Contract Renounce

Project Name

CO2DAO Token

Contract Address

0x9029d8...2aC5

Symbol

CO2

Audit Release

Audit Release #748

Platform

BSC

Contract Type

DAO

Testnet link Download Certificate

Audit Timeline

Audit Request

2023-08-09

Audit Onboard

2023-08-09

Revision At

No Revision

Release At

2023-08-09

About Project

No project description contact developer team for update project description..

Token Information

Token Name :

CO2DAO Token

Token Symbol :

CO2

Token Decimal :

Total Supply :

500,000,000,000,000

Holder Count :

4022

Contract Address :

0x90...2aC5

Contract Verified? :

Yes

Projects Age :

1 years, 5 months, 521 days

Contract Type :

BEP20

Compiler :

v0.8.19+commit.7dd6d404

Sol License :

Unlicense

Contract Name :

CO2DAOToken

Contract Created :

Jul-09-2023 05:07:39 PM +UTC

Contract Language :

Solidity

Related Audit :

Available

Owner & Deployer Information

Owner Address :

0x00...0000

Owner Balance :

Owner Percent :

Deployer Address :

0xd8...c872

Deployer Balance :

139,094,582,775

Deployer Percent :

Project Information

Trust Score

Information About Trust Score

C+

Low Risk

Code Review

1 Minor

1 Medium

1 Major

0 Critical

3 Informational

Safety Overview

Very Risk

0-20

High Risk

20-35

D+

Risk

35-50

Medium Risk

50-60

C+

Low Risk

60-70

Secure

70-80

B+

Good Secure

80-90

Very Secure

90-100

Trust Score Around Project

Information about trust score other projects

Community Trust

Information About Trust Score

Yes

Overview Information

Overview contract information

Notes:

Safe

Be Careful

Danger

Function Detected

Tax / Fees Information

All information about tax information

Buy Tax Information

Tax buy distribution information

Current Buy Tax/Fees: 0.00%

Name Tax	Receiver	Value
tax		0%
Total	0%

Sell Tax Information

Tax sell distribution information

Current Sell Tax/Fees: 2.99%

Name Tax	Receiver	Value
tax		3%
Total	3%

Transfer Tax Information

Tax transfer distribution information

Name Tax	Receiver	Value
No tax in this contract		%
Total	0%

Manual Audit

Recap manual audit information, click tabs on below for explanation, and recommendation

Minor
- Could be fixed, will not bring problems.

1. Potential use of block.timestamp as source of randomness

Risk Scenario

Based on our analysis, [CO2DAOToken.delegateBySig(address,uint256,uint256,uint8,bytes32,bytes32)](CO2.sol#L1107-L1146) uses timestamp for comparisons Dangerous comparisons: - [require(bool,string)(block.timestamp <= expiry,CO2::delegateBySig: signature expired)](CO2.sol#L1144)

Risk Recommendation:

We would recommend project owner to not use any of the environment variables like coinbase, gaslimit, block number and timestamp as sources of randomness since they are predictable and be aware that such usage could introduces a certain level of trust into miners. Keep in mind that malicious miner can manipulate the value of those variables and that any attackers could also predetermine the hashes of earlier blocks. However, based on our analysis, there’s nothing to be done by project owner since in each of the “block.number” value was used as a means to keep track of time/epoch that relates to the trigger of a specific function.

Section that explains how to fix existing risks

Risk Code

CO2DAOToken.sol

Section that explains the lines of code that contain risks

Audit Information

Information audit recap

CO2DAO Token

View PDF

Manual ReviewStatic AnalysisDynamic AnalysisSymbolic ExecutionSWC CheckDynamic Testing

Contract Name

CO2DAOToken

Compiler

v0.8.19+commit.7dd6d404

Language

Solidity

License

Unlicense

Audit Timeline

Audit Request

2023-08-09

Audit Onboard

2023-08-09

Revision At

No Revision

Release At

2023-08-09

Issue Information

Critical Count:

Major Count:

Medium Count:

Minor Count:

Informational Count:

Issue Tags

No Tags

Minting

Dangerous strict equalities

Potential use of block.timestamp as source of randomness

Safemath

Whitelist

Set Fees

Contract Detail

All information about contract detail

Contract Inheritance

Information about contract inheritance and relation

Address Indexing

This tools will be extracted all address from contract code for checking wrong address (notice user)

Dex Information

Information about dex list

Pair List

PancakeV2

$5,560

0xd5...fb6f

UniswapV3

0x24...9333

PancakeV3

0xee...0ebe

Website Information

Information about project website

https://co2.money/

SSL Status

Secured

Website Domain

.money

Web Status

Not Active / Cloudflare

SSL Provider

Google Trust Services LLC

Speed Information

First Contentful Paint: 2.7s

Fully loaded Time: 5.6s

Domain Checker

Website: https://co2.money/

Location:Loading...

