Farm

*Paid Advertisement. Not financial advice. RugDoc is not responsible for the projects showcased here. DYOR and ape safu.

Filter by network
Filter by risk
No data was found

Project appears to be connected to Banksy Farm. Masterchef is a modified Panther fork with 50,000 max token supply.

  • ✅ Max 4% deposit fees
  • ✅ Masterchef behind a 24 hr timelock . ⚠️ It can be modified so that the delay is only 60 seconds. It is worth clarifying that for this to happen, it must first go through the current delay of 24 hours
  • ✅ Correctly accounts for transfer taxes on any token pool
  • Anti-whale disabled (min 0.5%)
  • 4 hr harvest lockups (max 4 hours)
  • ⚠️ Masterchef owner can emergency withdraw any staked NFTs and transfer it to any address specified. If used maliciously, this function could cause potential losses.
  • ⚠️ Dev can withdraw any token from the Treasury DAO contract at any time.

⚠️ TRIPLE CHECK the contract you interact with matches the one reviewed here (0x0D5B8f...2a75)

Posted on 06 October 2022 |

BUSD Island uses a referral-based reward system where it depends on incoming/outgoing users and 6% of the deposits/rewards go to the dev address.

  • ⚠️ It allows you to withdraw the initial deposit at any time but a 50% withdrawal fee is applied which is sent directly to the dev.
  • ⚠️ RugDoc HIGHLY recommends thinking through all possible scenarios in these types of projects thoroughly and assessing your risk tolerance. DYOR.
  • ✅ Max of 6% rewards fee
  • ✅ Max 6% staking fees
  • 10% referral.
  • ⚠️ Withdrawals and harvests will fail once the BUSD supply has been depleted.
  • ⚠️ Pending rewards will continue accumulating once BUSD supply is depleted, but none could be harvested

⚠️ TRIPLE CHECK the contract you interact with matches the one reviewed here 0xccb4ac...7fe8

Posted on 06 October 2022 |

Wow! Stake uses a referral-based reward system where it depends on incoming/outgoing users and 9.9% of the deposits/rewards go to the dev address.

  • 🚨 Owner can update the start time to any value (even after staking is enabled) which could be used to lock both new deposits and reward claims. This would allow the owner to slowly drain the contract.
  • ⚠️ RugDoc HIGHLY recommends thinking through all possible scenarios in these types of projects thoroughly and assessing your risk tolerance. DYOR.
  • ✅ Max of 9.9% rewards fee
  • ✅ Max 9.9% staking fees
  • 15% referral.
  • ⚠️ Withdrawals and harvests will fail once the $DC supply has been depleted.
  • ⚠️ Pending rewards will continue accumulating once $DC supply is depleted, but none could be harvested

⚠️ TRIPLE CHECK the contract you interact with matches the one reviewed here 0x7B8858...bD5E

Posted on 05 October 2022 |

Modified PancakeSwap fork

  • ⚠️ 8% of current token supply is in an unverified contract. (0x0054...257e)(0x51B9...0827)
  • ⚠️ Masterchef uses per-block emissions instead of per-time. This is an antipattern on networks that uses variable block timing.
  • ⚠️ Does not support deflationary/transfer-tax token pools, just clarify with project that none will be added.
  • ⚠️ Withdrawals and harvests will fail once max supply is reached unless emissions and/or multipliers are set to zero. Users will still be able to emergency withdraw though.
  • ⚠️ Pending rewards will continue accumulating once max supply is reached, but none will actually be harvestable.
  • ⚠️ Masterchef currently not behind a timelock.
  • ✅ No deposit fees.
  • ✅ Token owner is MasterChef.
  • 0.3% swap fees
  • An extra 100% of emission rewards are minted to the syrup address.

