Heroes and Empires
Heroes & Empires, developed by CryptoViet Labs and IMBA Studio, is a strategy RPG game connected with blockchain technology. Heroes & EmpiresToken (HE) is the governance token. Each hero and gear in Heroes & Empires is a representation of a unique NFT following the BEP-721 standard. All these smart contracts used in the game are issued on Binance Smart Chain. HE holders can earn HE tokens through playing games, taking part in events, and key governance votes. Players can also earn HE tokens by participating in in-game activities. According to the roadmap of Heroes & Empires, in December 2021, staking functions for HE token will be released. To ensure the safety of every customers’ assets, Heroes & Empireshave requested a security assessment on the related file Stake.sol.
Audit Projects > Heroes and Empires
Audit Report - Heroes and Empires
Type of audit
Smart Contract Audit
Language
Solidity
Testing method
whitebox
Request date
2021-12-23T17:00:00.000Z
Revision date
2022-01-04T17:00:00.000Z
Status
completed
Target distribution
About Heroes & Empires LLC
CRYPTOVIET is a place to share knowledge and experience on leading cryptocurrency investment with a lot of useful information. We strongly believe in blockchain technology and the cryptocurrency market. In the future, cryptocurrencies will have useful applications in life, bring new breakthroughs, and create a more comfortable life. And we want to pass on that belief to you.
Type
crypto_token
Platform
N/A
Owner
Heroes & Empires LLC
Industry
blockchain
Assessment Checklist
Application Deployment and Configuration
Ensure server configuration, network infrastructure, web applications, files are handled correctly and securely.
User Identity Management
The application manages user identities well and does not cause problems in all use cases.
Authentication mechanism
Make sure the application's authentication mechanism has a reasonable logic, preventing the possibility of authentication bypass.
Decentralization mechanism
Check for privilege escalation, decentralization, or path traversal vulnerabilities.
Session management mechanism
Check for errors related to cookies and sessions.
Input data validation mechanism
Check for Reflected XSS, Stored XSS, SQL injection and other injection errors.
Error control ability
Ensure errors are handled properly and do not expose sensitive information through error notifications.
Encode
Test the application's encryption algorithms.
Business logic of the application
Check application integrity, conflict, and responsiveness.
Client-side issues
Check for security flaws that can be exploited from the client side.
About projects.smart-contract-audit Service
projects.about_smart-contract-audit