Avalanche Farms

Simple Token Implementation

• ✅ Ownership renounced.
• Max Supply: 65,625,000,000,000.00 BTCHL
• PreMinted: 100%
• Payout Method: None
• Auto-Liquidity: None
• Other Significant Governance Privileges: None
• No transfer tax
• No anti-whale mechanism

⚠️ TRIPLE CHECK the contract you interact matches the one reviewed here (0x9B1D...4707)

Goose fork

• ⚠️ Masterchef currently not behind a timelock.
• ⚠️ Masterchef owner can switch active pools anytime.
• ✅ Token owner is MasterChef.
• ✅ Max 3% deposit fees.
• ✅ Correctly accounts for transfer taxes on any token pool.
• An extra 10% of emission rewards are minted to the dev address.

⚠️ TRIPLE CHECK the contract you interact with matches the one reviewed here (0xab2e...0689)

Altitude is a composable asset bridge built on LayerZero's cross-chain communication infrastructure.

We reserve the right to not review exceedingly complex projects that would require tens of thousands of dollars of senior security analyst man hours.

Typically these are projects that deal with leverage, lending, options, derivatives, and anything that is overly complex and which requires tons of peer reviews and audits from top audit companies.

Throne Exchange is committed to ensuring the security of their community by implementing decentralized measures, as they hold greater appeal and significance compared to centralized alternatives.

Automated Uniswap V3 pool management to create short term trades similar to 'Dual Investment' feature in CEXs.

We reserve the right to not review exceedingly complex projects that would require tens of thousands of dollars of senior security analyst man hours.

Typically these are projects that deal with leverage, lending, options, derivatives, and anything that is overly complex and which requires tons of peer reviews and audits from top audit companies.

Since our resources are stretched thin and we don’t have the funding for these kind of massive endeavors, we may pass on projects that meet this level of complexity. DYOR.

🚨 Centralized application, user funds have to be deposited into a wallet which is controlled by the platform. Tokens can be withdrawn by the platform anytime. 🚨

Description

Fantasy action RPG play and earn immersive game where the player becomes a guild master and gathers heroes.

Every item valuable in the game is an NFT item stored on an independent blockchain. NFTs can be obtained in multiple ways such as exploring, claiming, crafting, breeding, in-game events and purchasing. NFT items come in many forms such as heroes, lands, items, card spells, artworks & masterpieces, etc.

HC offers players countless heroes with different classes, races and genes with many abilities and spells; and the breeding system to create new unique heroes. The game also offers a massive fantastic world with many different locations, hidden dungeons, treasures, monsters and creatures.

HC NFTs can be traded freely among players in-game or on third party open markets, peer-to-peer.

Players use the in-game currency HeC to trade NFT items. HeC is deflationary.

Players can stake HeC to take part in game governance via voting on game-related decisions.

NFTs

Four NFT collections available on marketplace: MayinHara, Fortunes of Ventuna, Weapon, Heroes of Ventuna

The MayinHara are truly unique, state-of-the-art characters, with exceptional artwork. As playable characters in the game with many valuable gameplay advantages, this is really exciting for our gamers.

Immortal, when downed in combat, the MayinHara do not require a healer to get back into the action.

Max Mintable 10,000

Token

HeC is the native currency of the game and the governance token

• LP pair address can be swapped
• ✅ Ownership Renounced
• ✅ No buy/sell tax
• ✅ No transfer tax
• ✅ No anti-whale
• ✅ Honeypot Check Passed
• ✅ Good current liquidity- 8,626.2 AVAX
• Max Supply: 100,000,000
• 26% of tokens held by rewards and staking contract
• 20% of tokens held by team wallet
• ⚠️ No liquidity locked or burned

Community Hypestatus

• 57,264 Follower @ Twitter
• 60,902 Members @ Discord
• 13,624 Followers @ Medium
• 11,168 Members @ Telegram

Uliquid is a decentralized protocol that interfaces with major Lending protocols on Blockchains. It allows users to 'self liquidate' their positions on these protocols with flash loans to avoid losses from protocol liquidation or leverage their assets for more returns.

• The Uliquid protocol currently charges a fee of 1% for liquidation
• ⚠️ All contracts have not been verified on chain and can contain any implementation

Having listed the above features, we reserve the right to not review exceedingly complex projects that would require tens of thousands of dollars of senior security analyst man hours. Typically these are projects that deal with leverage, lending, options, derivatives, and anything that is overly complex and which requires tons of peer reviews and audits from top audit companies. Since our resources are stretched thin and we don’t have the funding for these kind of massive endeavors, we may pass on projects that meet this level of complexity. DYOR.

