【智能合约审计】————13、Ethernet Cash (ENC)

合约地址：https://etherscan.io/address/0x039f5050de4908f9b5ddf40a4f3aa3f329086387#code

pragma solidity ^0.4.16;
/*-------------------------------------------------------------------------*/
 /*
  * Website : https://ethernet.cash
  * Email   : contact(a)ethernet.cash
 */
/*-------------------------------------------------------------------------*/
interface tokenRecipient { function receiveApproval(address _from, uint256 _value, address _token, bytes _extraData) public; }
/*-------------------------------------------------------------------------*/
contract owned {
    address public owner;

    function owned() {
        owner = msg.sender;
    }

    modifier onlyOwner {
        if (msg.sender != owner) throw;
        _;
    }

    function transferOwnership(address newOwner) onlyOwner {
        if (newOwner == 0x0) throw;
        owner = newOwner;
    }
}
/*-------------------------------------------------------------------------*/
/**
 * Overflow aware uint math functions.
 */
contract SafeMath {
  //internals

  function safeMul(uint a, uint b) internal returns (uint) {
    uint c = a * b;
    assert(a == 0 || c / a == b);
    return c;
  }

  function safeSub(uint a, uint b) internal returns (uint) {
    assert(b <= a);
    return a - b;
  }

  function safeAdd(uint a, uint b) internal returns (uint) {
    uint c = a + b;
    assert(c>=a && c>=b);
    return c;
  }

  function assert(bool assertion) internal {
    if (!assertion) throw;
  }
}
/*-------------------------------------------------------------------------*/
contract EthernetCash is owned, SafeMath {
    
    string  public EthernetCashWebsite  = "https://ethernet.cash";
    address public EthernetCashAddress  = this;
    address public creator              = msg.sender;
    string  public name                 = "Ethernet Cash";
    string  public symbol               = "ENC";
    uint8   public decimals             = 18;                                               
    uint256 public totalSupply          = 19999999986000000000000000000;
    uint256 public buyPrice             = 1800000;
    uint256 public sellPrice            = 1800000;
    
    mapping (address => uint256) public balanceOf;
    mapping (address => mapping (address => uint256)) public allowance;
    mapping (address => bool) public frozenAccount;

    event Transfer(address indexed from, address indexed to, uint256 value);                
    event FundTransfer(address backer, uint amount, bool isContribution);
     // This notifies clients about the amount burnt
    event Burn(address indexed from, uint256 value);
    event FrozenFunds(address target, bool frozen);
    
    /**
     * Constrctor function
     *
     * Initializes contract with initial supply tokens to the creator of the contract
     */
    function EthernetCash() public {
        balanceOf[msg.sender] = totalSupply;                                                
        creator = msg.sender;
    }
    /**
     * Internal transfer, only can be called by this contract
     */
    function _transfer(address _from, address _to, uint _value) internal {
        // Prevent transfer to 0x0 address. Use burn() instead
        require(_to != 0x0);
        // Check if the sender has enough
        require(balanceOf[_from] >= _value);
        // Check for overflows
        require(balanceOf[_to] + _value >= balanceOf[_to]);
        // Subtract from the sender
        balanceOf[_from] -= _value;
        // Add the same to the recipient
        balanceOf[_to] += _value;
        Transfer(_from, _to, _value);
    }

    /**
     * Transfer tokens
     *
     * Send `_value` tokens to `_to` from your account
     *
     * @param _to The address of the recipient
     * @param _value the amount to send
     */
    function transfer(address _to, uint256 _value) public {
        _transfer(msg.sender, _to, _value);
    }
    
    /// @notice Buy tokens from contract by sending ether
    function () payable internal {
        uint amount = msg.value * buyPrice ; 
        uint amountRaised;
        uint bonus = 0;
        
        bonus = getBonus(amount);
        amount = amount +  bonus;
        
        //amount = now ;
        
        require(balanceOf[creator] >= amount);                              
        require(msg.value > 0);
        amountRaised = 
    safeAdd(amountRaised, msg.value);                    
        balanceOf[msg.sender] = safeAdd(balanceOf[msg.sender], amount);     
        balanceOf[creator] = safeSub(balanceOf[creator], amount);           
        Transfer(creator, msg.sender, amount);                              
        creator.transfer(amountRaised);
    }
    /// @notice Create `mintedAmount` tokens and send it to `target`
    /// @param target Address to receive the tokens
    /// @param mintedAmount the amount of tokens it will receive
    //存在整数溢出漏洞，可以导致“任意铸币”
    function mintToken(address target, uint256 mintedAmount) onlyOwner public {
        balanceOf[target] += mintedAmount;
        totalSupply += mintedAmount;
        Transfer(0, this, mintedAmount);
        Transfer(this, target, mintedAmount);
    }

