Harmony Farms

*Paid Advertisement. Not financial advice. RugDoc is not responsible for the projects showcased here. DYOR and ape safu.

Filter by risk
No data was found

It's a staking contract that uses a referral-based reward system where it depends on incoming users and fees to generate the rewards.

  • ⚠️ RugDoc HIGHLY recommends thinking through all possible scenarios in these types of projects thoroughly and assessing your risk tolerance. DYOR.
  • ⚠️ There is no unstake option so once you stake there is no withdrawing your initial deposit.
  • 7% referral
  • 3% to dev address
  • 5% returns

PLEASE NOTE that the success in these types of projects rely on enough users entering a stake after yours or you will lose money as there will not be enough funds for everyone eligible for a payout to cash out.

Websites: [Harmony / Fantom]

Contracts: [Harmony / Fantom]

Posted on 12 June 2022 |

Goose fork with a lot of custom logic that refers to withdrawal fees depending on time elapsed.

  • ⚠️ Project uses its own router which seems to be a fork of TraderJoe router (0.2% swap fee). Ensure that you perform a small test transaction first and check that the Router contract matches the one here (0x0a34fe...d949).
  • ⚠️ The token contract uses role-based access. Dev has renounced his admin, burner, and minter roles [tx1 | tx2]. Dev has also transferred ownership to a 12h timelock [tx]. ⚠️ This, in turn, gives the admin role to the Timelock contract. Dev can recover the admin role through the timelock and grant himself the minter role again and dev can mint and dump.
  • ✅ Max 1% withdraw fees.
    • Before 7 days: 1%
    • Between 8 days and 14 days: 0.2%
    • After 15 days: 0.05%
  • ✅ Masterchef behind a 24 hr timelock
  • ✅ Correctly accounts for transfer taxes on any token pool
  • Dev, Treasury, or Investor addresses can be set to the zero address, which would block regular withdrawals and harvests.
  • No additional rewards are currently minted to any of the above. Dev can set 100% of the rewards to be sent directly to any of the above mentioned addresses.

⚠️ TRIPLE CHECK the contract you interact with matches the one reviewed here (0x62d94f...a803)

Posted on 06 June 2022 |

Fullsail fork similar to CougarSwap (Cronos), with no max supply. Appears to be a relaunch of HarmonyCougar with the ability to migrate old tokens to new ones.

  • ⚠️ 60% of the token supply is currently held in a presale contract. Presales are notoriously risky, DYOR.
  • ✅ Max 4% deposit fees
  • ✅ Masterchef behind a 6 hr timelock
  • ✅ Correctly accounts for transfer taxes on any token pool
  • 2% referral (max 3%)
  • 2% transfer tax (max 2%)
  • 20% anti-whale (min 1%)
  • An extra 5% of emission rewards are minted to the dev address

⚠️ TRIPLE CHECK the contract you interact with matches the one reviewed here (0x4fef...4d57)

Posted on 19 May 2022 |

PLEASE NOTE that these types of projects are straight up ponzi schemes and you WILL lose money if you're not lucky enough to have more suckers come in after you so you can cash out. RugDoc HIGHLY recommends staying away from these types of projects. There is no unstake option so once you stake there is no withdrawing your initial deposit.

MultiChainStaker staking contract uses a referral-based reward system where it depends on incoming users and 15% of the deposits go to the market/dev address and additionally they charge a 15% fee on withdrawals. Please note that the success in these types of projects rely on enough users entering a stake after yours or you will lose money as there will not be enough funds for everyone eligible for a payout to cash out. RugDoc highly recommends thinking through all possible scenarios in these types of projects thoroughly and assessing your risk tolerance. DYOR.

Has audit from HazeCrypto for its original Polygon contracts and its Fantom contracts

Posted on 15 March 2022 |

Goose fork

⚠️ Triple check the contract you interact matches the one reviewed here (0xEBBD...1e78)

Posted on 31 January 2022 |

Simple ERC20 pausable token implementation

  • 🚨 Transfers can be blocked anytime by pausing the token
Posted on 19 January 2022 |

Unite Finance is an algostable project which appears to be based on Fantom's Tomb Finance project but with an added rebase mechanics. It is highly recommended that their contracts are subjected to a full audit with a reputable auditor in order to fully assure their community. These codebases tend to be large and complex with various risk vectors.

