CertiK reviewed Beincom (Beincom - Audit 3) on 19 Mar 2025: 20 findings, 0 critical; 12 marked fixed, 6 acknowledged, 2 open.
Report hosted on skynet.certik.com.
Trustblock does not review code.
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 4 | 0 |
| Medium | 0 | 2 | 3 |
| Low | 2 | 0 | 9 |
The contract `BicTokenPaymaster` is implementing the [ERC-4337](https://eips.ethereum.org/EIPS/eip-4337). This EIP is a draft and as a consequence: > "This EIP is not yet recommended for general use or implementation, as it is subject to normative (breaking) changes." Being a draft, ERC-4337 is still undergoing revisions and has not achieved final consensus within the Ethereum community. This status means that the standard may experience significant modifications, potentially affecting the compatibility and security of implementations relying on it.
A sandwich attack can occur when an attacker notices a transaction involving token swaps or liquidity additions that lack slippage restrictions or minimum output amount settings. The attacker can exploit this by frontrunning the transaction to purchase one of the assets, thereby manipulating the exchange rate, and then backrunning the transaction to sell the asset for a profit. The referenced functions are invoked without setting slippage restrictions or minimum output amounts, making transactions that trigger these functions particularly vulnerable to sandwich attacks, especially when large input amounts are involved.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (5)
1,044 projects reviewed · 1,375 reports · latest May 2025
See CertiK’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us