Avalanche Farms

Wealth Mountain uses a referral-based reward or a penalty system where it depends on incoming/outgoing users and 10% of the deposits/rewards go to the dev address.

• ⚠️ RugDoc HIGHLY recommends thinking through all possible scenarios in these types of projects thoroughly and assessing your risk tolerance. DYOR.
• ⚠️ Max of 10% early withdrawal fee, min of 2%.
• ✅ Max 10% staking fees.
• 3% referral.
• ⚠️ Withdrawals and harvests will fail once the BUSD/USDC supply has been depleted.
• ⚠️ Pending rewards will continue accumulating once BUSD/USDC supply is depleted, but none could be harvested

⚠️ TRIPLE CHECK the contract you interact with matches the one reviewed here:

• Ethereum: 0x7d7b7...f0ba
• BSC: 0x9b9c91...701b
• Avalanche: 0x142b12...9d11
• Polygon: 0x142b12...9d11
• Fantom: 0x142b12...9d11

It's a staking contract that uses a referral-based reward system where it depends on incoming users and fees to generate the rewards.

⚠️ RugDoc HIGHLY recommends thinking through all possible scenarios in these types of projects thoroughly and assessing your risk tolerance. DYOR.

• ⚠️⚠️ 50K USDTM tokens have been pre-minted and remain in the dev wallet. These can be dumped at any time.⚠️⚠️
• ⚠️ There is no unstake option so once you stake there is no withdrawing your initial deposit.
• 5% fees
• 2% referrals
• 1.5% daily returns.
• Developer is automatically added as a referral and earns referral rewards in case you didn't indicate any when depositing.

Dev wallet was funded through a bridge by this wallet (0xae6a0b...3b3f | Polygon tx | Avax tx). This in turn, was funded through a bridge by this other wallet (0x31ce4a...9498 | Avax tx | Polygon tx). The latter (0x31ce4...) is the same one that is found as a treasury fund wallet in the $PAE token, the share token of Ripae Finance ($PAE contract).

PLEASE NOTE that the success in these types of projects rely on enough users entering a stake after yours or you will lose money as there will not be enough funds for everyone eligible for a payout to cash out.

Algostable project which appears to be based on Tomb Finance project. We recommend these kind of complex projects to pass reputable audits and KYC verifications as there is a risk of governance mishandling. Before investing, we also recommend users to conduct their own due diligence checks. The codebases tend to be large and complex with various risk vectors. We are classifying the whole Project as [Not Eligible].

• ⚠️ Not KYC'd with RugDoc
• ⚠️ No reputable audits as of date
• ⚠️ Liquidity is not locked with RugDoc
• ⚠️ Not in a multisig. We highly recommend the project to use one with community members or reliable 3rd parties as an approver due to the said governance risk.

🚨  We want to be VERY clear that this review and it's rating ONLY applies to the genesis staking contract and not the actual operations of anything that happens anytime after genesis pools 🚨

Genesis Contract Review

• 🚨 Token Ownership not renounced. Owner can mint & dump
• 🚨 Token Operator is a wallet which can mint & dump
• ⚠️ Does not account for transfer-tax tokens. Withdraw is prone to reentrancy attacks in case of vulnerable tokens
• ⚠️ No liquidity yet, therefore the genesis rewards cannot be sold
• ✅ Function governanceRecoverUnsupported removed
• ✅ No Deposit Fee
• ✅ Transfer Tax is capped at 30%
• Genesis is running for 2 days
• Share Token Operator is the Treasury and the Treasury is an upgradeable proxy. ProxyAdmin owner is a 365-day TimelockController

⚠️ TRIPLE CHECK the contract you interact with. Make sure it matches the one reviewed here (0xF6aC...673e)

SmartGamble is a new betting protocol, with roulette being its first game released to the public. In addition to betting, the user can choose to be a provider and earn fees generated during failed bets from other players. The protocol is currently implemented in both BSC and Avalanche. Although in their documentation they present themselves as a decentralized protocol, the contracts are still in the possession of the deployer, assuming that it is in its early stage it can be taken as normal, but it is good to know that the parameters of the contracts can be modified without any announcement. The following can also be noted for this project:

• 🚨 Owner can drain any token from House contract (0xee03e1...6b1d) 🚨
• Max win fee: 1% (betting with native token) | 4%.
• Max gamble fee: 1%
• Max withdraw fee: 4%
• Referrer: Max 25%.
• ⚠️ Random contract is unverified (0x320824...8524).

