Since the days of the Splintering, the face of the world has been shaped by blood and power. As factions battle for control, primal energies are harnessed and unleashed.
Tired of card games that require a huge investment in time to play a single session? The rapid battles in Splinterlands are fast and furious, each game only taking a few minutes.
Play, Trade, and Earn anywhere at anytime. Splinterlands is available on both desktop and mobile devices.
SPS._writeCheckpoint(address,uint32,uint96,uint96) (#321-332) uses a dangerous strict equality:
- nCheckpoints > 0 && checkpoints[delegatee][nCheckpoints - 1].fromBlock == blockNumber (#324)
Don't use strict equality to determine if an account has enough Ether or tokens.
Additional information: link
SPS.setAdmin(address).newAdmin (#365) lacks a zero-check on :
- admin = newAdmin (#367)
SPS.setMinter(address).newMinter (#374) lacks a zero-check on :
- minter = newMinter (#376)
SPS.constructor(address,address,address).adminAddress (#105) lacks a zero-check on :
- admin = adminAddress (#106)
SPS.constructor(address,address,address).minterAddress (#105) lacks a zero-check on :
- minter = minterAddress (#107)
Check that the address is not zero.
Additional information: link
SPS.delegateBySig(address,uint256,uint256,uint8,bytes32,bytes32) (#205-214) uses timestamp for comparisons
Dangerous comparisons:
- require(bool,string)(now <= expiry,SPS::delegateBySig: signature expired) (#212)
Avoid relying on block.timestamp.
Additional information: link
SPS.getChainId() (#355-359) uses assembly
- INLINE ASM (#357)
Do not use evm assembly.
Additional information: link
delegate(address) should be declared external:
- SPS.delegate(address) (#192-194)
getPriorVotes(address,uint256) should be declared external:
- SPS.getPriorVotes(address,uint256) (#234-268)
delegateBySig(address,uint256,uint256,uint8,bytes32,bytes32) should be declared external:
- SPS.delegateBySig(address,uint256,uint256,uint8,bytes32,bytes32) (#205-214)
Use the external attribute for functions never called from the contract.
Additional information: link
BscScan page for the token does not contain additional info: website, socials, description, etc.
Additional information: link
Unable to verify token contract address on the website
Unable to find audit link on the website
Unable to find whitepaper link on the website
Twitter account link seems to be invalid
Unable to find Youtube account