Bearn Fi is a cross-chain product in Decentralized Finance (DeFi) that at its core provides yield generation, casino/gaming aggregation, bridge, treasury and governance on multi-chain.
Unable to find manual contract audit (e.g. Certik, PeckShield, Solidity...)
ERC20.constructor(string,string).name (#477) shadows:
- ERC20.name() (#486-488) (function)
ERC20.constructor(string,string).symbol (#477) shadows:
- ERC20.symbol() (#494-496) (function)
StandardBep20.constructor(string,string,uint8,uint256)._name (#843) shadows:
- ERC20._name (#464) (state variable)
StandardBep20.constructor(string,string,uint8,uint256)._symbol (#844) shadows:
- ERC20._symbol (#465) (state variable)
StandardBep20.constructor(string,string,uint8,uint256)._decimals (#845) shadows:
- ERC20._decimals (#466) (state variable)
Rename the local variables that shadow another component.
Additional information: link
StandardBep20.setGovernance(address) (#877-879) should emit an event for:
- governance = _governance (#878)
- governance = _governance (#878)
Emit an event for critical parameter changes.
Additional information: link
StandardBep20.setGovernance(address)._governance (#877) lacks a zero-check on :
- governance = _governance (#878)
Check that the address is not zero.
Additional information: link
Address.isContract(address) (#293-304) uses assembly
- INLINE ASM (#300-302)
Address._functionCallWithValue(address,bytes,uint256,string) (#401-427) uses assembly
- INLINE ASM (#419-422)
Do not use evm assembly.
Additional information: link
Address.functionCall(address,bytes) (#348-350) is never used and should be removed
Address.functionCallWithValue(address,bytes,uint256) (#377-383) is never used and should be removed
Address.functionCallWithValue(address,bytes,uint256,string) (#391-399) is never used and should be removed
Address.sendValue(address,uint256) (#322-328) is never used and should be removed
Context._msgData() (#20-23) is never used and should be removed
SafeERC20.safeApprove(IERC20,address,uint256) (#782-793) is never used and should be removed
SafeERC20.safeDecreaseAllowance(IERC20,address,uint256) (#804-811) is never used and should be removed
SafeERC20.safeIncreaseAllowance(IERC20,address,uint256) (#795-802) is never used and should be removed
SafeERC20.safeTransferFrom(IERC20,address,address,uint256) (#766-773) is never used and should be removed
SafeMath.div(uint256,uint256) (#206-208) is never used and should be removed
SafeMath.div(uint256,uint256,string) (#222-232) is never used and should be removed
SafeMath.mod(uint256,uint256) (#246-248) is never used and should be removed
SafeMath.mod(uint256,uint256,string) (#262-269) is never used and should be removed
SafeMath.mul(uint256,uint256) (#180-192) is never used and should be removed
Remove unused functions.
Additional information: link
Low level call in Address.sendValue(address,uint256) (#322-328):
- (success) = recipient.call{value: amount}() (#326)
Low level call in Address._functionCallWithValue(address,bytes,uint256,string) (#401-427):
- (success,returndata) = target.call{value: weiValue}(data) (#410)
Avoid low-level calls. Check the call success. If the call is meant for a contract, check for code existence
Additional information: link
Parameter StandardBep20.mint(address,uint256)._to (#863) is not in mixedCase
Parameter StandardBep20.mint(address,uint256)._amount (#863) is not in mixedCase
Parameter StandardBep20.burn(uint256)._amount (#867) is not in mixedCase
Parameter StandardBep20.burnFrom(address,uint256)._account (#871) is not in mixedCase
Parameter StandardBep20.burnFrom(address,uint256)._amount (#871) is not in mixedCase
Parameter StandardBep20.setGovernance(address)._governance (#877) is not in mixedCase
Parameter StandardBep20.addMinter(address)._minter (#881) is not in mixedCase
Parameter StandardBep20.removeMinter(address)._minter (#885) is not in mixedCase
Parameter StandardBep20.setCap(uint256)._cap (#889) is not in mixedCase
Parameter StandardBep20.governanceRecoverUnsupported(IERC20,address,uint256)._token (#897) is not in mixedCase
Parameter StandardBep20.governanceRecoverUnsupported(IERC20,address,uint256)._to (#898) is not in mixedCase
Parameter StandardBep20.governanceRecoverUnsupported(IERC20,address,uint256)._amount (#899) is not in mixedCase
Follow the Solidity naming convention.
Additional information: link
Redundant expression "this (#21)" inContext (#15-24)
Remove redundant statements if they congest code but offer no value.
Additional information: link
name() should be declared external:
- ERC20.name() (#486-488)
symbol() should be declared external:
- ERC20.symbol() (#494-496)
decimals() should be declared external:
- ERC20.decimals() (#511-513)
balanceOf(address) should be declared external:
- ERC20.balanceOf(address) (#525-527)
transfer(address,uint256) should be declared external:
- ERC20.transfer(address,uint256) (#537-540)
approve(address,uint256) should be declared external:
- ERC20.approve(address,uint256) (#556-559)
transferFrom(address,address,uint256) should be declared external:
- ERC20.transferFrom(address,address,uint256) (#573-581)
increaseAllowance(address,uint256) should be declared external:
- ERC20.increaseAllowance(address,uint256) (#595-598)
decreaseAllowance(address,uint256) should be declared external:
- ERC20.decreaseAllowance(address,uint256) (#614-617)
Use the external attribute for functions never called from the contract.
Additional information: link
Contract name (Bearn-Peg Value Liquidity) contains non-alphanumeric characters.
Not a direct threat, but may indicate unreliable intentions of developer. Non-alphanumeric chars (,.;!#*&") are extremely rare among low risk tokens.
Contract ticker (VALUE-B) contains non-alphanumeric characters.
Not a direct threat, but may indicate unreliable intentions of developer. Non-alphanumeric chars (,.;!#*&") are extremely rare among low risk tokens.
Not a direct threat, but may indicate unreliable intentions of developer. Widespread names (e.g. Elon, King, Moon, Doge) are common among meme-tokens and scams. The allow to gain free hype and attract unexperienced investors.
Unable to find token on CoinGecko
Additional information: link
Unable to find token on CoinMarketCap
Additional information: link
Unable to find token contract audit
Unable to find audit link on the website
Token is not listed at Mobula.Finance
Additional information: link
Unable to find token on CoinHunt
Additional information: link
Token is marked as risky (blacklisted creator, fake name, dead project, etc.)
Additional information: link
Token has no active CoinGecko listing / rank
Token has no active CoinMarketCap listing / rank
Token has a considerable age, but social accounts / website are missing or have few users
Token has a considerable age, but average PancakeSwap 30d trading volume is low
Telegram account link seems to be invalid
Twitter account link seems to be invalid
Unable to find Youtube account