About UNB
Listings
Website
Unbound Finance is a decentralized, non-custodial platform that is building a derivative layer over the existing AMMs with a view to increase the overall capital efficiency of the DeFi space. Liquidity providers can compound their earnings by leveraging their LP tokens to mint UND (decentralized, cross-chain, stablecoin soft pegged to the US dollar) and uETH. The protocol is characterized by several unique features, some of which include:
Get Liquidity Without Removing Assets From Liquidity Pool
Users can keep their liquidity on a DEX in a liquidity pool and still have additional stablecoins to trade on different AMMs. For example, if a user has $10,000 locked in the $USDT-$USDC pool on Uniswap, that user can lock up their LPTs on Unbound and mint stable coins ($UND) worth $8,000 on BSC to trade on PancakeSwap while the users liquidity is still on Uniswap thereby enjoying the benefits of fee on Uniswap and having enough liquidity to trade on PancakeSwap. This way Unbound will be able to move liquidity from AMMs across different chains to PancakeSwap and vice versa without physically removing liquidity.
Debt-Free Borrowing
The protocol charges no interest on loans taken out by the liquidity providers. To redeem their loan, they simply repay the amount of UND or uETH they borrowed to retrieve their collateral (i.e. their LP tokens).
Liquidation-free Collateralization
Unbound completely nixes the liquidation engine seen with more collateralized lending platforms. As a result, users do not need to concern themselves with the potential liquidation of their collateral. Instead, Unbound uses SAFU, an emergency insurance fund, to secure the collateralized assets of borrowers during so-called ‘black swan’ events.
Perpetual Borrowing
At Unbound, loans have no fixed repayment deadline. Users can unlock their collateralized assets any time by paying back the outstanding debt — without any restrictions.
The UND Stablecoin
Unbound Finance’s first product is the cross-chain, decentralized stablecoin known as UND. It is an ERC-20 token soft-pegged to the US dollar and backed by user deposits.
Secured Price Oracles
The platform uses a geometric mean of highly secured price oracles including Uniswap’s TWAP (Time Weighted Average Price) and Chainlink to obtain accurate asset price information. It also makes use of the “block limit lock mechanism” as a security measure against flash loan attacks and other related cyber-attacks. This is a protection mechanism that forces users to wait for at least three to five blocks of confirmation to again interact with the smart contracts. Besides this, the protocol has been subjected to a series of audits to further enhance the security of the platform.
Cross-Chain Bridges
Unbound is working to establish strategic partnerships with projects building across multiple blockchains. In line with this, it is also constructing cross-chain bridges to enable UND and other synthetic assets to be transferred across multiple blockchains.
Social
Laser Scorebeta Last Audit: 19 February 2022
Anti-Scam
Links
Unable to find manual contract audit (e.g. Certik, PeckShield, Solidity...)
AnyswapV5ERC20.depositWithTransferPermit(address,uint256,uint256,uint8,bytes32,bytes32,address) (#339-342) ignores return value by IERC20(underlying).transferWithPermit(target,address(this),value,deadline,v,r,s) (#340)
Ensure that all the return values of the function calls are used.
Additional information: link
AnyswapV5ERC20.initVault(address)._vault (#203) lacks a zero-check on :
- vault = _vault (#205)
- pendingVault = _vault (#206)
AnyswapV5ERC20.setMinter(address)._auth (#213) lacks a zero-check on :
- pendingMinter = _auth (#214)
AnyswapV5ERC20.setVault(address)._vault (#218) lacks a zero-check on :
- pendingVault = _vault (#219)
AnyswapV5ERC20.constructor(string,string,uint8,address,address)._underlying (#298) lacks a zero-check on :
- underlying = _underlying (#302)
AnyswapV5ERC20.constructor(string,string,uint8,address,address)._vault (#298) lacks a zero-check on :
- vault = _vault (#313)
- pendingVault = _vault (#314)
Check that the address is not zero.
