CFL AuditReport InterFi

SMART CONTRACT SECURITY AUDIT OF
Crypto Fantasy League

SOCIAL @interfinetwork WEB interfi.network
Summary
Auditing Firm InterFi Network
Architecture InterFi “Echelon” Auditing Standard
Smart Contract Audit Approved By Chris | Blockchain Specialist at InterFi Network
Project Overview Approved By Albert | Marketing Specialist at InterFi Network
Platform Solidity
Mandatory Audit Check Static, Software, Auto Intelligent & Manual Analysis
Consultation Request Date November 10, 2021
Report Date November 13, 2021
Audit Summary
InterFi team has performed a line-by-line manual analysis and automated review of the smart
contract. The smart contract was analyzed mainly for common smart contract vulnerabilities,
exploits, and manipulation hacks. According to the smart contract audit:
v Crypto Fantasy League’s smart contract source code has LOW RISK SEVERITY.
v Crypto Fantasy League has PASSED the smart contract audit.
For the detailed understanding of risk severity, source code vulnerability, and functional test, kindly
refer to the audit.
✅ Verify the authenticity of this report on InterFi’s GitHub: https://github.com/interfinetwork
PAGE 2 | SMART CONTRACT SECURITY AUDIT OF CRYPTO FANTASY LEAGUE

Table Of Contents
Project Information
Overview ................................................................................................................................................................................................ 4
InterFi “Echelon” Audit Standard
Audit Scope & Methodology .................................................................................................................................................... 6
InterFi’s Risk Classification ......................................................................................................................................................... 8
Smart Contract Risk Assessment
Static Analysis .................................................................................................................................................................................... 9
Software Analysis ........................................................................................................................................................................... 13
Manual Analysis...............................................................................................................................................................................15
SWC Attacks .......................................................................................................................................................................................18
Risk Status & Radar Chart ....................................................................................................................................................... 20
Report Summary
Auditor’s Verdict .............................................................................................................................................................................. 21
Legal Advisory
Important Disclaimer ..................................................................................................................................................................22
About InterFi Network ..................................................................................................................................................................23

Project Overview
InterFi was consulted by Crypto Fantasy League to conduct the smart contract security audit of
their solidity source code.
About Crypto Fantasy League
CFL offers its users and holders of Token $CFL to earn and play same time. Instead of using
traditional technology CFL uses the blockchain and crypto as their payment options. With this CFL
is more secure and fast than any other Fantasy Sports Platform. Earn 3% reward just by holding
our token and using CFL App
Project Crypto Fantasy League
Blockchain Binance Smart Chain
Language Solidity
Contract 0x78ebC325641c9dB284Fc0E69305aFbc0C92AB475
Website https://cryptofantasyleague.app/
Telegram https://twitter.com/CFLToken
Twitter https://twitter.com/CFLToken
Public logo

Solidity Source Code On Blockchain (Verified Contract Source Code)
https://bscscan.com/address/0x78ebC325641c9dB284Fc0E69305aFbc0C92AB475#code
Contract Name: Crypto Fantasy League
Symbol: CFL
Compiler Version: v0.8.9
Optimization Enabled: Yes with 200 runs
Solidity Source Code On InterFi GitHub
https://github.com/interfinetwork/audited-codes/blob/main/CFL.sol
SHA-1 Hash
Solidity source code is audited at hash #28ccd61ccac43b4e17e2d2bc314796cc633f6232

Audit Scope & Methodology

The scope of this report is to audit the smart contract source code of Crypto Fantasy League. InterFi
has scanned the contract and reviewed the project for common vulnerabilities, exploits, hacks, and
back-doors. Below is the list of commonly known smart contract vulnerabilities, exploits, and hacks:
Category
v Re-entrancy
v Unhandled Exceptions
v Transaction Order Dependency
v Integer Overflow
Smart Contract Vulnerabilities
v Unrestricted Action
v Incorrect Inheritance Order
v Typographical Errors
v Requirement Violation
v Ownership Takeover
v Gas Limit and Loops
v Deployment Consistency
Source Code Review v Repository Consistency
v Data Consistency
v Token Supply Manipulation
v Access Control and Authorization
v Operations Trail and Event Generation
Functional Assessment v Assets Manipulation
v Liquidity Access