⚠️ TRIPLE CHECK the contract you interact with matches the one reviewed here (0xeB64...2F82)

Posted on 05 October 2022 |

Pancakeswap fork with additional custom functions

  • ⚠️ Masterchef owner can mint any amount of $AVEX for free to any address. Owner can mint and dump.
  • ⚠️ Masterchef owner can burn the deposit receipts of any user without prior approval. This leads to potential loss of unclaimed rewards as it blocks regular withdrawals (emergency withdrawals would still work). This only affects the Avex pool (native token).
  • ⚠️ Masterchef owner can transfer (or recover) the Token ownership through the Masterchef contract [see code].
  • ⚠️ Masterchef owner can transfer (or recover) the Syrup ownership through the Masterchef contract [see code].
  • ⚠️ Either of the above two points can result in the owner being able to mint and dump on you
  • ⚠️ Masterchef uses per-block emissions instead of per-time. This is an antipattern on the Avalanche network.
  • ⚠️ Masterchef currently not behind a timelock
  • ⚠️ Does not support deflationary/transfer-tax token pools, just clarify with project that none will be added
  • ⚠️ Project appears to be using its own router which seems to be a fork of PCS router (swap fee 0.2%). Ensure that you perform a small test transaction first and check that the Router contract matches the one (0xe3Cb1b...d9Cd)
  • ✅ No deposit fees
  • 10M of $AVEX has been preminted
    • 1.9M has been lock with PinkLock (tx1 | tx2 | tx3)
    • 4.5M has been used to presale (tx).
    • ⚠️ 250K has been sent to a fresh wallet (tx).
    • ⚠️ 3.35M still left in the dev wallet (txs)
  • Dev address can be set to the zero address, which would block regular withdrawals and harvests
  • An extra 10% of emission rewards are minted to the dev address.
  • Masterchef owner can modify the multiplier to any value, which can lead to an error in the emission.
  • Emergency withdraw function is prone to reentrancy attacks in case of vulnerable tokens.

⚠️ TRIPLE CHECK the contract you interact with matches the one reviewed here (0xbf52db...47fa)

Posted on 05 October 2022 |

Wealth Mountain uses a referral-based reward or a penalty system where it depends on incoming/outgoing users and 10% of the deposits/rewards go to the dev address.

  • ⚠️ RugDoc HIGHLY recommends thinking through all possible scenarios in these types of projects thoroughly and assessing your risk tolerance. DYOR.
  • ⚠️ Max of 10% early withdrawal fee, min of 2%.
  • ✅ Max 10% staking fees.
  • 3% referral.
  • ⚠️ Withdrawals and harvests will fail once the BUSD/USDC supply has been depleted.
  • ⚠️ Pending rewards will continue accumulating once BUSD/USDC supply is depleted, but none could be harvested

⚠️ TRIPLE CHECK the contract you interact with matches the one reviewed here:

Posted on 27 September 2022 |

Goose fork

  • ⚠️ Masterchef uses per-block emissions instead of per-time. This is an antipattern on networks that uses variable block timing.
  • ⚠️ Masterchef currently not behind a timelock.
  • ⚠️ Does not support deflationary/transfer-tax token pools, just clarify with project that none will be added.
  • ✅ Max 4% deposit fees.
  • ✅ Token owner is MasterChef.
  • Dev and fee address can be set to the zero address, which would block regular withdrawals and harvests.
  • An extra 10% of emission rewards are minted to the dev address.

⚠️ TRIPLE CHECK the contract you interact with matches the one reviewed here (0x7589...9c3E)

Posted on 26 September 2022 |

SPONSORED AD

Custom Staking Contract

  • 🚨 Admin can drain funds at any time [see example code].
  • 🚨 Lock-in period can be extended indefinitely even for deposits already made.
  • ⚠️ It does not implement emergency withdrawals
  • Implements an individual contract for each pool.
Posted on 26 September 2022 |
Update
Updated on 25 September 2022

Panther fork

  • ⚠️ As of time of review, Presale is still active. Liquidity is not yet supplied and will be added only after their presale ends. Presales are notoriously risky, kindly exercise caution when participating. Please clarify with the project on liquidity locking/burning once it is added.
  • ⚠️ Masterchef uses per-block emissions instead of per-time. This is an antipattern on networks that uses variable block timing.
  • ✅ Max 4% deposit fees.
  • ✅ Token owner is MasterChef.
  • ✅ Masterchef behind a 6 hr timelock.
  • ✅ Correctly accounts for transfer taxes on any token pool.
  • 2% referral (max 3%)
  • An extra 5% of emission rewards are minted to the dev address.
  • 0.5 transfer tax (max 1%)
  • 20% anti-whale (min 1%)

⚠️ TRIPLE CHECK the contract you interact with matches the one reviewed here (0xd619...73cc)

Posted on 21 September 2022 |

Golden Ball uses a referral-based reward or a penalty system where it depends on incoming/outgoing users and 10% of the deposits/rewards go to the dev address. Please note that these types of projects appear to be straight up ponzi schemes and you will lose money if you're not lucky enough to have more users come in after you so you can cash out. RugDoc highly recommends staying away from these types of projects. DYOR.

