Cronos Farms

🚨🚨🚨Website down, likely rugged 🚨🚨🚨

Single Finance is a multi chain yield aggregator.

We reserve the right to not review exceedingly complex projects that would require tens of thousands of dollars of senior security analyst man hours.

Typically these are projects that deal with leverage, lending, options, derivatives, and anything that is overly complex and which requires tons of peer reviews and audits from top audit companies.

Since our resources are stretched thin and we don’t have the funding for these kind of massive endeavors, we may pass on projects that meet this level of complexity. DYOR.

Rebase token with incredibly high APY% similar to OHM, STASH, etc. These tokens have proven to be unsustainable in the long run due to very high levels of inflation. Invest with caution.

• 🚨 Transfer can be blocked anytime by switching of the router
• ⚠️ Token router can be changed. Please check to ensure they are using a well-established router.
• ⚠️ LP pair address can be swapped
• ⚠️ Liquidity is not locked and can be dumped at any time. Please clarify with the project on liquidity locking or burning
• ⚠️ Transfer tax uncapped and can be set to 100%
• Max Supply: Maximum number of uint128
• Payout Method: Rebase
• Auto-Liquidity: 2%
• Other Significant Governance Privileges: x
• 10% transfer tax / 15% selling fee (max 100%)
• No anti-whale

⚠️ Triple check the contract you interact matches the one reviewed here (0x5243...9906)

HoudiniSwap is a project that claims to allow trading between multiple assets and multiple chains, using the Monero blockchain as an intermediary to provide a layer of anonymity. The functionality is similar to FixeFloat or similar services, in the sense that no smart contracts are used, instead the deposit by the user is made to a wallet controlled by the project, which then sends.

• ⚠️ RugDoc HIGHLY recommends thinking through all possible scenarios in these types of projects thoroughly and assessing your risk tolerance. DYOR.
• They have their own Token ($POOF: 0x888c...f57a), which is only found on the ETH chain:
  • ⚠️ Transfer can be blocked anytime by blacklisting
  • Initial liquidity locked until Feb 18, 2023 (see tx)
  • Max Supply: 100,000 tokens
  • PreMinted: 100%
  • Taxes: Buy 6% | Sell 6% | Transfer 2%
  • Other Significant Governance Privileges: owner can take out any token from the contract (unless it is the token itself), enable trading once, change all fee receiving addresses and change the ratio's at which these addresses receive fees.

Algostable project which appears to be based on Tomb Finance project. We recommend these kind of complex projects to pass reputable audits and KYC verifications as there is a risk of governance mishandling. Before investing, we also recommend users to conduct their own due diligence checks. The codebases tend to be large and complex with various risk vectors. We are classifying the whole Project as [Not Eligible].

• ⚠️ Not KYC'd with RugDoc
• ⚠️ No reputable audits as of date
• ⚠️ Liquidity is not locked with RugDoc
• ⚠️ Not in a multisig. We highly recommend the project to use one with community members or reliable 3rd parties as an approver due to the said governance risk.

🚨  We want to be VERY clear that this review and it's rating ONLY applies to the genesis staking contract and not the actual operations of anything that happens anytime after genesis pools 🚨

Token Contract Review

• No genesis pools, all $PINK distributed though presale ⚠️ Presales are notoriously risky, kindly exercise caution when participating. Please clarify with the project on liquidity locking/burning once it is added.
• 🚨 Transfer Tax of the Native Token can be set to 100% which would block all transfers
• 🚨 Token Ownership not renounced. Owner can mint & dump.
• 🚨 Token Operator is a wallet which can mint & dump
• ⚠️ Token Operator != Treasury

⚠️ TRIPLE CHECK the contract you interact with. Make sure it matches the one reviewed here (0x9dd0f3...d2d6)

Uniswap Router and Factory fork

• ⚠️ Simple Uniswap router and factory fork. No additions, changes or improvements.

