Memeswap - Change Review

QuillAuditsFiles named in the report

Audit · firm’s term: review

QuillAudits reviewed Memeswap (Memeswap - Change Review) on 28 Nov 2024: 7 findings, 0 critical; 5 marked fixed, 2 open.

No open critical findings
Open the reportOpen Memeswap’s security record

Report hosted on quillaudits.com.

Trustblock does not review code.

Findings7

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High000
Medium000
Low205
LowFarm Deployment Allows Creation of Multiple Farms, Potentially Violating Business Logic.Open

The MemeswapFarmFactory contract allows token deployers to create farms using the deployFarm function. Based on the business logic dictates that a farm should consist of one reward token and up to three stake tokens. However, the current implementation of the deployFarm function does not enforce a limit on the number of farms that can be created for a single token. This oversight can allow deployers to create multiple farms with the same reward token, effectively spamming the system and competing for user attention.

LowLack of Minimum Buffer Restriction Leads to Price ManipulationOpen

The buffer parameter in the MemeswapFarm contract determines the minimum time interval for calculating the time-weighted average price (TWAP) from a pair. However, the buffer value is configurable via the setBuffer function in the MemeswapFarmFactory contract and lacks a minimum value restriction.This oversight allows the owner to set an extremely low buffer value, leading to short TWAP windows. Short TWAP intervals are highly susceptible to price manipulation, as the average price can be influenced by a single trade or a series of rapid trades within the short timeframe.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (15)

  • MemeswapTokenFactory.sol
  • MemeswapPair.sol
  • src/MemeswapFarmFactory.sol
  • src/MemeswapFactory.sol
  • MememeswapFarmFactory.sol
  • MemeswapToken.sol
  • src/MemeswapFarmToken.sol
  • src/MemeswapToken.sol
  • src/MemeswapVault.sol
  • Ownable.sol
  • src/MemeswapFarm.sol
  • MemeswapFarmToken.sol
  • MemeswapVault.sol
  • src/MemeswapTokenFactory.sol
  • MemeswapFarm.sol

Part of Memeswap’s security record

Memeswap
Audits2 audits by 1 firmLast audit Nov 2024, by QuillAudits.
Critical findingsNo open critical findingsAcross 2 reports.
Open Memeswap’s security record

Security firm

QuillAudits

350 projects reviewed · 459 reports · latest Apr 2025

See QuillAudits’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us