Polygon Farms

Goose fork for Masterchef and a clean Sushiswap fork for Dex with fee modified to 0.18%

• ⚠️ 100% deposit fees possible
• ⚠️ Masterchef currently not behind a timelock
• ⚠️ Does not support pools with deflationary / transfer-tax tokens. Just confirm with the team that these will not be added
• 10% of emissions sent to dev address

⚠️ Triple check the contract you interact matches the one reviewed here (0xbd40...df9a)

Diamond Mine X100 staking contract uses a referral-based reward system where it depends on incoming users and 4% of the deposits go to the market/dev address and additionally they charge a 4% fee on withdrawals. PLEASE NOTE that the success in these types of projects rely on enough users entering a stake after yours or you will lose money as there will not be enough funds for everyone eligible for a payout to cash out. ⚠️ RugDoc HIGHLY recommends thinking through all possible scenarios in these types of projects thoroughly and assessing your risk tolerance. DYOR. ⚠️ There is no unstake option so once you stake there is no withdrawing your initial deposit.

Custom bonding contract implementation similar to Olympus Dao. We reserve the right to not review exceedingly complex projects that would require tens of thousands of dollars of senior security analyst man hours.

Since our resources are stretched thin and we don’t have the funding for these kind of massive endeavors, we may pass on projects that meet this level of complexity. DYOR.

• 5% transfer tax on token

Algostable project which appears to be based on Tomb Finance project. We recommend these kind of complex projects to pass reputable audits and KYC verifications as there is a risk of governance mishandling. Before investing, we also recommend users to conduct their own due diligence checks. The codebases tend to be large and complex with various risk vectors. We are classifying the whole Project as [Not Eligible].

• ⚠️ Not KYC'd with RugDoc
• ⚠️ No reputable audits as of date
• ⚠️ Liquidity is not locked with RugDoc
• ⚠️ Not in a multisig. We highly recommend the project to use one with community members or reliable 3rd parties as an approver due to the said governance risk.

🚨  We want to be VERY clear that this review and it's rating ONLY applies to the genesis staking contract and not the actual operations of anything that happens anytime after genesis pools 🚨

Genesis Contract Review

• ⚠️ Contracts not yet linked to front-end
• ⚠️ Does not account for transfer-tax tokens, Withdraw is prone to reentrancy attacks in case of vulnerable tokens
• ⚠️ No liquidity at time of listing, therefore the genesis rewards cannot be sold
• ⚠️ Governance can drain the contract 90 days after poolEndTime
• ⚠️ No pools added at time of listing
• ⚠️ Additional Withdraw Fee: Can be set between 0-1%
• Deposit Fee: Can be set between 0-1%
• ✅ Max 1% Deposit Fee
• ✅ No Transfer Tax on Native Token
• ✅ Token Ownership renounced
• ✅ Token Operator = Treasury
• Genesis is running for 1 days

⚠️ TRIPLE CHECK the contract you interact with matches the one reviewed here (0x4BC...e4f)

Fork of OlympusDAO:

• ⚠️ Not KYC'd with RugDoc
• ⚠️ No reputable audits as of date
• ⚠️ Liquidity is not locked with RugDoc
• ⚠️ Not in a multisig. We highly recommend the project to use one with community members or reliable 3rd parties as an approver due to the said governance risk.

Having said the above, we are classifying this as [Not Eligible] as we recommend these kind of complex projects to pass reputable audits and KYC verifications as there is a risk of governance mishandling. Before investing, we also recommend users to conduct their own due diligence checks.

Stargate Finance is, in his own words, a community-driven organization building the first fully composable native asset bridge, and the first dApp built on LayerZero. Stargate's vision is to make cross-chain liquidity transfer a seamless, single transaction process.

The underlying assets are first deposited in pools that are responsible for providing liquidity between bridge destinations. In addition to getting returns for the transfer fees, the user can deposit these receipts in the farms and earn additional rewards in $STG (governance token). This last mechanism is carried out using a masterchef for each network. Bellow we detail some points that we were able to observe to those that are implemented at the time of this review:

• Masterchef is not behind Timelock. It is behind a multisig, but the documents do not specify who the signers would be.
• No deposit fees.
• ⚠️ Does not support deflationary/transfer-tax token pools.
• No audit is specified in the doc to date.

We reserve the right to not review exceedingly complex projects that would require tens of thousands of dollars of senior security analyst man hours.

Typically these are projects that deal with leverage, lending, options, derivatives, and anything that is overly complex and which requires tons of peer reviews and audits from top audit companies.