InterFi’s Echelon Audit Standard
The aim of InterFi’s “Echelon” standard is to analyze the smart contract and identify the
vulnerabilities and the hacks in the smart contract. Mentioned are the steps used by ECHELON-1 to
assess the smart contract:
1. Solidity smart contract source code reviewal:
v Review of the specifications, sources, and instructions provided to InterFi to make sure we
understand the size, scope, and functionality of the smart contract.
v Manual review of code, which is the process of reading source code line-byline to identify
potential vulnerabilities.
2. Static, Manual, and Software analysis:
v Test coverage analysis, which is the process of determining whether the test cases are
covering the code and how much code is exercised when we run those test cases.
v Symbolic execution, which is analysing a program to determine what inputs causes each
part of a program to execute.
3. Best practices review, which is a review of the smart contracts to improve efficiency,
effectiveness, clarify, maintainability, security, and control based on the established industry
and academic practices, recommendations, and research.
4. Specific, itemized, actionable recommendations to help you take steps to secure your smart
contracts
Automated 3P frameworks used to assess the smart contract vulnerabilities
v Slither
v Consensys MythX
v Consensys Surya
v Open Zeppelin Code Analyzer
v Solidity Code Complier

InterFi’s Risk Classification

Smart contracts are generally designed to manipulate and hold funds denominated in ETH/BNB.
This makes them very tempting attack targets, as a successful attack may allow the attacker to
directly steal funds from the contract. Below are the typical risk levels of a smart contract:
Vulnerable: A contract is vulnerable if it has been flagged by a static analysis tool as such. As we
will see later, this means that some contracts may be vulnerable because of a false-positive.
Exploitable: A contract is exploitable if it is vulnerable and the vulnerability could be exploited by an
external attacker. For example, if the “vulnerability” flagged by a tool is in a function which requires
to own the contract, it would be vulnerable but not exploitable.
Exploited: A contract is exploited if it received a transaction on the main network which triggered
one of its vulnerabilities. Therefore, a contract can be vulnerable or even exploitable without having
been exploited.
Risk
Meaning
severity
This level vulnerabilities could be exploited easily, and can lead to asset loss, data
! Critical
loss, asset manipulation, or data manipulation. They should be fixed right away.
This level vulnerabilities are hard to exploit but very important to fix, they carry an
! High
elevated risk of smart contract manipulation, which can lead to critical risk severity
This level vulnerabilities are should be fixed, as they carry an inherent risk of future
! Medium
exploits, and hacks which may or may not impact the smart contract execution.
This level vulnerabilities can be ignored. They are code style violations, and
! Low informational statements in the code. They may not affect the smart contract
execution

Smart Contract – Static Analysis

Symbol Meaning
🛑 Function can be modified
💵 Function is payable
🔒 Function is locked
🔐 Function can be accessed
❗ Important functionality
**Context** | Implementation | |||

