Based Turbo

CertiK1 address on Base

CertiK reviewed Based Turbo on 9 Jan 2025: 10 findings, 0 critical; 7 marked fixed, 3 open.

No open critical findings
Open the reportOpen Based Turbo’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings10

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High002
Medium002
Low303
LowIncorrect approval of LP tokenOpen

The `enableTrading` function includes a call to approve the Uniswap router for transferring LP tokens: ```solidity IERC20(uniswapV2Pair).approve(address(uniswapV2Router), type(uint).max); ``` This operation is redundant and incorrect for the following reasons: The LP tokens are sent directly to the owner's EOA as a result of the `addLiquidityETH` function. The contract itself does not retain ownership of any LP tokens, making the approval of LP tokens from the contract to the router irrelevant. Even if the contract were to own LP tokens, the contract does not include functionality for removing liquidity, making the approval for the router to transfer LP tokens unnecessary. Unused approvals increase the risk of misuse or exploitation, especially if malicious actors can gain control of the approved contract or address.

LowThird-Party Dependency UsageOpen

The contract is serving as the underlying entity to interact with one or more third party protocols. The scope of the audit treats third party entities as black boxes and assumes their functional correctness. However, in the real world, third parties can be compromised and this may lead to lost or stolen assets. In addition, upgrades of third parties can possibly create severe impacts, such as increasing fees of third parties, migrating to new LP pools, etc. ```solidity=149 IUniswapV2Router02 private uniswapV2Router; ``` - The contract `TURBO` interacts with third party contract with `IUniswapV2Router02` interface via `uniswapV2Router`.

LowVariables That Could Be Declared as ImmutableOpen

The linked variables assigned in the constructor can be declared as `immutable`. Immutable state variables can be assigned during contract creation but will remain constant throughout the lifetime of a deployed contract. A big advantage of immutable variables is that reading them is significantly cheaper than reading from regular state variables since they will not be stored in storage.

Contracts in scope1

AddressChainSource code
0xba5e66fb16944da22a62ea4fd70ad02008744460Chain: BaseSource code: Verified source

Part of Based Turbo’s security record

Based Turbo
Audits1 audit by 1 firmLast audit Jan 2025, by CertiK.
Critical findingsNo open critical findingsIn 1 report.
Open Based Turbo’s security record

Security firm

CertiK

1,044 projects reviewed · 1,375 reports · latest May 2025

See CertiK’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us