BSC Farms

❌❌❌ Do not stake in it - has a migrator function ❌❌

Fork of OlympusDAO:

• ⚠️ Not KYC'd with RugDoc
• ⚠️ No reputable audits as of date
• ⚠️ Liquidity is not locked with RugDoc
• ⚠️ Not in a multisig. We highly recommend the project to use one with community members or reliable 3rd parties as an approver due to the said governance risk.

Having said the above, we are classifying this as [Not Eligible] as we recommend these kind of complex projects to pass reputable audits and KYC verifications as there is a risk of governance mishandling. Before investing, we also recommend users to conduct their own due diligence checks.

Fullsail fork with a max supply of 15,000 tokens. The BSC layer of Waterfall Finance (Fantom)

• ⚠️ Does not support deflationary/transfer-tax token pools aside from the native token, just clarify with project that none will be added
• ⚠️ Pending rewards will continue accumulating once max supply is reached, but none will actually be harvestable
• ⚠️ Project states it has a Paladin audit, but this is for the Fantom contract only, which has very different code to this contract.
• ⚠️ Masterchef currently not behind a timelock
• ✅ Max 4% deposit fees
• Dev address can be set to the zero address, which would block regular withdrawals and harvests
• 5% transfer tax
• 1% referral (max 20%). Website states 2%, but the contract is currently set at 1%
• An extra 10% of emission rewards are minted to the dev address
• Initial liquidity is locked with the RugDoc liquidity locking service

⚠️ TRIPLE CHECK the contract you interact with matches the one reviewed here (0x49a2...1191)

Goose fork

• ⚠️ 100% deposit fees possible
• ⚠️ Masterchef currently not behind a timelock
• ⚠️ Does not support pools with deflationary / transfer-tax tokens. Just confirm with the team that these will not be added
• 10% of emissions sent to dev address

⚠️ Triple check the contract you interact matches the one reviewed here (0x80cd...918b)

Fork of OlympusDAO:

• ⚠️ Not KYC'd with RugDoc
• ⚠️ No reputable audits as of date
• ⚠️ Liquidity is not locked with RugDoc
• ⚠️ Not in a multisig. We highly recommend the project to use one with community members or reliable 3rd parties as an approver due to the said governance risk.

Having said the above, we are classifying this as [Not Eligible] as we recommend these kind of complex projects to pass reputable audits and KYC verifications as there is a risk of governance mishandling. Before investing, we also recommend users to conduct their own due diligence checks.

Safemoon fork

⚠️ Triple check the contract you interact matches the one reviewed here (..074a)

Description

The CryptoGirlfriend NFT project is a collection of 6,969 uniquely designed beautiful CryptoGirlfriends residing on the Binance Smart Chain. These art pieces were handpicked by CryptoGirlfriend herself and is the very first piece of the CryptoGirlfriend NFT project which will later include a CryptoGirlfriend Comic Book.

Max Mintable / Minted (%) [At time of listing]

• 6,969 / 0 (0%)

Mint Price

• Presale: 0.3 BNB
• Public Sale: 0.4 BNB

Launch Details

• 21 Jan 2022 @ 17:00 UTC

Contract

• unknown

Community Hypestatus

• 21,300 Follower @ Twitter
• 1439 Members @ Telegram
• 2240 Subscribers @ Youtube
• 1,152 Members @ Discord
• 57 Follower @ Instagram

Reward Features

• CGF NFT holders will earn fee rewards from the marketplace.
• Member-Exclusive CryptoGirlfriend Merch Store gets unlocked, featuring Limited Edition tees, hoodies, and other goodies for NFT holders.
• CryptoGirlfriend NFT Holders will have exclusive access to the first CryptoGirlfriend NFT digital comic book and receive a printed comic book.
• Once all CryptoGirlfriend NFTs have been minted, stake to earn games will be released to earn other collectibles.

Custom Project with several features:

For the token: currently the token owner is an unverified contract, that means there might be the possibility of minting and dumping.

- Deposits your cake into the pancakeSwap staking contract -> acts as a vault

- uses 5% to reward stakers and splits the other 95% up to a) compound cake and b) buy shitcoins (currently there are two shitcoins in the index to buy [0x59262d794262Af0FD78437DaC5263463b38FA9ff, 0x2cA25319E2E63719F87221D8bF3646F8F5dE5DED]

- The contract itself is drainable through various functions, but generally all the cake are sitting in the pancakeSwap contract

- has a 0.2-0.5% withdrawal fee (current 0.2%)

There are a few more functions like locking etc. However, this project will get obviously the not eligible risk rating since it is completely customized and we simply do not have the resources to check custom contracts like this.

We highly recommend getting a security audit by a top-tier auditor like Paladin.

