<username>{{ maskedUsername }}</username><space /><text>just voted for</text><space /><projectButton />

<username>{{ maskedUsername }}</username><space /><text>just voted for</text><space /><projectLogo /><space /><projectName>{{ projectName }}</projectName>

Bug Bounty rewards are grouped by severity and the impact of the vulnerability. Examples and descriptions of the type of vulnerabilities that correspond to each severity level can be found below. The payout amount has a 5 tier structure with separate scalesfor website/apps and smart contracts.

Description of vulnerability and your proof of concept or validation steps

Name

Please input a title

Short description of the vulnerability and the affected asset.

The core team is situated in country(ies) that received low aggregated ratings in terms of international judicial cooperation, criminal justice system, anti-money laundering, and corruption. This contextual data suggests an increased difficulty and complexity in preventing and mitigating fraud.

The core team is situated in country(ies) that received medium aggregated ratings in terms of international judicial cooperation, criminal justice system, anti-money laundering, and corruption. This contextual data suggests a medium level of geographic accountability, thus reducing and mitigating the risk of fraud.

The core team is situated in country(ies) that received the best aggregated ratings in terms of international judicial cooperation, criminal justice system, anti-money laundering, and corruption. This contextual data suggests the highest level of geographic accountability, thus maximizing the risk reduction and mitigation.

Vulnerability Title

transfer

transferFrom

totalSupply

balanceOf

allowance

approve

RegentCoin


In the contract `RegentCoin` the role `_owner` has authority over the functions shown in the diagram below.
Any compromise to the `_owner` account may allow the hacker to take advantage of this authority.
![](https://accelerator-tasks-prod.s3.amazonaws.com/e89c20817dce440cb19a3d911e341968/diagrams/centralization_RegentCoin-RegentCoin-_owner.svg)

Centralization Risks in RegentCoin.sol

Variable `_rOwned[account]` is not updated in the function `includeInReward()`, which will make the accounts included siphon off the tokens out of the balances of all token holders. 
The Rate was higher at the moment of the `excludeFromReward(account)` call, so the `_rOwned[account] / _tOwned[account]` ratio is bigger than expected for accounts included in the reward.

Variable `_rOwned[account]` Not Updated in Function `includeInReward()` 

Users seem to be able to use `swaptransfer` to avoid transfer fee, which is pretty strange. Since it does not impose ant restriction on when and which user can use this, user could choose using `swaptransfer` instead of `transfer` forever, thus avoiding any potential fees, violating the tokenomics of the project.

Potential abuse of function `swaptransfer`

The contract is serving as the underlying entity to interact with one or more third party protocols. The scope of the audit treats third party entities as black boxes and assume their functional correctness. However, in the real world, third parties can be compromised and this may lead to lost or stolen assets. In addition, upgrades of third parties can possibly create severe impacts, such as increasing fees of third parties, migrating to new LP pools, etc.

```solidity=142
    IRouter public router;
```
- The contract `RegentCoin` interacts with third party contract with `IRouter` interface via `router`.



Third Party Dependency

Performing integer division before multiplication truncates the low bits, losing the precision of calculation.

```solidity=681
        uint256 unitBalance = deltaBalance / (denominator - temp.liquidity);
```

```solidity=682
        uint256 bnbToAddLiquidityWith = unitBalance * temp.liquidity;
```



Divide Before Multiply

If the user has `maxBuyLimit` amount of tokens at the beginning, he will have more tokens due to the deflationary reward. If he has more than `maxBuyLimit` + `maxSellLimit` amount of tokens, his tokens will be stuck. We understand that the possibility of this issue happening is not that big, but it should still be considered as a risk.

User token could be potentially stuck

Regent Coin - Audit

RegentCoin.sol

Top 10% Governance Score

Regent Coin is designed for the convenience, cost effective solution and efficient time usage among the peer to peer community. Regent Coin is A UTILITY TOKEN, enables People to make their utility bill payments using the pay app.

Leaderboards

Due Diligence Tools

Resources

KYC Status