Audit · firm’s term: review
QuillAudits reviewed Memeswap (Memeswap - Change Review) on 28 Nov 2024: 7 findings, 0 critical; 5 marked fixed, 2 open.
Report hosted on quillaudits.com.
Trustblock does not review code.
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 0 | 0 | 0 |
| Low | 2 | 0 | 5 |
The MemeswapFarmFactory contract allows token deployers to create farms using the deployFarm function. Based on the business logic dictates that a farm should consist of one reward token and up to three stake tokens. However, the current implementation of the deployFarm function does not enforce a limit on the number of farms that can be created for a single token. This oversight can allow deployers to create multiple farms with the same reward token, effectively spamming the system and competing for user attention.
The buffer parameter in the MemeswapFarm contract determines the minimum time interval for calculating the time-weighted average price (TWAP) from a pair. However, the buffer value is configurable via the setBuffer function in the MemeswapFarmFactory contract and lacks a minimum value restriction.This oversight allows the owner to set an extremely low buffer value, leading to short TWAP windows. Short TWAP intervals are highly susceptible to price manipulation, as the average price can be influenced by a single trade or a series of rapid trades within the short timeframe.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (15)
350 projects reviewed · 459 reports · latest Apr 2025
See QuillAudits’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us