The source has no SPDX-License-Identifier. Beyond a compiler warning, it signals loose hygiene and complicates verification and reuse; auditors treat missing metadata as a smell.
// solc emits: Warning: SPDX license identifier not provided // verification tooling and downstream reuse become ambiguous.
// SPDX-License-Identifier: MIT
Largest recorded losses in the same failure class — related, not the same bug:
The SaferICO scanner runs 201 detectors over your Solidity source, SAFE-0256 among them. Paste an address or the source itself — a small per-scan fee, shown before you sign, or unlimited on any plan.