StarBound - Smart Contract Audit Report

Summary

StarBound Audit Report StarBound is a new token with liquidity-adds on transfers, frictionless fee redistribution, and burns on every transaction.

We audited StarBound's token contract at 0x801ea8c463a776e85344c565e355137b5c3324cd on the Ethereum mainnet.

Overview of the Contract:
  • The total supply of the token is set to 3.333... billion.
  • No minting functions are present and any user can burn their own tokens. The supply can only decrease.
  • The team holds 7.1% of the supply unlocked.
  • The team has locked 53% of the supply. These tokens will unlock in 1 month.
  • Uniswap holds ~5% of the token's supply as liquidity.
  • 55% of liquidity has been locked until May 2022. 45% of liquidity was collected in the team's wallet since launch and was locked during the audit process.
  • The next largest holder has ~4%.

  • A portion of the fees charged on each transfer will be burned.
  • Another portion of the fees is designated for liquidity. 56% of this fee is sold for ETH.
  • 5/7ths of the ETH received is paired with tokens and used to add liquidity.
  • The other 2/7ths of the ETH raised are sent to the 'Growth Fuel' wallet, held by the team
  • Liquidity-adds are funded by selling half of the tokens collected as fees, pairing the received ETH with the token, and adding it as liquidity to the ETH pair.
  • LP tokens from this process will be provided to the team.

  • The owner of the contract can exclude and include users from the transfer fee mechanism, enable/disable the liquidity-add feature, and update the liquidity and burn fees at any time. Liquidity and burn fees are limited to 3% and 8% respectively.
  • Some functions could have been declared external instead of public to save some gas, but as this is already deployed this is merely informational.
  • The contract utilizes SafeMath libraries to prevent overflows along with following the BEP20 standard.

Audit Findings Summary
  • No security issues were identified in our analysis.
  • Ensure trust in the team as they hold slightly more tokens than the liquidity pool and will be vested about half of the supply in one month.
  • Further, ensure trust in the team as they will collect the LP tokens from liquidity-adds and will collect some of the fees in the growthFuel wallet.
  • Date: May 7th, 2021

Vulnerability CategoryNotesResult
Arbitrary Storage WriteN/APASS
Arbitrary JumpN/APASS
Delegate Call to Untrusted ContractN/APASS
Dependence on Predictable VariablesN/APASS
Deprecated OpcodesN/APASS
Ether ThiefN/APASS
ExceptionsN/APASS
External CallsN/APASS
Flash LoansN/APASS
Integer Over/UnderflowN/APASS
Multiple SendsN/APASS
OraclesN/APASS
SuicideN/APASS
State Change External CallsN/APass
Unchecked RetvalN/APASS
User Supplied AssertionN/APASS
Critical Solidity CompilerN/APASS
Overall Contract Safety PASS

Multi-file Token

BEP20 Token Graph

												
($) = payable function
 # = non-constant function

 +  Context 
    - [Int] _msgSender
    - [Int] _msgData

 + [Int] IBEP20 
    - [Ext] totalSupply
    - [Ext] balanceOf
    - [Ext] transfer #
    - [Ext] allowance
    - [Ext] approve #
    - [Ext] transferFrom #

 + [Lib] SafeMath 
    - [Int] add
    - [Int] sub
    - [Int] sub
    - [Int] mul
    - [Int] div
    - [Int] div
    - [Int] mod
    - [Int] mod

 + [Lib] Address 
    - [Int] isContract
    - [Int] sendValue #
    - [Int] functionCall #
    - [Int] functionCall #
    - [Int] functionCallWithValue #
    - [Int] functionCallWithValue #
    - [Prv] _functionCallWithValue #

 +  Ownable (Context)
    - [Pub]  #
    - [Pub] owner
    - [Pub] renounceOwnership #
       - modifiers: onlyOwner
    - [Pub] transferOwnership #
       - modifiers: onlyOwner

 + [Int] IUniswapV2Factory 
    - [Ext] feeTo
    - [Ext] feeToSetter
    - [Ext] getPair
    - [Ext] allPairs
    - [Ext] allPairsLength
    - [Ext] createPair #
    - [Ext] setFeeTo #
    - [Ext] setFeeToSetter #

