BabyPepe security record

As of 3 Nov 2026, BabyPepe has 1 audit report on Trustblock, by CertiK, dated 6 May 2024. That report lists no open critical findings. It also holds 1 deployed contract on 1 chain.

Critical findings
No open critical findings
In 1 report.
Open the latest report
Your label, live
Get the label for your site

Record last updated . It holds audits and findings, contracts and incidents up to Nov 2026. Trustblock does not review code.

Audits1

Newest first

AuditSecurity firmDateScopeCritical findingsReport
BabyPepeSecurity firm: CertiKDate: Scope: 1 address on BNB ChainNo open critical findingsOpen · skynet.certik.com

Findings8

Statuses are the security firm’s own, from each report.

SeverityOpenAcknowledgedFixed
Critical000
High011
Medium000
Low402
HighCentralization Risks in BabyPepe.solBabyPepe · CertiK · 6 May 2024Fixed

In the contract `BabyPepe` the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority and - call `claimStuckTokens()` to claim stuck tokens. - call `excludeFromFees()` to exclude accounts from fees - call `updateBuyFees()` to change buy fee - call `updateSellFees()` to change sell fee - call `updateWalletToWalletTransferFee()` to change transfer fee - call `changeMarketingWallet()` to change marketing wallet that receives marketing fee share - call `setSwapEnabled()` to enable the allocation of trade fees for: 1. add liquidity; 2. transfer to marketing wallet - call `excludeFromMaxWallet()` to manage accounts for the maximum wallet limit - call `excludeFromMaxTransactionLimit()` to manage accounts for the maximum transaction limit - call `setPair()`, `pairIsSet()`, `setSwapTokensAtAmount()`, `setEnableMaxWalletLimit()`, `setMaxWalletAmount()`, `setEnableMaxTransactionLimit()`, `setMaxTransactionAmounts()`, to set sensitive properties ![](https://accelerator-tasks-prod.acc.corp.certik.com/11ef-017d-4a16e950-8724-03f993e8f926/diagrams/centralization_BabyPepe-BabyPepe-_owner.svg) In the contract `Ownable` the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority. ![](https://accelerator-tasks-prod.acc.corp.certik.com/11ef-017d-4a16e950-8724-03f993e8f926/diagrams/centralization_BabyPepe-Ownable-_owner.svg)

Open the report
LowThe `enableTrading()` function sets DEX pair withBabyPepe · CertiK · 6 May 2024Fixed

The contract contains two functions, `setPair()` and `enableTrading()`, that set the `uniswapV2Pair` address. The `setPair()` function updates the `uniswapV2Pair` only when the `pairSet` flag is false, ensuring that the pair cannot be modified afterward. However, the `enableTrading()` function also updates the `uniswapV2Pair` without checking the state of the `pairSet` flag. This discrepancy could lead to unintended changes to the `uniswapV2Pair`, potentially allowing for operational errors.

Open the report
LowThe `walletToWalletTransferFee` is locked if `_toBabyPepe · CertiK · 6 May 2024Fixed

The contract includes functionality for charging transfer fees if `walletToWalletTransferFee` is nonzero when BabyPepe tokens are transferred between wallets. However, a potential issue arises when both `_totalFeesOnBuy` and `_totalFeesOnSell` are set to zero. In this scenario, the contract fails to trigger the `swapAndLiquify()` and `swapAndSendMarketing()` processes. Consequently, if the `walletToWalletTransferFee` is charged, but these processes are not triggered, the charged fee remains locked within the contract.

Open the report

Contracts1

AddressChainSource code
0x9d6db6382444b70a51307a4291188f60d4eef205Chain: BNB ChainSource code: Verified source

Show this on your site

Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.

Content

Facts

Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.

Fixed as
Language

Style

Layout
Theme
Accent
Corners

Format

Size
Date
Embed as
HTML
<head>
<script src="https://widget.trustblock.run/project-widget.min.js" defer></script>
</head>
<body>
<div
data-tb-project-widget
data-tb-project-slug="babypepe-1"
></div>
</body>

Paste the code where the label should appear. It uses no API credit and updates by itself.

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us