BabyElon - Audit 1

CertiK1 address on BNB Chain

CertiK reviewed Baby Elon (BabyElon - Audit 1) on 22 Jan 2024: 10 findings, 0 critical; 2 marked fixed, 8 open.

No open critical findings
Open Baby Elon’s security record

The original report was removed from its address (seen 20 Oct 2026).

Trustblock does not review code.

Findings10

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High201
Medium000
Low601
HighCentralization RisksFixed

In the contract `BabyElon` the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority and the following: - function `setNoFeeWallet`: to make an `address` included or excluded from fees. - function `changeLpPair`: to add a `newPair` address as Lp pair addresses. - function `toggleCanSwapFees`: to set the `canSwapFees` to `true` or `false`. - function `changeWallets`: to set the new `marketingAddress` to receive all the fees in the contract which have been converted to BNBs in the `internalSwap()`. - function `setPresaleAddress`: to set an address out of or in the presale addresses list and include or exclude from the fees. - function `enableTrading`: to enable the trading process. - function `zeroLimits`: to set avoidMaxTxLimits to true and set maxWallet to totalSupply - function `changeMaxWallet`: to set `maxWallet` ![](https://accelerator-tasks-prod.acc.corp.certik.com/11ee-ae56-a598a950-b5f3-d9b343de83b1/diagrams/centralization_BabyElon-BabyElon-_owner.svg) In the contract `Ownable` the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority and: - function `transferOwnership`: to change the `owner` to another address. - function `renounceOwnership`: to set the `owner` address to zero. ![](https://accelerator-tasks-prod.acc.corp.certik.com/11ee-ae56-a598a950-b5f3-d9b343de83b1/diagrams/centralization_BabyElon-Ownable-_owner.svg)

LowThe redundant approvalFixed

According to the following code in the constructor: ```solidity _approve(msg.sender, address(swapRouter), type(uint256).max); ``` The contract approves the max value from the `msg.sender` to `address(swapRouter)` which seems to serve no purpose but have potential risks, we would like to confirm with the client the design of the code and whether it is redundant.

Contracts in scope1

AddressChainSource code
0x258903a8e68d5248de85cf8a0a173d9e046edd98Chain: BNB ChainSource code: Verified source

Part of Baby Elon’s security record

Baby Elon
Audits1 audit by 1 firmLast audit Jan 2024, by CertiK.
Critical findingsNo open critical findingsIn 1 report.
Open Baby Elon’s security record

Security firm

CertiK

1,044 projects reviewed · 1,375 reports · latest May 2025

See CertiK’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us