Radar by SecureChain AI

Crypto World Computer (CWC) security report

Radar by SecureChain AI scanned the verified Crypto World Computer contract on Ethereum. The main finding is a medium-severity immutable distributor callback that can block transfers if the external hook reverts.

The main identified risk is the immutable external distributor callback in _update. If the configured distributor reverts, runs out of gas, or intentionally rejects transfers, ordinary token transfers and sells can fail. No direct owner-controlled mint, fee, blacklist, withdrawal, or upgrade mechanism was found in the supplied source.

Trust score: 68/100. Source verified: Yes. Chain: ethereum. Contract: 0x6dbc7752c7a81cf6e293130e8610641b11a3a7bd.

This report was last modified on 2026-10-08 and contains 1 material finding.

medium finding: Immutable external transfer hook can block token transfers

Every non-mint transfer invokes the configured distributor contract after the ERC-20 balances are updated. Because the call is not wrapped in a try/catch, any revert from that external contract reverts the entire token transfer. The distributor address is immutable and selected through the constructor, so the token has no recovery or replacement mechanism if the dependency becomes unavailable or restrictive.

Evidence: LaunchToken._update calls IHolderDistributor(distributor).onTransfer(from, to, value, balanceOf(from), balanceOf(to)) whenever from != address(0) and distributor != address(0). The call is synchronous and unchecked for failure. distributor is assigned from the constructor parameter distributor_ and declared immutable. The callback therefore executes on transfer and transferFrom operations, while minting is the only path explicitly excluded.

Recommendation: Verify the deployed distributor implementation and its transfer policy before relying on the token. Consider removing the mandatory callback, adding a controlled and transparent ability to disable or replace a failed hook, or isolating accounting so distributor failures cannot revert ERC-20 transfers. Test transfer, sell, burn, and transferFrom behavior with the exact configured distributor.