Harmony Farms
*Paid Advertisement. Not financial advice. RugDoc is not responsible for the projects showcased here. DYOR and ape safu.
It's a staking contract that uses a referral-based reward system where it depends on incoming users and fees to generate the rewards.
- ⚠️ RugDoc HIGHLY recommends thinking through all possible scenarios in these types of projects thoroughly and assessing your risk tolerance. DYOR.
- ⚠️ There is no unstake option so once you stake there is no withdrawing your initial deposit.
- 7% referral
- 3% to dev address
- 5% returns
PLEASE NOTE that the success in these types of projects rely on enough users entering a stake after yours or you will lose money as there will not be enough funds for everyone eligible for a payout to cash out.
Goose fork with a lot of custom logic that refers to withdrawal fees depending on time elapsed.
- ⚠️ Project uses its own router which seems to be a fork of TraderJoe router (0.2% swap fee). Ensure that you perform a small test transaction first and check that the Router contract matches the one here (0x0a34fe...d949).
- ⚠️ The token contract uses role-based access. Dev has renounced his admin, burner, and minter roles [tx1 | tx2]. Dev has also transferred ownership to a 12h timelock [tx]. ⚠️ This, in turn, gives the admin role to the Timelock contract. Dev can recover the admin role through the timelock and grant himself the minter role again and dev can mint and dump.
- ✅ Max 1% withdraw fees.
- Before 7 days: 1%
- Between 8 days and 14 days: 0.2%
- After 15 days: 0.05%
- ✅ Masterchef behind a 24 hr timelock
- ✅ Correctly accounts for transfer taxes on any token pool
- Dev, Treasury, or Investor addresses can be set to the zero address, which would block regular withdrawals and harvests.
- No additional rewards are currently minted to any of the above. Dev can set 100% of the rewards to be sent directly to any of the above mentioned addresses.
⚠️ TRIPLE CHECK the contract you interact with matches the one reviewed here (0x62d94f...a803)
Fullsail fork similar to CougarSwap (Cronos), with no max supply. Appears to be a relaunch of HarmonyCougar with the ability to migrate old tokens to new ones.
- ⚠️ 60% of the token supply is currently held in a presale contract. Presales are notoriously risky, DYOR.
- ✅ Max 4% deposit fees
- ✅ Masterchef behind a 6 hr timelock
- ✅ Correctly accounts for transfer taxes on any token pool
- 2% referral (max 3%)
- 2% transfer tax (max 2%)
- 20% anti-whale (min 1%)
- An extra 5% of emission rewards are minted to the dev address
⚠️ TRIPLE CHECK the contract you interact with matches the one reviewed here (0x4fef...4d57)
PLEASE NOTE that these types of projects are straight up ponzi schemes and you WILL lose money if you're not lucky enough to have more suckers come in after you so you can cash out. RugDoc HIGHLY recommends staying away from these types of projects. There is no unstake option so once you stake there is no withdrawing your initial deposit.
MultiChainStaker staking contract uses a referral-based reward system where it depends on incoming users and 15% of the deposits go to the market/dev address and additionally they charge a 15% fee on withdrawals. Please note that the success in these types of projects rely on enough users entering a stake after yours or you will lose money as there will not be enough funds for everyone eligible for a payout to cash out. RugDoc highly recommends thinking through all possible scenarios in these types of projects thoroughly and assessing your risk tolerance. DYOR.
Has audit from HazeCrypto for its original Polygon contracts and its Fantom contracts
Goose fork
- ✅ No deposit fees
- ✅ no emissions sent to dev address
- ⚠️ Masterchef currently not behind a timelock
- ⚠️ Does not support pools with deflationary / transfer-tax tokens. Just confirm with the team that these will not be added
⚠️ Triple check the contract you interact matches the one reviewed here (0xEBBD...1e78)
Simple ERC20 pausable token implementation
- 🚨 Transfers can be blocked anytime by pausing the token
Unite Finance is an algostable project which appears to be based on Fantom's Tomb Finance project but with an added rebase mechanics. It is highly recommended that their contracts are subjected to a full audit with a reputable auditor in order to fully assure their community. These codebases tend to be large and complex with various risk vectors.
We reserve the right to not review exceedingly complex projects that would require tens of thousands of dollars of senior security analyst man hours.Typically these are projects that deal with leverage, lending, options, derivatives, and anything that is overly complex and which requires tons of peer reviews and audits from top audit companies.