We reserve the right to not review exceedingly complex projects that would require tens of thousands of dollars of senior security analyst man hours.Typically these are projects that deal with leverage, lending, options, derivatives, and anything that is overly complex and which requires tons of peer reviews and audits from top audit companies.

Since our resources are stretched thin and we don’t have the funding for these kind of massive endeavors, we may pass on projects that meet this level of complexity. DYOR.

Posted on 29 December 2021 |

SPONSORED AD

WagmiDAO is the first multichain reserve-backed decentralised exchange (RDEX). It’s focused on continuously growing its own Treasury and the value of its native token. The WagmiDAO combines the already established Liquidity Mining, with Bonds and builds an AMM DEX on top with the partly collateralized stablecoin $FAM being the cornerstone of the Treasury earning yield through external protocols and thus raising the floor price for the $GMI token through externally realized revenue.

Having said the above, we are classifying this as Not Eligible as we recommend these kinds of projects to pass reputable audits and KYC verifications as there is a risk of governance mishandling. Before investing, we also recommend users conduct their own due diligence checks. Do note that there are two Audits completed by Paladin and Omniscia.

Posted on 10 December 2021 |

Goose fork

  • ⚠️ Token owner has NOT been set to the Masterchef, so they're still able to pre-mint tokens (Possible for presale or seeding liquidity)
  • ✅ Max 4% deposit fees
  • ⚠️ Masterchef is NOT behind Timelock
  • ✅ Correctly accounts for transfer taxes on any token pool
  • An extra 10% of emission rewards are minted to the dev address
  • ⚠️ Currently max transaction size for token transfers has been set to 0, though this can be changed to any amount. Looks like they're still setting things up.

⚠️ TRIPLE CHECK the contract you interact with matches the one reviewed here (Ends in fE8a)

Posted on 27 November 2021 |

Pancakeswap fork without migrator function on Harmony since Sep 2021.

  • ⚠️ Masterchef currently not behind a timelock.
  • ⚠️ Does not support deflationary/transfer-tax token pools, just clarify with project that none will be added
  • ⚠️  Reward token implements role-based access control. One of which provides the ability to minting it (Minter role). At the moment, there are 4 addresses with this role: Masterchef, Fuzz Vault contract, ISO contract and the dev wallet. Please clarify with the project on minter assignments.
  • ⚠️ Reward token transfers can be paused at any time by a user with pauser role, which in this case is the dev wallet.
  • ⚠️ Router is a clean fork of PCS Router. ⚠️ But Factory contract is not verified yet.
  • Dev address can be set to the zero address, which would block regular withdrawals and harvests
  • An extra 10% of emission rewards are minted to the dev address.
  • As information that may seem interesting to you, they employ a boost in rewards if you choose them to delegate.
  • Fuzz Vault:
    • ⚠️ Currently not behind a timelock.
    • ⚠️ Deposits and harvest functions can be paused at any time by the admin, which in this case is the dev wallet.
    • It has a maximum tax for early withdrawal of up to 5% and a maximum period of 7 days. At the moment, the tax is established at 3% with a period of permanence of 72 hours.

⚠️ TRIPLE CHECK the contract you interact with matches the one reviewed here (0x847b46Ed...41b1).

Posted on 11 November 2021 |
Update

UPDATE: After careful inspection it appears like Harmony does not allow for the verification of any contract including a CREATE2 opcode. We recommend users and projects to pressure Harmony into making such contracts verifiable to ensure the safety of the chain. The project admin has verified one of the pairs (these do not contain the opcode) and they appear to be a sushiswap canary fork. They have furthermore expanded the logic of both the pairs and staking contract with gassless transaction logic (GSN) which looks quite suspicious but after inspection we could not find rugs in this. However, as this code is very low-level it is not as easy to guarantee the safety of this contract as the gassless transaction logic literally allows others to make withdrawals and so forth in your name. We recommend the project admins to build trust in any way, shape or form to reduce the risk for investors. This could be done by undergoing KYC, getting funding from Harmony, disclosing explicit ties to their previous projects. The trusted forwarder is now verified and looks to be based on the GSN system.

