mythril/static/sample_report.md

# Analysis Results
## Ether send
- Type: Warning
- Contract: Crowdfunding
- Function name: withdrawfunds()
- PC address: 816

### Description
In the function `withdrawfunds()` a non-zero amount of Ether is sent to msg.sender.
Call value is balance_at_1461501637330902918203684832716283019655932542975 & address.

There is a check on storage index 7. This storage slot can be written to by calling the function `crowdfunding()`.

In *ether_send.sol:*

```
msg.sender.transfer(this.balance)
```
## Use of tx.origin
- Type: Warning
- Contract: Origin
- Function name: transferOwnership(address)
- PC address: 317

### Description
Function transferOwnership(address) retrieves the transaction origin (tx.origin) using the ORIGIN opcode. Use tx.sender instead.
See also: https://solidity.readthedocs.io/en/develop/security-considerations.html#tx-origin

In *origin.sol:*

```
tx.origin
```
## CALL with gas to dynamic address
- Type: Warning
- Contract: Reentrancy
- Function name: withdraw(uint256)
- PC address: 552

### Description
The function withdraw(uint256) contains a function call to the address of the transaction sender. The available gas is forwarded to the called contract. Make sure that the logic of the calling contract is not adversely affected if the called contract misbehaves (e.g. reentrancy).

In *reentrancy.sol:*

```
msg.sender.call.value(_amount)()
```
## Unchecked CALL return value
- Type: Informational
- Contract: Reentrancy
- Function name: withdraw(uint256)
- PC address: 552

### Description
The function withdraw(uint256) contains a call to msg.sender.
The return value of this call is not checked. Note that the function will continue to execute with a return value of '0' if the called contract throws.

In *reentrancy.sol:*

```
msg.sender.call.value(_amount)()
```
## Integer Underflow
- Type: Warning
- Contract: Under
- Function name: sendeth(address,uint256)
- PC address: 649

### Description
A possible integer underflow exists in the function `sendeth(address,uint256)`.
The SUB instruction at address 649 may result in a value < 0.

In *underflow.sol:*

```
balances[msg.sender] -= _value
```
## Integer Underflow
- Type: Warning
- Contract: Under
- Function name: sendeth(address,uint256)
- PC address: 567

### Description
A possible integer underflow exists in the function `sendeth(address,uint256)`.
The SUB instruction at address 567 may result in a value < 0.

In *underflow.sol:*

```
balances[msg.sender] - _value
```
## Weak random
- Type: Warning
- Contract: WeakRandom
- Function name: _function_0xe9874106
- PC address: 1285

### Description
In the function `_function_0xe9874106` the following predictable state variables are used to determine Ether recipient:
- block.coinbase


In *weak_random.sol:*

```
winningAddress.transfer(prize)
```