| └ | _msgSender | Internal 🔒 | | |
| └ | _msgData | Internal 🔒 | | |
||||||
| **IERC20** | Interface | |||
| └ | totalSupply | External ❗ | |NO❗ |
| └ | decimals | External ❗ | |NO❗ |
| └ | symbol | External ❗ | |NO❗ |
| └ | name | External ❗ | |NO❗ |
| └ | getOwner | External ❗ | |NO❗ |
| └ | balanceOf | External ❗ | |NO❗ |
| └ | transfer | External ❗ | 🛑 |NO❗ |
| └ | allowance | External ❗ | |NO❗ |
| └ | approve | External ❗ | 🛑 |NO❗ |
| └ | transferFrom | External ❗ | 🛑 |NO❗ |
||||||
| **IUniswapV2Factory** | Interface | |||
| └ | feeTo | External ❗ | |NO❗ |
| └ | feeToSetter | External ❗ | |NO❗ |
| └ | getPair | External ❗ | |NO❗ |
| └ | allPairs | External ❗ | |NO❗ |
| └ | allPairsLength | External ❗ | |NO❗ |
| └ | createPair | External ❗ | 🛑 |NO❗ |
| └ | setFeeTo | External ❗ | 🛑 |NO❗ |
| └ | setFeeToSetter | External ❗ | 🛑 |NO❗ |
||||||
| **IUniswapV2Pair** | Interface | |||

| └ | balanceOf | External ❗ | |NO❗ |

| └ | approve | External ❗ | 🛑 |NO❗ |
| └ | DOMAIN_SEPARATOR | External ❗ | |NO❗ |
| └ | PERMIT_TYPEHASH | External ❗ | |NO❗ |
| └ | nonces | External ❗ | |NO❗ |
| └ | permit | External ❗ | 🛑 |NO❗ |
| └ | MINIMUM_LIQUIDITY | External ❗ | |NO❗ |
| └ | factory | External ❗ | |NO❗ |
| └ | token0 | External ❗ | |NO❗ |
| └ | token1 | External ❗ | |NO❗ |
| └ | getReserves | External ❗ | |NO❗ |
| └ | price0CumulativeLast | External ❗ | |NO❗ |
| └ | price1CumulativeLast | External ❗ | |NO❗ |
| └ | kLast | External ❗ | |NO❗ |
| └ | mint | External ❗ | 🛑 |NO❗ |
| └ | burn | External ❗ | 🛑 |NO❗ |
| └ | swap | External ❗ | 🛑 |NO❗ |
| └ | skim | External ❗ | 🛑 |NO❗ |
| └ | sync | External ❗ | 🛑 |NO❗ |
| └ | initialize | External ❗ | 🛑 |NO❗ |
||||||
| **IUniswapV2Router01** | Interface | |||
| └ | factory | External ❗ | |NO❗ |
| └ | WETH | External ❗ | |NO❗ |
| └ | addLiquidity | External ❗ | 🛑 |NO❗ |
| └ | addLiquidityETH | External ❗ | 💵 |NO❗ |
| └ | removeLiquidity | External ❗ | 🛑 |NO❗ |
| └ | removeLiquidityETH | External ❗ | 🛑 |NO❗ |
| └ | removeLiquidityWithPermit | External ❗ | 🛑 |NO❗ |
| └ | removeLiquidityETHWithPermit | External ❗ | 🛑 |NO❗ |
| └ | swapExactTokensForTokens | External ❗ | 🛑 |NO❗ |
| └ | swapTokensForExactTokens | External ❗ | 🛑 |NO❗ |
| └ | swapExactETHForTokens | External ❗ | 💵 |NO❗ |
| └ | swapTokensForExactETH | External ❗ | 🛑 |NO❗ |
| └ | swapExactTokensForETH | External ❗ | 🛑 |NO❗ |
| └ | swapETHForExactTokens | External ❗ | 💵 |NO❗ |
| └ | quote | External ❗ | |NO❗ |
| └ | getAmountOut | External ❗ | |NO❗ |
| └ | getAmountIn | External ❗ | |NO❗ |
| └ | getAmountsOut | External ❗ | |NO❗ |
| └ | getAmountsIn | External ❗ | |NO❗ |
||||||
| **IUniswapV2Router02** | Interface | IUniswapV2Router01 |||
| └ | removeLiquidityETHSupportingFeeOnTransferTokens | External ❗ | 🛑 |NO❗ |
| └ | removeLiquidityETHWithPermitSupportingFeeOnTransferTokens | External ❗ | 🛑 |NO❗ |
| └ | swapExactTokensForTokensSupportingFeeOnTransferTokens | External ❗ | 🛑 |NO❗ |
| └ | swapExactETHForTokensSupportingFeeOnTransferTokens | External ❗ | 💵 |NO❗ |