  • ⚠️ Withdrawals and harvests will fail once the BUSD supply has been depleted.
  • ⚠️ Pending rewards will continue accumulating once BUSD supply is depleted, but none could be harvested
  • ⚠️ Max of 50% early withdrawal fee, min of 20%.
  • ✅ Max 10% staking/harvest fees.
  • 10% referral.
  • 10% of rewards are sent to the dev address as fees.

⚠️ TRIPLE CHECK the contract you interact with matches the one reviewed here (0x9974...0ED6)

Posted on 20 September 2022 |

🚨🚨🚨 Contains HARD RUG code that can steal staked tokens at any time 🚨🚨🚨

🚨 SushiSwap fork with migrator code intact🚨

Posted on 18 September 2022 |
Update
  • Website is down.
Updated on 16 September 2022

Goose fork

  • ⚠️ Does not support deflationary/transfer-tax token pools, just clarify with project that none will be added.
  • ✅ Max 1% deposit fees.
  • ✅ Token owner is MasterChef.
  • ✅ Masterchef behind a 24 hr timelock.
  • 0.25% Swap fees
  • An extra 10% of emission rewards are minted to the dev address.

⚠️ TRIPLE CHECK the contract you interact with matches the one reviewed here (0x4e53...C5e4)

Posted on 16 September 2022 |

🚨🚨🚨 Contains HARD RUG code that can steal staked tokens at any time 🚨🚨🚨

🚨Custom contract with migrator code🚨

Posted on 13 September 2022 |
Update

UPDATE 2:

... And, to no one's surprise, rugged. Website down. Dev pulled out liquidity [tx] for the sum of ~418 $DOGE (~$26)

UPDATE:

Given the request for re-review by the project, claiming that they had previously tested on Testnet and Masterchef minted correctly, it is worth clarifying some points since there is confusion or attempted confusion about what was mentioned in the review:

  • Masterchef correctly mints the rewards, that's not the problem
  • 🚨 Masterchef never sends these rewards to the user. Neither during deposits nor during regular withdrawals. They will accumulate but none will be harvestable
  • Even the start time is wrong. They have used the block number, whereas they use the timestamp in the contract. If the rewards had worked correctly, any user could have deposited early and drained the rewards.
Updated on 13 September 2022

🚨 Due to an error in the contract, the rewards are never deliverable. It is recommended not to deposit in the contract since you would only lose the fee for your deposit 🚨

Posted on 09 September 2022 |

Custom Staking Contract

  • 🚨 Owner can use the recoverERC20 function to drain the funds in the contract.
  • ⚠️ Staking is pausable by the owner.
  • ⚠️ Duplicate pools can be created which can inadvertently dilute reward distribution.
  • ⚠️ Majority of reward token supply is with an EOA. Please clarify with the project on liquidity locking or burning.
  • ⚠️ Pending rewards can continue accumulating once supply is depleted when period is extended, but none will actually be harvestable.
  • ⚠️ Masterchef currently not behind a timelock
  • ⚠️ Does not support deflationary/transfer-tax token pools, just clarify with project that none will be added
  • ✅ No deposit fees

⚠️ TRIPLE CHECK the contract you interact with matches the one reviewed here (0x2069...A5dC)

Posted on 09 September 2022 |
Update

UPDATE:

Project has deployed new contracts and requested an update for this reason. The contracts contain the same logic as the ones originally reviewed. The original review is still valid for this new set of contracts

New addresses

Updated on 13 September 2022

Goose fork with a max supply of 10M.