Perpetuals trading platform that supports low swap fees and zero price impact on trades. 

We reserve the right to not review exceedingly complex projects that would require tens of thousands of dollars of senior security analyst man hours.

Typically these are projects that deal with leverage, lending, options, derivatives, and anything that is overly complex and which requires tons of peer reviews and audits from top audit companies.

Since our resources are stretched thin and we don’t have the funding for these kind of massive endeavors, we may pass on projects that meet this level of complexity. DYOR.

Baymax Finance is a decentralized perpetual contract trading protocol that allows its users to trade with up to 30x leverage.

We reserve the right to not review exceedingly complex projects that would require tens of thousands of dollars of senior security analyst man hours.

Typically these are projects that deal with leverage, lending, options, derivatives, and anything that is overly complex and which requires tons of peer reviews and audits from top audit companies.

Since our resources are stretched thin and we don’t have the funding for these kind of massive endeavors, we may pass on projects that meet this level of complexity. DYOR.

HoudiniSwap is a project that claims to allow trading between multiple assets and multiple chains, using the Monero blockchain as an intermediary to provide a layer of anonymity. The functionality is similar to FixeFloat or similar services, in the sense that no smart contracts are used, instead the deposit by the user is made to a wallet controlled by the project, which then sends.

• ⚠️ RugDoc HIGHLY recommends thinking through all possible scenarios in these types of projects thoroughly and assessing your risk tolerance. DYOR.
• They have their own Token ($POOF: 0x888c...f57a), which is only found on the ETH chain:
  • ⚠️ Transfer can be blocked anytime by blacklisting
  • Initial liquidity locked until Feb 18, 2023 (see tx)
  • Max Supply: 100,000 tokens
  • PreMinted: 100%
  • Taxes: Buy 6% | Sell 6% | Transfer 2%
  • Other Significant Governance Privileges: owner can take out any token from the contract (unless it is the token itself), enable trading once, change all fee receiving addresses and change the ratio's at which these addresses receive fees.

RelyFund uses a referral-based reward or a penalty system where it depends on incoming/outgoing users and 5% of the deposits and withdrawals go to the dev address.

• 🚨 The dev can withdraw any amount of the contract funds at any time without restriction
• 🚨 The dev can blacklist any user, preventing them from claiming rewards.
• ✅ 1% staking fees (Fixed).
• ✅ 1% reward fees (Fixed).
• 5% referral.

⚠️ TRIPLE CHECK the contract you interact with matches the one reviewed here:

• BSC 0xEf38AD...Eb8d
• ETH 0x92e824...f045
• AVALANCHE 0xdb5A21...C65A

Algostable project which appears to be based on Tomb Finance project. We recommend these kind of complex projects to pass reputable audits and KYC verifications as there is a risk of governance mishandling. Before investing, we also recommend users to conduct their own due diligence checks. The codebases tend to be large and complex with various risk vectors. We are classifying the whole Project as [Not Eligible].

• ⚠️ Not KYC'd with RugDoc
• ⚠️ No reputable audits as of date
• ⚠️ Liquidity is not locked with RugDoc
• ⚠️ Not in a multisig. We highly recommend the project to use one with community members or reliable 3rd parties as an approver due to the said governance risk.

🚨  We want to be VERY clear that this review and it's rating ONLY applies to the genesis staking contract and not the actual operations of anything that happens anytime after genesis pools 🚨

Genesis Contract Review

The project uses a different contract for each pool. All contracts are similar, so the current review is valid for all.

• ⚠️ Does not account for transfer-tax tokens. Withdraw is prone to reentrancy attacks in case of vulnerable tokens
• ⚠️ Governance can drain the contract 30 days after poolEndTime
• Deposit Fee: 1%
• ✅ Max 1% Deposit Fee
• ✅ No Transfer Tax on Native Token
• ✅ Token Ownership renounced
• ✅ Token Operator = Treasury
• Genesis is running for 2 days

⚠️ TRIPLE CHECK the contract you interact with. Make sure it matches the one reviewed here

• Avax pool: 0xffb123...5f4F
• USDC pool: 0x516bF6...cB0C
• USDT pool: 0xdEb566...24B6

Similar methodology to other projects that have rugged. Probably the same guy of Peanut Fi and Halloween Tomb.

