<username>{{ maskedUsername }}</username><space /><text>just voted for</text><space /><projectButton />

<username>{{ maskedUsername }}</username><space /><text>just voted for</text><space /><projectLogo /><space /><projectName>{{ projectName }}</projectName>

Bug Bounty rewards are grouped by severity and the impact of the vulnerability. Examples and descriptions of the type of vulnerabilities that correspond to each severity level can be found below. The payout amount has a 5 tier structure with separate scalesfor website/apps and smart contracts.

Description of vulnerability and your proof of concept or validation steps

Name

Please input a title

Short description of the vulnerability and the affected asset.

The core team is situated in country(ies) that received low aggregated ratings in terms of international judicial cooperation, criminal justice system, anti-money laundering, and corruption. This contextual data suggests an increased difficulty and complexity in preventing and mitigating fraud.

The core team is situated in country(ies) that received medium aggregated ratings in terms of international judicial cooperation, criminal justice system, anti-money laundering, and corruption. This contextual data suggests a medium level of geographic accountability, thus reducing and mitigating the risk of fraud.

The core team is situated in country(ies) that received the best aggregated ratings in terms of international judicial cooperation, criminal justice system, anti-money laundering, and corruption. This contextual data suggests the highest level of geographic accountability, thus maximizing the risk reduction and mitigation.

Vulnerability Title

transfer

transferFrom

totalSupply

balanceOf

allowance

approve

ERC20

testToken

### Initial Token Distribution
All the tokens are sent to the contract deployer when deploying the contract. This is a potential centralization risk as the deployer can distribute the tokens without the consensus of the community.
```solidity
    constructor(uint256 _supply) ERC20("token", "TK") {
       
        _mint(msg.sender, _supply * 1e18);
    }
```

### Centralization Related Issues
In the contract `testToken`, the role `_owner` has authority over the functions shown in the diagram below.
Any compromise to the `_owner` account may allow the hacker to take advantage of this authority and withdraw the locked tokens.
![](https://accelerator-tasks-prod.s3.amazonaws.com/b92bc4207fa64bc9ba3ef57b11e163fd/diagrams/centralization_testToken-testToken-_owner.svg)

Centralization Related Risks

The return value of the transfer()/transferFrom() call is not checked.

```solidity=651
        TKN.transfer(owner(), balance);
```



Unchecked ERC-20 `transfer()`/`transferFrom()` Call

Bob Ecosystem (Audit 2)

testToken.sol

Unlocked Compiler Version

Too Many Digits

Initial Token Distribution

Bob eco

BOBC.sol

Verified Contract

Top 10% Security Score

Top 10% Code Security Score

Top 10% Fundamental Score

Formal Verification

Bob Eco's mission has always been to contribute towards eradicating poverty in developing countries. We do this by using our platform to finance two-wheeler enterprises that provide jobs and ultimately improve the socio-economic status of people in these countries.

Leaderboards

Due Diligence Tools

Resources

KYC Status