Avalanche Farms

FarmersOnly Layer 2 fork with a max supply of 1,000,000,000,000

• ⚠️ Masterchef currently not behind a timelock
• ✅ Max 4% deposit fees
• ✅ Correctly accounts for transfer taxes on any token pool
• Pending rewards will continue accumulating once max supply is reached, but none will actually be harvestable – this is not a huge concern as the earliest this could happen is 2024-04-18.
• Owner can set harvest intervals on pools (max 2 days), but users would lose rewards if they do – just clarify with project that they will not try this
• The total token supply at time of review has been minted to the masterchef, and is intended to be swapped for presale tokens. Dev can change the presale deadline at any time. Presales are notoriously risky, DYOR.
• An extra 10% of emission rewards are minted to the dev address

⚠️ TRIPLE CHECK the contract you interact with matches the one reviewed here (0x3f9c...f8c6)

Fantasm Finance fork. Provides a Fractional-Algorithmic Synthetic Token pegged to the value of 1 AVAX on Avalanche. They have forked from the new contracts and not from the ones exploited weeks ago.

We reserve the right to not review exceedingly complex projects that would require tens of thousands of dollars of senior security analyst man hours.

Typically these are projects that deal with leverage, lending, options, derivatives, and anything that is overly complex and which requires tons of peer reviews and audits from top audit companies.

Since our resources are stretched thin and we don’t have the funding for these kind of massive endeavors, we may pass on projects that meet this level of complexity. DYOR.

Beyond what is mentioned above, we can indicate below some points that may be of interest to you regarding farms (0x31a7Fc...5bDF).

• ⚠️⚠️ The website is not active yet. Supposedly, it will be active hours before launch. There is a risk of the contract being switched out. ⚠️⚠️
• ⚠️ Masterchef currently not behind a timelock.
• ⚠️ Does not support deflationary/transfer-tax token pools, just clarify with project that none will be added.
• ✅ No deposit/withdrawal fees.

⚠️ Triple check the contract you interact matches the one reviewed here (0x31a7Fc...5bDF).

Algostable project which appears to be based on Tomb Finance project. We recommend these kind of complex projects to pass reputable audits and KYC verifications as there is a risk of governance mishandling. Before investing, we also recommend users to conduct their own due diligence checks. The codebases tend to be large and complex with various risk vectors. We are classifying the whole Project as [Not Eligible].

• ⚠️ Not KYC'd with RugDoc
• ⚠️ No reputable audits as of date
• ⚠️ Liquidity is not locked with RugDoc
• ⚠️ Not in a multisig. We highly recommend the project to use one with community members or reliable 3rd parties as an approver due to the said governance risk.

🚨  We want to be VERY clear that this review and it's rating ONLY applies to the genesis staking contract and not the actual operations of anything that happens anytime after genesis pools 🚨

Genesis Contract Review

• 🚨 Token Ownership not renounced. Owner can mint & dump.
• ⚠️⚠️ 2,400 Tokens has been minted and sent to the dev wallet [tx]. Clarify with the project about the use of those tokens.
• ⚠️ Does not account for transfer-tax tokens. See last update.
• ⚠️ No liquidity yet, therefore the genesis rewards cannot be sold
• ⚠️ Withdraw is prone to reentrancy attacks in case of vulnerable tokens. See last update.
• ⚠️ Governance can drain the contract 90 days after poolEndTime (18 Jul 2022)
• ⚠️ Token Operator != Treasury
• ✅ Max 1% Deposit Fee
• ✅ No Transfer Tax on Native Token

⚠️ TRIPLE CHECK the contract you interact with matches the one reviewed here (0x48455E...5Ec2)

Goose fork with a max supply of 500M and a lot of custom code related to NFT Farming and user farm boost.

• ⚠️⚠️ The project implements an additional Tomb forks function (governanceRecoverUnsupported) that allows all contract funds to be withdrawn 100 days after farming has started (~ July 7, 2022). Please keep this in mind and act accordingly.
• ⚠️ Token owner is NOT Masterchef, but Masterchef does not mint new tokens but only distributes those sent there by the dev. The current Token owner is the dev. The Token can handle multiple minters. At the moment there are 3 minters:
  - The NFT controller (0x)
  - Masterchef
  - 🚨 Dev. There is a risk of the dev minting and dumping. Please clarify with the project on token ownership.
• ⚠️ Initial Liquidity is unlocked and can be removed and dumped at any time [tx]. Please clarify with the project on liquidity locking or burning.
• ✅ Max 5% withdrawal fees (Emergency withdrawals are not covered by this fee).
• ✅ Masterchef behind a 24 hr timelock.
• ⚠️ Does not support deflationary/transfer-tax token pools, just clarify with project that none will be added
• Dev address can be set to the zero address, which would block regular withdrawals and harvests.