Additional information: link
Reentrancy in AnyswapV5ERC20.deposit() (#344-348):
External calls:
- IERC20(underlying).safeTransferFrom(msg.sender,address(this),_amount) (#346)
State variables written after the call(s):
- _deposit(_amount,msg.sender) (#347)
- _totalSupply += amount (#404)
- _deposit(_amount,msg.sender) (#347)
- balanceOf[account] += amount (#405)
Reentrancy in AnyswapV5ERC20.deposit(uint256) (#350-353):
External calls:
- IERC20(underlying).safeTransferFrom(msg.sender,address(this),amount) (#351)
State variables written after the call(s):
- _deposit(amount,msg.sender) (#352)
- _totalSupply += amount (#404)
- _deposit(amount,msg.sender) (#352)
- balanceOf[account] += amount (#405)
Reentrancy in AnyswapV5ERC20.deposit(uint256,address) (#355-358):
External calls:
- IERC20(underlying).safeTransferFrom(msg.sender,address(this),amount) (#356)
State variables written after the call(s):
- _deposit(amount,to) (#357)
- _totalSupply += amount (#404)
- _deposit(amount,to) (#357)
- balanceOf[account] += amount (#405)
Reentrancy in AnyswapV5ERC20.depositWithPermit(address,uint256,uint256,uint8,bytes32,bytes32,address) (#333-337):
External calls:
- IERC20(underlying).permit(target,address(this),value,deadline,v,r,s) (#334)
- IERC20(underlying).safeTransferFrom(target,address(this),value) (#335)
State variables written after the call(s):
- _deposit(value,to) (#336)
- _totalSupply += amount (#404)
- _deposit(value,to) (#336)
- balanceOf[account] += amount (#405)
Reentrancy in AnyswapV5ERC20.depositWithTransferPermit(address,uint256,uint256,uint8,bytes32,bytes32,address) (#339-342):
External calls:
- IERC20(underlying).transferWithPermit(target,address(this),value,deadline,v,r,s) (#340)
State variables written after the call(s):
- _deposit(value,to) (#341)
- _totalSupply += amount (#404)
- _deposit(value,to) (#341)
- balanceOf[account] += amount (#405)
Apply the check-effects-interactions pattern.
Additional information: link
Reentrancy in AnyswapV5ERC20.deposit() (#344-348):
External calls:
- IERC20(underlying).safeTransferFrom(msg.sender,address(this),_amount) (#346)
Event emitted after the call(s):
- Transfer(address(0),account,amount) (#406)
- _deposit(_amount,msg.sender) (#347)
Reentrancy in AnyswapV5ERC20.deposit(uint256) (#350-353):
External calls:
- IERC20(underlying).safeTransferFrom(msg.sender,address(this),amount) (#351)
Event emitted after the call(s):
- Transfer(address(0),account,amount) (#406)
- _deposit(amount,msg.sender) (#352)
Reentrancy in AnyswapV5ERC20.deposit(uint256,address) (#355-358):
External calls:
- IERC20(underlying).safeTransferFrom(msg.sender,address(this),amount) (#356)
Event emitted after the call(s):
- Transfer(address(0),account,amount) (#406)
- _deposit(amount,to) (#357)
Reentrancy in AnyswapV5ERC20.depositWithPermit(address,uint256,uint256,uint8,bytes32,bytes32,address) (#333-337):
External calls:
- IERC20(underlying).permit(target,address(this),value,deadline,v,r,s) (#334)
- IERC20(underlying).safeTransferFrom(target,address(this),value) (#335)
Event emitted after the call(s):
- Transfer(address(0),account,amount) (#406)
- _deposit(value,to) (#336)
Reentrancy in AnyswapV5ERC20.depositWithTransferPermit(address,uint256,uint256,uint8,bytes32,bytes32,address) (#339-342):
External calls:
- IERC20(underlying).transferWithPermit(target,address(this),value,deadline,v,r,s) (#340)
Event emitted after the call(s):
- Transfer(address(0),account,amount) (#406)
- _deposit(value,to) (#341)
Apply the check-effects-interactions pattern.