SmartGamble Token ($GAMBLE, live since 5/9/2022)

• Basic ERC20 token
• Total Supply 10,000 $GAMBLE
• 100% premined
• No taxes
• No max tx
• No anti whale
• 🚨 98% of Total Supply added to liquidity but all LP tokens held in EOA with zero locking/vesting. These tokens can be dumped on the market at any time!

We reserve the right to not review complex projects that would require a great deal of senior security analyst man hours. Typically these are projects which requires tons of peer reviews and audits from top audit companies. Since our resources are stretched thin and we don’t have the funding for these kind of massive endeavors, we may pass on projects that meet this level. DYOR.

Vacus Finance is a yield aggregator protocol running on Avalanche.

The project has an audit by Solidity Finance. ⚠️ Note that it covers only the native token [link].

Some points to consider:

• Max supply: 300M
  • ⚠️ 195M $VCS preminted to an EOA [txs].
  • 75M $VCS pre-minted to 3 different contracts (teamLock, communityLock and marketingLock) of which none are verified.
  • 30M $VCS pre-minted for initial liquidity [tx]. LP tokens have been locked until 1 Oct, 2022 [0xb81d77...61dc].
• Both the vault and each of its strategies are upgradeable proxies. ⚠️The strategies implementations are not verified.

We reserve the right to not review exceedingly complex projects that would require tens of thousands of dollars of senior security analyst man hours.

Typically these are projects that deal with leverage, lending, options, derivatives, and anything that is overly complex and which requires tons of peer reviews and audits from top audit companies.

Since our resources are stretched thin and we don’t have the funding for these kind of massive endeavors, we may pass on projects that meet this level of complexity. DYOR.

The project implements an individual contract for each farm and pool. These contracts interact with the same vault. It is a multi-chain platform and 🚨 unfortunately a few contracts are found unverified on some of the chains [ex BSC, OKC]. In most implementations, the same code is implemented, but in some the blacklist functionality is added.

Although, taking into account the amount of resources that we should allocate to the review of each of the contracts of each of the chains, and considering that the review may not be valid for future pools added, we would initially rate the project as [not eligible] but considering the below, the rating will be [high risk].

• 🚨 Receipt Tokens Ownership has not been renounced.
• 🚨 Vault Ownership has not been renounced.
• 🚨 Funds deposited in the vault can be withdrawn by the gov (or from any address that is given the whitdraw role) at any time directly and/or indirectly.
• 🚨Vault contract can be paused.
• 🚨 Users can be blacklisted and unable to make new deposits and withdraw previously made deposits.
• ⚠️ Project uses its own router which seems to be a fork of Uniswap V2 (0.225% swap fee). Ensure that you perform a small test transaction first and check that the Router contract matches the one here:
  • AVAX 0x14f800...9895
  • BSC 0x6A1A6B...4F01
  • ETH 0x69cd48...39e0
  • HECO 0x00efb9...a694
  • OKC 0x56cdde...1707

Algostable project which appears to be based on Tomb Finance project. We recommend these kind of complex projects to pass reputable audits and KYC verifications as there is a risk of governance mishandling. Before investing, we also recommend users to conduct their own due diligence checks. The codebases tend to be large and complex with various risk vectors. We are classifying the whole Project as [Not Eligible].

• ⚠️ Not KYC'd with RugDoc
• ⚠️ No reputable audits as of date
• ⚠️ Liquidity is not locked with RugDoc
• ⚠️ Not in a multisig. We highly recommend the project to use one with community members or reliable 3rd parties as an approver due to the said governance risk.

