CertiK reviewed PEPEAICEO (PepeAI CEO) on 16 May 2023: 14 findings, 0 critical; 1 marked fixed, 2 acknowledged, 11 open.
Report hosted on skynet.certik.com.
Trustblock does not review code.
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 2 | 1 |
| Medium | 0 | 0 | 0 |
| Low | 11 | 0 | 0 |
Tokens are sent to the contract deployer when deploying the contract, and according to the whitepaper available on the official website (https://whitepaper.pepeaiceo.com/tokenomics), the token allocation plan is as follows: `Burn: 50%` `Presale: 25%` `Liquidity: 14.24%` `CEX & Marketing: 10.75%` While we have confirmed that the `Burn: 50%` distribution aligns with the plan, we kindly request the team to provide us with the precise transaction hashes for the other distribution plans. This will enable us to verify if the token allocation is in accordance with the outlined plan.
```solidity=698 function internalSwap(uint256 contractTokenBalance) internal inSwapFlag { address[] memory path = new address[](2); path[0] = address(this); path[1] = swapRouter.WETH(); if (_allowances[address(this)][address(swapRouter)] != type(uint256).max) { _allowances[address(this)][address(swapRouter)] = type(uint256).max; } try swapRouter.swapExactTokensForETHSupportingFeeOnTransferTokens( contractTokenBalance, 0, path, address(this), block.timestamp ) {} catch { return; } bool success; if(address(this).balance > 0) {(success,) = marketingAddress.call{value: address(this).balance, gas: 35000}("");} } ``` The `internalSwap()` function calls the `uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens()` function to swap the `PEPEAICEO` tokens to BNB and send the BNB to the `marketingAddress` address. As a result, over time the `marketingAddress` address will accumulate a significant portion of BNB. If the `marketingAddress` is an EOA (Externally Owned Account), the mishandling of its private key can have devastating consequences for the project as a whole. For the common deflationary token, the entire tokenomic requires certain liquidity to support. However, in the current implementation, the swapped BNB is transferred to `marketingAddress` and is not being used for adding liquidity. Therefore, the entire tokenomic may crash due to lacking enough liquidity in the BNB-PEPEAICEO pool.
| Address | Chain | Source code |
|---|---|---|
| 0xb9c0…afef0xb9c0234b92e3b12375d60a90a8d0b136af4dafef | Chain: BNB Chain | Source code: Verified source |
1,044 projects reviewed · 1,375 reports · latest May 2025
See CertiK’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us