| └ | swapExactTokensForETHSupportingFeeOnTransferTokens | External ❗ | 🛑 |NO❗ |

||||||
| **AntiSnipe** | Interface | |||
| └ | checkUser | External ❗ | 🛑 |NO❗ |
| └ | setLaunch | External ❗ | 🛑 |NO❗ |
| └ | setLpPair | External ❗ | 🛑 |NO❗ |
| └ | setProtections | External ❗ | 🛑 |NO❗ |
| └ | setGasPriceLimit | External ❗ | 🛑 |NO❗ |
| └ | removeSniper | External ❗ | 🛑 |NO❗ |
| └ | getSniperAmt | External ❗ | |NO❗ |
| └ | removeBlacklisted | External ❗ | 🛑 |NO❗ |
||||||
| **Cashier** | Interface | |||
| └ | whomst | External ❗ | |NO❗ |
| └ | setReflectionCriteria | External ❗ | 🛑 |NO❗ |
| └ | tally | External ❗ | 🛑 |NO❗ |
| └ | load | External ❗ | 💵 |NO❗ |
| └ | cashout | External ❗ | 🛑 |NO❗ |
| └ | giveMeWelfarePlease | External ❗ | 🛑 |NO❗ |
| └ | getTotalDistributed | External ❗ | |NO❗ |
| └ | getShareholderInfo | External ❗ | |NO❗ |
| └ | getShareholderRealized | External ❗ | |NO❗ |
| └ | getPendingRewards | External ❗ | |NO❗ |
| └ | initialize | External ❗ | 🛑 |NO❗ |
||||||
| **CrytpoFantasyLeague** | Implementation | IERC20 |||
| └ | <Constructor> | Public ❗ | 💵 |NO❗ |
| └ | owner | Public ❗ | |NO❗ |
| └ | transferOwner | External ❗ | 🛑 | onlyOwner |
| └ | renounceOwnership | Public ❗ | 🛑 | onlyOwner |
| └ | <Receive Ether> | External ❗ | 💵 |NO❗ |
| └ | getOwner | External ❗ | |NO❗ |
| └ | balanceOf | Public ❗ | |NO❗ |
| └ | approve | Public ❗ | 🛑 |NO❗ |
| └ | approveContractContingency | Public ❗ | 🛑 | onlyOwner |
| └ | _approve | Private 🔐 | 🛑 | |
| └ | isFeeExcluded | Public ❗ | |NO❗ |
| └ | isDividendExcluded | Public ❗ | |NO❗ |
| └ | setInitializers | External ❗ | 🛑 | onlyOwner |
| └ | removeSniper | External ❗ | 🛑 | onlyOwner |
| └ | removeBlacklisted | External ❗ | 🛑 | onlyOwner |
| └ | getSniperAmt | Public ❗ | |NO❗ |
| └ | setProtectionSettings | External ❗ | 🛑 | onlyOwner |

