Moonriver Farms

*Paid Advertisement. Not financial advice. RugDoc is not responsible for the projects showcased here. DYOR and ape safu.

Filter by risk
No data was found
Update

UPDATE:

  • Token contract is now verified and appears to be similiar with the Masterchef flat file. Token has a max supply of 5,000,000 tokens. Deposits, and withdrawals could break once it reached the maximum supply because of the Masterchef minting. Emergency withdraw can be used once that happens.
  • ✅ Masterchef is now behind a 12-hour timelock
Updated on 23 September 2021

Goose fork

  • 🚨 Farm token contract is still unverified. The Masterchef flat file suggests the token is a simple Goose fork, although it could be anything.
  • ⚠️ Masterchef currently not behind a timelock
  • ✅ Max 4% withdraw fees
  • ✅ Correctly accounts for transfer taxes on any token pool
  • No referrals
  • Emergency withdrawals account for withdraw fees
  • 10% of emission rewards minted to dev address
  • 10% of emission rewards minted to burn address
  • 26% of token supply is added in MOONENGINE-USDC liquidity. 97% of LP tokens were sent to the dead address

⚠️ TRIPLE CHECK the contract you interact with matches the one reviewed here (0x95b...De67)

Posted on 23 September 2021 |

Goose fork

  • ⚠️ Masterchef currently not behind a timelock
  • ⚠️ Max 50% deposit fees
  • ✅ All transfer-tax tokens are supported
  • 10% of emissions sent to dev address
  • Note: Vault contracts have not been reviewed

⚠️ Triple check the contract you interact matches the one reviewed here (0x91ad...869c)

Posted on 20 September 2021 |

Panther fork

  • 🚨 Solarbeam Vaults are not yet verified as of date of review
  • ⚠️ Masterchef currently not behind a timelock
  • ⚠️ Masterchef uses a forward contract to allow implementation of meta transactions (gasless). Should also be noted that the EIP behind this is still in the draft phase and could still contain vulnerabilities. Kindly take note of the security considerations.
  • ⚠️ Token uses access roles in their contract (minter, pauser, rescuer, take fee, router). Please clarify with the project on token role assignments as there could be risk of the dev minting and dumping.
  • ⚠️ Token transfers are pausable
  • ✅ Max 10% deposit fees
  • ✅ Masterchef correctly accounts for transfer taxes on any token pool
  • Solarbeam Factory is a SushiSwap fork. It has 0.25% fees, 1/6th of which (0.0417%) go to the fee address
  • Masterchef uses an operator role for allocation point update, enable/disable of meta transactions
  • Masterchef regular withdrawals will fail once max supply is reached unless emissions and/or multipliers are set to zero
  • 1/10th of emission rewards minted to dev address
  • Harvest lockups max of 14 days
  • No referrals
  • No transfer tax (max 10%)
  • No anti-whale (min 0.01%)
  • Token rescuer role can retrieve any tokens that are in the token contract
  • Token has 1 Billion max supply, 100,000 has been preminted
  • Token uses the permit library to enable gasless transactions
  • 42% of tokens allocated to the vaults as rewards, 0.37% are supplied as liquidity and 97% of the LP tokens are held by the Masterchef

⚠️ TRIPLE CHECK the contract you interact with matches the one reviewed here (0xf03b...aa30907)

Posted on 16 September 2021 |

Complex dividend-paying reflection token on the MoonRiver network. We reserve the right to not review complex projects that would require more senior security analyst man hours. Typically these are projects that deal with leverage, lending, options, derivatives, and anything that is complex and which requires tons of peer reviews, and audits.

Since our resources are stretched thin and we don’t have the funding for these kind of massive endeavors, we may pass on projects that meet this level of complexity. DYOR.

Posted on 16 September 2021 |

Goose fork

  • Yield farming product of MoonSwap AMM
  • ⚠️ 100% deposit fees possible
  • ⚠️ Masterchef currently not behind a timelock
  • ⚠️ Does not support deflationary/transfer-tax token pools, just clarify with project that none will be added
  • ⚠️ Project uses their own router for the MoonSwap AMM which seems to be a fork of Uniswap V2. Ensure that you perform a small test transaction first and check that the Router contract matches the one here.
  • 1/10th of emission rewards minted to dev address
  • 40% of token supply is with the Masterchef, 32% in liquidity where 98% of the LP tokens are also held by the Masterchef

⚠️ TRIPLE CHECK the contract you interact with matches the one reviewed here (0x78Aa...96Ff)

Posted on 14 September 2021 |
Update

Update 2:

Team has been open, transparent, and commited to education. Team has been pushing user education. In light of the second audit with Paladin we have upgraded our review from 'Medium Risk' to 'Some Risk'

Please keep in mind that as this project is a vault project. Vaults are exponentially more exploitable and dangerous compared to simple farms, and so we err on the side of caution for the average user for this reason.