Goose fork with a fixed supply

• ⚠️ Masterchef has not been excluded from transfer taxes on the native token. Currently non-buy/sell rates on the token are zero, but if this is ever changed, it can be exploited to drain all the native tokens in the contract.
• ⚠️ Does not support deflationary/transfer-tax token pools, just clarify with project that none will be added
• ✅ Max 5% deposit fees
• ✅ Max 5% withdrawal fees (inc. on emergencyWithdraw)
• Masterchef behind a 4 hr timelock
• Start block has not been set yet, please clarify with the project on when this might happen
• Uses a separate Distributor contract to distribute rewards, and has a variable emission rate depending on how many tokens are in the Distributor
• 15% transfer tax (max 30%)
• An extra 2.5% of emission rewards are minted to the dev address
• Liquidity has been locked for 3 months

⚠️ TRIPLE CHECK the contract you interact with matches the one reviewed here (0x685E...Da2c)

Simple ERC20 Token Implementation

• 🚨 Transfer can be blocked anytime by locking the token contract or adding an address to the vested list.
• 🚨 Governance privileges are still callable by owner and/or the ICO contract (which is made private)
• ⚠️ Liquidity is not locked and can be dumped at any time. Please clarify with the project on liquidity locking or burning
• ✅ Honeypot Check Passed
• Governance Privileges: Mint, Mint to many addresses, finish minting, burn, burn many, transfer tokens out of the contract, lock/unlock token, add/remove to vested list, set ICO contract.
• Max Supply: Unlimited
• Payout Method: None
• No transfer tax
• No anti-whale

⚠️ Triple check the contract you interact matches the one reviewed here (0x54c2...343a)

Simple ERC20 Implementation

• ⚠️ 98% of remaining tokens still with the deployer address. Please clarify with the project on liquidity locking, burning, or purpose of unlocked tokens
• Governance Privileges: Owner can retrieve other tokens sent to the BMBCoin token contract.
• No transfer tax or reflection tokenomics
• Total Supply: 10.0 Billion
• Ethereum and BSC contracts appear to be using the same source code.

⚠️ Triple check the contract you interact matches the one reviewed here (BSC: 0x3d9d...ef813 / ETH: 0x3d9d...f813)

An upcoming OHM-Fork on the Binance Smart Chain.

They already did their whitelist presale and distributed their Presale Token (0x3e6D7ac44A0ac8a99B0D8248Fc6e9e5F5a98CFb6)

Currently we are waiting for them to deploy their main contracts and the review will be adapted therefore.

- ✅ Kyc
- ✅ Multi sig
- ⚠ No proper audit yet

This review will get the 'low risk' rating once they:
a) deployed their main contracts
b) got a proper audit from Paladin or another t1 auditor

Description

Altered Battleground it´s a world where survival shows you great challenges and you must fight to maintain your supremacy and protect the Citadel from the creatures that attack it.

Max Mintable / Minted (%) [At time of listing]

• Minting supply varies.

Mint Price

• Each NFTs in the game varies in costs and can be found in their docs [link].

Launch Details

• Presale: 5 JFeb 2022.

Contract

• ⚠️ The owner of the NFT contract can ban both the sender, the receiver and even the NTF ID [link].
• ✅ Verified.
• 🚨 $ALTERBG has a max supply of 100M. They were pre-minted early and 95M were distributed among various contracts that unfortunately none are verified and can contain anything. ⚠️ 5M remain in developer's possession.

Community Hypestatus

• 54 Subscribers @ Youtube
• 46 Follower @ Twitter
• 29 Members @ Telegram

Reward Features

• Players receive $ALTERBG as rewards to be used in various ways within the game, with the exception of the store where BUSD will be used.
• $ALTERBG can be used to mint NFT, pay items repairs, purchase in-game crafting items and pay the entry price in private games modes.
• Staking $ALTERBG to earn interests

Panther fork

• 🚨 Hard rug code not found, but the project is High Risk for the following reason:
• 🚨 Masterchef does not account for transfer-tax on the ANCHOR pool (PID 7). This can be exploited to drain all the rewards in the contract!
• 🚨 They implement their own AMM, but unfortunately the router is unverified and can contain anything.
• ⚠️ Withdrawals and harvests will fail once max supply is reached unless emissions and/or multipliers are set to zero. Users will still be able to emergency withdraw though.
• ⚠️ Pending rewards will continue accumulating once max supply is reached, but none will actually be harvestable
• ⚠️ 100% deposit fees possible
• ⚠️ Masterchef currently not behind a timelock
• ⚠️ Does not support deflationary/transfer-tax token pools other than the project's native token, just clarify with the project that no additional ones will be added (see above).
• Referral system of up to 10 levels, being able to define variable commissions between them. At the moment, they are only active up to level 3 with 1% for each, which can be updated up to 10%.
• An extra 10% of emission rewards are minted to the dev address.
• ⚠️ Transfer-tax liquidity tokens can be sent to the operator wallet (swap and liquify is not enabled at the moment). Please clarify with the project on how they plan to use this.
• ⚠️ Token router can be changed (none have been indicated at the moment.). Please check to ensure they are using the PancakeSwap (BSC) router if set.
• ⚠️ Anti-whale can be set artificially low, which could impede/block transfers.
• ⚠️ Masterchef has not been excluded from anti-whale which could block harvests.
• ⚠️ 3% transfer tax (max 50%).
• Only 28% of the transfer tax amount is kept to add liquidity, 20% for automatic burning, 2% for reservation, and the remaining 50% is sent to the dev wallet. ⚠️ Liquidity, burn and reserve rates can be updated up to 100% of the transfer tax amount. ⚠️ It does not have a security check when updating the burn, liquidity and reserve rates, which can block transfers in the event that the sum of these rates is not equal to 100. ⚠️ On the other hand, if they are all set to 0, 100% of the transfer tax amount would be sent directly to the dev wallet. Please note that these changes can be made by the operator and not by the owner. The first is a user wallet so changes can be made at any time.
• 5% Anti-whale (min 0.01%) although the docs indicates that it should be 0.5%.
• 2-8 hr harvest lockups (max 14 days)

⚠️ TRIPLE CHECK the contract you interact with matches the one reviewed here (0xD18B23...C772).

