CertiK reviewed Based Turbo on 9 Jan 2025: 10 findings, 0 critical; 7 marked fixed, 3 open.
Report hosted on skynet.certik.com.
Trustblock does not review code.
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 2 |
| Medium | 0 | 0 | 2 |
| Low | 3 | 0 | 3 |
The `enableTrading` function includes a call to approve the Uniswap router for transferring LP tokens: ```solidity IERC20(uniswapV2Pair).approve(address(uniswapV2Router), type(uint).max); ``` This operation is redundant and incorrect for the following reasons: The LP tokens are sent directly to the owner's EOA as a result of the `addLiquidityETH` function. The contract itself does not retain ownership of any LP tokens, making the approval of LP tokens from the contract to the router irrelevant. Even if the contract were to own LP tokens, the contract does not include functionality for removing liquidity, making the approval for the router to transfer LP tokens unnecessary. Unused approvals increase the risk of misuse or exploitation, especially if malicious actors can gain control of the approved contract or address.
The contract is serving as the underlying entity to interact with one or more third party protocols. The scope of the audit treats third party entities as black boxes and assumes their functional correctness. However, in the real world, third parties can be compromised and this may lead to lost or stolen assets. In addition, upgrades of third parties can possibly create severe impacts, such as increasing fees of third parties, migrating to new LP pools, etc. ```solidity=149 IUniswapV2Router02 private uniswapV2Router; ``` - The contract `TURBO` interacts with third party contract with `IUniswapV2Router02` interface via `uniswapV2Router`.
The linked variables assigned in the constructor can be declared as `immutable`. Immutable state variables can be assigned during contract creation but will remain constant throughout the lifetime of a deployed contract. A big advantage of immutable variables is that reading them is significantly cheaper than reading from regular state variables since they will not be stored in storage.
| Address | Chain | Source code |
|---|---|---|
| 0xba5e…44600xba5e66fb16944da22a62ea4fd70ad02008744460 | Chain: Base | Source code: Verified source |
1,044 projects reviewed · 1,375 reports · latest May 2025
See CertiK’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us