Join GitHub today
GitHub is home to over 31 million developers working together to host and review code, manage projects, and build software together.Sign up
P3C Smart Contract #15
P3C is a fork of the P3D contract on Etherueum Classic. The original P3D contract has held over $40 million in Ethereum over a 6 month period, and P3C currently holds around 4500 Ethereum Classic. We believe the attack surface on P3C is actually smaller since we removed all of the administrative functions: - Our live contract: https://etherhub.io/addr/0xdf9aac76b722b08511a4c561607a9bf3afa62e49#tab_addr_3 - P3D live contract: https://etherscan.io/address/0xb3775fb83f7d12a36e0475abdd1fca35c091efbe#code The goal is to create a global rewards system, in which users that use crypto to buy things are given P3C in return like Credit card points that will earn them dividends.
FYI : Contract is now located in https://github.com/p3c-bot/p3c-bot.github.io/blob/master/contracts/P3C.sol
P3C Smart Contract security audit report performed by Callisto Security Audit Department
The audit, conducted on P3C contract, concluded that the contract is safe to be used. Graphical analysis and the definition domains of the functions used for conversion (tokens to ether and ether to tokens) showed positive results. However, for better analysis the contract developers should provide the community with a white paper describing every aspect of the contract especial the conversion algorithms.
2. Low severity issues:
2.1. Known Issue of ERC20 Standard
This issue is just a reminder about ERC20 Tokens lack of transaction handling, that can cause tokens loss.
Need to check if
require(_toAddress != address(0));
3. Minor observation.
3.1. Fees avoidance.
There is a condition which checks if the purchaser address is not same as the referrer address, but this may be easily bypassed by registering a different account on the same user.
3.2. Maybe incorrect 'buy price' estimation.
The 'buyPrice' function uses the 'tokensToEthereum_' function as the buy price estimator , but the ''tokensToEthereum_' function may act substantially different from the 'ethereumToTokens_' function in specific circumstances.
Revealing audit reports:
Thank you everyone who has participated in the audit. We look forward to working with the Callisto community further to grow the P3C economy. The goal of P3C is to provide a sustainable way to support open-source projects through our sponsorship program. Right now you can only sponsor P3C, but our goal is to expand this to many open-source project.
Since this report is concluded, we believe it is ethically fair to offer all of the auditors : @yuriy77k @RideSolo @alexo18 @MrCrambo a tip in P3C , please come by our Discord - https://discord.gg/crjsdJr
Once again, Thank you for your time.