| └ | setGasPriceLimit | External ❗ | 🛑 | onlyOwner |

| └ | enableTrading | Public ❗ | 🛑 | onlyOwner |
| └ | setDividendExcluded | Public ❗ | 🛑 | onlyOwner |
| └ | setExcludedFromFees | Public ❗ | 🛑 | onlyOwner |
| └ | setTaxes | External ❗ | 🛑 | onlyOwner |
| └ | setRatios | External ❗ | 🛑 | onlyOwner |
| └ | setWallets | External ❗ | 🛑 | onlyOwner |
| └ | setContractSwapSettings | External ❗ | 🛑 | onlyOwner |
| └ | setSwapSettings | External ❗ | 🛑 | onlyOwner |
| └ | setReflectionCriteria | External ❗ | 🛑 | onlyOwner |
| └ | setReflectorSettings | External ❗ | 🛑 | onlyOwner |
| └ | giveMeWelfarePlease | External ❗ | 🛑 |NO❗ |
| └ | getTotalReflected | External ❗ | |NO❗ |
| └ | getUserInfo | External ❗ | |NO❗ |
| └ | getUserRealizedGains | External ❗ | |NO❗ |
| └ | getUserUnpaidEarnings | External ❗ | |NO❗ |
| └ | getCirculatingSupply | Public ❗ | |NO❗ |
| └ | getMaxWalletSizeUI | Public ❗ | |NO❗ |
| └ | setNewRouter | Public ❗ | 🛑 | onlyOwner |
| └ | setLpPair | External ❗ | 🛑 | onlyOwner |
| └ | setMaxTxPercent | Public ❗ | 🛑 | onlyOwner |
| └ | setMaxWalletSize | Public ❗ | 🛑 | onlyOwner |
| └ | liftFirstHourLimits | Public ❗ | 🛑 | onlyOwner |
| └ | excludePresaleAddresses | External ❗ | 🛑 | onlyOwner |
| └ | _hasLimits | Private 🔐 | | |
| └ | _transfer | Internal 🔒 | 🛑 | |
| └ | _finalizeTransfer | Internal 🔒 | 🛑 | |
| └ | processTokenReflect | Internal 🔒 | 🛑 | |
| └ | _basicTransfer | Internal 🔒 | 🛑 | |
| └ | takeTaxes | Internal 🔒 | 🛑 | |
| └ | contractSwap | Internal 🔒 | 🛑 | swapping |
| └ | manualDepost | External ❗ | 🛑 | onlyOwner |
| └ | _checkLiquidityAdd | Private 🔐 | 🛑 | |

Smart Contract – Software Analysis

Function Signatures
26003957 => setMaxWalletSize(uint256,uint256)

119df25f => _msgSender()
8b49d47e => _msgData()
18160ddd => totalSupply()
313ce567 => decimals()
95d89b41 => symbol()
06fdde03 => name()
893d20e8 => getOwner()
70a08231 => balanceOf(address)
a9059cbb => transfer(address,uint256)
dd62ed3e => allowance(address,address)
095ea7b3 => approve(address,uint256)
23b872dd => transferFrom(address,address,uint256)
017e7e58 => feeTo()
094b7415 => feeToSetter()
e6a43905 => getPair(address,address)
1e3dd18b => allPairs(uint256)
574f2ba3 => allPairsLength()
c9c65396 => createPair(address,address)
f46901ed => setFeeTo(address)
a2e74af6 => setFeeToSetter(address)
3644e515 => DOMAIN_SEPARATOR()
30adf81f => PERMIT_TYPEHASH()
7ecebe00 => nonces(address)
d505accf => permit(address,address,uint256,uint256,uint8,bytes32,bytes32)
ba9a7a56 => MINIMUM_LIQUIDITY()
c45a0155 => factory()
0dfe1681 => token0()
d21220a7 => token1()
0902f1ac => getReserves()
5909c0d5 => price0CumulativeLast()
5a3d5493 => price1CumulativeLast()
7464fc3d => kLast()
6a627842 => mint(address)
89afcb44 => burn(address)
022c0d9f => swap(uint256,uint256,address,bytes)
bc25cf77 => skim(address)
fff6cae9 => sync()
485cc955 => initialize(address,address)
ad5c4648 => WETH()

Inheritance Graph

Smart Contract – Manual Analysis

Function Description Tested Verdict
provides information about the total token

Total Supply Yes Passed
supply
provides account balance of the owner's

Balance Of Yes Passed
account
executes transfers of a specified number of

Transfer Yes Passed
tokens to a specified address
allow a spender to withdraw a set number of

