SMART CONTRACT SECURITY AUDIT X-T RON ALLIANCE [ TTU3RA7NYjsguASxKz7Tb77mpSJG6KwYJR ] Audit NO: 02100340 1 February , 202 1 ▪ Project Name : X-T RON ALLIANCE ▪ Technology : Blockchain Smart Contract ▪ Blockchain : Tron Blockchain ▪ Contract Address : TTU3RA7NYjsguASxKz7Tb77mpSJG6KwYJR ▪ Programming Language : Solidity ▪ Version : 0.5. 4 ▪ Contract Type : Decentralized Smart Contract ▪ Category : High-Risk Dapp ▪ Website : https://www. x-tron.io ▪ Audit Type : Function Report ▪ File(s) Audited : XTron .sol ▪ Audit No : 02100340 1 6 8 ▪ The contract source code is verified on TRONSCAN ▪ Contract name : XTron ▪ Optimization : Yes with 200 runs ▪ Compiler version : solidity 0.5. 4 ▪ License : MIT ▪ E-mail : team @ x-tron.io ▪ Telegram : https: // t.me / XTronOfficial PROJECT DETAILS Disclaimer INFIGO only audits the source code for security and its functions. We don’t audit for the contract logic honesty. This report is for the source code given and the contract deployed at the address mentioned in this document and doesn’t guarantee if the contract is being deployed to another address or any alterations made. We have nothing to do if the contract functioning contains risks like gambling and other functions. Security Items and Results NO ITEM SEVERITY DESCRIPTION RESULT 1 Race Condition High All types of Race Condition Attacks Passed 2 Overflow High Integer overflows / underflows. Fulfilled by using SafeMath library Passed 3 Denial of Service High Fulfilled by implementing “ balance withdrawal” design pattern Passed 4 Time - based Decisions High Doesn’t rely on small time periods Passed 5 Function / Data Structure Exposure High Passed NO ITEM SEVERITY DESCRIPTION RESULT 6 Parameter Sanitization High Passed 7 Require Statement Medium Passed 8 Contract ownership High Doesn’t required Passed 9 Inline assembly Warning isContract() function Passed 10 Loops Low Controlled Passed Function Report Constants and Read Functions : • MA X _DAILY_Ref_ W ITHDRA W AL: Showing maximum withdrawal of referral profit per two days and is set to 25 , 000 TRX. • INVEST_MIN_AMOUNT: Stores the minimum investment amount and is equivalent to 5 0 0 TRX. • PREFERRED_FULFILLMENT : Showing the minimum amount required to take part in the Prefer r ed Contributor Program (50000 TRX). • ENROLL_LEADERSHIP: Required amount to register for Leadership Program (1000 TRX). • MIN_PARTNERSHIP: Required amount required to be a Partner (25000 TRX). • REFERRAL_PERCENTS: R eferral percent age s ([25%, 15%, 10%, 5%, 5%, 5%, 5%, 3%, 3%, 3%, 3%, 3%, 5%, 5%, 5%]). Note that this percentages apply to 10% of deposit amount. • REFERRAL_PERCENTS: R eferral percentage for Leadership Program([15%, 10%, 5%, 5%, 5%, 5%, 5%, 5%, 5%, 10%, 2%, 2%, 2%, 2%, 2%, 5%, 5%, 5%, 5%, 5%]). Note that this percentages apply to 5% of withdrawal amount. • MARKETING_FEE: Marketing fee (5%). • COMMUNITY_FEE : Community fee (2.5%). • ADMIN_FEE: Administrator fee (4%). • DEV_FEE: Developer team fee (3%). • PERCENTS_DIVIDER: All percentage values is divided to this number in calculations and is equivalent to 1000. • TIME_STEP: Showing the time step and is 1 day • totalUsers: Number of total users can be read from this variable. • totalInvested: Showing the total invested • leadershipPool : Showing the amount of leadership pool • prelaunchTime : Smart Contract deployment time • launchTime : 5 days after prelaunchTime. ROI is disabled during this time • daysCycle : Stores days passed from the contract deployment time • lastBalanceCheck : Stores the last day cycle check time • lastDayInvestment : Showing the invested amount of the last day. • inrollLeaderships: Number of users enrolled in the leadership program. • partnerships: Showing the partners. • holydayProgram: Users that are eligible for holy day program. • top1 to top5: Showing the today's top investors. • lasttop1 to lasttop5: Showing the all day's top investors. • getUserDividends(): This function is used to get user real time dividends. Returns zero before lauchTime. Maximum dividends can be 8%. • isContract(): CChecks if an address is a contract address. • isPreferredContributor () : Checks if a user is a Preferred Contributor or not. A preferred user must make a one time deposit of amount 25000 TRX and one of it's direct down- lines must invest more than his total investment. Write Functions : • payUplines(): This function updates up-line referral bonuses using the value passed to this function. • payUplinesLeadership () : This function updates up-line referral bonuses on leadership program using the value passed to this function. • distributeDeposit () : Transfers TRX to administrators according Admin Fees The total amount transfered here is 12% of the passed value. • updateDailyTops () : Updates top investor variables. • invest(): This function is used to make a deposit in the system. 9 0% of the actual deposit will stored as the user deposit and user Active Contribution. VRR is set to 8%. 10% of the deposit is transfered to the payUplines function Admin team fee is paid in this function. Preferred and Partnership program requirements are checked here. T he minimum amount to make a successful deposit is 5 0 0 TRX • reinvest(): Called from external and make the following changes in the state: adds 50% of the dividends to activeContribution . User's VRR is in c reased by 1 up to 8%. • inrollLeadership(): Registers user to the leadership program and can be called just once. The required value for this is 1000 TRX. 40% of the deposit value goes to community wallet and 10% to the admin wallets. • depositLeadership(): Deposit function for the leadership program. User must pay 50% of the last leadership bonus to be able to get profit from the leadership program. This is like a normal deposit though. • withdrawLeadershipBonus(): Used to withdraw leadership bonus. Withdrawal is allowed between 1-6 and 12-18 UTC time and can be done once per two days. Maximum withdrawal amount is 25000TRX. • withdrawRefBonus(): This function is used to withdraw referral bonus so far. Withdrawal is allowed between 1-6 and 12-18 UTC time and can be done once per two days. Maximum withdrawal amount is 25000TRX. Half the bonus is transferred directly to the users wallet an the other half adds to his activeContribution • withdraw(): This function is used to withdraw the dividends. Withdrawal is allowed between 1-6 and 12-18 UTC time and can be done once a day. Half the total dividends directly transfered to the user's wallet and 50% is added to activeContribution. 5% is paid to the leadership program. 30% percent is transfered directly t o the community wallet. Summary of the Audit : • Overall the Code is good and performs well. • No Backdoors or Vulnerabilities were found on the X- TRON Contract. • X-TRON ’s code is safe to use in the Tron Main Network. Website : www.infigo.solutions Mail : team@infigo.solutions Telegram : @ InfigoSolutions