POST RELEASE SMART CONTRACT SECURITY AUDIT X-T RON [ TNWdhQT1P9r58APPmDgtsTwiLCktpeM9Zq ] Audit NO: 02100340 1 52 January , 202 1 ▪ Project Name : X-T RON ▪ Contract Address: TNWdhQT1P9r58APPmDgtsTwiLCktpeM9Zq ▪ Technology : Blockchain Smart Contract ▪ Blockchain : Tron Blockchain ▪ Programming Language : Solidity ▪ Version : 0.5. 4 ▪ Contract Type : Decentralized Smart Contract ▪ Category : High-Risk Dapp ▪ Website : https://www. x-tron.io ▪ Audit Type : Function Report ▪ File(s) Audited : XTron .sol ▪ Audit No : 02100340 1 52 ▪ The contract source code is verified on TRONSCAN ▪ Contract name : XTron ▪ Optimization : Yes with 200 runs ▪ Compiler version : solidity 0.5. 4 ▪ License : MIT ▪ E-mail : team @ x-tron.io ▪ Telegram : https: // t.me / XTronOfficial PROJECT DETAILS NOTE : We have already issued the initial audit report as tested in the test network and this is the POST RELEASE audit report mentioning the contract address. Disclaimer INFIGO only audits the source code for security and its functions. We don’t audit for the contract logic honesty. This report is for the source code given and the contract deployed at the address mentioned in this document and doesn’t guarantee if the contract is being deployed to another address or any alterations made. We have nothing to do if the contract functioning contains risks like gambling and other functions. Security Items and Results NO ITEM SEVERITY DESCRIPTION RESULT 1 Race Condition High All types of Race Condition Attacks Passed 2 Overflow High Integer overflows / underflows. Fulfilled by using SafeMath library Passed 3 Denial of Service High Fulfilled by implementing “ balance withdrawal” design pattern Passed 4 Time - based Decisions High Doesn’t rely on small time periods Passed 5 Function / Data Structure Exposure High Passed NO ITEM SEVERITY DESCRIPTION RESULT 6 Parameter Sanitization High Passed 7 Require Statement Medium Passed 8 Contract ownership High Doesn’t required Passed 9 Inline assembly Warning isContract() function Passed 10 Loops Low Controlled Passed Function Report Constants and Read Functions : • MAX_DAILY_WITHDRAWAL : Showing maximum withdrawal per day and is set to 25 ,000 TRX. • MAX_DAILY_Ref_WITHDRAWAL: Showing maximum withdrawal of referral profit per two days and is set to 10 , 000 TRX. • INVEST_MIN_AMOUNT: Stores the minimum investment amount and is equivalent to 10 0 TRX. • FIX_PERCENT: Showing the daily fix percentage. Its set to 1 0 %. • REFERRAL_PERCENTS: R eferral percent age and is equivalent to 10 %, 5 %, 1 % , , 1% , , 3 % for levels 1 to 5 • REFERRAL_PERCENTS: R eferral percentage for re-investmet and is equivalent to 1%, 0.4%, 0.1%, 0.1%, 0.4% for levels 1 to 5. • MARKETING_FEE: M arketing fee and is e q uivalent to 5%. • SUPPORTING_FEE: S upporting fee and is e q uivalent to 2.5 %. • ADMIN_FEE: Showing the admin fee and is e q uivalent to 3 %. • DEV_FEE: Showing the developer fee and is e q uivalent to 2 .5%. Note: We will review actual fees paid in the following sections • PERCENTS_DIVIDER: All percentage values is divided to this number in calculations and is equivalent to 1000. • TIME_STEP: Showing the time step and is 1 days or 86400 • totalUsers: Number of total users can be read from this variable. • totalInvested: Showing the total invested • g etMyDividends (): This function is used to get user real time dividends. • getUserBalance (): This function is used to get user total investments plus re-investments • getFreshDeposits (): This function is used to get user new deposits. • pauseWithdrawal (): This function is used to disable withdrawal in the time between 0 and 4 am UT C • getStatsView(): Returns statistics. • isContract() : C C hecks if an address is a contract address. Write Functions : • payUplines(): This function updates up-line referral bonuses This is a private function and can’t be called from outside the contract. • payUplines(): This function updates up-line referral bonuses on re-investments. This is a private function and can’t be called from outside the contract. • countUplines(): This function updates referrals count. • invest(): This function is used to make a deposit in the system. This function accepts a referral address. This is a public function and can be called from outside. This function is the only payable function. 10% of the deposit will directly goes to the contract balance booster and t he total of 1 3 % of each deposit is transferred to four admin accounts. T he minimum amount to make a successful deposit is 10 0 TRX Referral bonuses are paid directly in this function. • withdraw(): This function is used to withdraw the dividends This function accepts a number between 0 and 2. Each number is explained in the following: • When 0 is passed: 25% of dividends is sent directly to the wallet 50% of dividends is re-invested 25% is used as balance booster • When 1 is passed: 50% of dividends is sent directly to the wallet 0% of dividends is re-invested 25% is used as balance booster • When 2 is passed: 0% of dividends is sent directly to the wallet 75% of dividends is re-invested 25% is used as balance booster Note: If the user has withdrawn 400 TRX or more to his wallet in the last withdrawal attempt then he has to make a deposit to 25% of last withdrawal amount otherwise the withdrawal will fail. Withdrawal is paused in between 0 and 4 am UT C time and can be called once a day. The re-investment referral profits is paid here. N o back-door was found in this function Maximum withdrawal amount is 250% of total deposit so in order to withdraw profits more than 250% users have to invest or re- invest. Users can not withdraw more than 25K TRX a day and also can not withdraw more than once a day. Note that either referral bonus or the dividends can only be withdrawn in a day. Support team and marketing fees is also paid in this function. 12.5% of withdrawal amount goes to the owners and marketing team. • withdrawRefBonus (): This function is used to withdraw referral bonus so far. There is no back door in this function and the only transfer () call is used to send referral profit to the user wallet. User allowed to withdraw once per two day s of maximum amount 10K TRX Support team and marketing fees is paid in this function too. 12.5% of withdrawal amount goes to the owners and marketing team. Taking account the fees was paid in investment section and withdrawal section, the total amount of 25.5% of the contract will be paid as owners fees. Summary of the Audit : • Overall the Code is good and performs well. • No Backdoors or Vulnerabilities were found on the X-TRON Contract. • X-TRON ’s code is safe to use in the Tron Main Network. Website : www.infigo.solutions Mail : team@infigo.solutions Telegram : @ InfigoSolutions NOTE : This Audit Report was issued before the launch of the project. All tests are performed with the given Source Code on the test network. After the project’s launch, we will verify and issue another Audit Mentioning the contract's Address .