Tales of Chain is a play-to-earn card game where players fight in epic battles using specially designed cards of monsters and artifacts. Tales of Chain is based on the NFT token ecosystem, which is part of the blockchain infrastructure - Binance Smart Chain (BSC).
Tales of Chain team consists of game developers, crypto enthusiasts, and experienced designers, who came together to create their brainchild - a unique card game inspired by the Blizzard universe.
The main goal of a development team was to create a fully viable ecosystem based on the token utility. TALE token is the native Tales of Chain token that is designed to be the in-game currency of:
Purchase and upgrade of NFT cards/packs
Rewards - earning rewards by playing the game
Access to tournaments
Vote in-game governance decisions - suggesting, voting, taking part in game development
Staking and holding
The game introduces a play-to-earn (P2E) model to players so that they are able:
To receive substantial rewards by participating and winning in tournaments, PvP, and PvE battles
To earn by using the game’s native marketplace for trading options
To earn TALE tokens and different scarcity NFT cards by using staking options
To get rewards for holding NFTs in the game wallet
To earn tokens by leasing cards to other players
Unable to find manual contract audit (e.g. Certik, PeckShield, Solidity...)
TaleToken.constructor(address,uint256,address,uint256,address,uint256,address,uint256,address,uint256) (#1025-1043) uses literals with too many digits:
- _mint(address(this),2000000000 * 10 ** decimals()) (#1030)
Use: Ether suffix, Time suffix, or The scientific notation
Additional information: link
ERC20Vesting._computeReleasableAmount(ERC20Vesting.VestingSchedule) (#968-981) performs a multiplication on the result of a division:
-vestedPeriods = timeFromStart.div(period) (#975)
-vestedSeconds = vestedPeriods.mul(period) (#976)
Consider ordering multiplication before division.
Additional information: link
ERC20Vesting.getVestingByAddress(address) (#889-893) uses timestamp for comparisons
Dangerous comparisons:
- require(bool,string)(vestingSchedule.initialized,TokenVesting: no vesting schedule for this address) (#891)
ERC20Vesting.release() (#906-916) uses timestamp for comparisons
Dangerous comparisons:
- require(bool,string)(vestingSchedule.initialized,TokenVesting: no vesting schedule for current sender) (#909)
- require(bool,string)(vestedAmount > 0,TokenVesting: cannot release tokens, no vested tokens) (#911)
ERC20Vesting.computeReleasableAmount(address) (#922-927) uses timestamp for comparisons
Dangerous comparisons:
- require(bool,string)(vestingSchedule.start < block.timestamp,TokenVesting: this vetsing has not started yet) (#925)
ERC20Vesting._createVestingSchedule(address,uint256,uint256,uint256,uint256) (#937-962) uses timestamp for comparisons
Dangerous comparisons:
- require(bool,string)(balanceOf(address(this)) >= amount,TokenVesting: cannot create vesting schedule because not sufficient tokens) (#944-946)
- require(bool,string)(vestingSchedulesTotalAmount.add(amount) <= totalSupply(),TokenVesting: not enough free tokens) (#950)
ERC20Vesting._computeReleasableAmount(ERC20Vesting.VestingSchedule) (#968-981) uses timestamp for comparisons
Dangerous comparisons:
- currentTime >= vestingSchedule.start.add(vestingSchedule.duration) (#970)
Avoid relying on block.timestamp.
Additional information: link
Different versions of Solidity is used:
- Version used: ['0.8.0', '^0.8.0']
- ^0.8.0 (#7)
- ^0.8.0 (#92)
- ^0.8.0 (#122)
- ^0.8.0 (#352)
- ^0.8.0 (#379)
- ^0.8.0 (#737)
- ^0.8.0 (#782)
- 0.8.0 (#858)
- 0.8.0 (#986)
Use one Solidity version.
