Cronical - Smart Contract Audit Report

Summary

Cronical is building a new decentralized trading platform that is used to exchange cryptocurrencies.

For this audit, we reviewed the CronicalRouter contract at 0x03c9c90fAD1c2b725eE5012642db8d68F58ECE11 and the CronicalFactory contract at 0xb1f74F906B0716D829c1f6FCDAa64fD8976dB6CB on the Cronos Block Chain.

Notes on the Contracts:
CronicalERC20 Contract:
The CronicalERC20 contract implements the ERC20 standard for use as an LP token.
This contract utilizes a 'permit' mechanism which allows the owner of the $CRON-LP tokens to sign a transaction that enables another user to withdraw tokens and send it to the recipient. The recipient, then submits the permit on behalf of the owner.
CronicalFactory Contract:
The CronicalFactory contract is responsible for the creation of liquidity pairs for two tokens, thereby enabling trading on the platform.
When creating a new trading pair, the CronicalPair initialize() function is called which allows the factory to specify the two ERC20 tokens that this pair will exchange.
Once the pool is created, its address is stored with a double mapping that takes both token addresses as input.
CronicalPair Contract:
The CronicalPair contract is the core Cronical functionality that implements the liquidity pool that exchanges tokens.
This contract is responsible for tracking the balance of both tokens in the pair, as well as mints and burns of the LP token.
CronicalRouter Contract:
The CronicalRouter contract is used to interact with liquidity pools that are created via the CronicalFactory contract.
CronicalRouter routes orders to the user-determined pair contract to swap assets.
This contract performs requirement checks needed for swapping tokens, adding liquidity, and removing liquidity.
Utilization of SafeMath to prevent overflow.
Utilization of lock functionality to prevent reentrancy where appropriate.
Audit Findings Summary
No external threats were identified.
Well designed architecture allowing for no centralization.
As with any presale, ensure trust in the team prior to investing.
Date: November 15th, 2021.

Audit Results

Vulnerability Category	Notes	Result
Arbitrary Storage Write	N/A	PASS
Arbitrary Jump	N/A	PASS
Delegate Call to Untrusted Contract	N/A	PASS
Dependence on Predictable Variables	N/A	PASS
Deprecated Opcodes	N/A	PASS
Ether Thief	N/A	PASS
Exceptions	N/A	PASS
External Calls	N/A	PASS
Flash Loans	N/A	PASS
Integer Over/Underflow	N/A	PASS
Multiple Sends	N/A	PASS
Oracles	N/A	PASS
Suicide	N/A	PASS
State Change External Calls	N/A	PASS
Unchecked Retval	N/A	PASS
User Supplied Assertion	N/A	PASS
Critical Solidity Compiler	N/A	PASS
Overall Contract Safety		PASS

CronicalFactory Contract

Cronical Graph

Cronical


 ($) = payable function
 # = non-constant function

 + [Int] ICronicalFactory 
    - [Ext] feeTo
    - [Ext] feeToSetter
    - [Ext] getPair
    - [Ext] allPairs
    - [Ext] allPairsLength
    - [Ext] createPair #
    - [Ext] setFeeTo #
    - [Ext] setFeeToSetter #

 + [Int] ICronicalPair 
    - [Ext] name
    - [Ext] symbol
    - [Ext] decimals
    - [Ext] totalSupply
    - [Ext] balanceOf
    - [Ext] allowance
    - [Ext] approve #
    - [Ext] transfer #
    - [Ext] transferFrom #
    - [Ext] DOMAIN_SEPARATOR
    - [Ext] PERMIT_TYPEHASH
    - [Ext] nonces
    - [Ext] permit #
    - [Ext] MINIMUM_LIQUIDITY
    - [Ext] factory
    - [Ext] token0
    - [Ext] token1
    - [Ext] getReserves
    - [Ext] price0CumulativeLast
    - [Ext] price1CumulativeLast
    - [Ext] kLast
    - [Ext] mint #
    - [Ext] burn #
    - [Ext] swap #
    - [Ext] skim #
    - [Ext] sync #
    - [Ext] initialize #

 + [Int] ICronicalERC20 
    - [Ext] name
    - [Ext] symbol
    - [Ext] decimals
    - [Ext] totalSupply
    - [Ext] balanceOf
    - [Ext] allowance
    - [Ext] approve #
    - [Ext] transfer #
    - [Ext] transferFrom #
    - [Ext] DOMAIN_SEPARATOR
    - [Ext] PERMIT_TYPEHASH
    - [Ext] nonces
    - [Ext] permit #

 + [Lib] SafeMath 
    - [Int] add
    - [Int] sub
    - [Int] mul

 +  CronicalERC20 (ICronicalERC20)
    - [Pub] Constructor #
    - [Int] _mint #
    - [Int] _burn #
    - [Prv] _approve #
    - [Prv] _transfer #
    - [Ext] approve #
    - [Ext] transfer #
    - [Ext] transferFrom #
    - [Ext] permit #

 + [Lib] Math 
    - [Int] min
    - [Int] sqrt

 + [Lib] UQ112x112 
    - [Int] encode
    - [Int] uqdiv

 + [Int] IERC20 
    - [Ext] name
    - [Ext] symbol
    - [Ext] decimals
    - [Ext] totalSupply
    - [Ext] balanceOf
    - [Ext] allowance
    - [Ext] approve #
    - [Ext] transfer #
    - [Ext] transferFrom #

 + [Int] ICronicalCallee 
    - [Ext] cronicalCall #

 +  CronicalPair (ICronicalPair, CronicalERC20)
    - [Pub] getReserves
    - [Prv] _safeTransfer #
    - [Pub] Constructor #
    - [Ext] initialize #
    - [Prv] _update #
    - [Prv] _mintFee #
    - [Ext] mint #
       - modifiers: lock
    - [Ext] burn #
       - modifiers: lock
    - [Ext] swap #
       - modifiers: lock
    - [Ext] skim #
       - modifiers: lock
    - [Ext] sync #
       - modifiers: lock

 +  CronicalFactory (ICronicalFactory)
    - [Pub] Constructor #
    - [Ext] allPairsLength
    - [Ext] createPair #
    - [Ext] setFeeTo #
    - [Ext] setFeeToSetter #

CronicalRouter Contract