⚠️ TRIPLE CHECK the contract you interact with matches the one reviewed here (0xAF1632...75c3).

4th layer from the same team as Selenium Farm, Arsenic Finance and Krypton Finance.

Goose fork with a max supply of 25K

• ⚠️ Liquidity will be added after the presale ends. Presales are notoriously risky, DYOR. Please clarify with the project on liquidity locking/burning once it is added.
• ⚠️ Pending rewards will continue accumulating once max supply is reached, but none will actually be harvestable
• ✅ Max 4% deposit fees
• ⚠️ Masterchef currently not behind a timelock
• ✅ Correctly accounts for transfer taxes on any token pool
• An extra 10% of emission rewards are minted to the dev address.
• 1 hr harvest lockups (max 2 days). Each time it is harvested, 50% of the rewards are deposited into the user's wallet, and the remaining 50% of the rewards are carried over to the next lockup period.

⚠️ TRIPLE CHECK the contract you interact with matches the one reviewed here (0x1B4489...61A7)

Custom rebase/reflection token in Avalanche.

• 🚨 Transfer can be blocked anytime by switching off the router.
• 🚨 Both the Anti-Sniper (0x468658...54A2) & Reflector (0x6059Ed...5d8B) contract are unverified.
• ⚠️ They will have a presale with PinkSale and if all goes well, the liquidity will be locked up to 30 days after the presale ends [link].
• ⚠️ Token router can be changed. Please check to ensure they are using a well-established router.
• ⚠️ Anti-whale can be set artificially low, which could impede/block transfers.
• Transfer tax LP Tokens are sent to zero address.
• They use an anti-sniper contract, by which an address can be listed as such and a differential tax of 25% (max 30%) is charged.
• PreMinted: 100M
  • 25M for pre-sale.
  • ~15M for liquidity.
  • The remaining supply is kept in the owner's wallet (~59% of the current supply - see holders).
• Payout Method: Reflection (6%)
• Auto-Liquidity: 1%
• Governance Privileges: Owner can update fees, wallets, router, include/exclude any address as a sniper, etc.
• 14% buy tax, 16% sell tax (max 25% for both).
• 0.5% anti-whale (min 0.1%)

⚠️ Triple check the contract you interact matches the one reviewed here (0xd33df9...8e69)

Algostable project which appears to be based on Tomb Finance project. We recommend these kind of complex projects to pass reputable audits and KYC verifications as there is a risk of governance mishandling. Before investing, we also recommend users to conduct their own due diligence checks. The codebases tend to be large and complex with various risk vectors. We are classifying the whole Project as [Not Eligible].

• ⚠️ Not KYC'd with RugDoc
• ⚠️ No reputable audits as of date
• ⚠️ Liquidity is not locked with RugDoc
• ⚠️ Not in a multisig. We highly recommend the project to use one with community members or reliable 3rd parties as an approver due to the said governance risk.

🚨  We want to be VERY clear that this review and it's rating ONLY applies to the genesis staking contract and not the actual operations of anything that happens anytime after genesis pools 🚨

Genesis Contract Review (Ends 11 Apr, 2022)

• 🚨 Deposit Fee is uncapped and can be up to 100%.
• 🚨 Transfer Tax of the Native Token can be set to 100% which would block all transfers.
• 🚨 Token Ownership not renounced. Owner can mint & dump [0xdc467d...3c1d].
• ⚠️ Does not account for transfer-tax tokens.
• ⚠️ No liquidity yet, therefore the genesis rewards cannot be sold.
• ⚠️ Withdraw is prone to reentrancy attacks in case of vulnerable tokens.
• ⚠️ Governance can drain the contract 90 days after poolEndTime.

⚠️ TRIPLE CHECK the contract you interact with matches the one reviewed here (0x22da5e...59f8).

This review will be updated with their contracts at the launch of the project. The current review only encompasses their token and presale contracts.