Additional information: link
AnyswapV5ERC20.mpc() (#192-197) uses timestamp for comparisons
Dangerous comparisons:
- block.timestamp >= delayVault (#193)
AnyswapV5ERC20.applyVault() (#223-226) uses timestamp for comparisons
Dangerous comparisons:
- require(bool)(block.timestamp >= delayVault) (#224)
AnyswapV5ERC20.applyMinter() (#228-232) uses timestamp for comparisons
Dangerous comparisons:
- require(bool)(block.timestamp >= delayMinter) (#229)
AnyswapV5ERC20.permit(address,address,uint256,uint256,uint8,bytes32,bytes32) (#461-478) uses timestamp for comparisons
Dangerous comparisons:
- require(bool,string)(block.timestamp <= deadline,AnyswapV3ERC20: Expired permit) (#462)
AnyswapV5ERC20.transferWithPermit(address,address,uint256,uint256,uint8,bytes32,bytes32) (#480-504) uses timestamp for comparisons
Dangerous comparisons:
- require(bool,string)(block.timestamp <= deadline,AnyswapV3ERC20: Expired permit) (#481)
Avoid relying on block.timestamp.
Additional information: link
Address.isContract(address) (#95-101) uses assembly
- INLINE ASM (#99)
AnyswapV5ERC20.constructor(string,string,uint8,address,address) (#298-326) uses assembly
- INLINE ASM (#318)
Do not use evm assembly.
Additional information: link
SafeERC20.safeApprove(IERC20,address,uint256) (#115-120) is never used and should be removed
Remove unused functions.
Additional information: link
Pragma version0.8.2 (#23) allows old versions
solc-0.8.2 is not recommended for deployment
Deploy with any of the following Solidity versions: 0.5.16 - 0.5.17, 0.6.11 - 0.6.12, 0.7.5 - 0.7.6 Use a simple pragma version that allows any of these versions. Consider using the latest version of Solidity for testing.
Additional information: link
Low level call in SafeERC20.callOptionalReturn(IERC20,bytes) (#121-132):
- (success,returndata) = address(token).call(data) (#125)
Avoid low-level calls. Check the call success. If the call is meant for a contract, check for code existence
Additional information: link
Parameter AnyswapV5ERC20.initVault(address)._vault (#203) is not in mixedCase
Parameter AnyswapV5ERC20.setMinter(address)._auth (#213) is not in mixedCase
Parameter AnyswapV5ERC20.setVault(address)._vault (#218) is not in mixedCase
Parameter AnyswapV5ERC20.revokeMinter(address)._auth (#235) is not in mixedCase
Function AnyswapV5ERC20.Swapin(bytes32,address,uint256) (#271-275) is not in mixedCase
Function AnyswapV5ERC20.Swapout(uint256,address) (#277-283) is not in mixedCase
Variable AnyswapV5ERC20.DOMAIN_SEPARATOR (#145) is not in mixedCase
Follow the Solidity naming convention.
Additional information: link
AnyswapV5ERC20.delay (#158) should be constant
AnyswapV5ERC20.delayDelay (#175) should be constant
AnyswapV5ERC20.pendingDelay (#174) should be constant
Add the constant attributes to state variables that never change.
Additional information: link
owner() should be declared external:
- AnyswapV5ERC20.owner() (#188-190)
changeMPCOwner(address) should be declared external:
- AnyswapV5ERC20.changeMPCOwner(address) (#252-258)
Swapin(bytes32,address,uint256) should be declared external:
- AnyswapV5ERC20.Swapin(bytes32,address,uint256) (#271-275)
Swapout(uint256,address) should be declared external:
- AnyswapV5ERC20.Swapout(uint256,address) (#277-283)
Use the external attribute for functions never called from the contract.
Additional information: link
Average 30d PancakeSwap liquidity is less than $100. Token is either dead or inactive.
Average 30d number of PancakeSwap swaps is less than 1. Token is either dead or inactive.
BscScan page for the token does not contain additional info: website, socials, description, etc.
Additional information: link
Unable to find token contract audit
Unable to verify token contract address on the website
Unable to find audit link on the website
Unable to find whitepaper link on the website
Unable to find token on CoinHunt
Additional information: link
Young tokens have high risks of price dump / death
Young tokens have high risks of scam / price dump / death
Price for UNB
LASER DESK beta
Unable to find Youtube account
Unable to find Discord account