🚨 Staking contract is behind an upgradeable proxy that can be upgraded to malicious code at any time 🚨

Currently there is only a single HPL pool on the contract, so this is the only token currently at risk – but keep in mind the contract could be upgraded to one that could withdraw HPL tokens from your wallet, and if more pools are added later on, these would also be at risk.

If you're uncomfortable with the risk of your HPL tokens being taken by the project, it's highly advisable to revoke approval to this contract and emergency withdraw any funds you have in there.

🚨 The current implementation behind the proxy contains hard rug code that gives approval to an external lock contract that can be set to anything to withdraw tokens from the masterchef. 🚨

❌❌❌ Has hard-rug code, dont stake in it ❌❌❌

🚨 The project implements an individual contract for each farm and pool. Unfortunately none of these are verified, so they can contain anything. They are also not behind a Timelock.

⚠️ We have contacted both the Telegram group in English and Spanish to correct this, but in the first there was no response and in the second they mentioned in passing that "the team is already aware." It is worth mentioning that in the first group for days there are users who request the verification of the contracts and the responses are similar to the one mentioned above. At the time of publication of this review, the contracts remain unverified.

On the other hand, they use their own AMM. Which is a modified fork of the PCS router. Among the changes made, the possibility of modifying the SwapFee And DevFee is added. The factory is not behind a Timelock, so these changes can be made at any time.

Transfer Tax / Reflection type token

• ⚠️ 33% of remaining tokens still with the dev address. Please clarify with the project on liquidity locking, burning, or purpose of unlocked tokens
• ✅ Token Router Hardcoded
• ✅ 67% Liquidity Locked: PinkSale
• 1% buyback fee, 3% liquidity fee, 1% tax fee, 1% wallet fee (max 10% each, ⚠️ total of 40% max)
• Governance privilege: Include/Exclude from reward or fee, set fees, set buyback limit, set swap and liquify, set fee wallet, recover other tokens in the contract
• Transfer Tax Liquidity Tokens / Buyback tokens are sent to the burn address
• Total supply: 200 Milion

⚠️ Triple check the contract you interact matches the one reviewed here (0x6094...a5f5)

United Farmers Finance (Grain) fork with a max supply of 20,000,000

• 🚨 All the staked UFX (including users' staked funds) can be withdrawn from the masterchef by the operator at any time. The other pools appear to be safe, but this review will remain High Risk while this is still possible
• ⚠️ Masterchef does not mint tokens, so will need to be constantly topped up to ensure rewards can be distributed. If this is not constantly maintained, the masterchef will start to drain users' staked funds in the UFX pool to distribute as rewards.
• ⚠️ Project has a custom AMM/DEX with blacklist features that can prevent users from swapping tokens or breaking their liquidity. On top of the usual AMM fees, the dev takes 0.3% of all liquidity minted by the AMM.
• ⚠️ Token owner is NOT Masterchef. There is a risk of the dev minting and dumping. Please clarify with the project on token ownership.
• ⚠️ Most liquidity is just staked in the masterchef and can be removed and dumped at any time. Devs have also transferred a large portion of tokens and liquidity to a single user wallet (0xf2c0...4f13). Please clarify with the project on liquidity locking or burning
• ⚠️ If ownership of the UFX token was transferred to the masterchef, it could just be transferred to another address that could immediately mint all tokens up to the max supply and sell them.
• ⚠️ Masterchef currently not behind a timelock
• ⚠️ Transfer-tax liquidity tokens can be sent to the operator wallet. Please clarify with the project on how they plan to use this.
• ⚠️ Token router can be changed, which could be used to turn the token into a honeypot. It's also private, so cannot be (easily) read by anyone on the contract.
• ⚠️ Emergency withdrawal function has been removed, so existing emergency tools cannot interact with the contract. If the site is down for any reason, users will need to manually determine their balances and interact with the contract to withdraw.
• ⚠️ Pending rewards will continue accumulating once max supply is reached, but none will actually be harvestable
• ✅ Correctly accounts for transfer taxes on any token pool
• Max 12% withdrawal fees
• Owner can modify start block but it will have no effect, just clarify with project that they will not try this
• Up to an extra 20% of emission rewards can be distributed to the dev address
• Up to an extra 20% of emission rewards can be distributed to the treasury address
• 3% transfer tax
• 3% anti-whale

⚠️ TRIPLE CHECK the contract you interact with matches the one reviewed here (0x9327...fB26)