The website is not working and the liquidity is too low and it is unlocked. Even the rugger requested the review with the same telegram user account and only the name was changed.

Algostable project which appears to be based on Tomb Finance project. We recommend these kind of complex projects to pass reputable audits and KYC verifications as there is a risk of governance mishandling. Before investing, we also recommend users to conduct their own due diligence checks. The codebases tend to be large and complex with various risk vectors. We are classifying the whole Project as [Not Eligible].

• ⚠️ Not KYC'd with RugDoc
• ⚠️ No reputable audits as of date
• ⚠️ Liquidity is not locked with RugDoc
• ⚠️ Not in a multisig. We highly recommend the project to use one with community members or reliable 3rd parties as an approver due to the said governance risk.

🚨  We want to be VERY clear that this review and it's rating ONLY applies to the genesis staking contract and not the actual operations of anything that happens anytime after genesis pools 🚨

Genesis Contract Review

• ⚠️ Does not account for transfer-tax tokens. Withdraw is prone to reentrancy attacks in case of vulnerable tokens
• ⚠️ No liquidity yet, therefore the genesis rewards cannot be sold
• ⚠️ Governance can drain the contract 90 days after poolEndTime
• ⚠️ Fee address can be set to the zero address, which would block harvests
• Deposit Fee: 1%
• ✅ Max 1% Deposit Fee
• ✅ TaxOffice Ownership renounced (TransferTax is set to 0%)
• ✅ Token Ownership renounced
• ✅ Token Operator = Treasury
• Genesis is running for 1 day

⚠️ TRIPLE CHECK the contract you interact with. Make sure it matches the one reviewed here (0x4fcA...22Be)

Rugged. Website down. Dev pulled out liquidity [tx1 | tx2] for the sum of ~3 $AVAX (~$49) and transferred them to a Binance account.

Algostable project which appears to be based on Tomb Finance project. We recommend these kind of complex projects to pass reputable audits and KYC verifications as there is a risk of governance mishandling. Before investing, we also recommend users to conduct their own due diligence checks. The codebases tend to be large and complex with various risk vectors. We are classifying the whole Project as [Not Eligible].

• ⚠️ Not KYC'd with RugDoc
• ⚠️ No reputable audits as of date
• ⚠️ Liquidity is not locked with RugDoc
• ⚠️ Not in a multisig. We highly recommend the project to use one with community members or reliable 3rd parties as an approver due to the said governance risk.

🚨  We want to be VERY clear that this review and it's rating ONLY applies to the genesis staking contract and not the actual operations of anything that happens anytime after genesis pools 🚨

Genesis Contract Review

• 🚨 Token Ownership not renounced. Owner can mint & dump.
• 🚨 Token Operator is a wallet which can mint & dump
• ⚠️ The site is not working and no pools have been added. There is a risk of the contract being switched out.
• ⚠️ Does not account for transfer-tax tokens. Withdraw is prone to reentrancy attacks in case of vulnerable tokens
• ⚠️ No liquidity yet, therefore the genesis rewards cannot be sold
• ⚠️ Governance can drain the contract 90 days after poolEndTime
• ✅ Max 5% Deposit Fee. ⚠️ No pool has been added yet, but when it is added you must put some fee for it. Zero fee pools will not accept deposits but will not fail either.
• ✅ No Transfer Tax on Native Token
• Genesis is running for 1 day

⚠️ TRIPLE CHECK the contract you interact with. Make sure it matches the one reviewed here (0x14f308...da79)

Algostable project which appears to be based on Tomb Finance project. We recommend these kind of complex projects to pass reputable audits and KYC verifications as there is a risk of governance mishandling. Before investing, we also recommend users to conduct their own due diligence checks. The codebases tend to be large and complex with various risk vectors. We are classifying the whole Project as [Not Eligible].

• ⚠️ Not KYC'd with RugDoc
• ⚠️ No reputable audits as of date
• ⚠️ Liquidity is not locked with RugDoc
• ⚠️ Not in a multisig. We highly recommend the project to use one with community members or reliable 3rd parties as an approver due to the said governance risk.

