Baby Neiro

CertiK1 address on BNB Chain

CertiK reviewed Baby Neiro on 20 Dec 2024: 19 findings, 0 critical; 4 marked fixed, 13 acknowledged, 2 open.

No open critical findings
Open the reportOpen Baby Neiro’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings19

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High200
Medium050
Low084
LowDiscussion On `transferDelayEnabled`Fixed

When `transferDelayEnabled` is true, the following check is made: ```solidity if(from == address(lpPair)){ require(tx.origin == to, "no buying to external wallets yet"); } ``` However, the purpose of this check is unclear. The check will ensure that only external owned account receives the tokens as `tx.origin` will be an EOA. However, the error message states that buying to external wallets should not be allowed, which seems to be contradictory.

LowIntended Functioning and Feasibility of SandwichFixed

If `swapTokensAtAmt` is set too high, then Sandwich Attacks may be incentivized, and the frequency at which the token swap and liquify mechanic is triggered may be too low to be effective. The `swapTokensAtAmt` value should set low enough so that tokens are swapped at a lower value within the contract, making incentive to perform a sandwich attack lower. The `swapTokensAtAmt` value should be configured based upon the total supply of the token, transaction and wallet limit, the intended distribution of tokens in the ecosystem and the price of the token within the pair.

LowLP Tokens are "Burned" During Swap and Liquify MeFixed

During the swap and liquify mechanic, the LP tokens created from adding liquidity are sent to the `DEAD` address. This effectively locks away the LP tokens and makes them unreachable. While this can be an effective mitigation tactic for preventing a removal of liquidity during a private key leak, users should be aware that locking LP tokens means that not all native tokens will be able to be recovered from the pair.

LowMissing Check that `transactionLimit` Not ExceedeFixed

In peer to peer transfers, only the following check is performed in `checkLimits()`: ```solidity require(amount + balanceOfTo <= _txLimits.walletLimit, "Max Wallet"); ``` This check ensures that the amount transferred into the destination address will not cause the balance of the destination address to exceed the `walletLimit`. However, while the `walletLimit` may not be exceeded, there is no guarantee that the `transactionLimit` is not exceeded in this case.

Contracts in scope1

AddressChainSource code
0x6cdd08de79231a1957f205a3fe5cf9dbf4b0c454Chain: BNB ChainSource code: Verified source

Part of Baby Neiro’s security record

Baby Neiro
Audits1 audit by 1 firmLast audit Dec 2024, by CertiK.
Critical findingsNo open critical findingsIn 1 report.
Open Baby Neiro’s security record

Security firm

CertiK

1,044 projects reviewed · 1,375 reports · latest May 2025

See CertiK’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us