⚠️ TRIPLE CHECK the contract you interact with matches the one reviewed here (0x304E...E8E9)

Panther fork

• ⚠️ As of time of review, Liquidity is not yet supplied and will be added only after their presale ends. Presales are notoriously risky, kindly exercise caution when participating. Please clarify with the project on liquidity locking/burning once it is added.
• ⚠️ 1M $PCY tokens have been pre-minted [tx]:
  • 700K are sent to presale contract [tx]
  • ⚠️ 150K are sent to a Fund contract [tx] that allows the owner to withdraw the tokens at any time.
  • ⚠️ 150K tokens remain in the dev wallet.
• ⚠️ Project appears to be using its own router which seems to be a fork of PCS router (with 0.3% swap fee). Ensure that you perform a small test transaction first and check that the Router contract matches the one [0x2117e0...fd3a]
• ✅ Max 3% deposit fees
• ✅ Masterchef behind a 6 hr timelock
• ✅ Correctly accounts for transfer taxes on any token pool
• 4% referral (max 4%)
• An extra 10% of emission rewards are minted to the dev address

⚠️ TRIPLE CHECK the contract you interact with matches the one reviewed here (0x27e85F...2c2e)

Pancakeswap fork without migrator function from the same dev as Typhoon Finance (tomb fork).

• ⚠️ Token owner is NOT Masterchef. There is a risk of the dev minting and dumping. Please clarify with the project on token ownership.
• ⚠️ ~50 million tokens have been pre-minted to the dev wallet [tx]. Only 2 tokens have been used to add the initial liquidity (~$1.14 at time of review [tx1 | tx2]), this could possibly be a launch strategy, but keep in mind that you probably don't have enough liquidity to sell the initial rewards. Confirm with the project the use of the pre-minted tokens.
• ⚠️ No pools have been added to the Masterchef. There is a risk of the contract being switched out.
• ⚠️ Has the SYRUP bug with the xTyphoon token. Confirm that the project has no plans to use this token.
• ⚠️ Withdrawals and harvests will fail once max supply is reached unless emissions and/or multipliers are set to zero. Users will still be able to emergency withdraw though.
• ⚠️ Pending rewards will continue accumulating once max supply is reached, but none will actually be harvestable
• ⚠️ Masterchef currently not behind a timelock
• ⚠️ Does not support deflationary/transfer-tax token pools, just clarify with project that none will be added
• ⚠️ Project appears to be using its own router which seems to be a fork of PCS router. Ensure that you perform a small test transaction first and check that the Router contract matches the one [0x16eac3...5740]
• ✅ No deposit fees
• Owner can modify start block but it will have no effect, just clarify with project that they will not try this
• Treasury address can be set to the zero address, which would block regular withdrawals and harvests.
• An extra 10% of emission rewards are minted to the treasury address (0x2d70a4...685d)

⚠️ TRIPLE CHECK the contract you interact with matches the one reviewed here (0x3667b5...7c1D).

Algostable project which appears to be based on Tomb Finance project. We recommend these kind of complex projects to pass reputable audits and KYC verifications as there is a risk of governance mishandling. Before investing, we also recommend users to conduct their own due diligence checks. The codebases tend to be large and complex with various risk vectors. We are classifying the whole Project as [Not Eligible].

• ⚠️ Not KYC'd with RugDoc
• ⚠️ No reputable audits as of date
• ⚠️ Liquidity is not locked with RugDoc
• ⚠️ Not in a multisig. We highly recommend the project to use one with community members or reliable 3rd parties as an approver due to the said governance risk.