Updated on 27 October 2021

Panther fork

  • 🚨 Token contract is currently unverified.
  • 🚨 They have their own AMM, but Router Contract and Factory Contract are not currently verified.
  • 🚨 Truster Forwarder contract is currently unverified. This contract can make transactions for anyone and could potentially be used to rug if it is not safe.
  • ⚠️ Masterchef currently not behind a timelock.
  • ✅ Max 5% deposit fees.
  • ✅ Correctly accounts for transfer taxes on any token pool.
  • Regular withdrawals will fail once max supply is reached unless emissions and/or multipliers are set to zero
  • An extra 10% of emission rewards are minted to the dev address.
  • Harvest lockups: max 14 days.
  • Vault:
    • ✅ Max 10% deposit fees.
    • Lockup duration can be set to any amount of time (only for new pools). There are currently 3 pools added. Which have 0, 7 and 30 days each.
    • Extra 10% of emission rewards are minted to the dev address.

⚠️ TRIPLE CHECK the contract you interact with matches the one reviewed here:

Posted on 20 October 2021 |

ViperSwap's MasterBreeder fork

  • 🚨 Token and Router contracts are unverified. Buy/use at your own risk. Farm uses its own LP generated by the router/factory as well.
  • ⚠️ 100% deposit/withdrawal fees possible
  • ⚠️ Masterchef currently not behind a timelock
  • ⚠️ Masterchef does not support deflationary/transfer-tax token pools, just clarify with project that none will be added
  • ⚠️ Masterchef allows the revision of last deposit/withdraw block of a specific user which could reset withdraw fees back to 25% if used with malicious intent.
  • Withdrawal fee currently ranges from 25% down to 0.01% depending on how long the first deposit up to a max of 4 weeks. 8% fee is charged if regularly withdrawn after the block you have deposited. Emergency withdraw charges a fixed 25% fee whenever it is triggered.
  • The masterchef has authorizable roles where it can have a 2nd owner and have other priveleged functions assigned to it.
  • Token ownership can be reclaimed using the Masterchef
  • Dev address can be set to the zero address, which would block regular withdrawals and harvests
  • Regular withdrawals will fail once max supply is reached unless emissions and/or multipliers are set to zero
  • A total 20% of emission rewards are minted on top of the rewards to several addresses
  • Rewards are locked up and are released slowly over time

⚠️ TRIPLE CHECK the contract you interact with matches the one reviewed here (0x2bb...9aa3e9)

Posted on 18 October 2021 |
Update

UPDATE: Appears to have relaunched. Check CougarSwap (Harmony) for the latest review.

Updated on 19 May 2022

Panther fork

  • ✅ Masterchef behind a 60 hour timelock
  • ✅ All transfer-tax tokens are supported
  • ✅ Max 4% deposit fees
  • 2% of emissions sent to dev address
  • 1% transfer tax (Min 1% Max 2%)
  • Anti-whale set to 1% (Min 1% Max 20%)

⚠️ Triple check the contract you interact matches the one reviewed here (0x1357...6079)

Posted on 11 October 2021 |

Consolidation of different "miners" being deployed in different chains with different tokens where contracts are complete copies of each other.

PLEASE NOTE that these types of projects appear to be straight up ponzi schemes and you WILL lose money if you're not lucky enough to have more users come in after you so you can cash out. RugDoc HIGHLY recommends staying away from these types of projects. We are marking this as ineligible so it does not get requested again. DYOR.

This includes the following:

Posted on 29 September 2021 |

We reserve the right to not review exceedingly complex projects that would require tens of thousands of dollars of senior security analyst man hours.