Token (0x6083ea...084a):

• ⚠️ The liquidity will be added once both the presales and the allocation of the NFTs are finished. Please clarify with the project on liquidity locking or burning once it happens.
• ⚠️ TransferTax is uncapped and can be set to 100%, but unlike other projects, all transfers are exempt by default and only addresses that are individually indicated one by one will have to pay this tax. It is worth clarifying that these addresses will have tax only on receipts and not when they send to other addresses (unless the other address has also been added, obviously).
• Tax amounts are sent to the treasury address [0x61d81f...7865 - Multisig].
• Max Supply: No max supply.
• PreMinted: 60,686
• Payout Method: None
• Auto-Liquidity: None
• Governance Privileges: Treasury can include/exclude addresses to pay taxes, update tax fee, mint/burn tokens.
• 0% transfer tax (disabled for everyone at this time).

Presale contract [0xeA28A7...d180]:

• Only whitelisted addresses are allowed can buy.
• Price: 6 USDC / $RAINBOW.
• USDC are sent directly to treasury wallet [0x61d81f...7865 - Multisig].
• Unsold $RAINBOW cannot be withdrawn.

⚠️ Triple check the contract you interact matches the one reviewed here (0x6083ea...084a).

Algostable project which appears to be based on Tomb Finance project. We recommend these kind of complex projects to pass reputable audits and KYC verifications as there is a risk of governance mishandling. Before investing, we also recommend users to conduct their own due diligence checks. The codebases tend to be large and complex with various risk vectors. We are classifying the whole Project as [Not Eligible].

• ⚠️ Not KYC'd with RugDoc
• ⚠️ Liquidity is not locked with RugDoc
• ⚠️ Not in a multisig. We highly recommend the project to use one with community members or reliable 3rd parties as an approver due to the said governance risk.
• ✅ Audited by: Certik

Emissions for Genesis pools on both Fantom and Avalanche have ended.

Avax Staker staking contract uses a referral-based reward system where it depends on incoming users and 12% of the deposits go to the commission/dev address. In addition, 10% is charged for each withdrawal used to fund the contract. Please note that the success in these types of projects rely on enough users entering a stake after yours or you will lose money as there will not be enough funds for everyone eligible for a payout to cash out. RugDoc highly recommends thinking through all possible scenarios in these types of projects thoroughly and assessing your risk tolerance. DYOR.

Stargate Finance is, in his own words, a community-driven organization building the first fully composable native asset bridge, and the first dApp built on LayerZero. Stargate's vision is to make cross-chain liquidity transfer a seamless, single transaction process.

The underlying assets are first deposited in pools that are responsible for providing liquidity between bridge destinations. In addition to getting returns for the transfer fees, the user can deposit these receipts in the farms and earn additional rewards in $STG (governance token). This last mechanism is carried out using a masterchef for each network. Bellow we detail some points that we were able to observe to those that are implemented at the time of this review:

• Masterchef is not behind Timelock. It is behind a multisig, but the documents do not specify who the signers would be.
• No deposit fees.
• ⚠️ Does not support deflationary/transfer-tax token pools.
• No audit is specified in the doc to date.

We reserve the right to not review exceedingly complex projects that would require tens of thousands of dollars of senior security analyst man hours.

Typically these are projects that deal with leverage, lending, options, derivatives, and anything that is overly complex and which requires tons of peer reviews and audits from top audit companies.

Since our resources are stretched thin and we don’t have the funding for these kind of massive endeavors, we may pass on projects that meet this level of complexity. DYOR.

Polar DANO appears to be a fork of Ring Financial where you have to create "nodes" using the native token. Proceeds from the node creation are then managed by the protocol to be invested into several DeFi platforms that will produce an optimal return as stated in their documentations. DeFi platforms to be invested in are decided by the node users through votes. Each user who created nodes are then eligible to a certain reward per day as native tokens. So far, there seems to be no other fees to be noted aside from the reward claiming fee. (Nodes are not actual blockchain nodes that hold data, but more like a seat in an investment pool)

• 🚨 Max holder is the "distribution pool" [0x...a053] which is simply a user wallet. At the time of this review it has >58% of the total supply [see holders].
• ⚠️ Not KYC’d with RugDoc
• ⚠️ Liquidity is not locked with RugDoc
• ⚠️ No multisig, we highly recommend the project to use one with community members or reliable 3rd parties as an approver due to the said governance risk.
• ⚠️ No reputable audits as of date

Having said the above, we are classifying this as Not Eligible as we recommend these kind of complex projects to pass reputable audits and KYC verifications as there is a risk of governance mishandling. Before investing, we also recommend users to conduct their own due diligence checks.