🚨  We want to be VERY clear that this review and it's rating ONLY applies to the reward pools of the project. 🚨

Reward Pools Review

• 🚨🚨🚨 NESS Reward Pool contract is UPGRADEABLE. It is recommended that you exercise EXTREME CAUTION if you wish to intereact with this project. To be safe, you should withdraw your funds immediately.🚨🚨🚨
• ⚠️ Does not account for transfer-tax tokens. Withdraw is prone to reentrancy attacks in case of vulnerable tokens
• ⚠️ Governance can drain the contract 90 days after poolEndTime
• ⚠️ Fee address can be set to the zero address, which would block harvests
• ✅ No Deposit Fee
• ✅ No Transfer Tax on Native Token
• ✅ Token Operator = Treasury
• Reward pool is running for 365 days

⚠️ TRIPLE CHECK the contract you interact with. Make sure it matches the one reviewed here (0x42b6...db8c)

Algostable project which appears to be based on Tomb Finance project. We recommend these kind of complex projects to pass reputable audits and KYC verifications as there is a risk of governance mishandling. Before investing, we also recommend users to conduct their own due diligence checks. The codebases tend to be large and complex with various risk vectors. We are classifying the whole Project as [Not Eligible].

• ⚠️ Not KYC'd with RugDoc
• ⚠️ No reputable audits as of date
• ⚠️ Liquidity is not locked with RugDoc
• ⚠️ Not in a multisig. We highly recommend the project to use one with community members or reliable 3rd parties as an approver due to the said governance risk.

No genesis pools created

• 🚨 Unknown set of addressed with minting previlidges for shift token, we are unable to look through every single address added to "ipool" that has minting priviledges
• ⚠️ Shift token owner not renounced, Currently behind a 12hr timelock. Owner can mint & dump.
• ✅ Transfer Tax is capped at 15%, Currently 1%

⚠️ TRIPLE CHECK the contract you interact with. Make sure it matches the one reviewed here (0x4F9B...7137)

Algostable project which appears to be based on Tomb Finance project. We recommend these kind of complex projects to pass reputable audits and KYC verifications as there is a risk of governance mishandling. Before investing, we also recommend users to conduct their own due diligence checks. The codebases tend to be large and complex with various risk vectors. We are classifying the whole Project as [Not Eligible].

• ⚠️ Not KYC'd with RugDoc
• ⚠️ No reputable audits as of date
• ⚠️ Liquidity is not locked with RugDoc
• ⚠️ Not in a multisig. We highly recommend the project to use one with community members or reliable 3rd parties as an approver due to the said governance risk.

TShare Contract Review

• 🚨 Token Ownership not renounced. Owner can mint & dump.
• ⚠️ Token Operator = Treasury. 🚨 Token Ownership has not yet been renounced, so Token owner can recover Operatorship and use distributeReward function to minting an additional 500K TShare tokens and dump.

TShare Reward Pool Contract Review

• 🚨 The contract has a small modification by which it allows the deposit to be in the name of another user. In other words, the depositor may not necessarily be the one to whom the amount of the deposit is computed. This feature has no valid justification. It is recommended that you do not interact with this contract through the website. A simple update of the page is enough for this function to be used, so previous successful deposits do not ensure that future deposits are not affected by the mentioned code [see code].

Genesis Contract Review

• ⚠️ Does not account for transfer-tax tokens. Withdraw is prone to reentrancy attacks in case of vulnerable tokens
• ⚠️ No liquidity yet, therefore the genesis rewards cannot be sold
• ✅ Function governanceRecoverUnsupported removed
• ✅ Genesis Operator renounced
• ✅ No Deposit Fee
• ✅ No Transfer Tax on Native Token
• ✅ Token Ownership renounced
• ✅ Token Operator = Treasury
• Genesis is running for 2 days

⚠️ TRIPLE CHECK the contract you interact with. Make sure it matches the one reviewed here (0xA11f16...3Be5)

Algostable project which appears to be based on Tomb Finance project. We recommend these kind of complex projects to pass reputable audits and KYC verifications as there is a risk of governance mishandling. Before investing, we also recommend users to conduct their own due diligence checks. The codebases tend to be large and complex with various risk vectors. We are classifying the whole Project as [Not Eligible].