Typically these are projects that deal with leverage, lending, options, derivatives, and anything that is overly complex and which requires tons of peer reviews and audits from top audit companies.

Since our resources are stretched thin and we don’t have the funding for these kind of massive endeavors, we may pass on projects that meet this level of complexity. DYOR.

Posted on 16 September 2021 |

Goose with referral fork

  • ⚠️ 100% deposit fees possible
  • ⚠️ Masterchef currently not behind a timelock
  • ⚠️ Does not support pools with deflationary / transfer-tax tokens. Just confirm with the team that these will not be added.
  • Plans to have vaults, vault currently linked to dev addres. Vault address can be changed any time.
  • 10% of emissions sent to dev address

⚠️ Triple check the contract you interact matches the one reviewed here (0x15e0...d358)

Posted on 09 September 2021 |

https://explorer.harmony.one/address/0xb96618aebd36f8d83fa03873fda796264597604dThis project has been around for quite a while so they definitely have proved themselves with time. However, their contracts are still not verified so in theory any code including rug code can be in there.

Until recently, verifying contracts was not possible on harmony but since this has changed a while ago we are posting this review as a polite reminder to the lootswap team to verify their contracts. We will of course update this review as soon as they are verified and we can look at the code.

Posted on 23 July 2021 |

Contracts not verified!

Posted on 16 July 2021 |

Search

🟢 For owners who have made impactful changes and would like an update to their farm review:

1️⃣ Use #update at @RugDocChat with your description and proof of changes and it will be forwarded to our scanners.

2️⃣ This does not guarantee a change in your review.

3️⃣ Owners who have difficulty solving the issues can consider our Consultation Package – please contact @BaymaxCrypto on Telegram to discuss.

Our mission here at RugDoc is to screen for hard rug code that results in 100% theft of ALL underlying funds for ALL participants.

This is the ONE part of the due diligence process that most people cannot simply do on their own as it costs thousands of dollars to hire a senior solidity developer to look over a farm for safety.

A project coin with terrible code can go up in price, and a project with good code and a good team can also go down in price.

Do NOT use our ratings to refer to your likelihood in making money if you invest in the project. They are ONLY in reference to code safety.

Everything else beyond code safety is YOUR responsibility to go do research on. We just make sure the casino you’re betting in won’t rob you before you even get to place a bet.

Our reviews for projects are organized into a few colors.

🟢 Least Risk
These projects are the least likely to hard or soft rug. Usually reserved for cornerstone projects of an ecosystem where it makes no financial sense for them to rug in any manner as they make more money just being legit.

🔵 Low Risk
These projects are usually established projects in an ecosystem that have a track record of success or have KYC’d to us or other authoritative sources in the real world. As a result, it is extremely unlikely for them to soft rug or hard rug their projects. The projects can still fail and the token price can go down, but usually more as a result of natural market forces.

⚪️ Some Risk
This is the default rating for projects with unknown teams but have code that is unlikely to have hard rug risk. Since the team is unknown and doesn’t have a track record of success, it’s entirely possible that they may try to soft rug by dumping tokens, abandoning the project, etc. Even a last minute contract swap to a malicious contract is possible. The only thing that is unlikely is a complete hard rug as long as you are 100% sure you deposit into the contract we review.

🟠 Medium Risk
Similar to Some Risk, but the underlying code itself is custom enough or complex enough that it warrants an elevated risk rating that needs deeper research. Make sure you read every point presented to make sure you’re comfortable with that before entering. Still unlikely to hard rug, but more chances of custom code behaving incorrectly and causing other issues.

🔴 High Risk
Project contains code or practices that are HIGHLY LIKELY to lead to catastrophic losses as they are right now. Make sure you read the description carefully as we will always warn what these issues are. If you see the words Hard Rug anywhere in the review, STAY FAR AWAY!

⚫️ Not Eligible
We reserve the right to not review exceedingly complex projects that would require tens of thousands of dollars of senior security analyst man hours. Typically these are projects that deal with leverage, lending, options, derivatives, and anything that is overly complex and which requires tons of peer reviews and audits from top audit companies.