🚨  We want to be VERY clear that this review and it's rating ONLY applies to the genesis staking contract and not the actual operations of anything that happens anytime after genesis pools 🚨

Genesis Contract Review

• 🚨🚨🚨🚨Contains hard rug code🚨🚨🚨🚨
• ⚠️ Does not account for transfer-tax tokens. Withdraw is prone to reentrancy attacks in case of vulnerable tokens
• 🚨🚨🚨🚨 Governance can drain the contract after set was called🚨🚨🚨🚨
• 🚨🚨🚨🚨Withdraw will drain the brando token out of the contract after set was called, all other tokens(AVAX etc) wont be withdrawable.🚨🚨🚨🚨
• ✅ Token Ownership renounced
• ✅ Token Operator = Treasury
• ✅ Fixed 0.5% Genesis Pool Deposit Fee
• ✅ TaxOffice Ownership renounced (TransferTax is set to 0%)
• Genesis is running for 1 day

⚠️ TRIPLE CHECK the contract you interact with. Make sure it matches the one reviewed here (0xd680...065e)

Algostable project which appears to be based on Tomb Finance project. We recommend these kind of complex projects to pass reputable audits and KYC verifications as there is a risk of governance mishandling. Before investing, we also recommend users to conduct their own due diligence checks. The codebases tend to be large and complex with various risk vectors. We are classifying the whole Project as [Not Eligible].

• ⚠️ Not KYC'd with RugDoc
• ⚠️ No reputable audits as of date
• ⚠️ Liquidity is not locked with RugDoc
• ⚠️ Not in a multisig. We highly recommend the project to use one with community members or reliable 3rd parties as an approver due to the said governance risk.

🚨  We want to be VERY clear that this review and it's rating ONLY applies to the genesis staking contract and not the actual operations of anything that happens anytime after genesis pools 🚨

Genesis Contract Review

• 🚨 Token Ownership not renounced. Owner can mint & dump.
• ⚠️ Token Operator = Treasury. 🚨 Token Ownership has not yet been renounced, so minting and dumping risk still remains.
• ⚠️ Does not account for transfer-tax tokens. Withdraw is prone to reentrancy attacks in case of vulnerable tokens
• ⚠️ No liquidity yet, therefore the genesis rewards cannot be sold
• ✅ No Transfer Tax on Native Token.
• ✅ Function governanceRecoverUnsupported removed
• ✅ No Deposit Fee
• Genesis is running for 3 days.

⚠️ TRIPLE CHECK the contract you interact with. Make sure it matches the one reviewed here (0x0A9027...0D8D)

🚨 Project was funded via Tornado, which is historically associated with a higher chance of soft-rugging or switching contracts. Dev wallet has been founded through wallets that have been founded through Tornado in BSC [tx1 | tx2 | Tornado txs: txs1 | txs2]. In other chains, directly or indirectly, the initial funds have been transferred through bridges [ex: polygon tx | related tx (from BSC) || Fantom: tx1 | tx2 | tx3]. Additionally, they introduced a custom function to retrieve the operatorship of all tokens. Token Operator can mint & dump.🚨

Algostable project which appears to be based on Tomb Finance project. We recommend these kind of complex projects to pass reputable audits and KYC verifications as there is a risk of governance mishandling. Before investing, we also recommend users to conduct their own due diligence checks. The codebases tend to be large and complex with various risk vectors. We are classifying the whole Project as [Not Eligible].

• ⚠️ Not KYC'd with RugDoc
• ⚠️ No reputable audits as of date
• ✅ Liquidity has been locked with RugDoc:
  • Avalanche: XCROSS-USDC | XSHARE-USDC
  • BSC: XCROSS-USDC | XSHARE-USDC
  • Fantom: XCROSS-USDC | XSHARE-USDC
  • Polygon: XCROSS-USDC | XSHARE-USDC
• ⚠️ Not in a multisig. We highly recommend the project to use one with community members or reliable 3rd parties as an approver due to the said governance risk.

🚨  We want to be VERY clear that this review and it's rating ONLY applies to the genesis staking contract and not the actual operations of anything that happens anytime after genesis pools 🚨

Genesis Contract Review

• ⚠️ Does not account for transfer-tax tokens. Withdraw is prone to reentrancy attacks in case of vulnerable tokens
• ⚠️ Governance can drain the contract 90 days after poolEndTime
• Deposit Fee: 1%
• ✅ Max 1% Deposit Fee
• ⚠️ Transfer Tax of the Native Token can be set to 100% which would block all transfers. ⚠️ See the warning at the beginning.
• ⚠️ TaxOffice Ownership renounced ⚠️ See the warning at the beginning.
• ⚠️ Token Ownership renounced. ⚠️ See the warning at the beginning.
• ⚠️ Token Operator = Treasury. ⚠️ See the warning at the beginning. Operator can mint & dump.
• Genesis is running for 1 day.