Since our resources are stretched thin and we don’t have the funding for these kind of massive endeavors, we may pass on projects that meet this level of complexity. DYOR.
SPONSORED AD
WagmiDAO is the first multichain reserve-backed decentralised exchange (RDEX). It’s focused on continuously growing its own Treasury and the value of its native token. The WagmiDAO combines the already established Liquidity Mining, with Bonds and builds an AMM DEX on top with the partly collateralized stablecoin $FAM being the cornerstone of the Treasury earning yield through external protocols and thus raising the floor price for the $GMI token through externally realized revenue.
Having said the above, we are classifying this as Not Eligible as we recommend these kinds of projects to pass reputable audits and KYC verifications as there is a risk of governance mishandling. Before investing, we also recommend users conduct their own due diligence checks. Do note that there are two Audits completed by Paladin and Omniscia.
Goose fork
- ⚠️ Token owner has NOT been set to the Masterchef, so they're still able to pre-mint tokens (Possible for presale or seeding liquidity)
- ✅ Max 4% deposit fees
- ⚠️ Masterchef is NOT behind Timelock
- ✅ Correctly accounts for transfer taxes on any token pool
- An extra 10% of emission rewards are minted to the dev address
- ⚠️ Currently max transaction size for token transfers has been set to 0, though this can be changed to any amount. Looks like they're still setting things up.
⚠️ TRIPLE CHECK the contract you interact with matches the one reviewed here (Ends in fE8a)
Pancakeswap fork without migrator function on Harmony since Sep 2021.
- ⚠️ Masterchef currently not behind a timelock.
- ⚠️ Does not support deflationary/transfer-tax token pools, just clarify with project that none will be added
- ⚠️ Reward token implements role-based access control. One of which provides the ability to minting it (Minter role). At the moment, there are 4 addresses with this role: Masterchef, Fuzz Vault contract, ISO contract and the dev wallet. Please clarify with the project on minter assignments.
- ⚠️ Reward token transfers can be paused at any time by a user with pauser role, which in this case is the dev wallet.
- ⚠️ Router is a clean fork of PCS Router. ⚠️ But Factory contract is not verified yet.
- Dev address can be set to the zero address, which would block regular withdrawals and harvests
- An extra 10% of emission rewards are minted to the dev address.
- As information that may seem interesting to you, they employ a boost in rewards if you choose them to delegate.
- Fuzz Vault:
- ⚠️ Currently not behind a timelock.
- ⚠️ Deposits and harvest functions can be paused at any time by the admin, which in this case is the dev wallet.
- It has a maximum tax for early withdrawal of up to 5% and a maximum period of 7 days. At the moment, the tax is established at 3% with a period of permanence of 72 hours.
⚠️ TRIPLE CHECK the contract you interact with matches the one reviewed here (0x847b46Ed...41b1).
UPDATE: After careful inspection it appears like Harmony does not allow for the verification of any contract including a CREATE2 opcode. We recommend users and projects to pressure Harmony into making such contracts verifiable to ensure the safety of the chain. The project admin has verified one of the pairs (these do not contain the opcode) and they appear to be a sushiswap canary fork. They have furthermore expanded the logic of both the pairs and staking contract with gassless transaction logic (GSN) which looks quite suspicious but after inspection we could not find rugs in this. However, as this code is very low-level it is not as easy to guarantee the safety of this contract as the gassless transaction logic literally allows others to make withdrawals and so forth in your name. We recommend the project admins to build trust in any way, shape or form to reduce the risk for investors. This could be done by undergoing KYC, getting funding from Harmony, disclosing explicit ties to their previous projects. The trusted forwarder is now verified and looks to be based on the GSN system.
Panther fork
- 🚨 Token contract is currently unverified.
- 🚨 They have their own AMM, but
Router Contractand Factory Contract are not currently verified. 🚨 Truster Forwarder contract is currently unverified. This contract can make transactions for anyone and could potentially be used to rug if it is not safe.- ⚠️ Masterchef currently not behind a timelock.
- ✅ Max 5% deposit fees.
- ✅ Correctly accounts for transfer taxes on any token pool.
