Bakery Swap

CertiK17 Sep 2020Files named in the report

Audit

CertiK reviewed BakerySwap (Bakery Swap) on 17 Sep 2020: 32 findings, 0 critical; 20 marked fixed, 12 open.

No open critical findings

Open the report Open BakerySwap’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings32

Statuses are the security firm’s own, from its report.

Severity	Open	Fixed
Critical	0	0
High	0	0
Medium	0	0
Low	12	20

LowContract DescriptionFixed

No findings were found at this stage of the audit as the contract is an ERC20 copy of the homonymous OpenZeppelin ERC20.sol implementation with omitted functionality.

LowContract DescriptionFixed

No findings were found at this stage of the audit as the delta between “UniswapV2” and this implementation is inexistent apart from an omitted superfluous variable to `IBakerySwapPair` swap function calls and a renaming of all `ETH` type function and variable names to `BNB` type i.e. `WBNB` instead of `WETH`.

LowContract DescriptionFixed

No findings were found at this stage of the audit as the delta between “UniswapV2” and this implementation is inexistent apart from brand renaming in error messages as well as the `symbol` and `name` variables.

LowContract DescriptionFixed

No findings were found at this stage of the audit as the delta between “UniswapV2” and this implementation is inexistent apart from brand renaming in the codebase as well as an adjustment of the swap function to not accept a data argument as it was optional and deemed unnecessary.

LowContract DescriptionFixed

No findings were found at this stage of the audit as the delta between “UniswapV2” and this implementation is inexistent apart from brand renaming.

LowContract DescriptionFixed

No findings were found at this stage of the audit as the delta between “UniswapV2” and this implementation is inexistent apart from brand renaming.

LowContract DescriptionFixed

No findings were found at this stage of the audit as the delta between “UniswapV2” and this implementation is inexistent apart from linting style.

LowContract DescriptionFixed

No findings were found at this stage of the audit as the delta between “UniswapV2” and this implementation is inexistent apart from linting style.

LowContract DescriptionFixed

No findings were found at this stage of the audit as the delta between SushiSwap and this implementation is inexistent apart from a function rename from `mint` to `mintTo` to avoid the collision. We should note that this results in a token that exposes both a `mint` and `mintTo` function to the owner of the contract, however these functions are identical and only invokable by the Owner of the contract. Regardless, we advise that the function is renamed to `mint` to ensure that no unintended consequences occur with the token.

LowContract DescriptionFixed

No findings were identified at this stage of the audit, the contract is an Ownable.sol implementation with renamed variables and events

Show 10 more

LowContract DescriptionFixed

No findings were identified at this stage of the audit, the contract represents all functions that exist within BEP20.sol in `interface` format.

LowContract DescriptionFixed

No findings were identified at this stage of the audit, this contract is a combination of the SafeMath.sol and Math.sol libraries of “UniswapV2” with an inexistent delta.

LowContract DescriptionFixed

The delta between “UniswapV2” and this implementation is inexistent apart from brand renaming in error messages as well as the inclusion of a default value for the `feeTo` variable being set to the same value as `feeToSetter`.

LowContract DescriptionFixed

The delta between “UniswapV2” and this implementation is inexistent apart from brand renaming.

LowContract DescriptionFixed

This contract is out of scope as it is a direct copy of the homonymous OpenZeppelin Address.sol library. A delta was observed in the way an address is checked whether it contains a contract whereby extcodehash is utilized instead of `extcodesize`. The documentation around it is valid and as such we assume that this is a yet-to-be-released version of OpenZeppelin’s library.

LowContract DescriptionFixed

This contract is out of scope as it is a direct copy of the homonymous OpenZeppelin Context.sol library with the abstract contract modifier omitted and a constructor defined.

LowContract DescriptionFixed

This contract is out of scope as it is a direct copy of the homonymous OpenZeppelin Create2.sol library.

LowContract DescriptionFixed

This contract is out of scope as it is a direct copy of the homonymous OpenZeppelin EnumerableSet.sol library.

LowContract DescriptionFixed

This contract is out of scope as it is a direct copy of the homonymous OpenZeppelin Ownable.sol library with an internalized `_transferOwnership` function.

LowContract DescriptionFixed

This contract is out of scope as it is a direct copy of the homonymous OpenZeppelin SafeERC20.sol library with Binance BEP20 compliant naming.