Horizon Protocol is a new DeFi platform that facilitates the on-chain trading of synthetic assets that represent the real economy. Horizon Protocol seeks to provide exposure to real-world assets risk/return profiles via smart contracts on the blockchain. Horizon Protocol will bring interoperability, scalability and a whole new array of tradable, real-world derivative products to the DeFi ecosystem. Horizon Protocol’s commitment to the Binance ecosystem and native implementation on Binance Smart Chain (BSC) offers users the speed and dependability that is currently lacking on the Ethereum blockchain.
The Horizon Protocol token (HZN) drives the economic incentives for participants in the Horizon Protocol. HZN serves as collateral as part of the synthesis of tradable synthetic assets (zAssets), drives the reward system, as well as eventually facilitates a DAO that will govern the overall protocol and future development. Horizon Protocol is able to build upon the progress pioneered by others, while focusing on solving challenges related to scalability and affordability.
Unable to find manual contract audit (e.g. Certik, PeckShield, Solidity...)
ProxyERC20.transfer(address,uint256) (#338-347) ignores return value by IERC20(address(target)).transfer(to,value) (#343)
ProxyERC20.transferFrom(address,address,uint256) (#375-388) ignores return value by IERC20(address(target)).transferFrom(from,to,value) (#384)
Use SafeERC20, or ensure that the transfer/transferFrom return value is checked.
Additional information: link
Contract locking ether found:
Contract ProxyERC20 (#282-390) has payable functions:
- Proxy.fallback() (#216-233)
But does not have a function to withdraw the ether
Remove the payable attribute or add a withdraw function.
Additional information: link
ProxyERC20.allowance(address,address).owner (#328) shadows:
- Owned.owner (#50) (state variable)
Rename the local variables that shadow another component.
Additional information: link
Owned.nominateNewOwner(address)._owner (#59) lacks a zero-check on :
- nominatedOwner = _owner (#60)
Proxyable.setMessageSender(address).sender (#121) lacks a zero-check on :
- messageSender = sender (#122)
Check that the address is not zero.
Additional information: link
Proxy._emit(bytes,uint256,bytes32,bytes32,bytes32,bytes32) (#179-213) uses assembly
- INLINE ASM (#190-212)
Proxy.fallback() (#216-233) uses assembly
- INLINE ASM (#220-232)
Do not use evm assembly.
Additional information: link
Proxyable._optionalProxy() (#139-143) is never used and should be removed
Proxyable._optionalProxy_onlyOwner() (#151-156) is never used and should be removed
Remove unused functions.
Additional information: link
ProxyERC20.approve(address,uint256) (#358-367) ignores return value by IERC20(address(target)).approve(spender,value) (#363)
Ensure that all the return values of the function calls are used.
Additional information: link
Parameter Owned.nominateNewOwner(address)._owner (#59) is not in mixedCase
Parameter Proxyable.setProxy(address)._proxy (#112) is not in mixedCase
Parameter Proxyable.setIntegrationProxy(address)._integrationProxy (#117) is not in mixedCase
Function Proxyable._optionalProxy_onlyOwner() (#151-156) is not in mixedCase
Modifier Proxyable.optionalProxy_onlyOwner() (#145-148) is not in mixedCase
Parameter Proxy.setTarget(Proxyable)._target (#174) is not in mixedCase
Function Proxy._emit(bytes,uint256,bytes32,bytes32,bytes32,bytes32) (#179-213) is not in mixedCase
Follow the Solidity naming convention.
Additional information: link
name() should be declared external:
- ProxyERC20.name() (#287-290)
symbol() should be declared external:
- ProxyERC20.symbol() (#292-295)
decimals() should be declared external:
- ProxyERC20.decimals() (#297-300)
totalSupply() should be declared external:
- ProxyERC20.totalSupply() (#307-310)
balanceOf(address) should be declared external:
- ProxyERC20.balanceOf(address) (#317-320)
allowance(address,address) should be declared external:
- ProxyERC20.allowance(address,address) (#328-331)
transfer(address,uint256) should be declared external:
- ProxyERC20.transfer(address,uint256) (#338-347)
approve(address,uint256) should be declared external:
- ProxyERC20.approve(address,uint256) (#358-367)
transferFrom(address,address,uint256) should be declared external:
- ProxyERC20.transferFrom(address,address,uint256) (#375-388)
Use the external attribute for functions never called from the contract.
Additional information: link
Unable to find token contract audit
Unable to find audit link on the website
Unable to find token on CoinHunt
Additional information: link
Young tokens have high risks of scam / price dump / death
Last post in Twitter was more than 30 days ago
Unable to find Youtube account
Unable to find Discord account