complete
bytecode
findings
BYTECODE_BUNDLE.json describes a non-standard ERC20-like contract with owner-gated parameter setters, allowance/balance mappings, and a token-for-ETH payout path. I found one concrete accounting bug around an unchecked E...
Top findings
-
medium
Unchecked ETH payout can debit seller balances without confirming payment
-
medium
Standard ERC20 selector 0x23b872dd does not implement transferFrom semantics
-
low
`transferOwnership` selector does not update the owner slot used by auth checks