Beincom - Audit 3

CertiKRepository at commit 221ff14

CertiK reviewed Beincom (Beincom - Audit 3) on 19 Mar 2025: 20 findings, 0 critical; 12 marked fixed, 6 acknowledged, 2 open.

No open critical findings
Open the reportOpen Beincom’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings20

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High040
Medium023
Low209
LowERC-4337 is a Draft EIPOpen

The contract `BicTokenPaymaster` is implementing the [ERC-4337](https://eips.ethereum.org/EIPS/eip-4337). This EIP is a draft and as a consequence: > "This EIP is not yet recommended for general use or implementation, as it is subject to normative (breaking) changes." Being a draft, ERC-4337 is still undergoing revisions and has not achieved final consensus within the Ethereum community. This status means that the standard may experience significant modifications, potentially affecting the compatibility and security of implementations relying on it.

LowPotential Sandwich AttacksOpen

A sandwich attack can occur when an attacker notices a transaction involving token swaps or liquidity additions that lack slippage restrictions or minimum output amount settings. The attacker can exploit this by frontrunning the transaction to purchase one of the assets, thereby manipulating the exchange rate, and then backrunning the transaction to sell the asset for a profit. The referenced functions are invoked without setting slippage restrictions or minimum output amounts, making transactions that trigger these functions particularly vulnerable to sandwich attacks, especially when large input amounts are involved.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (5)

  • https://github.com/beincom/bic-smart-contract-v2/src/vest/BICVesting.sol at commit 221ff147ffb58506994a930778286a7efaeff528
  • https://github.com/beincom/bic-smart-contract-v2/src/BicTokenPaymaster.sol at commit 221ff147ffb58506994a930778286a7efaeff528
  • https://github.com/beincom/bic-smart-contract-v2/src/base/TokenSingletonPaymaster.sol at commit 221ff147ffb58506994a930778286a7efaeff528
  • https://github.com/beincom/bic-smart-contract-v2/src/base/MultiSigner.sol at commit 221ff147ffb58506994a930778286a7efaeff528
  • https://github.com/beincom/bic-smart-contract-v2/src/vest/BICVestingFactory.sol at commit 221ff147ffb58506994a930778286a7efaeff528

Part of Beincom’s security record

Beincom
Audits3 audits by 1 firmLast audit Mar 2025, by CertiK.
Critical findingsNo open critical findingsAcross 3 reports.
Open Beincom’s security record

Security firm

CertiK

1,044 projects reviewed · 1,375 reports · latest May 2025

See CertiK’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us