• ⚠️ Not KYC'd with RugDoc
• ⚠️ No reputable audits as of date
• ⚠️ Liquidity is not locked with RugDoc
• ⚠️ Not in a multisig. We highly recommend the project to use one with community members or reliable 3rd parties as an approver due to the said governance risk.

🚨  We want to be VERY clear that this review and it's rating ONLY applies to the genesis staking contract and not the actual operations of anything that happens anytime after genesis pools 🚨

Genesis Contract Review

• 🚨 Token Ownership not renounced. Owner can mint & dump.
• ⚠️ Token Operator = Treasury. 🚨 Token Ownership has not yet been renounced, so minting and dumping risk still remains.
• ⚠️ Does not account for transfer-tax tokens. Withdraw is prone to reentrancy attacks in case of vulnerable tokens
• ⚠️ No liquidity yet, therefore the genesis rewards cannot be sold
• ⚠️ Governance can drain the contract 90 days after poolEndTime
• ⚠️ Fee address can be set to the zero address, which would block harvests
• Deposit Fee: 1%
• ✅ Max 1% Deposit Fee
• ✅ No Transfer Tax on Native Token
• Genesis is running for 1 day.
• ⚠️ An additional 1,200 $UNICORN tokens have been minted to the dev [tx]. These tokens are not locked, so they can be dumped.

⚠️ TRIPLE CHECK the contract you interact with. Make sure it matches the one reviewed here (0xc616f2...1cae)

Algostable project which appears to be based on Tomb Finance project. We recommend these kind of complex projects to pass reputable audits and KYC verifications as there is a risk of governance mishandling. Before investing, we also recommend users to conduct their own due diligence checks. The codebases tend to be large and complex with various risk vectors. We are classifying the whole Project as [Not Eligible].

• ⚠️ Not KYC'd with RugDoc
• ⚠️ No reputable audits as of date
• ⚠️ Liquidity is not locked with RugDoc
• ⚠️ Not in a multisig. We highly recommend the project to use one with community members or reliable 3rd parties as an approver due to the said governance risk.

🚨 The project has chosen to carry out a launchpad instead of a Genesis stage, as is characteristic of projects of this type. Although we commonly focus on reviewing only the Genesis stage, this project is evaluated as [high risk] due to the following: 🚨

• 🚨 $TDEER reward pool contract is unverified [0xb8f568...e33b].
• 🚨 Boardroom contract is an upgradeable proxy [0x85b607...2a34]. ProxyAdmin is an EOA.
• 🚨 Treasury contract is an upgradeable proxy [0x1c9f79...3404]. ProxyAdmin is an EOA.
• 🚨 $TDEER Ownership not renounced. Owner can mint & dump.
• 🚨 $TDEER operator is the Treasury.
• 🚨 They use an individual contract for each vault. None of these contracts has been verified.

🚨 It appears to be the same dev as Jewelery Finance (soft rugged after genesis). We have asked about this in the Telegram group and we have automatically been banned and the group deleted. Make your own conclusions lol 🚨

Algostable project which appears to be based on Tomb Finance project. We recommend these kind of complex projects to pass reputable audits and KYC verifications as there is a risk of governance mishandling. Before investing, we also recommend users to conduct their own due diligence checks. The codebases tend to be large and complex with various risk vectors. We are classifying the whole Project as [Not Eligible].

• ⚠️ Not KYC'd with RugDoc
• ⚠️ No reputable audits as of date
• ⚠️ Liquidity is not locked with RugDoc
• ⚠️ Not in a multisig. We highly recommend the project to use one with community members or reliable 3rd parties as an approver due to the said governance risk.