Since our resources are stretched thin and we don’t have the funding for these kind of massive endeavors, we may pass on projects that meet this level of complexity. DYOR.

Panther fork with a max supply of 10M.

• 🚨 Vault contract is unverified (0xBcB5b9...5EF8).
• ⚠️ Pending rewards will continue accumulating once max supply is reached, but none will actually be harvestable
• ⚠️ 100% deposit fees possible
• Masterchef behind a 3 hr timelock
• ⚠️ Does not support deflationary/transfer-tax token pools, just clarify with project that none will be added
• Dev address can be set to the zero address, which would block regular withdrawals and harvests
• 2% referral (max 5%)
• An extra 10% of emission rewards are minted to the dev address
• An extra 2% of emission rewards are minted to the marketing address.

⚠️ TRIPLE CHECK the contract you interact with matches the one reviewed here (0xA9a40f...0FfA)

🚨 Website is unavailable. Token can be paused by any user with a pauser role. Mint can be called by any user that has a minter role.

Simple implementation of a pauseable ERC20 token that uses role-based access control.

• 🚨 Transfer can be blocked anytime by pausing the contract.
• 🚨 Anyone with Minter role can mint & dump.
• ⚠️ Liquidity has not been added yet.
• Max Supply: None
• PreMinted: ~123  - split into 3 different wallets [see holders] -
• Payout Method: None
• Governance Privileges: Owner/Dev can pause/unpause contract, mint new tokens, grant roles, etc.

⚠️ Triple check the contract you interact matches the one reviewed here (0xfd79bd...f4f1).

Goose fork with a max supply of 2,500.

• ⚠️ Masterchef uses per-block emissions instead of per-time. This is an antipattern on chains with varying block times.
• ⚠️ Withdrawals and harvests will fail once max supply is reached unless emissions and/or multipliers are set to zero. Users will still be able to emergency withdraw though.
• ⚠️ Pending rewards will continue accumulating once max supply is reached, but none will actually be harvestable.
• ✅ Initial liquidity has been burned [HIPPO-WMATIC | HIPPO-USDC]
• ✅ Max 4% deposit fees
• ✅ Masterchef behind a 6 hr timelock
• ✅ Correctly accounts for transfer taxes on any token pool
• Dev address can be set to the zero address, which would block regular withdrawals and harvests
• An extra 10% of emission rewards are minted to the dev address

⚠️ TRIPLE CHECK the contract you interact with matches the one reviewed here (0x851b60...642e)

PLEASE NOTE that these types of projects are straight up ponzi schemes and you WILL lose money if you're not lucky enough to have more suckers come in after you so you can cash out. RugDoc HIGHLY recommends staying away from these types of projects. There is no unstake option so once you stake there is no withdrawing your initial deposit.

MultiChainStaker staking contract uses a referral-based reward system where it depends on incoming users and 15% of the deposits go to the market/dev address and additionally they charge a 15% fee on withdrawals. Please note that the success in these types of projects rely on enough users entering a stake after yours or you will lose money as there will not be enough funds for everyone eligible for a payout to cash out. RugDoc highly recommends thinking through all possible scenarios in these types of projects thoroughly and assessing your risk tolerance. DYOR.

Has audit from HazeCrypto for its original Polygon contracts and its Fantom contracts

Algostable project which appears to be based on Tomb Finance project. We recommend these kind of complex projects to pass reputable audits and KYC verifications as there is a risk of governance mishandling. Before investing, we also recommend users to conduct their own due diligence checks. The codebases tend to be large and complex with various risk vectors. We are classifying the whole Project as [Not Eligible].

• ⚠️ Not KYC'd with RugDoc
• ⚠️ No reputable audits as of date
• ⚠️ Liquidity is not locked with RugDoc
• ⚠️ Not in a multisig. We highly recommend the project to use one with community members or reliable 3rd parties as an approver due to the said governance risk.

🚨  We want to be VERY clear that this review and it's rating ONLY applies to the genesis staking contract and not the actual operations of anything that happens anytime after genesis pools 🚨

Genesis Contract Review

• ⚠️ Does not account for transfer-tax tokens, Withdraw is prone to reentrancy attacks in case of vulnerable tokens
• ⚠️ No liquidity at time of listing, therefore the genesis rewards cannot be sold
• ⚠️ Governance can drain the contract 90 days after poolEndTime
• Deposit Fee: 1%
• Genesis Start: 11.3.2022 @ 5 PM
• Genesis Duration: 3 days
• ✅ Max 4% deposit fees
• ✅ Token Ownership renounced
• ✅ Token Operator = Treasury

⚠️ TRIPLE CHECK the contract you interact with matches the one reviewed here (0x1bca...fa76)

Matic FOMO uses a referral-based reward or a penalty system where it depends on incoming/outgoing users and 2% of the deposits go to the market/dev address. Please note that these types of projects appear to be straight up ponzi schemes and you will lose money if you're not lucky enough to have more users come in after you so you can cash out. RugDoc highly recommends staying away from these types of projects. DYOR.