⚠️ TRIPLE CHECK you interact with. Make sure it matches the one reviewed here (0x774dE5...F772). All chains share the same address.

Algostable project which appears to be based on Tomb Finance project. We recommend these kind of complex projects to pass reputable audits and KYC verifications as there is a risk of governance mishandling. Before investing, we also recommend users to conduct their own due diligence checks. The codebases tend to be large and complex with various risk vectors. We are classifying the whole Project as [Not Eligible].

• ⚠️ Not KYC'd with RugDoc
• ⚠️ No reputable audits as of date
• ⚠️ Liquidity is not locked with RugDoc
• ⚠️ Not in a multisig. We highly recommend the project to use one with community members or reliable 3rd parties as an approver due to the said governance risk.

🚨  We want to be VERY clear that this review and it's rating ONLY applies to the genesis staking contract and not the actual operations of anything that happens anytime after genesis pools 🚨

Genesis Contract Review

• No genesis pools, all bullUSD distributed though presale
• 🚨 Token Ownership not renounced. Owner can mint & dump.
• ✅ Token Operator = Treasury
• ✅ No Transfer Tax on Native Token
• Note that a significant portion of the 2 million tokens already minted are held by a GnosisSafeProxy(1,250,000 tokens) and another team wallet with (~500,000 tokens)

⚠️ TRIPLE CHECK the contract you interact with. Make sure it matches the one reviewed here (0x186B...E339)

Algostable project which appears to be based on Tomb Finance project. We recommend these kind of complex projects to pass reputable audits and KYC verifications as there is a risk of governance mishandling. Before investing, we also recommend users to conduct their own due diligence checks. The codebases tend to be large and complex with various risk vectors. We are classifying the whole Project as [Not Eligible].

• ⚠️ No reputable audits as of date
• ⚠️ Liquidity is not locked with RugDoc
• ✅ KYC'd with RugDoc
• ✅ The project uses a custom multisig for their DAO address.

🚨  We want to be VERY clear that this review and it's rating ONLY applies to the genesis staking contract and not the actual operations of anything that happens anytime after genesis pools 🚨

Genesis Contract Review

• ⚠️ Does not account for transfer-tax tokens.
• ⚠️ Majority of the liquidity is staked in the masterchef and can be removed at any time.
• ✅ Function governanceRecoverUnsupported removed
• ✅ Max 2% Deposit Fee
• Genesis is running for 3 days
• 🚨 Transfer Tax of the Native Token can be set to 100% which would block all transfers
• 🚨 Token Operator is a wallet which can mint & dump
• 🚨 Token Ownership not renounced. Owner can mint and dump.
• ⚠️ Dao address can be set to the zero address, which would block harvests
• ⚠️ Reentrancy guard can be toggled and may expose certain functions to reentrancy if disabled.
• ⚠️ Deposit fees are not properly notified on the staking page. Deposit Fee is currently at 2%. Deposit fees can be turned on/off by the owner.

⚠️ TRIPLE CHECK the contract you interact with. Make sure it matches the one reviewed here (0x4adf2b...A95f / 0xa383...8045).

Another high (409,494.5%) APY promising rebase token build on AVAX. Fork of OHM/TIME/TOMB. Extremely high APY is not coming from utility but rather from hyper-inflation and new people buying in. These projects have proven to be unsustainable please DYOR.

• 🚨 Transfer can be blocked anytime by blacklisting the router
• 🚨 Rebase function has bug in it which will never allow the rebase rate to go below 211
• ⚠️ LP pair can be changed by owner
• ✅ Token Router Hardcoded
• ✅ Honeypot Check Passed
• ✅ 23% of total supply have been added to liqudity and locked for 1828 days with PinkLock
• No anti-whale
• ⚠️ All fees can be set artificially high, effectively blocking transfers
• ⚠️ Rebase rate can be set artificially high, effectively changing everyone's APY to 0%
• ⚠️ Total fee does not reflect sell fee
• Max Supply: 5,000,000,000 STASH
• PreMinted: 500,000 (0.01%)
• Payout Method: Rebase (every 15 min, 409,494.5% APY), burn 2%
• Auto-liquidity:  4%
• Treasury fee: 2%
• Insurance fund fee: 5%
• Sell fee: 3%
• Total transfer fee: 13%
• Total sell fee: 16%
• Other Governance Privileges: owner can withdraw and autoswap all tokens held in the contract, owner can turn on/off auto rebase, auto liquidity and autoswapback. Owner can change all fee receiving addresses, and can whitelist and blacklist any address.

