As of 2 Nov 2026, Blockrover has 1 audit report on Trustblock, by CertiK, dated 18 Jul 2023. That report lists no open critical findings.
Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| Blockrover - Audit | Security firm: CertiK | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · skynet.certik.com |
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 2 | 0 |
| Medium | 0 | 0 | 1 |
| Low | 0 | 4 | 4 |
The lower bound for `totBuyTax` and `totSellTax` are not set in function `setBuyTaxes` and `setSellTaxes`. When `totSellTax` is set to 0, it will raise an Denial of Service issue in `swapForFees` function: ```solidity=310 uint256 denominator = totSellTax * 2; uint256 tokensToAddLiquidityWith = contractBalance * sellTaxes.liquidity / denominator; uint256 toSwap = contractBalance - tokensToAddLiquidityWith; ``` Since `totSellTax` is 0, the `denominator` will be 0 and the transaction will be reverted due to the divided by zero issue.
Open the reportCurrently when the `marketingWallet` and `devWallet` addresses is updated in function `updateMarketingWallet` and `updateDevWallet`. The old `marketingWallet` and `devWallet` addresses are still included in the `excludedFromFees` mapping even after being replaced by new addresses. ```solidity=602 function updateMarketingWallet(address newWallet) external onlyOwner{ marketingWallet = newWallet; } function updateDevWallet(address newWallet) external onlyOwner{ devWallet = newWallet; } ``` It is important to note that this situation could also potentially occur when ownership is transferred to a new owner as well. The old owner must be manually removed from the exclusion and the new owner must be manually added to the fee exclusion.
Open the reportThere should always be events emitted in the sensitive functions that are controlled by centralization roles.
Open the reportAddresses are not validated before assignment or external calls, potentially allowing the use of zero addresses and leading to unexpected behavior or vulnerabilities. For example, transferring tokens to a zero address can result in a permanent loss of those tokens. ```solidity=394 marketingWallet = newWallet; ``` - `newWallet` is not zero-checked before being used. --- ```solidity=398 devWallet = newWallet; ``` - `newWallet` is not zero-checked before being used. --- ```solidity=402 router = _router; ``` - `_router` is not zero-checked before being used. --- ```solidity=403 pair = _pair; ``` - `_pair` is not zero-checked before being used.
Open the reportThe auditor understands the necessity of the `receive()` payable function in the current contract. However, after each call to "swapForFees()", the contract accumulates a small number of native tokens, which after a period becomes significant. And based on current implementation, these assets can not be withdrawn.
Open the reportThe reports name a repository or files. Open a report to see its scope.
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="blockrover"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us