SUMMARY

This report has been prepared for Kunji Finance to discover issues and vulnerabilities in the source code of their token contract as well as any contract dependencies that were not part of an officially recognized library. A comprehensive examination has been performed, utilizing Static Analysis and Manual Review techniques.

The auditing process pays special attention to the following considerations:

• Testing the smart contracts against both common and uncommon attack vectors.
• Assessing the codebase to ensure compliance with current best practices and industry standards.
• Ensuring contract logic meets the specifications and intentions of the client.
• Cross-referencing contract structure and implementation against similar smart contracts produced by industry leaders.
• Thorough line-by-line manual review of the entire codebase by industry experts.

The security assessment resulted in findings that ranged from critical to informational. We recommend addressing these findings to ensure a high level of security standards and industry practices.

We suggest recommendations that could better serve the project from the security perspective:

• Enhance general coding practices for better structures of source codes.
• Add enough unit tests to cover the possible use cases.
• Provide more comments per each function for readability, especially contracts that are verified in public.
• Provide more transparency on privileged activities once the protocol is live.