ERC4626 (OpenZeppelin)
Audit Snapshot
- Status: ✅ pass
- Source type:
npm - Source path:
third_party/famous-contracts/sources/@openzeppelin/contracts/token/ERC20/extensions/ERC4626.sol - Primary issue: No primary issue recorded.
- Audit corpus size: 98 contracts
Diagnostics
Total diagnostics captured: 720
By Severity
| Severity | Count |
|---|---|
| warning | 718 |
| error | 2 |
Most Common Codes
| Code | Count | Example |
|---|---|---|
| W200 | 678 | function 'safeTransfer' in 'ERC20' overrides 'Context::safeTransfer' which is not marked 'virtual' |
| W121 | 30 | duplicate constant state variable 'GENERIC' detected while merging libraries |
| MANIFEST_WILDCARD_CONTRACT | 3 | contract 'Context' requires wildcard contract manifest permissions (contract='*') due to dynamic contract calls. This is riskier than fixed contract hashes; use --deny-wildcard-contracts to make this a hard error. |
| RAW | 2 | [info][NEP-17] NEP-17 transfer method has 2 parameter(s), spec expects 4. See STANDARDS_MAPPING.md for details. |
| W101 | 2 | function 'transfer' has 2 parameters (ERC-20 pattern). NEP-17 requires 4 parameters: transfer(from, to, amount, data). The from address is verified via Runtime.checkWitness() and data (type Any) is forwarded to the recipient's onNEP17Payment callback. |
| W103 | 2 | ERC-20 method(s) [approve, allowance, transferfrom] detected. These are not part of the NEP-17 spec; Neo uses Runtime.checkWitness() for authorization instead of the approve/allowance pattern. You may keep them as extensions, but they will not contribute to NEP-17 standard detection. |
| W113 | 2 | Contract has transfer function but no onNEP17Payment callback. Other contracts cannot send tokens to this contract. |
| W109 | 1 | ERC-4626 tokenized vault pattern detected. The vault logic compiles correctly, but replace ERC-20 token interactions with NEP-17 equivalents. |
Source diagnostic payload: docs/data/famous-contracts-audit-results.json.
References
- Global audit report: Famous Contracts on NeoVM
- Per-contract index: Original Famous Contracts
- Upstream contract path:
third_party/famous-contracts/sources/@openzeppelin/contracts/token/ERC20/extensions/ERC4626.sol