Additional information: link
Context._msgData() (#369-371) is never used and should be removed
SafeMath.div(uint256,uint256,string) (#309-318) is never used and should be removed
SafeMath.mod(uint256,uint256) (#269-271) is never used and should be removed
SafeMath.mod(uint256,uint256,string) (#335-344) is never used and should be removed
SafeMath.sub(uint256,uint256,string) (#286-295) is never used and should be removed
SafeMath.tryAdd(uint256,uint256) (#140-146) is never used and should be removed
SafeMath.tryDiv(uint256,uint256) (#182-187) is never used and should be removed
SafeMath.tryMod(uint256,uint256) (#194-199) is never used and should be removed
SafeMath.tryMul(uint256,uint256) (#165-175) is never used and should be removed
SafeMath.trySub(uint256,uint256) (#153-158) is never used and should be removed
Remove unused functions.
Additional information: link
Pragma version^0.8.0 (#7) allows old versions
Pragma version^0.8.0 (#92) allows old versions
Pragma version^0.8.0 (#122) allows old versions
Pragma version^0.8.0 (#352) allows old versions
Pragma version^0.8.0 (#379) allows old versions
Pragma version^0.8.0 (#737) allows old versions
Pragma version^0.8.0 (#782) allows old versions
Pragma version0.8.0 (#858) allows old versions
Pragma version0.8.0 (#986) allows old versions
solc-0.8.0 is not recommended for deployment
Deploy with any of the following Solidity versions: 0.5.16 - 0.5.17, 0.6.11 - 0.6.12, 0.7.5 - 0.7.6 Use a simple pragma version that allows any of these versions. Consider using the latest version of Solidity for testing.
Additional information: link
TaleToken.ecosystemVestingDuration (#1005) should be constant
TaleToken.ecosystemVestingStart (#1004) should be constant
TaleToken.exchangeFeeVestingDuration (#1011) should be constant
TaleToken.exchangeFeeVestingStart (#1010) should be constant
TaleToken.marketingVestingDuration (#1008) should be constant
TaleToken.marketingVestingStart (#1007) should be constant
TaleToken.privateSaleVestingDuration (#999) should be constant
TaleToken.privateSaleVestingStart (#998) should be constant
TaleToken.teamAndAdvisorVestingDuration (#1002) should be constant
TaleToken.teamAndAdvisorVestingStart (#1001) should be constant
TaleToken.vestingPeriod (#996) should be constant
Add the constant attributes to state variables that never change.
Additional information: link
name() should be declared external:
- ERC20.name() (#436-438)
symbol() should be declared external:
- ERC20.symbol() (#444-446)
transfer(address,uint256) should be declared external:
- ERC20.transfer(address,uint256) (#487-490)
approve(address,uint256) should be declared external:
- ERC20.approve(address,uint256) (#506-509)
transferFrom(address,address,uint256) should be declared external:
- ERC20.transferFrom(address,address,uint256) (#524-538)
increaseAllowance(address,uint256) should be declared external:
- ERC20.increaseAllowance(address,uint256) (#552-555)
decreaseAllowance(address,uint256) should be declared external:
- ERC20.decreaseAllowance(address,uint256) (#571-579)
burn(uint256) should be declared external:
- ERC20Burnable.burn(uint256) (#752-754)
burnFrom(address,uint256) should be declared external:
- ERC20Burnable.burnFrom(address,uint256) (#767-774)
renounceOwnership() should be declared external:
- Ownable.renounceOwnership() (#831-833)
transferOwnership(address) should be declared external:
- Ownable.transferOwnership(address) (#839-842)
release() should be declared external:
- ERC20Vesting.release() (#906-916)
computeReleasableAmount(address) should be declared external:
- ERC20Vesting.computeReleasableAmount(address) (#922-927)
Use the external attribute for functions never called from the contract.
Additional information: link
BscScan page for the token does not contain additional info: website, socials, description, etc.
Additional information: link
Unable to find token contract audit
Unable to verify token contract address on the website
Unable to find audit link on the website
Unable to find token on CoinHunt
Additional information: link
Unable to find code repository for the project
Young tokens have high risks of price dump / death
Young tokens have high risks of scam / price dump / death
Young tokens have high risks of price dump / death
Young tokens have high risks of price dump / death
Young tokens have high risks of price dump / death
Token has relatively low CoinGecko rank
Token has relatively low CoinMarketCap rank
Unable to find Youtube account