<username>{{ maskedUsername }}</username><space /><text>just voted for</text><space /><projectButton />

<username>{{ maskedUsername }}</username><space /><text>just voted for</text><space /><projectLogo /><space /><projectName>{{ projectName }}</projectName>

Bug Bounty rewards are grouped by severity and the impact of the vulnerability. Examples and descriptions of the type of vulnerabilities that correspond to each severity level can be found below. The payout amount has a 5 tier structure with separate scalesfor website/apps and smart contracts.

Description of vulnerability and your proof of concept or validation steps

Name

Please input a title

Short description of the vulnerability and the affected asset.

The core team is situated in country(ies) that received low aggregated ratings in terms of international judicial cooperation, criminal justice system, anti-money laundering, and corruption. This contextual data suggests an increased difficulty and complexity in preventing and mitigating fraud.

The core team is situated in country(ies) that received medium aggregated ratings in terms of international judicial cooperation, criminal justice system, anti-money laundering, and corruption. This contextual data suggests a medium level of geographic accountability, thus reducing and mitigating the risk of fraud.

The core team is situated in country(ies) that received the best aggregated ratings in terms of international judicial cooperation, criminal justice system, anti-money laundering, and corruption. This contextual data suggests the highest level of geographic accountability, thus maximizing the risk reduction and mitigation.

Vulnerability Title

transfer

transferFrom

totalSupply

balanceOf

allowance

approve

ERC20

BigFloppaToken

All **FLOP** tokens are sent to the contract deployer when deploying the contract. This is a potential centralization risk as the deployer can distribute **FLOP** tokens without the consensus of the community.

Initial Token Distribution

In the contract `BigFloppaToken` the role `_owner` has authority over the functions shown in the diagram and list below.
  
Any compromise to the `_owner` account may allow the hacker to take advantage of this authority and control the token transfers.
![](https://accelerator-tasks-prod.s3.amazonaws.com/2a9cdbb8f6e746fcb770ecff97180fd3/diagrams/centralization_BigFloppaToken-BigFloppaToken-_owner.svg)

- `blacklist()`: Owner can blacklist addresses from transferring tokens.
- `setRules()`: Owner can set configurations of the contract.

In the contract `Ownable` the role `_owner` has authority over the functions shown in the diagram and list below.

Any compromise to the `_owner` account may allow the hacker to take advantage of this authority and transfer ownership to other addresses.
![](https://accelerator-tasks-prod.s3.amazonaws.com/2a9cdbb8f6e746fcb770ecff97180fd3/diagrams/centralization_BigFloppaToken-Ownable-_owner.svg)

- `transferOwnership()`: Owner can transfer contract ownership.
- `renounceOwnership()`: Owner can give up contract ownership.

Centralization Risks in BigFloppaToken.sol

The following areas are missing checks on input parameters to ensure that the inputs are appropriate.

### blacklist() 
* `_isBlacklisting` - No checks that the value contained in `blacklists[_address]` is not equal to the value of `_isBlacklisting` before setting a new value to `blacklists[_address]`

### setRule()
* `_minHoldingAmount` - No checks to ensure that `_minHoldingAmount` is less than `_maxHoldingAmount`

Missing checks for input parameters

The condition `super.balanceOf(to) + amount >= minHoldingAmount` in the `_beforeTokenTransfer` function enforces a minimum holding requirement for any address receiving tokens from the Uniswap pair.

From the way this condition is written, it would require that the balance of tokens in the recipient's (`to`) address after the transfer is at least the `minHoldingAmount`. This means that a recipient must either already have enough tokens to meet the `minHoldingAmount` or the amount they are receiving should be enough to take their balance to the `minHoldingAmount` or above.


Minimum Holding Rules for BigFloppaToken.sol

Floppa

BigFloppaToken.sol

Floppa's goal is to build a strong community foundation that will support our token for years to come. We're confident that $FLOP is the top cat meme coin out there, and we're committed to making sure that our investors and supporters reap the benefits.

Leaderboards

Due Diligence Tools

Resources

KYC Status

Bug Bounty Program