Project appears to be connected to Banksy Farm. Masterchef is a modified Panther fork with 1,000,000 max token supply.

• ⚠️ Masterchef currently not behind a timelock
• ⚠️ Token owner is not yet Masterchef. There is a risk where owner can mint tokens to any address.
• ⚠️ Token has blacklisting capabilities for bot prevention and can be manually called by owner to elect which addresses to blacklist.
• ⚠️ Token anti-whale can be set artificially low, which could impede/block transfers.
• ✅ Max 4% deposit fees
• ✅ Correctly accounts for transfer taxes on any token pool
• 3% anti-whale (min 0.5%)
• 🚨 Masterchef owner can emergency withdraw any staked NFTs and transfer it to any address specified. If used maliciously, this function could cause potential losses.

⚠️ TRIPLE CHECK the contract you interact with matches the one reviewed here (0x30B7...b1FB / 0xdb77...729d)

Safuu Protocol fork. Custom reflection/dividend distributing token in Avalanche.

• ⚠️ The blacklist mechanism will only be able to block contract addresses, not normal user addresses.
• ⚠️ LP pair address can be set to a zero or a non-LP pair address.
• ✅ Token Router Hardcoded.
• ✅ 60% Liquidity Locked on PinkLock until 2037 [link].
• Owner can disable auto adding of liquidity and rebase.
• Owner can swap out addresses which receives the fees, treasury, and fire pit
• PreMinted: 283,560 (for presale & liquidity).
• Payout Method: Rebase/Reflection
• Auto-Liquidity: 4%
• Transfer tax: 14% buy tax, 16% sell tax.

⚠️ Triple check the contract you interact matches the one reviewed here (0x3e5a9F...f6b7).

Algostable project which appears to be based on Tomb Finance project. We recommend these kind of complex projects to pass reputable audits and KYC verifications as there is a risk of governance mishandling. Before investing, we also recommend users to conduct their own due diligence checks. The codebases tend to be large and complex with various risk vectors. We are classifying the whole Project as [Not Eligible].

• ⚠️ Not KYC'd with RugDoc
• ⚠️ No reputable audits as of date
• ⚠️ Liquidity is not locked with RugDoc
• ⚠️ Not in a multisig. We highly recommend the project to use one with community members or reliable 3rd parties as an approver due to the said governance risk.

🚨  We want to be VERY clear that this review and it's rating ONLY applies to the genesis staking contract and not the actual operations of anything that happens anytime after genesis pools 🚨

Genesis Contract Review

• 🚨 Token Ownership not renounced. Owner can mint & dump.
• ⚠️ Does not account for transfer-tax tokens, Withdraw is prone to reentrancy attacks in case of vulnerable tokens
• ⚠️ Governance can drain the contract 90 days after poolEndTime
• ✅ No deposit fees
• ✅ Transfer Tax is capped at 4%, Can be modified by Owner
• ✅ Token Operator = Treasury
• Genesis is running for 150 days
• All reward tokens were preminted

⚠️ TRIPLE CHECK the contract you interact with matches the one reviewed here (0x46...886D)

Algostable project which appears to be based on Tomb Finance project. We recommend these kind of complex projects to pass reputable audits and KYC verifications as there is a risk of governance mishandling. Before investing, we also recommend users to conduct their own due diligence checks. The codebases tend to be large and complex with various risk vectors. We are classifying the whole Project as [Not Eligible].

• ⚠️ Not KYC'd with RugDoc
• ⚠️ No reputable audits as of date
• ⚠️ Liquidity is not locked with RugDoc
• ⚠️ Not in a multisig. We highly recommend the project to use one with community members or reliable 3rd parties as an approver due to the said governance risk.

🚨  We want to be VERY clear that this review and it's rating ONLY applies to the genesis staking contract and not the actual operations of anything that happens anytime after genesis pools 🚨

Genesis Contract Review

• 🚨 Transfer Tax of the Native Token can be set to 100% which would block all transfers
• ⚠️ Does not account for transfer-tax tokens, Withdraw is prone to reentrancy attacks in case of vulnerable tokens
• ⚠️ Governance can drain the contract 90 days after poolEndTime
• Deposit Fee: 1.5%
• ✅ Max 1.5% deposit fees
• ✅ Token Ownership renounced
• ✅ Token Operator = Treasury
• Genesis is running for 2 days

⚠️ TRIPLE CHECK the contract you interact with matches the one reviewed here (0x382...efd)