complete
bytecode
findings
The runtime bytecode is an old Ownable/ERC20-like token, not a proxy (`is_proxy=false`) and with no `DELEGATECALL`/`SELFDESTRUCT`. The only `CALL` sink at `pc:0x357` sits inside the dynamic-string return helper and is mo...
Top findings
-
high
Owner-controlled blacklist/freeze path can block selected holders from transferring
-
medium
Privileged mint function can inflate balances and total supply without any cap visible in bytecode
-
low
Allowance accounting appears non-standard: `allowance()` returns the approved cap, while `transferFrom` tracks spending in a separate mapping