Approve Yes Passed
tokens from a specified account
returns a set number of tokens from a spender to

Allowance Yes Passed
the owner
is an action in which the project buys back its
Buy Back tokens from the existing holders usually at a NA NA

market price
executes transfers of a specified number of

Burn NA NA
tokens to a burn address
executes creation of a specified number of

Mint NA NA
tokens and adds it to the total supply
circulating token supply adjusts (increases or
Rebase decreases) automatically according to a token's NA NA

price fluctuations
stops specified wallets from interacting with the

Blacklist Yes Passed
smart contract function modules
stops or locks all function modules of the smart

Lock NA NA
contract

Review
v Active smart contract owner: 0xe8bf6e4ea3239c10382e7644407824e46196ab9f
v Be aware that active smart contract owner privileges constitute an elevated impact to
smart contract’s safety and security.
v Smart contract owner can blacklist certain wallets from interacting with the contract
function modules.
v Owner can-not lock or burn user assets.
v Owner can-not stop or pause the smart contract.
v Owner can-not mint tokens after launch.
v The smart contract utilizes “SafeMath” function to avoid common smart contract
vulnerabilities.
string private _name = "Crypto Fantasy League";
string private _symbol = "CFL";
library SafeMath {
function add(uint256 a, uint256 b) internal pure returns (uint256) {
uint256 c = a + b;
require(c >= a, "SafeMath: addition overflow");
function sub(uint256 a, uint256 b) internal pure returns (uint256) {

return sub(a, b, "SafeMath: subtraction overflow");
uint256 c = a * b;
require(c / a == b, "SafeMath: multiplication overflow");
return c;
function div(uint256 a, uint256 b) internal pure returns (uint256) {

return div(a, b, "SafeMath: division by zero");
function mod(uint256 a, uint256 b) internal pure returns (uint256) {

return mod(a, b, "SafeMath: modulo by zero");

v The smart contract has 1 low severity issue which may or may not create any functional
vulnerability.
"resource": " /CFL.sol",
"owner": "_generated_diagnostic_collection_name_#0",
"severity": 8, (! Low Severity)
" Import directive or contract/interface/library definition.”,
"source": "solc",

Smart Contract – SWC Attacks
SWC ID Description Verdict
SWC-101 Integer Overflow and Underflow Passed
SWC-102 Outdated Compiler Version Passed
SWC-103 Floating Pragma ! Low
SWC-104 Unchecked Call Return Value Passed
SWC-105 Unprotected Ether Withdrawal Passed
SWC-106 Unprotected SELFDESTRUCT Instruction Passed
SWC-107 Re-entrancy Passed
SWC-108 State Variable Default Visibility Passed
SWC-109 Uninitialized Storage Pointer Passed
SWC-110 Assert Violation Passed
SWC-111 Use of Deprecated Solidity Functions Passed
SWC-112 Delegate Call to Untrusted Callee Passed
SWC-113 DoS with Failed Call Passed
SWC-114 Transaction Order Dependence Passed
SWC-115 Authorization through tx.origin Passed
SWC-116 Block values as a proxy for time Passed
SWC-117 Signature Malleability Passed
SWC-118 Incorrect Constructor Name Passed

SWC-119 Shadowing State Variables Passed
SWC-120 Weak Sources of Randomness from Chain Attributes Passed
SWC-121 Missing Protection against Signature Replay Attacks Passed
SWC-122 Lack of Proper Signature Verification Passed
SWC-123 Requirement Violation Passed
SWC-124 Write to Arbitrary Storage Location Passed
SWC-125 Incorrect Inheritance Order Passed
SWC-126 Insufficient Gas Griefing Passed
SWC-127 Arbitrary Jump with Function Type Variable Passed
SWC-128 DoS With Block Gas Limit Passed
SWC-129 Typographical Error Passed
SWC-130 Right-To-Left-Override control character (U+202E) Passed
SWC-131 Presence of unused variables Passed
SWC-132 Unexpected Ether balance Passed
SWC-133 Hash Collisions With Multiple Variable Length Arguments Passed
SWC-134 Message call with hardcoded gas amount Passed
SWC-135 Code With No Effects (Irrelevant/Dead Code) Passed
SWC-136 Unencrypted Private Data On-Chain Passed