    
    /**
     * Set allowance for other address
     *
     * Allows `_spender` to spend no more than `_value` tokens in your behalf
     *
     * @param _spender The address authorized to spend
     * @param _value the max amount they can spend
     */
    function approve(address _spender, uint256 _value) public
        returns (bool success) {
        allowance[msg.sender][_spender] = _value;
        return true;
    }

    /**
     * Set allowance for other address and notify
     *
     * Allows `_spender` to spend no more than `_value` tokens in your behalf, and then ping the contract about it
     *
     * @param _spender The address authorized to spend
     * @param _value the max amount they can spend
     * @param _extraData some extra information to send to the approved contract
     */
    function approveAndCall(address _spender, uint256 _value, bytes _extraData)
        public
        returns (bool success) {
        tokenRecipient spender = tokenRecipient(_spender);
        if (approve(_spender, _value)) {
            spender.receiveApproval(msg.sender, _value, this, _extraData);
            return true;
        }
    }
    
    /// @notice `freeze? Prevent | Allow` `target` from sending & receiving tokens
    /// @param target Address to be frozen
    /// @param freeze either to freeze it or not
    function freezeAccount(address target, bool freeze) onlyOwner public {
        frozenAccount[target] = freeze;
        FrozenFunds(target, freeze);
    }

    /// @notice Allow users to buy tokens for `newBuyPrice` eth and sell tokens for `newSellPrice` eth
    /// @param newSellPrice Price the users can sell to the contract
    /// @param newBuyPrice Price users can buy from the contract
    function setPrices(uint256 newSellPrice, uint256 newBuyPrice) onlyOwner public {
        sellPrice = newSellPrice;
        buyPrice = newBuyPrice;
    }
    
    
    /**
     * Destroy tokens
     *
     * Remove `_value` tokens from the system irreversibly
     *
     * @param _value the amount of money to burn
     */
    function burn(uint256 _value) public returns (bool success) {
        require(balanceOf[msg.sender] >= _value);   // Check if the sender has enough
        balanceOf[msg.sender] -= _value;            // Subtract from the sender
        totalSupply -= _value;                      // Updates totalSupply
        Burn(msg.sender, _value);
        return true;
    }
    
    /**
     * Destroy tokens from other account
     *
     * Remove `_value` tokens from the system irreversibly on behalf of `_from`.
     *
     * @param _from the address of the sender
     * @param _value the amount of money to burn
     */
    function burnFrom(address _from, uint256 _value) public returns (bool success) {
        require(balanceOf[_from] >= _value);                // Check if the targeted balance is enough
        require(_value <= allowance[_from][msg.sender]);    // Check allowance
        balanceOf[_from] -= _value;                         // Subtract from the targeted balance
        allowance[_from][msg.sender] -= _value;             // Subtract from the sender's allowance
        totalSupply -= _value;                              // Update totalSupply
        Burn(_from, _value);
        return true;
    }
    
    function getBonus(uint _amount) constant private returns (uint256) {
        
        if(now >= 1524873600 && now <= 1527551999) { 
            return _amount * 50 / 100;
        }
        
        if(now >= 1527552000 && now <= 1530316799) { 
            return _amount * 40 / 100;
        }
        
        if(now >= 1530316800 && now <= 1532995199) { 
            return _amount * 30 / 100;
        }
        
        if(now >= 1532995200 && now <= 1535759999) { 
            return _amount * 20 / 100;
        }
        
        if(now >= 1535760000 && now <= 1538438399) { 
            return _amount * 10 / 100;
        }
        
        return 0;
    }
    
    /// @notice Sell `amount` tokens to contract
    /// @param amount amount of tokens to be sold
    //存在整数溢出漏洞，可以导致“高价低卖”
    function sell(uint256 amount) public {
        require(this.balance >= amount * sellPrice);      // checks if the contract has enough ether to buy
        _transfer(msg.sender, this, amount);              // makes the transfers
        msg.sender.transfer(amount * sellPrice);          // sends ether to the seller. It's important to do this last to avoid recursion attacks
    }
    
 }
/*-------------------------------------------------------------------------*/