Inherited Contracts Not Initialized In Initializer

Redundant Code Components

Incorrect Error Message

Wemix Retainer 106 DIOS Staking

IDenylist.sol

IEnvStorage.sol

IRewarder.sol

IStaking.sol

IStakingVersion.sol

IWWEMIX.sol

IWeswapRouter.sol

StakingV10.sol

KlevaDistributor

KlevaLocker

KlevaConfig

KlevaToken

Dashboard

ERC20Upgradeable

FeeBox

Centralized Control of Contract Upgrade

Centralization Related Risks

Faulty liquidity calculations can result in users receiving excess rewards

Users can withdraw all balances due to the lack of a check to withdraw an amount less than their balances if the fee rate is greater than 0

Ownership can be regained after having been renounced

No Upper Limit for Fee

Pause token might impact the distributor contract

Potential No withdrawals if the `KlevaToken` mints to the cap

Inconsistent Access Control

No way to retrieve ETH from the contract

Missing Check  that `distributorId_` is greater than 0

Different pool name can set the same pool id

`approve` return value not checked

Check Effect Interaction Pattern Violated

Third-Party Dependencies

SafeTransfer should be used in place of transfer

Deprecated Usage Of `_setupRole()`

Lack of migration logic when setKlevaDistributor

function may return true even if nothing is executed

Usage of `selfdestruct` or `delegatecall` Within an Upgragdeable Contract

Inconsistent address checking

The use of the function `depositBehalf()`

Wemix Retainer 103 KLEVA Omni

KlevaLockerImpl.sol

KurrencyEarnImpl.sol

WemixfiEarnImpl.sol

KlevaDistributor.sol

KlevaLocker.sol

KlevaToken.sol

IAccessControlUpgradeable.sol

ICEther.sol

ICToken.sol

IDashboard.sol

IERC165Upgradeable.sol

IERC20.sol

IEarnImpl.sol

IEarnRouter.sol

IFeeBox.sol

IKlevaConfig.sol

IKlevaDistributor.sol

IKlevaLocker.sol

IKlevaToken.sol

IKurrencyEarn.sol

IKurrencyPriceCalculator.sol

ISync.sol

IWETH.sol

IkToken.sol

Dashboard.sol

AccessControlUpgradeable.sol

AddressUpgradeable.sol

ContextUpgradeable.sol

ERC165Upgradeable.sol

ERC20Upgradeable.sol

EnumerableSet.sol

Initializable.sol

KlevaConstant.sol

MathUpgradeable.sol

Ownable2StepUpgradeable.sol

PausableUpgradeable.sol

ReentrancyGuardUpgradeable.sol

SafeERC20.sol

Selector.sol

StringsUpgradeable.sol

FeeBox.sol

KlevaConfig.sol

EarnRouter.sol

Centralized Risk

Weak Pseudo Random Number Generator

`_safeMint()` should be used rather than `_mint()` wherever possible

Potential Storage Slot Overwriting Risk in Upgrades

Incompatibility With Deflationary Tokens 

Risks of `abi.encodePacked()` in User-Controlled Signatures

Incorrect Naming Convention Utilization

Wemix Retainer 102 DEX NFT Service

CharacterConst.sol

LibERC721.sol

LibError.sol

LibItemGacha.sol

CharacterFacet.sol

GachaFacet.sol

DiamondCutFacet.sol

DiamondLoupeFacet.sol

OwnershipFacet.sol

IDiamondCut.sol

IDiamondLoupe.sol

IERC165.sol

IERC173.sol

LibDiamond.sol

DiamondInit.sol

Diamond.sol

Minimum start price could be too high

The first bid in a Dutch auction can be lower than the order price

Sellers can set close delay for an ongoing auction

Inadequate checking in `isAuctionStarted()` function 

Get the length of a number

Comment Inconsistency

Incompatibility With Fee on Transfer Tokens

Wemix Retainer 100 PlayNFTMarket (hybrid-auction)

PlayMarketAuctionOrderBase.sol

PlayMarketEnglishAuctionOrderV4.sol

PlayMarketHybridAuctionOrder.sol

Centralization Risks in PlayMarketTokenManagerV3.sol

Inconsistent payment token support

`PlayMarketTokenManagerV3` imports non-upgradable contracts

NFT Tokens May Support Both ERC721 and ERC1155 Standards

Wemix 99 PlayNFTMarket

PlayMarketTokenManagerV3.sol

Unused Return Value

Potential Out-of-Gas Exception

Wemix Retainer 94 DEX V3

MileageAirDrop.sol

PairViewer.sol

Router.sol

Incorrect Price Validation Allows Malicious Bidder to DoS Auctions

Revoked roles retain sensitive privileges

The `marketMinPrice` mapping is used but not set

Renounced role is not removed from admin list

Unprotected Initializer

Unused owner role

Potential function selector collision

Inconsistent Error Message Prefixing in Contracts

Wemix Retainer 88 NILE MarketPlace (hybrid)

GrowthRateManager.sol

GrowthRateV1.sol

OHybridAuctionOrder.sol

HybridAuctionOrder.sol

CHybridAuctionOrder.sol

ExecuteManager.sol

RoleManager.sol

Pause and Unpause Functions Not Exposed

Unclear Usage of `rightMinter` 

Potential Front-running of `lock()` 

initialize() Is Unprotected

Unused Variables

Wemix Retainer 90 KLEVA

KlevaToken_klaytn.sol

KlevaToken_wemix.sol

Centralization Risks

Out of Scope Dependency

Minting Conflict between `mintAuto()` and `mint()` Functions in `Una721` Contract

Inconsistencies in Access Control in `mintAuto()` Function

Reentrancy with token transfer callback hook

Inconsistency about policies

Cross chain exchange dependency

Missing Validation on the Length of `tos`

Wemix Retainer 87 NightCrow

NightCrowBase.sol

NightCrowUnaBase.sol

ExchangePolicy.sol

IPricePolicy.sol

PricePolicy.sol

GamePolicy.sol

INightCrowFT.sol

NightCrowFT.sol

INightCrowNFT.sol

NightCrowNFT.sol

INightCrowEcho.sol

INightCrowFTExchanger.sol

NightCrowEcho.sol

NightCrowFTExchanger.sol

Una721.sol

IUnaNFTCrossMinter.sol

UnaNFTCrossMinter.sol

CapManager.sol

Error-Prone Interest Calculation and Misconfigured Interest Rates

Initial Token Distribution

Out-of-Scope oracle Dependency 

No Upper Limit in **setParams** function

Users may lose rewards due to rounding errors

Inaccurate Interest Calculation Due to Stale Timestamps

Pool liquidity providers can front-run liquidation and take-profit orders

Reminder to Provide Initial Deposit to the Pool to Prevent Possible "Inflation Attacks

Missing Zero Address Validation

The Purpose of the "ReleaseMargin" Function

Lack of Leverage Check in the `settleOrder` Function

Potential Cross-Chain Replay Attack

Unused State Variable

Wemix Retainer 84 WMX.Fi (external audit)

Common.sol

Oracle.sol

OracleForwarder.sol

Pool.sol

https://images.ctfassets.net/jqfm0se0f03r/6wrZmEAJZbQeTMPWrx5hPP/f6639c6cbe0a034584713896fe49a4f3/MkwpWfom_400x400.jpeg

WEMIX3.0 is a decentralized blockchain protocol that emphasizes a user-centered experience and leverages the power of platform technology to deliver comprehensive services. Designed as the cornerstone of a seamless, cross-border mega-ecosystem.

WEMIX

WEMIX

Audit History

Skynet

Sentiment Analysis