- Regular withdrawals will fail once max supply is reached unless emissions and/or multipliers are set to zero
- An extra 10% of emission rewards are minted to the dev address.
- Harvest lockups: max 14 days.
- Vault:
- ✅ Max 10% deposit fees.
- Lockup duration can be set to any amount of time (only for new pools). There are currently 3 pools added. Which have 0, 7 and 30 days each.
- Extra 10% of emission rewards are minted to the dev address.
⚠️ TRIPLE CHECK the contract you interact with matches the one reviewed here:
- Masterchef: (0xcc5bdb2f...672b).
- Vault: (0x6E748de2...8eA8).
ViperSwap's MasterBreeder fork
- 🚨 Token and Router contracts are unverified. Buy/use at your own risk. Farm uses its own LP generated by the router/factory as well.
- ⚠️ 100% deposit/withdrawal fees possible
- ⚠️ Masterchef currently not behind a timelock
- ⚠️ Masterchef does not support deflationary/transfer-tax token pools, just clarify with project that none will be added
- ⚠️ Masterchef allows the revision of last deposit/withdraw block of a specific user which could reset withdraw fees back to 25% if used with malicious intent.
- Withdrawal fee currently ranges from 25% down to 0.01% depending on how long the first deposit up to a max of 4 weeks. 8% fee is charged if regularly withdrawn after the block you have deposited. Emergency withdraw charges a fixed 25% fee whenever it is triggered.
- The masterchef has authorizable roles where it can have a 2nd owner and have other priveleged functions assigned to it.
- Token ownership can be reclaimed using the Masterchef
- Dev address can be set to the zero address, which would block regular withdrawals and harvests
- Regular withdrawals will fail once max supply is reached unless emissions and/or multipliers are set to zero
- A total 20% of emission rewards are minted on top of the rewards to several addresses
- Rewards are locked up and are released slowly over time
⚠️ TRIPLE CHECK the contract you interact with matches the one reviewed here (0x2bb...9aa3e9)
UPDATE: Appears to have relaunched. Check CougarSwap (Harmony) for the latest review.
Panther fork
- ✅ Masterchef behind a 60 hour timelock
- ✅ All transfer-tax tokens are supported
- ✅ Max 4% deposit fees
- 2% of emissions sent to dev address
- 1% transfer tax (Min 1% Max 2%)
- Anti-whale set to 1% (Min 1% Max 20%)
⚠️ Triple check the contract you interact matches the one reviewed here (0x1357...6079)
Consolidation of different "miners" being deployed in different chains with different tokens where contracts are complete copies of each other.
PLEASE NOTE that these types of projects appear to be straight up ponzi schemes and you WILL lose money if you're not lucky enough to have more users come in after you so you can cash out. RugDoc HIGHLY recommends staying away from these types of projects. We are marking this as ineligible so it does not get requested again. DYOR.
This includes the following:
We reserve the right to not review exceedingly complex projects that would require tens of thousands of dollars of senior security analyst man hours.
Typically these are projects that deal with leverage, lending, options, derivatives, and anything that is overly complex and which requires tons of peer reviews and audits from top audit companies.
Since our resources are stretched thin and we don’t have the funding for these kind of massive endeavors, we may pass on projects that meet this level of complexity. DYOR.
Goose with referral fork
- ⚠️ 100% deposit fees possible
- ⚠️ Masterchef currently not behind a timelock
- ⚠️ Does not support pools with deflationary / transfer-tax tokens. Just confirm with the team that these will not be added.
- Plans to have vaults, vault currently linked to dev addres. Vault address can be changed any time.
- 10% of emissions sent to dev address
⚠️ Triple check the contract you interact matches the one reviewed here (0x15e0...d358)
https://explorer.harmony.one/address/0xb96618aebd36f8d83fa03873fda796264597604dThis project has been around for quite a while so they definitely have proved themselves with time. However, their contracts are still not verified so in theory any code including rug code can be in there.
Until recently, verifying contracts was not possible on harmony but since this has changed a while ago we are posting this review as a polite reminder to the lootswap team to verify their contracts. We will of course update this review as soon as they are verified and we can look at the code.
Popular Links
For Farm Owners
Disclaimer: This is done with our best knowledge and effort, nothing can be known for certain – always DYOR and risk management. This is NOT financial advice. Use the information presented here to inform your own decisions. Referral links may be included on any outbound link.