Audit Report
Paladin reviewed TenguSwap (Audit Report) on 22 Jul 2021: 23 findings, 0 critical; 21 marked fixed, 2 acknowledged.
Report hosted on paladinsec.co.
Trustblock does not review code.
Findings23
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 5 |
| Medium | 0 | 0 | 3 |
| Low | 0 | 2 | 13 |
HighInfinite minting issue when tokens with a transfer tax are addedFixed
The report gives no description here.
HighMinting issue when tokens with a transfer tax are addedFixed
The report gives no description here.
HighOverflow possible within updateGTenguRate and updateBurnRateFixed
The report gives no description here.
HighOwner can break withdrawals using emergencyRewardWithdrawFixed
The report gives no description here.
HighOwner of Locker contract can withdraw tokens at any timeFixed
The report gives no description here.
MediumExclude relevant contracts from anti-whaleFixed
The report gives no description here.
MediumOwner can make themselves the referral of all usersFixed
The report gives no description here.
MediumupdateTenguSwapRouter can be used to siphon transfer fees to any EOAFixed
The report gives no description here.
LowAdding a EOA or non-token contract as a pool will break updatePool, massUpdatePools and updateEmissionRateFixed
The report gives no description here.
LowLack of events for emergencyRewardWithdraw and stopRewardFixed
The report gives no description here.
Show 10 more
LowLack of events for setExcludedFromAntiWhale and setGTenguContractAddressFixed
The report gives no description here.
LowLack of events for setTenguContractAddressFixed
The report gives no description here.
LowLack of events for setTenguReferral, setReferralCommissionRate, setDevAddress, setFeeAddress, add and setFixed
The report gives no description here.
LowLP tokens are sent to the “locker” address which could be an EOA or updated to oneFixed
The report gives no description here.
LowMasterchef might accumulate GreatTengu tokensFixed
The report gives no description here.
LowPools use the contract balance to figure out the total depositsFixed
The report gives no description here.
LowswapGTenguToTengu does not have a recipientFixed
The report gives no description here.
LowThe external swapAndLiquify function could lead to people calling it strategically to buy at a lower priceFixed
The report gives no description here.
LowToken contract could build up dust BNB due to addLiquidityFixed
The report gives no description here.
LowupdateEmissionRate has no maximum safeguardFixed
The report gives no description here.
Show 1 more
LowupdateMaxTransferAmountRate function allows for anti-whale up to 100%Fixed
The report gives no description here.
Contracts in scope7
| Address | Chain | Source code |
|---|---|---|
| 0x2612f31fd829578f3f9c8df1c4793c15340520fe | Chain: BNB Chain | Source code: Verified source |
| 0xc73c051daf22a8d9838c8eb6d4aa2a752ad2eb29 | Chain: BNB Chain | Source code: Verified source |
| 0x6f6350d5d347aa8f7e9731756b60b774a7acf95b | Chain: BNB Chain | Source code: Verified source |
| 0x6eb6739bdcba95196d4bade6ed89f029c28fe597 | Chain: BNB Chain | Source code: Verified source |
| 0x0d3ae7954e1369f88e705ac8bba3b2762a0ffdc6 | Chain: BNB Chain | Source code: Verified source |
| 0x29e6b6acb00ef1cdfebdc5a2d3731f791b85b207 | Chain: BNB Chain | Source code: Verified source |
| 0xcd5190f8c99ab9ed09ccd67f6077509485fb3b01 | Chain: BNB Chain | Source code: Verified source |
Part of TenguSwap’s security record
TenguSwapSecurity firm
Paladin176 projects reviewed · 241 reports · latest Apr 2025
See Paladin’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us