HashBit

CertiK1 address on BNB Chain

CertiK reviewed HashBit on 10 Jan 2023: 15 findings, 0 critical; 2 marked fixed, 2 acknowledged, 11 open.

No open critical findings
Open the reportOpen HashBit’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings15

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High012
Medium010
Low1100
HighCentralization Risks in AntiBotBABYTOKEN.solFixed

In the contract `AntiBotBABYTOKEN` the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority. ![](https://accelerator-tasks-prod.acc.corp.certik.com/3e69bab2755945f4bdcdae8c7c1f196b/diagrams/centralization_AntiBotBABYTOKEN-AntiBotBABYTOKEN-_owner.svg) In the contract `BABYTOKENDividendTracker` the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority. ![](https://accelerator-tasks-prod.acc.corp.certik.com/3e69bab2755945f4bdcdae8c7c1f196b/diagrams/centralization_AntiBotBABYTOKEN-BABYTOKENDividendTracker-_owner.svg) In the contract `DividendPayingToken` the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority. ![](https://accelerator-tasks-prod.acc.corp.certik.com/3e69bab2755945f4bdcdae8c7c1f196b/diagrams/centralization_AntiBotBABYTOKEN-DividendPayingToken-_owner.svg) In the contract `OwnableUpgradeable` the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority. ![](https://accelerator-tasks-prod.acc.corp.certik.com/3e69bab2755945f4bdcdae8c7c1f196b/diagrams/centralization_AntiBotBABYTOKEN-OwnableUpgradeable-_owner.svg) In the contract `Ownable` the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority. ![](https://accelerator-tasks-prod.acc.corp.certik.com/3e69bab2755945f4bdcdae8c7c1f196b/diagrams/centralization_AntiBotBABYTOKEN-Ownable-_owner.svg)

HighContract gains non-withdrawable BNB via the `swapFixed

The `swapAndLiquify` function converts half of the `swapTokens` to BNB. The other half of `swapTokens` and part of the converted BNB are deposited into the `AntiBotBABYTOKEN-BNB` pool as liquidity. For every `swapAndLiquify` function call, a small amount of BNB leftover in the contract. This is because the price of `AntiBotBABYTOKEN` drops after swapping the first half of the `AntiBotBABYTOKEN` tokens into BNBs, and the other half of `AntiBotBABYTOKEN` tokens require less than the converted BNB to be paired with it when adding liquidity. The contract doesn't appear to provide a way to withdraw those BNB, and they will be locked in the contract forever.

Contracts in scope1

AddressChainSource code
0xeda3866f07566d9379a91a07f8d62e19c03183e0Chain: BNB ChainSource code: Verified source

Part of HashBit’s security record

HashBit
Audits2 audits by 2 firmsLast audit Jan 2023, by CertiK.
Critical findingsNo open critical findingsAcross 2 reports.
Open HashBit’s security record

Security firm

CertiK

1,044 projects reviewed · 1,375 reports · latest May 2025

See CertiK’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us