⚠️ Triple check the contract you interact matches the one reviewed here (0x536...9e7)

Dark Forest nodes appears to be a fork of Ring Financial where you have to create "nodes" using the native token. Proceeds from the node creation are then managed by the protocol to be invested into several DeFi platforms that will produce an optimal return as stated in their documentations. DeFi platforms to be invested in are decided by the node users through votes. Each user who created nodes are then eligible to a certain reward per day as native tokens. So far, there seems to be no other fees to be noted aside from the reward claiming fee. (Nodes are not actual blockchain nodes that hold data, but more like a seat in an investment pool)

• ⚠️ Not KYC’d with RugDoc
• ⚠️ Liquidity locked appears to be very small.
• ⚠️ No multisig, we highly recommend the project to use one with community members or reliable 3rd parties as an approver due to the said governance risk.
• ⚠️ No reputable audits as of date

Having said the above, we are classifying this as Not Eligible as we recommend these kind of complex projects to pass reputable audits and KYC verifications as there is a risk of governance mishandling. Before investing, we also recommend users to conduct their own due diligence checks.

Algostable project which appears to be based on Tomb Finance project. We recommend these kind of complex projects to pass reputable audits and KYC verifications as there is a risk of governance mishandling. Before investing, we also recommend users to conduct their own due diligence checks. The codebases tend to be large and complex with various risk vectors. We are classifying the whole Project as [Not Eligible].

• ⚠️ Not KYC'd with RugDoc
• ⚠️ No reputable audits as of date
• ⚠️ Liquidity is not locked with RugDoc
• ⚠️ Not in a multisig. We highly recommend the project to use one with community members or reliable 3rd parties as an approver due to the said governance risk.

🚨  We want to be VERY clear that this review and it's rating ONLY applies to the genesis staking contract and not the actual operations of anything that happens anytime after genesis pools 🚨

Genesis Contract Review

• ⚠️ Does not account for transfer-tax tokens. Withdraw is prone to reentrancy attacks in case of vulnerable tokens
• ⚠️ No liquidity yet, therefore the genesis rewards cannot be sold
• ⚠️ Governance can drain the contract 30 days after poolEndTime
• Deposit Fee: 0%
• ✅ Max 1% Deposit Fee (They have the ability to choose a token that would have a 1% fee applied. Only one token can be selected).
• ✅ TaxOffice Ownership renounced (TransferTax is set to 0%)
• ✅ Token Ownership renounced
• ✅ Token Operator = Treasury
• ⚠️ Dao address can be set to the zero address, which would block harvests
• Genesis is running for 2 days

⚠️ TRIPLE CHECK the contract you interact with. Make sure it matches the one reviewed here (0xAa90Bc...6343)

Fork of BNB Miner

PLEASE NOTE that these types of projects appear to be straight up ponzi schemes and you WILL lose money if you're not lucky enough to have more users come in after you so you can cash out. RugDoc HIGHLY recommends staying away from these types of projects. We are marking this as ineligible so it does not get requested again. DYOR.

BEP20 Token with no rewards and a rather complex taxation mechanism

• 🚨 Currently no known liquidity lock. Check with team to see if this is in the roadmap
• ✅ Token Router hardcoded
• ✅ LP pair address hardcoded
• ✅ Honeypot Check Passed
• Max TX for buys can not go below 0.5%
• Max TX for sells can not go below 0.25%
• Max transfer fees 24%
• Max Supply: 100,000,000 DEWO
• PreMinted: 100,000,000 DEWO (100%)
• Payout Method: None,
• Governance Privileges: Owner can change all buy/sell taxes and limits, change all taxation wallets, and include/exclude addresses from tax.

⚠️ Triple check the contract you interact matches the one reviewed here (0xCDD...fdc)

🚨 Contracts are behind an upgradeable proxy that can be upgraded to malicious code at any time. Current implementation is 0xb6ccb2...2d7f

🚨 The pre-sale contract has not been provided and therefore we were unable to review it. Presales are notoriously risky, DYOR.