NHCT gets an independent code audit report from Coinflyer!

Vansha Mahajan
NHCT - NanoHealthCare Token
3 min readNov 14, 2018

--

NHCT underwent an Independent Code Audit with Coinflyer to provide investor assurance and protection to its various stakeholders. NHCT is a total health management platform that is built on the philosophy of preventive rather than reactive medical care. It uses blockchain to counter systemic issues that plague the healthcare of today like high costs, data fragmentation & data security. Coinflyer provides a comprehensive and independent smart contract auditing. They help stakeholders confirm the quality and security of smart contracts using a comprehensive and standardized auditing process. Each audit is unbiased and verified by their reputable auditors.

The scope of this audit was to analyze and document the NHCT smart contract. This audit provides practical assurance of the logic and implementation of the contract.

Coinflyer Blockchain audit had four layers to its analysis.

  1. Design Patterns — Coinflyer first inspected the overall structure of the smart contract, including both manual and automated analysis. The design pattern analysis checked the appropriate test coverage, utilized a linter to ensure consistent style and composition, and code comments were reviewed. Overall architecture and safe usage of third party smart contracts were checked to ensure the contract is structured in a way that will not result in future issues.
  2. Static Analysis — The static analysis portion of their audit was performed using a series of automated tools, purposefully designed to test the security of the contract. These tools include:
  • Manticore — Dynamic binary analysis tool with EVM support.
  • Mythril — Reversing and bug hunting framework for the Ethereum Blockchain.
  • Oyente — Analyzes Solidity code to find common vulnerabilities.
  • Solgraph — DOT graph creation for visualizing function control flow of a Solidity contract to highlight potential security vulnerabilities. Data flow and control flow were also analyzed to identify vulnerabilities.

3. Manual Analysis — Performing a hands-on review of the smart contract to identify common vulnerabilities was the most intensive portion of a smart contract audit. Checks for race conditions, transaction-ordering dependence, timestamp dependence, and denial of service attacks were a part of Coinflyer’s standardized process.

4. Network Behavior — In addition to their design pattern check, Coinflyer also looked at the network behavior. They modeled how the smart contract will operate once in production, then determined the answers to questions such as: how much gas will be used, are there any optimizations, how will the contract interact?

Audit Summary — The contracts have been found to be free of any security issues.

Analysis Results

Token Allocation Results

  • Symbol: NHCT
  • 1,000,000,000 tokens available.

Explicit Vulnerability Check Results

Issues Discovered

Issues below are listed from most critical to least critical. Severity is determined by an assessment of the risk of exploitation or otherwise unsafe behavior.

Severity Levels

  • Informational — No impact on the contract.
  • Low — Minimal impact on operational ability.
  • Medium — Affects the ability of the contract to operate.
  • High — Affects the ability of the contract to work as designed in a significant way.
  • Critical — Funds may be allocated incorrectly, lost or otherwise result in a significant loss.

Issues — No Issues Found.

Finally, the Coinflyer audit assessed that the smart contract is a standard ERC20 contract with no vulnerabilities found. It passed the inspection of Coinflyer Blockchain.

We, at NHCT thank Coinflyer for an in-depth review of our smart contract using their cutting-edge analytic tools. Passing the Coinflyer Blockchain inspection gives us a lot of confidence in managing such a large-scale blockchain application, and also strengthens the confidence of our users in the security of the application.

The NHCT Main-Sale begins on 15th November 2018.

We would like to invite all of you to come to join the conversation in our telegram group

Check out our website here and go through our white paper

--

--