Jiggly fork identical to Rabbit.luxe with capped deposit fees and a max supply of 30,000. Layer 2 of Unity.

• ⚠️ Pending rewards will continue accumulating once max supply is reached, but none will actually be harvestable
• ✅ Max 4% deposit fees
• ✅ Masterchef ownership has been revoked and farm can no longer be modified
• ✅ Correctly accounts for transfer taxes on any token pool
• An extra 10% of emission rewards are minted to the dev address
• Initial liquidity has been sent to the RugDoc liquidity locking service

⚠️ TRIPLE CHECK the contract you interact with matches the one reviewed here (0xa3e8...b5bC)

Custom MATIC betting platform in Polygon

• ⚠️ House edge fee can be set up to 100%
• ⚠️ Wealth tax fee can be set up to 100%
• ⚠️ Betting contract currently owned by an EOA
• Owner can withdraw any stuck token, and the MATIC on the contract less the potential winnings.
• Minimum betting amount of 2 MATIC, and maximum of 2000 MATIC
• Uses Chainlink VRF for randomness

⚠️ TRIPLE CHECK the contract you interact with matches the one reviewed here (0xb8dd...cd69)

Algostable project which appears to be based on Tomb Finance project. It is highly recommended that their contracts are subjected to a full audit with a reputable auditor in order to fully assure their community. These codebases tend to be large and complex with various risk vectors.

• ⚠️ Not KYC'd with RugDoc
• ⚠️ No reputable audits as of date
• ⚠️ Not in a multisig. We highly recommend the project to use one with community members or reliable 3rd parties as an approver due to the said governance risk.

Having said the above, we are classifying this as [Not Eligible] as we recommend these kind of complex projects to pass reputable audits and KYC verifications as there is a risk of governance mishandling. Before investing, we also recommend users to conduct their own due diligence checks.

Genesis Contract Review

• ⚠️ Does not account for transfer-tax tokens
• ⚠️ Withdraw is prone to reentrancy attacks in case of vulnerable tokens
• ⚠️ Governance can drain the contract 90 days after poolEndTime
• Deposit Fee 0-1%
• ✅ Max 4% deposit fees
• ✅ Token Ownership renounced
• ✅ Token Operator = Treasury

⚠️ TRIPLE CHECK the contract you interact with matches the one reviewed here (0xeeae...595a)

Goose fork

• ⚠️ Masterchef uses per-block emissions instead of per-time. This is an antipattern on chains that have variable block times.
• ⚠️ Liquidity is just staked in the masterchef and can be removed and dumped at any time. Please clarify with the project on liquidity locking or burning
• ⚠️ Withdrawals and harvests will not fail once the maximum supply is reached, but only the withdrawal of the deposit and not the unclaimed rewards will be effective. Keep this in mind when the maximum supply is about to be reached.
• ⚠️ Pending rewards will continue accumulating once max supply is reached, but none will actually be harvestable.
• ✅ Max 4% deposit fees
• ✅ Masterchef behind a 6 hr timelock
• ✅ Correctly accounts for transfer taxes on any token pool
• An extra 10% of emission rewards are minted to the dev address

⚠️ TRIPLE CHECK the contract you are interacting with matches one of those checked here:

• AVAX: 0x8F510e...2f0A.
• BSC: 0xe78288...19B3.
• FANTOM: 0xEbc74F...87C8.
• POLYGON: 0x8F510e...2f0A.

Jiggly fork identical to Rabbit.luxe (and from the same dev) with capped deposit fees and a max supply of 30,000

• ⚠️ Pending rewards will continue accumulating once max supply is reached, but none will actually be harvestable
• ✅ Max 4% deposit fees
• ✅ Masterchef ownership has been revoked and farm can no longer be modified
• ✅ Correctly accounts for transfer taxes on any token pool
• An extra 10% of emission rewards are minted to the dev address
• Initial liquidity has been sent to the RugDoc liquidity locking service

⚠️ TRIPLE CHECK the contract you interact with matches the one reviewed here (0xc23A...1a50)

🚨 Connected contract via front-end is an UNVERIFIED contract and bears a different address from the requested masterchef contract ending in E74A. We highly advise to revoke approval and withdraw from the contract until it is resolved. 🚨