BabyDoge - Deflationary Swap and Multitoken Burn P

QuillAudits20 Jun 2023Files named in the report

Audit · firm’s term: audit report

QuillAudits reviewed Baby Doge (BabyDoge - Deflationary Swap and Multitoken Burn P) on 20 Jun 2023: 12 findings, 0 critical; 10 marked fixed, 2 open.

No open critical findings

Open the report Open Baby Doge’s security record

Report hosted on quillaudits.com.

Trustblock does not review code.

Findings12

Statuses are the security firm’s own, from its report.

Severity	Open	Fixed
Critical	0	0
High	0	2
Medium	0	1
Low	2	7

LowCare should be taken while setting discounts.Open

For tokens with different decimals the burn amounts should be passed accordingly in the Discount array. E.g if any token uses 6 decimals to represent one whole tokens then while burning some amount lets say 100 tokens, the user would be burning 100e6 tokens and not 100e18 tokens. So its important that while specifying burnAmounts for 6 decimal tokens (or any other decimals) it should be specified carefully according to decimals.

LowCentralizationOpen

Some critical functions like setAdminFeeSettings(), setTokenBaseTax() etc are getting called by the owner and some functions by the manager, In the case of account key compromisation it creates risk where malicious admin/manager can use these functions maliciously because of having the power to make mentioned state changes.