Smart Contract - Risk Status & Radar Chart
Risk Severity Status
! Critical None critical severity issues identified
! High None high severity issues identified
! Medium None medium severity issues identified
! Low 1 low severity issue identified
Passed 41 functions and instances verified and passed
Score out of 100
Compiler Check
100
95
90
85
Interface Safety Static Analysis
80
75
Manual Analysis Software Analysis
Compiler Check 90
Static Analysis 90
Software Analysis 95
Manual Analysis 92
Interface Safety 94

Auditor’s Verdict
InterFi team has performed a line-by-line manual analysis and automated review of the smart
contract. The smart contract was analyzed mainly for common smart contract vulnerabilities,
exploits, and manipulation hacks.
Crypto Fantasy League’s smart contract source code has LOW RISK SEVERITY.
Crypto Fantasy League has PASSED the smart contract audit.
Note for stakeholders
v Be aware that active smart contract owner privileges constitute an elevated impact on smart
contract’s safety and security.
v Make sure that the project team’s KYC/identity is verified by an independent firm, e.g., InterFi.
v Always check if the contract’s liquidity is locked. A longer liquidity lock plays an important role
in project’s longevity. It is recommended to have multiple liquidity providers.
v Examine the unlocked token supply in the owner, developer, or team’s private wallets.
Understand the project’s tokenomics, and make sure the tokens outside of the LP Pair are
vested or locked for a longer period of time.
v Ensure that the project’s official website is hosted on a trusted platform, and is using an active
SSL certificate. The website’s domain should be registered for a longer period of time.

Important Disclaimer
InterFi Network provides contract auditing and project verification services for blockchain projects.
The purpose of the audit is to analyse the on-chain smart contract source code, and to provide
basic overview of the project. This report should not be transmitted, disclosed, referred to, or
relied upon by any person for any purposes without InterFi’s prior written consent.
InterFi provides the easy-to-understand assessment of the project, and the smart contract
(otherwise known as the source code). The audit makes no statements or warranties on the security
of the code. It also cannot be considered as an enough assessment regarding the utility and safety
of the code, bug-free status, or any other statements of the contract. While we have used all the
data at our disposal to provide the transparent analysis, it is important to note that you should not
rely on this report only — we recommend proceeding with several independent audits and a public
bug bounty program to ensure the security of smart contracts. Be aware that smart contracts
deployed on a blockchain aren’t resistant from external vulnerability, or a hack. Be aware that
active smart contract owner privileges constitute an elevated impact to smart contract’s safety
and security. Therefore, InterFi does not guarantee the explicit security of the audited smart
contract.
The analysis of the security is purely based on the smart contracts alone. No applications or
operations were reviewed for security. No product code has been reviewed.
This report should not be considered as an endorsement or disapproval of any project or team.
The information provided on this report does not constitute investment advice, financial advice,
trading advice, or any other sort of advice and you should not treat any of the report’s content as
such. Do conduct your own due diligence and consult your financial advisor before making any
investment decisions.