🚨  We want to be VERY clear that this review and it's rating ONLY applies to the genesis staking contract and not the actual operations of anything that happens anytime after genesis pools 🚨

Genesis Contract Review

• ⚠️ Does not account for transfer-tax tokens. Withdraw is prone to reentrancy attacks in case of vulnerable tokens
• ✅ Genesis Operator renounced
• Deposit Fee: 1%
• ✅ Max 1.29% Deposit Fee
• ✅ No Transfer Tax on Native Token
• ✅ Token Ownership renounced
• ✅ Token Operator = Treasury
• ⚠️ Fee address can be set to the zero address, which would block harvests
• Genesis is running for 2 days

⚠️ TRIPLE CHECK the contract you interact with. Make sure it matches the one reviewed here (0x1fd863...01bd)

Stableswap protocol built on the Cronos blockchain. The swap protocol is under a complex, custom contracts, and configured under a minimal proxy.

We reserve the right to not review exceedingly complex projects that would require tens of thousands of dollars of senior security analyst man hours. Typically these are projects that deal with leverage, lending, options, derivatives, and anything that is overly complex and which requires tons of peer reviews and audits from top audit companies.

Since our resources are stretched thin and we don’t have the funding for these kind of massive endeavors, we may pass on projects that meet this level of complexity. DYOR.

Staking contract of the Ferro Protocol, however, has the following properties:

• ⚠️ Masterchef currently not behind a timelock
• ⚠️ Deposit, withdraw, and emergency withdraw functions are susceptible to reentrancy.
• ⚠️ FerroBoost contract that takes in the locked FER tokens is under an upgradeable proxy.
• ⚠️ Does not support deflationary/transfer-tax token pools, just clarify with project that none will be added
• ✅ No deposit fees.
• Harvest lock ratio is 40% of FER tokens (max of 100%)
• No additional mints are sent to the dev address.

⚠️ TRIPLE CHECK the contract you interact with matches the one reviewed here (0xAB50...29D0)

Panther fork without harvest lockups.

• 🚨 100% of token supply is held by an EOA. (0xB842...4e8F)
• ⚠️ No initial liquidity has been added. Please clarify with the project on liquidity locking or burning.
• ⚠️ No pools have been added to the Masterchef. There is a risk of the contract being switched out.
• ⚠️ Masterchef currently not behind a timelock.
• ⚠️ Masterchef uses per-block emissions instead of per-time. This is an antipattern on networks that uses variable block timing.
• ⚠️ Masterchef has not been excluded from anti-whale which could block harvests.
• ⚠️ Token owner is NOT Masterchef. There is a risk of the dev minting and dumping. Please clarify with the project on token ownership.
• ⚠️ Pending rewards will continue accumulating once max supply is reached, but none will actually be harvestable.
• An extra 5% of emission rewards are minted to the dev address.
• ✅ Correctly accounts for transfer taxes on any token pool.
• ✅ Maximum of 2% deposit fees.
• 1% referrals.
• 2% transfer tax (max 0.1%)
• 20% anti-whale (min 1%)

⚠️ TRIPLE CHECK the contract you interact with matches the one reviewed here (0x6078...dca1)

From the same team as Minotaur Money. Algostable project which appears to be based on on a hybrid mechanism between Tomb Finance and Iron Finance mechanism. We recommend these kind of complex projects to pass reputable audits and KYC verifications as there is a risk of governance mishandling. Before investing, we also recommend users to conduct their own due diligence checks. The codebases tend to be large and complex with various risk vectors. We are classifying the whole Project as [Not Eligible].

• ⚠️ Not KYC'd with RugDoc
• ⚠️ No reputable audits as of date
• ⚠️ Liquidity is not locked with RugDoc
• ⚠️ Not in a multisig. We highly recommend the project to use one with community members or reliable 3rd parties as an approver due to the said governance risk.
• Project will not run a genesis period, but will carry out a pre-sale. ⚠️ Presales are notoriously risky, kindly exercise caution when participating. Please clarify with the project on liquidity locking/burning once it is added.