  • ✅ Max 0.5% deposit fees
  • ⚠️ Masterchef currently not behind a timelock
  • ✅ Correctly accounts for transfer taxes on any token pool
  • An extra 10% of emission rewards are minted to the dev address
  • 4% transfer tax (max 10%)
  • Anti-whale disabled (min 4%)
  • ⚠️ Project appears to be using its own router which seems to be a fork of UniswapV2 router (swap fee 0.5%). Ensure that you perform a small test transaction first and check that the Router contract matches the one (0x93C287...ffaf)

⚠️ TRIPLE CHECK the contract you interact with matches the one reviewed here (0x95C4B5...956d)

Posted on 05 September 2022 |

🚨🚨🚨 Contains HARD RUG code that can steal staked tokens at any time 🚨🚨🚨

The Masterchef contract contains the Migrator function and additionally a function that allows the owner to withdraw any token at any time. Because why be satisfied with having one way to steal when you can have two, right?

Posted on 29 August 2022 |

🚨🚨🚨 Contract UNVERIFIED. It could contain ANYTHING. It is recommended that you exercise EXTREME CAUTION if you wish to interact with this project. To be safe, you should withdraw your funds immediately, and ask for their contracts to be verified. 🚨🚨🚨

Posted on 29 August 2022 |

Rugged. Website down. Dev pulled out liquidity [tx1 | tx2] for the sum of ~162 $DOGE (~$9,7)

Posted on 29 August 2022 |

⚠️ Project seems to be dead already. At least, the available liquidity is really very small ($1).
⚠️ However, the devs had the possibility to indefinitely re-initilize the token contract, each time receiving 10K $AVA (which they have done twice before transferring the operator: tx1 | tx2)

Posted on 27 August 2022 |

Search

🟢 For owners who have made impactful changes and would like an update to their farm review:

1️⃣ Use #update at @RugDocChat with your description and proof of changes and it will be forwarded to our scanners.

2️⃣ This does not guarantee a change in your review.

3️⃣ Owners who have difficulty solving the issues can consider our Consultation Package – please contact @BaymaxCrypto on Telegram to discuss.

Our mission here at RugDoc is to screen for hard rug code that results in 100% theft of ALL underlying funds for ALL participants.

This is the ONE part of the due diligence process that most people cannot simply do on their own as it costs thousands of dollars to hire a senior solidity developer to look over a farm for safety.

A project coin with terrible code can go up in price, and a project with good code and a good team can also go down in price.

Do NOT use our ratings to refer to your likelihood in making money if you invest in the project. They are ONLY in reference to code safety.

Everything else beyond code safety is YOUR responsibility to go do research on. We just make sure the casino you’re betting in won’t rob you before you even get to place a bet.

Our reviews for projects are organized into a few colors.

🟢 Least Risk
These projects are the least likely to hard or soft rug. Usually reserved for cornerstone projects of an ecosystem where it makes no financial sense for them to rug in any manner as they make more money just being legit.

🔵 Low Risk
These projects are usually established projects in an ecosystem that have a track record of success or have KYC’d to us or other authoritative sources in the real world. As a result, it is extremely unlikely for them to soft rug or hard rug their projects. The projects can still fail and the token price can go down, but usually more as a result of natural market forces.

⚪️ Some Risk
This is the default rating for projects with unknown teams but have code that is unlikely to have hard rug risk. Since the team is unknown and doesn’t have a track record of success, it’s entirely possible that they may try to soft rug by dumping tokens, abandoning the project, etc. Even a last minute contract swap to a malicious contract is possible. The only thing that is unlikely is a complete hard rug as long as you are 100% sure you deposit into the contract we review.

🟠 Medium Risk
Similar to Some Risk, but the underlying code itself is custom enough or complex enough that it warrants an elevated risk rating that needs deeper research. Make sure you read every point presented to make sure you’re comfortable with that before entering. Still unlikely to hard rug, but more chances of custom code behaving incorrectly and causing other issues.

🔴 High Risk
Project contains code or practices that are HIGHLY LIKELY to lead to catastrophic losses as they are right now. Make sure you read the description carefully as we will always warn what these issues are. If you see the words Hard Rug anywhere in the review, STAY FAR AWAY!

⚫️ Not Eligible
We reserve the right to not review exceedingly complex projects that would require tens of thousands of dollars of senior security analyst man hours. Typically these are projects that deal with leverage, lending, options, derivatives, and anything that is overly complex and which requires tons of peer reviews and audits from top audit companies.