PEPEF

CertiK1 address on BNB Chain

CertiK reviewed PEPE FLOKI (PEPEF) on 12 May 2023: 11 findings, 0 critical; 3 acknowledged, 8 open.

No open critical findings
Open the reportOpen PEPE FLOKI’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings11

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High030
Medium000
Low800
LowMissing Emit EventsOpen

There should always be events emitted in the sensitive functions that are controlled by centralization roles. Specifically: - `enableTrading()` does not emit an event when is executed. - `claimStuckTokens()` emits an event only when `ERC20token.transfer()` is executed. No event is emitted when BNB is withdrawn from the contract.

LowPrivilege not Revoked or TransferredOpen

When the contract is deployed the following addresses are exempted from fees: - the current `owner` - the current `marketingWallet` If ownership is transferred or renounced with `transferOwnership()` or `renounceOwnership()`, the exemptions are not granted to the new owner nor are they revoked from the previous owner. Also if `marketingWallet` is updated with `changeMarketingWallet()` the exemptions are not granted to the new marketing wallet nor are they revoked from the previous marketing address.

LowState Variable Should Be Declared ConstantOpen

State variables that never change should be declared as `constant` to save gas. ```solidity=549 string public creator; ``` - `creator` should be declared `constant`.

LowUnchecked ERC-20 `transfer()`/`transferFrom()` CaOpen

The return values of the `transfer()` and `transferFrom()` calls in the smart contract are not checked. Some ERC-20 tokens' transfer functions return no values, while others return a bool value, they should be handled with care. If a function returns `false` instead of reverting upon failure, an unchecked failed transfer could be mistakenly considered successful in the contract. ```solidity=617 ERC20token.transfer(msg.sender, balance); ```

LowUnused InterfaceOpen

```solidity=20 interface IUniswapV2Pair { ``` - `IUniswapV2Pair` is declared but never used.

LowUnused Return ValueOpen

The smart contract does not check or store the return value of an external call in a local or state variable, which may introduce vulnerabilities due to the unhandled outcome. ```solidity=612 payable(msg.sender).sendValue(address(this).balance); ``` --- ```solidity=714 payable(marketingWallet).sendValue(newBalance); ```

LowUsage of Magic NumbersOpen

The linked magic numbers are hardcoded in the codebase.

LowVariables That Could Be Declared as ImmutableOpen

- `address public uniswapV2Pair;` - `uint256 public marketingFeeOnBuy;` - `uint256 public marketingFeeOnSell;` - `address public marketingWallet;` The above variables assigned in the constructor can be declared as `immutable`. Immutable state variables can be assigned during contract creation but will remain constant throughout the lifetime of a deployed contract. A big advantage of immutable variables is that reading them is significantly cheaper than reading from regular state variables since they will not be stored in storage.

Contracts in scope1

AddressChainSource code
0x4e2434294a722329b6b64e0c2fca51b2533d7015Chain: BNB ChainSource code: Verified source

Part of PEPE FLOKI’s security record

PEPE FLOKI
Audits1 audit by 1 firmLast audit May 2023, by CertiK.
Critical findingsNo open critical findingsIn 1 report.
Open PEPE FLOKI’s security record

Security firm

CertiK

1,044 projects reviewed · 1,375 reports · latest May 2025

See CertiK’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us