Although, initially, the project would be classified as [Not Eligible], there are some points that may be of interest to you regarding the farms:

• 🚨 Hard rug code not found, but at the moment, the project is [High Risk] for the following reason:
  • 🚨 Token Ownership not renounced. Owner can mint & dump.
  • 🚨 Token Operator is a wallet which can mint & dump.
• ⚠️ Masterchef is not connected to the site yet. There is a risk of the contract being switched out.
• ✅ Max 10% deposit fees
• ⚠️ Deposit fees are not displayed on the site. It is recommended to test with a small amount first.
• ⚠️ Masterchef currently not behind a timelock
• ⚠️ Does not support deflationary/transfer-tax token pools, just clarify with project that none will be added
• Transfer taxes (max 20%) vary depending on the peg. For more info, visit the section about it in the docs [link].

⚠️ TRIPLE CHECK the contract you interact with. Make sure it matches the one reviewed here (0x9d2998...969d)

Algostable project which appears to be based on Tomb Finance project. We recommend these kind of complex projects to pass reputable audits and KYC verifications as there is a risk of governance mishandling. Before investing, we also recommend users to conduct their own due diligence checks. The codebases tend to be large and complex with various risk vectors. We are classifying the whole Project as [Not Eligible].

• ⚠️ Not KYC'd with RugDoc
• ⚠️ No reputable audits as of date
• ⚠️ Liquidity is not locked with RugDoc
• ⚠️ Not in a multisig. We highly recommend the project to use one with community members or reliable 3rd parties as an approver due to the said governance risk.

🚨  We want to be VERY clear that this review and it's rating ONLY applies to the genesis staking contract and not the actual operations of anything that happens anytime after genesis pools 🚨

Genesis Contract Review

• 🚨 Token Ownership not renounced. Owner can mint & dump.
• ⚠️ Does not account for transfer-tax tokens. Withdraw is prone to reentrancy attacks in case of vulnerable tokens
• ⚠️ No liquidity yet, therefore the genesis rewards cannot be sold
• ✅ Function governanceRecoverUnsupported removed
• ✅ 0.5% Deposit Fee
• ✅ TaxOffice Ownership renounced
• ✅ Token Operator = Treasury
• ✅ No Transfer Tax on Native Token
• Genesis is running for 1 days

⚠️ TRIPLE CHECK the contract you interact with. Make sure it matches the one reviewed here (0x9Ba5...6126)

Algostable project which appears to be based on Tomb Finance project. We recommend these kind of complex projects to pass reputable audits and KYC verifications as there is a risk of governance mishandling. Before investing, we also recommend users to conduct their own due diligence checks. The codebases tend to be large and complex with various risk vectors. We are classifying the whole Project as [Not Eligible].

• ⚠️ Not KYC'd with RugDoc
• ⚠️ No reputable audits as of date
• ⚠️ Liquidity is not locked with RugDoc
• ⚠️ Not in a multisig. We highly recommend the project to use one with community members or reliable 3rd parties as an approver due to the said governance risk.

🚨  We want to be VERY clear that this review and it's rating ONLY applies to the genesis staking contract and not the actual operations of anything that happens anytime after genesis pools 🚨

Genesis Contract Review

• ⚠️ Does not account for transfer-tax tokens. Withdraw is prone to reentrancy attacks in case of vulnerable tokens
• ⚠️ Governance can drain the contract 90 days after poolEndTime
• ✅ Genesis Operator renounced
• Deposit Fee: 1%
• ✅ Max 1% Deposit Fee
• ✅ TaxOffice Ownership renounced (TransferTax is set to 0%)
• ✅ Token Ownership renounced
• ✅ Token Operator = Treasury
• ⚠️ Fee address can be set to the zero address, which would block harvests.
• Genesis is running for 1 days.
• Dev has received 2.4K $DARKCRYSTL tokens when the distribution rewards occurred [txs]. These still remain in the possession of the developer. Check with the project for the reason.

⚠️ TRIPLE CHECK the contract you interact with. Make sure it matches the one reviewed here (0xc4c6AE...1726)