Region: Loading...

Token Holder & Lp Information

Information about token holder and liquidity protocol

ID	Address	Balance	Percent	Tag
1	0x000...dead	$487,556,331,931,179	97.51%
2	0xd54...fb6f	$5,296,943,291,188	1.06%	PancakeV2
3	0xf57...137b	$1,675,347,810,228	0.34%
4	0x184...81f8	$1,171,702,846,475	0.23%
5	0xa98...6f88	$842,083,913,338	0.17%
6	0x725...e262	$542,646,148,412	0.11%
7	0x1e6...c4f9	$359,922,089,816	0.07%
8	0x3ad...bfd9	$186,790,405,900	0.04%
9	0xf25...e4ba	$162,815,828,778	0.03%
10	0xd8a...c872	$139,094,582,775	0.03%

ID	Address	Balance	Percent	Tag	Unlocked Date
1	0x0c8...8820	$155,077,240	100.00%	TeamFinance
2	0x000...0000	$0	0.00%	Null Address

BlockSAFU Automatic Vulnerability Scan

Vuln list information and explanation

Function Summary

All information about function summary

Report By Investor

All investor report

No Report

Comment

No comment in this audit projects

Disclaimer

This audit provides a technical evaluation of the associated project's smart contract. It aims to enhance security and value perception but does not guarantee safety or profitability. The audit isn't an endorsement of the project and doesn't absolve investors from conducting their due diligence.

Liability for any losses related to the use or interpretation of this audit is expressly disclaimed. Investing in blockchain and cryptocurrency projects inherently involves risk, and investors should only commit funds they are prepared to lose.

Investors are strongly advised to "Do Your Research" (DYOR). Here's a simplified checklist to guide the DYOR process:

1. Research the project and team.
2. Review audits and code.
3. Analyze token metrics and unlock dates.
4. Verify self-contribution in the launchpad pool.
5. Understand the token's functions and features.
6. Investigate token explorer comments.
7. Assess community activity and reviews.
8. Verify partnerships and compare the roadmap with the team's capabilities.
9. Trust your intuition and evaluate risks.

Audit Release

Platform

Contract Type

Badge

Audit Request

Audit Onboard

Revision At

Release At

Project Information

Trust Score

Code Review

Safety Overview

Trust Score Around Project

Community Trust

Overview Information

MintingThis is to check whether the contract can increase total supply or not

Modify Fees SellThis is to check whether the owner can modify sell fees/tax

OtherThis is to check if this contract have any malicious function, vuln schema, or not

Enable TradingThis is to check if this contract have enable trading or not

Anti BotThis is to check if this contract have anti bot or not

External CallThis is to check if this contract can external call

Self DestructThis is to check if this contract is self destruct contract or not

Cannot BuyThis is to check if this contract cannot buy tokens

Cannot Sell AllThis is to check if this contract has a function to limit for sell all

Hidden OwnerThis is to check if this contract has hidden owner

Owner Change BalanceThis is to check if the owner has permission to change balance address

WhitelistedThis is to check if this contract has a function to whitelist address

Trading CooldownThis is to check if this contract has a function to cooldown trading

Transfer PausableThis is to check if this contract has a function to pause trading

Anti WhaleThis is to check if this contract has a function to limit holding amount address

Max Tx AmountThis is to check if this contract has a function to limit the max amount of transactions

ProxyThis is to check whether this contract is a proxy contract or not

Modify Fees BuyThis is to check whether the owner can modify buy fees/tax

Can Take Back OwnershipThis is to check whether the contract owner can take back his ownership or not

HoneypotThis is to check whether the contract can trade or not (honeypot)

BlacklistThis is to check whether the contract can blacklist address or not

Notes:

Tax / Fees Information

Buy Tax Information

Sell Tax Information

Transfer Tax Information

Manual Audit

Minor- Could be fixed, will not bring problems.

1. Potential use of block.timestamp as source of randomness

Based on our analysis, [CO2DAOToken.delegateBySig(address,uint256,uint256,uint8,bytes32,bytes32)](CO2.sol#L1107-L1146) uses timestamp for comparisons Dangerous comparisons: - [require(bool,string)(block.timestamp <= expiry,CO2::delegateBySig: signature expired)](CO2.sol#L1144)

Section that explains how to fix existing risks

Section that explains the lines of code that contain risks

Audit Information

CO2DAO Token

Contract Name

Compiler

Language

License

Audit Request

Audit Onboard

Revision At

Release At

Issue Information

Issue Tags

Contract Detail

Contract Inheritance

Address Indexing

Dex Information

Pair List

Website Information

SSL Status

Website Domain

Web Status

SSL Provider

Speed Information

Domain Checker

Token Holder & Lp Information

BlockSAFU Automatic Vulnerability Scan

Function Summary

Report By Investor

Comment

Disclaimer

Minor
- Could be fixed, will not bring problems.