World4 (W4) security report
Radar by SecureChain.ai AI-scanned World4 on Ethereum. The verified source shows a fixed-supply ERC-20 without visible owner minting, blacklist, pause, fee, or upgrade controls. A medium-severity risk remains because every non-mint transfer synchronously calls an immutable external distributor that can revert and block transfers or introduce callback complexity.
The verified source does not show an obvious owner-controlled mint, blacklist, fee, pause, or upgrade path. However, every non-mint transfer makes an external call to the constructor-selected distributor, which can introduce transfer denial-of-service and callback-related execution risk if that distributor is faulty, malicious, or incompatible.
Trust score: 78/100. Source verified: Yes. Chain: ethereum. Contract: 0x77f414bea3923b87efafe707a753587606f93b01.
This report was last modified on 2026-10-10 and contains 1 material finding.
medium finding: External distributor callback can block or complicate every token transfer
The token invokes an arbitrary external distributor contract after every non-mint transfer. Because the call is not wrapped in try/catch, any revert from the distributor reverts the entire token transfer. The callback also creates a reentrancy and gas-dependency boundary inside standard ERC-20 operations. The distributor is immutable after deployment, but its address is selected by the factory during construction and is not validated by LaunchToken.
Evidence: In LaunchToken._update(), after super._update(from, to, value), the code executes IHolderDistributor(distributor).onTransfer(from, to, value, balanceOf(from), balanceOf(to)) whenever from != address(0) and distributor != address(0). The interface defines onTransfer as an external function. There is no try/catch, code-size check, or nonReentrant protection in LaunchToken. The constructor assigns distributor = distributor_.
Recommendation: Use a narrowly reviewed and validated distributor implementation, or remove the synchronous external callback from the ERC-20 transfer path. If the callback is required, assess deliberate fail-open versus fail-closed behavior, constrain reentrancy, document gas requirements, and test behavior when the distributor reverts or is unavailable.