*Paid Advertisement. Not financial advice. RugDoc is not responsible for the projects showcased here. DYOR and ape safu.
RugDoc Review
UPDATE 2:
🚨 Rugged (~ $46K) using a extremely simple method (link). In this case, the dev has waited to expand to another network (Avax) before stealing. Always be suspicious and always try to wait for a contract review before interacting with it.
UPDATE:
TShare Reward Pool Contract Review
- ✅ It has been re-deployed fixing the problem stated in the initial revision [0xD97066…0905].
- ✅ The $TSHARE tokens (100K) that were in the previous contract have been blocked by renouncing the contract [tx].
- 🚨 The re-deployment of this contract allowed to illustrate what was mentioned in the original revision. The owner recovered the operation of the TSHARE contract [tx], which has allowed the owner to call the distributeReward function again [tx] and, thus, in just over 1 minute about 100K new TSHARE tokens have been minted to the address indicated when calling the function . This time, it is the new contract but nothing prevents it from being an EOA. In this way, the owner is able to carry out the same process and mint up to 400K new tokens.
Algostable project which appears to be based on Tomb Finance project. We recommend these kind of complex projects to pass reputable audits and KYC verifications as there is a risk of governance mishandling. Before investing, we also recommend users to conduct their own due diligence checks. The codebases tend to be large and complex with various risk vectors. We are classifying the whole Project as [Not Eligible].
- ⚠️ Not KYC’d with RugDoc
- ⚠️ No reputable audits as of date
- ⚠️ Liquidity is not locked with RugDoc
- ⚠️ Not in a multisig. We highly recommend the project to use one with community members or reliable 3rd parties as an approver due to the said governance risk.
TShare Contract Review
- 🚨 Token Ownership not renounced. Owner can mint & dump.
- ⚠️ Token Operator = Treasury. 🚨 Token Ownership has not yet been renounced, so Token owner can recover Operatorship and use distributeReward function to minting an additional 500K TShare tokens and dump.
TShare Reward Pool Contract Review
🚨 The contract has a small modification by which it allows the deposit to be in the name of another user. In other words, the depositor may not necessarily be the one to whom the amount of the deposit is computed. This feature has no valid justification. It is recommended that you do not interact with this contract through the website. A simple update of the page is enough for this function to be used, so previous successful deposits do not ensure that future deposits are not affected by the mentioned code [see code].
Genesis Contract Review
- ⚠️ Does not account for transfer-tax tokens. Withdraw is prone to reentrancy attacks in case of vulnerable tokens
- ⚠️ No liquidity yet, therefore the genesis rewards cannot be sold
- ✅ Function governanceRecoverUnsupported removed
- ✅ Genesis Operator renounced
- ✅ No Deposit Fee
- ✅ No Transfer Tax on Native Token
- ✅ Token Ownership renounced
- ✅ Token Operator = Treasury
- Genesis is running for 2 days
⚠️ TRIPLE CHECK the contract you interact with. Make sure it matches the one reviewed here (0xA11f16…3Be5)
*Paid Advertisement. Not financial advice. RugDoc is not responsible for the projects showcased here. DYOR and ape safu.
Popular Links
For Farm Owners
Disclaimer: This is done with our best knowledge and effort, nothing can be known for certain – always DYOR and risk management. This is NOT financial advice. Use the information presented here to inform your own decisions. Referral links may be included on any outbound link.