Update - They have conducted an audit of their vaults with Obelisk, and as such we have upgraded our review to reflect the change from 'High Risk' to 'Medium Risk'.

Updated on 20 October 2021

Cross chain vault project on Polygon and MoonRiver. Calls a strat. Swaps and transfers tokens between token types and contracts. Team is open and active as well as provides useful education in their Docs.

Has an audit by Obelisk as well as an audit by Paladin.

Have two full time team members who are doxxed to the public

Posted on 27 May 2021 |
Update

Since the original revision, the project has expanded to two additional chains: Moonriver and Moonbeam. At first, the contracts of the BSC and Moonriver vaults are practically similar. In the Moonbeam network, it seems that this functionality is not implemented so far.

For both Moonriver and Moonbeam, a $TOAD (governance token) wrapper has been implemented. Unfortunately, in neither case are the contracts unverified.

In the case of $PAD (rewards token), the contracts in both Moonriver and Moonbeam are simple implementations of an ERC20 token. In both cases, the minting is handled by a Minter contract, owned by an EOA.

The approach of an individual contract for each farm continues to be used for both additional networks. In both networks, the contracts used are similar, with minor modifications, to those originally used in the BSC network.

They also implement their own AMM on both networks. In both cases they are simple forks of the PCS router, with the same modification in the fees charged [Moonriver | Moonbeam]

Updated on 2 February 2022

Has individual contracts for each farm and ecosystem involves several contracts. Only native farms. several contracts involving vaults, AMM, farm, LP, and minter and its a fairly large complex ecosystem. Codes are custom. Vaults always carry inherent risks. These contracts also include some more unusual functions involving leverage like onbackingredeem, payout, onremove stake. Nothing looks like an overt rug but its weird, complex, and custom. Does have an audit which reviews certain internal contract securities. This ecosystem also encompasses padswap.exchange vault/AMM

Chef 1 | Chef 2

Posted on 19 May 2021 |

Search

🟢 For owners who have made impactful changes and would like an update to their farm review:

1️⃣ Use #update at @RugDocChat with your description and proof of changes and it will be forwarded to our scanners.

2️⃣ This does not guarantee a change in your review.

3️⃣ Owners who have difficulty solving the issues can consider our Consultation Package – please contact @BaymaxCrypto on Telegram to discuss.

Our mission here at RugDoc is to screen for hard rug code that results in 100% theft of ALL underlying funds for ALL participants.

This is the ONE part of the due diligence process that most people cannot simply do on their own as it costs thousands of dollars to hire a senior solidity developer to look over a farm for safety.

A project coin with terrible code can go up in price, and a project with good code and a good team can also go down in price.

Do NOT use our ratings to refer to your likelihood in making money if you invest in the project. They are ONLY in reference to code safety.

Everything else beyond code safety is YOUR responsibility to go do research on. We just make sure the casino you’re betting in won’t rob you before you even get to place a bet.

Our reviews for projects are organized into a few colors.

🟢 Least Risk
These projects are the least likely to hard or soft rug. Usually reserved for cornerstone projects of an ecosystem where it makes no financial sense for them to rug in any manner as they make more money just being legit.

🔵 Low Risk
These projects are usually established projects in an ecosystem that have a track record of success or have KYC’d to us or other authoritative sources in the real world. As a result, it is extremely unlikely for them to soft rug or hard rug their projects. The projects can still fail and the token price can go down, but usually more as a result of natural market forces.

⚪️ Some Risk
This is the default rating for projects with unknown teams but have code that is unlikely to have hard rug risk. Since the team is unknown and doesn’t have a track record of success, it’s entirely possible that they may try to soft rug by dumping tokens, abandoning the project, etc. Even a last minute contract swap to a malicious contract is possible. The only thing that is unlikely is a complete hard rug as long as you are 100% sure you deposit into the contract we review.

🟠 Medium Risk
Similar to Some Risk, but the underlying code itself is custom enough or complex enough that it warrants an elevated risk rating that needs deeper research. Make sure you read every point presented to make sure you’re comfortable with that before entering. Still unlikely to hard rug, but more chances of custom code behaving incorrectly and causing other issues.

🔴 High Risk
Project contains code or practices that are HIGHLY LIKELY to lead to catastrophic losses as they are right now. Make sure you read the description carefully as we will always warn what these issues are. If you see the words Hard Rug anywhere in the review, STAY FAR AWAY!

⚫️ Not Eligible
We reserve the right to not review exceedingly complex projects that would require tens of thousands of dollars of senior security analyst man hours. Typically these are projects that deal with leverage, lending, options, derivatives, and anything that is overly complex and which requires tons of peer reviews and audits from top audit companies.