValue [External] price1CumulativeLast
[Internal] functionCallWithValue [External] kLast
[Prv] _functionCallWithValue [External] mint
} [External] burn
[External] swap
Contract Ownable { [External] skim
[External] sync
[Internal] <Constructor> [External] initialize
[Public] owner }
[Public] renounceOwnership
[Public] transferOwnership
}

www.polyblockaudits.com
{P()LY BL[]CK AUDITS} {P()LY BL[]CK AUDITS}

Issues Checking Status


Interface IUniswapV2Router01 { [Public] totalFees
[Public] reflectionFromToken
[External] factory [Public] tokenFromReflection
[External] WETH [Public] excludeFromReward
[External] addLiquidity [External] includeInReward
[External] addLiquidityETH [Public] excludeFromFee
[External] removeLiquidity [Public] includeInFee
[External] removeLiquidityETH [External] setTaxFeePercent
[External] removeLiquidityWithPermit [Extrenal] setLiquidityFeePercent
[External] removeLiquidityETHWithPermit [Public] setSwapAndLiquifyEnabled
[External] swapExactTokensForTokens [External] <fallback>
[External] swapTokensForExactTokens [External] setMaxTxPercent
[External] swapTokensForExactETH [Private] _reflectFee
[External] swapexactTokensForETH [Private] _getTValues
[External] swapBNBForExactTokens [Private] _getRValues
[External] quote [Private] _getRate
[External] getAmountOut [Private] _getCurrentSupply
[External] getAmountIn [Private] _takeLiquidity
[External] getAmountsOut [Private] calculateTaxFee
[External] getAmountsIn [Private] calculateLiquidityFee
} [Private] removeAllFee
[Private] restoreAllFee
Interface IUniswapV2Router02 { [Public] isExcludedFromFee
[Private] _approve
[External] removeLiquidityETHSupportingFeeOnTransferTokens [Private] _transfer
[External]
removeLiquidityETHWithPermitSupportingFeeOnTransferTokens [Private] swapAndLiquify
[External] [Private] swapTokensForEth
swapExactTokensForTokensSupportingFeeOnTransferTokens
[Private] addLiquidity
[External]
swapExactETHForTokensSupportingFeeOnTransferTokens [Private] _tokenTransfer
[External] [Private] _transferToExcluded
swapExactTokensForETHSupportingFeeOnTransferTokens
}
[Private] _transferFromExcluded
[Private] _transferBothExcluded
Contract Donaswap { [Private] _transferStandard
[Public] changeRouterVersion
[Public] <Constructor> [Public] getBNBQuantityInContract
[Public] name [External] getBNBinContract
[Public] symbol [External] setWhiteListProtocol
[Public] decimals }
[Public] totalSupply
[Public] balanceOf
[Public] transfer
[Public] allowance
[Public] approve
[Public] transferForm
[Public] increaseAllowance
[Public] decreaseAllowance
[Public] isExcludedFromReward

www.polyblockaudits.com
{P()LY BL[]CK AUDITS} {P()LY BL[]CK AUDITS}

Security Issues Checking Status

NO Issue description Status

01 Compiler errors. Passed

02 Race conditions and Reentrancy. Cross-function race conditions. Passed

03 Possible delays in data delivery. Passed

04 Oracle calls. Passed

05 Front running. Passed

06 Timestamp dependence. Passed

07 Integer Overflow and Underflow. Passed

08 DoS with Revert. Passed

09 DoS with block gas limit. Passed

10 Methods execution permissions. Passed

11 Economy model of the contract. Passed

12 The impact of the exchange rate on the logic. Passed

13 Private user data leaks. Passed

14 Malicious Event log. Passed

15 Scoping and Declarations. Passed

16 Uninitialized storage pointers. Passed

17 Arithmetic accuracy. Passed

18 Design Logic. Passed

19 Cross-function race conditions. Passed

20 Fallback function security. Passed

www.polyblockaudits.com
{P()LY BL[]CK AUDITS} {P()LY BL[]CK AUDITS}

Security Issues
Extreme Issues

NO EXTREME ISSUES FOUND

High Issues

NO HIGH ISSUES FOUND

Medium Issues

NO MEDIUM ISSUES FOUND

Low Issues

NO LOW ISSUES FOUND

Informational Issues

NO INFORMATIONAL ISSUES FOUND

www.polyblockaudits.com
{P()LY BL[]CK AUDITS} {P()LY BL[]CK AUDITS}

Smart Contract Owner Functions


In the contract Donaswap.sol, the role Owner has the authority over the following function:

 transferOwnership
 excludeFromReward
 includeInReward
 excludeFromFee
 setTaxFeePercent
 setLiquidityFeePercent
 setSwapAndLiquifyEnabled
 setMaxTxPercent
 setRouterAddress
 getBNBinContract
 setWhiteListProtocol

The team is adding Multisignature wallets to prevent a single point of failure.

www.polyblockaudits.com
{P()LY BL[]CK AUDITS} {P()LY BL[]CK AUDITS}

Top Holders Overview

www.polyblockaudits.com
{P()LY BL[]CK AUDITS} {P()LY BL[]CK AUDITS}

Conclusion
The smart contract contains no security issues. Please read our disclaimer above!

www.polyblockaudits.com
{P()LY BL[]CK AUDITS} {P()LY BL[]CK AUDITS}

KYC Verification Certificate

Audited on: 11-11-2021


Audited by: Polymathist, the auditor

www.polyblockaudits.com

You might also like