About InterFi Network

InterFi Network provides intelligent blockchain solutions. InterFi is developing an ecosystem that is
seamless and responsive. Some of our services: Blockchain Security, Token Launchpad, NFT
Marketplace, etc. InterFi’s mission is to interconnect multiple services like Blockchain Security,
DeFi, Gaming, and Marketplace under one ecosystem that is seamless, multi-chain compatible,
scalable, secure, fast, responsive, and easy-to-use.
InterFi is built by a decentralized team of UI experts, contributors, engineers, and enthusiasts from
all over the world. Our team currently consists of 6+ core team members, and 10+ casual
contributors. InterFi provides manual, static, and automatic smart contract analysis, to ensure
that project is checked against known attacks and potential vulnerabilities.
To learn more, visit https://interfi.network
To view our audit portfolio, visit https://github.com/interfinetwork
To book an audit, message https://t.me/interfiaudits


CFL AuditReport InterFi

Uploaded by

Copyright:

Available Formats

CFL AuditReport InterFi

Uploaded by

Document Information

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

CFL AuditReport InterFi

Uploaded by

Copyright:

Available Formats

SMART CONTRACT SECURITY AUDIT OF

Crypto Fantasy League

Auditing Firm InterFi Network

Architecture InterFi “Echelon” Auditing Standard

Smart Contract Audit Approved By Chris | Blockchain Specialist at InterFi Network

Project Overview Approved By Albert | Marketing Specialist at InterFi Network

Consultation Request Date November 10, 2021

Report Date November 13, 2021

exploits, and manipulation hacks. According to the smart contract audit:

v Crypto Fantasy League has PASSED the smart contract audit.

refer to the audit.

✅ Verify the authenticity of this report on InterFi’s GitHub: https://github.com/interfinetwork

PAGE 2 | SMART CONTRACT SECURITY AUDIT OF CRYPTO FANTASY LEAGUE

InterFi “Echelon” Audit Standard

Audit Scope & Methodology .................................................................................................................................................... 6

InterFi’s Risk Classification ......................................................................................................................................................... 8

Smart Contract Risk Assessment

Static Analysis .................................................................................................................................................................................... 9

Software Analysis ........................................................................................................................................................................... 13

SWC Attacks .......................................................................................................................................................................................18

Risk Status & Radar Chart ....................................................................................................................................................... 20

Auditor’s Verdict .............................................................................................................................................................................. 21

Important Disclaimer ..................................................................................................................................................................22

About InterFi Network ..................................................................................................................................................................23

PAGE 3 | SMART CONTRACT SECURITY AUDIT OF CRYPTO FANTASY LEAGUE

their solidity source code.

About Crypto Fantasy League

our token and using CFL App

Project Crypto Fantasy League

Blockchain Binance Smart Chain

PAGE 4 | SMART CONTRACT SECURITY AUDIT OF CRYPTO FANTASY LEAGUE

Solidity Source Code On Blockchain (Verified Contract Source Code)

Contract Name: Crypto Fantasy League

Compiler Version: v0.8.9

Optimization Enabled: Yes with 200 runs

Solidity Source Code On InterFi GitHub

Solidity source code is audited at hash #28ccd61ccac43b4e17e2d2bc314796cc633f6232

PAGE 5 | SMART CONTRACT SECURITY AUDIT OF CRYPTO FANTASY LEAGUE

Audit Scope & Methodology

v Transaction Order Dependency

v Incorrect Inheritance Order

v Gas Limit and Loops

v Token Supply Manipulation

v Access Control and Authorization

v Operations Trail and Event Generation

Functional Assessment v Assets Manipulation

PAGE 6 | SMART CONTRACT SECURITY AUDIT OF CRYPTO FANTASY LEAGUE

InterFi’s Echelon Audit Standard

assess the smart contract:

1. Solidity smart contract source code reviewal:

understand the size, scope, and functionality of the smart contract.

2. Static, Manual, and Software analysis:

part of a program to execute.

and academic practices, recommendations, and research.

Automated 3P frameworks used to assess the smart contract vulnerabilities

v Open Zeppelin Code Analyzer

v Solidity Code Complier

PAGE 7 | SMART CONTRACT SECURITY AUDIT OF CRYPTO FANTASY LEAGUE

InterFi’s Risk Classification

Exploitable: A contract is exploitable if it is vulnerable and the vulnerability could be exploited by an

Context | Implementation | |||