🚨  We want to be VERY clear that this review and it's rating ONLY applies to the genesis staking contract and not the actual operations of anything that happens anytime after genesis pools 🚨

Genesis Contract Review

• 🚨 Token Ownership not renounced. Owner can mint & dump.
• ⚠️ Does not account for transfer-tax tokens. Withdraw is prone to reentrancy attacks in case of vulnerable tokens
• ✅ Function governanceRecoverUnsupported removed
• ✅ No Deposit Fee
• ✅ Transfer Tax is capped at 30%
• ✅ Token Operator = Treasury
• Genesis is running for 3 days
• Share Token Operator is the Treasury and the Treasury is an upgradeable proxy. ProxyAdmin owner is a 365-day TimelockController

⚠️ TRIPLE CHECK the contract you interact with. Make sure it matches the one reviewed here (0x36C0...829B)

Algostable project which appears to be based on Tomb Finance project. We recommend these kind of complex projects to pass reputable audits and KYC verifications as there is a risk of governance mishandling. Before investing, we also recommend users to conduct their own due diligence checks. The codebases tend to be large and complex with various risk vectors. We are classifying the whole Project as [Not Eligible].

• ⚠️ Not KYC'd with RugDoc
• ⚠️ No reputable audits as of date
• ⚠️ Liquidity is not locked with RugDoc
• ⚠️ Not in a multisig. We highly recommend the project to use one with community members or reliable 3rd parties as an approver due to the said governance risk.

🚨  We want to be VERY clear that this review and it's rating ONLY applies to the genesis staking contract and not the actual operations of anything that happens anytime after genesis pools 🚨

Genesis Contract Review

• ⚠️ No liquidity yet, therefore the genesis rewards cannot be sold
• ⚠️ Does not account for transfer-tax tokens. Withdraw is prone to reentrancy attacks in case of vulnerable tokens
• ✅ Token Ownership renounced
• ✅ Token Operator = Treasury
• ✅ Max 1% Deposit Fee
• ✅ No Transfer Tax on Native Token
• ✅ Genesis Operator renounced
• ✅ Function governanceRecoverUnsupported cannot be called because Genesis Operator has been renounced
• Genesis is running for 1 day

⚠️ TRIPLE CHECK the contract you interact with. Make sure it matches the one reviewed here (0x7757...B51B)

Jarvis Network deals with overcollateralized stablecoins and synthetic fiat currencies in multiple chains. We reserve the right to not review exceedingly complex projects that would require tens of thousands of dollars of senior security analyst man hours.

Typically these are projects that deal with leverage, lending, options, derivatives, and anything that is overly complex and which requires tons of peer reviews and audits from top audit companies.

Since our resources are stretched thin and we don’t have the funding for these kind of massive endeavors, we may pass on projects that meet this level of complexity. DYOR.

Pancakeswap fork with additional custom functions

• ⚠️ Masterchef owner can mint any amount of $AVEX for free to any address. Owner can mint and dump.
• ⚠️ Masterchef owner can burn the deposit receipts of any user without prior approval. This leads to potential loss of unclaimed rewards as it blocks regular withdrawals (emergency withdrawals would still work). This only affects the Avex pool (native token).
• ⚠️ Masterchef owner can transfer (or recover) the Token ownership through the Masterchef contract [see code].
• ⚠️ Masterchef owner can transfer (or recover) the Syrup ownership through the Masterchef contract [see code].
• ⚠️ Either of the above two points can result in the owner being able to mint and dump on you
• ⚠️ Masterchef uses per-block emissions instead of per-time. This is an antipattern on the Avalanche network.
• ⚠️ Masterchef currently not behind a timelock
• ⚠️ Does not support deflationary/transfer-tax token pools, just clarify with project that none will be added
• ⚠️ Project appears to be using its own router which seems to be a fork of PCS router (swap fee 0.2%). Ensure that you perform a small test transaction first and check that the Router contract matches the one (0xe3Cb1b...d9Cd)
• ✅ No deposit fees
• 10M of $AVEX has been preminted
  • 1.9M has been lock with PinkLock (tx1 | tx2 | tx3)
  • 4.5M has been used to presale (tx).
  • ⚠️ 250K has been sent to a fresh wallet (tx).
  • ⚠️ 3.35M still left in the dev wallet (txs)
• Dev address can be set to the zero address, which would block regular withdrawals and harvests
• An extra 10% of emission rewards are minted to the dev address.
• Masterchef owner can modify the multiplier to any value, which can lead to an error in the emission.
• Emergency withdraw function is prone to reentrancy attacks in case of vulnerable tokens.

⚠️ TRIPLE CHECK the contract you interact with matches the one reviewed here (0xbf52db...47fa)