 + [Int] IUniswapV2ERC20 
    - [Ext] name
    - [Ext] symbol
    - [Ext] decimals
    - [Ext] totalSupply
    - [Ext] balanceOf
    - [Ext] allowance
    - [Ext] approve #
    - [Ext] transfer #
    - [Ext] transferFrom #
    - [Ext] DOMAIN_SEPARATOR
    - [Ext] PERMIT_TYPEHASH
    - [Ext] nonces
    - [Ext] permit #

 + [Int] IUniswapV2Router01 
    - [Ext] factory
    - [Ext] WETH
    - [Ext] addLiquidity #
    - [Ext] addLiquidityETH ($)
    - [Ext] removeLiquidity #
    - [Ext] removeLiquidityETH #
    - [Ext] removeLiquidityWithPermit #
    - [Ext] removeLiquidityETHWithPermit #
    - [Ext] swapExactTokensForTokens #
    - [Ext] swapTokensForExactTokens #
    - [Ext] swapExactETHForTokens ($)
    - [Ext] swapTokensForExactETH #
    - [Ext] swapExactTokensForETH #
    - [Ext] swapETHForExactTokens ($)
    - [Ext] quote
    - [Ext] getAmountOut
    - [Ext] getAmountIn
    - [Ext] getAmountsOut
    - [Ext] getAmountsIn

 + [Int] IUniswapV2Router02 (IUniswapV2Router01)
    - [Ext] removeLiquidityETHSupportingFeeOnTransferTokens #
    - [Ext] removeLiquidityETHWithPermitSupportingFeeOnTransferTokens #
    - [Ext] swapExactTokensForTokensSupportingFeeOnTransferTokens #
    - [Ext] swapExactETHForTokensSupportingFeeOnTransferTokens ($)
    - [Ext] swapExactTokensForETHSupportingFeeOnTransferTokens #

 +  StarBound (Context, IBEP20, Ownable)
    - [Pub]  #
    - [Pub] setBurnRate #
       - modifiers: onlyOwner
    - [Pub] setLiquidFuelRate #
       - modifiers: onlyOwner
    - [Pub] setSwapAndLiquifyEnabled #
       - modifiers: onlyOwner
    - [Pub] setTokensAmountToLiquify #
       - modifiers: onlyOwner
    - [Pub] viewTokensAmountToLiquify
    - [Pub] name
    - [Pub] symbol
    - [Pub] decimals
    - [Pub] totalSupply
    - [Pub] balanceOf
    - [Pub] transfer #
    - [Pub] allowance
    - [Pub] approve #
    - [Pub] transferFrom #
    - [Pub] increaseAllowance #
    - [Pub] decreaseAllowance #
    - [Pub] isExcluded
    - [Pub] totalFees
    - [Pub] achievementReward #
    - [Pub] reflectionFromToken
    - [Pub] tokenFromReflection
    - [Ext] excludeAccount #
       - modifiers: onlyOwner
    - [Ext] includeAccount #
       - modifiers: onlyOwner
    - [Prv] _approve #
    - [Prv] _transfer #
    - [Prv] _getBurnAmounts
    - [Prv] _burn #
    - [Pub] burn #
    - [Prv] _transferStandard #
    - [Prv] _transferToExcluded #
    - [Prv] _transferFromExcluded #
    - [Prv] _transferBothExcluded #
    - [Prv] _reflectFee #
    - [Pub] _transferToNoReflection #
       - modifiers: onlyOwner
    - [Prv] _transferStandardNoReflection #
    - [Prv] _getNRValues
    - [Prv] _getNRTValues
    - [Prv] _getNRRValues
    - [Prv] _getValues
    - [Prv] _getTValues
    - [Prv] _getRValues
    - [Prv] _getRate
    - [Prv] _getCurrentSupply
    - [Pub] manualSwapandLiquify #
       - modifiers: onlyOwner
    - [Pub] manualSwapTokensForEth #
       - modifiers: onlyOwner
    - [Pub] manualAddLiquidity #
       - modifiers: onlyOwner
    - [Prv] swapAndLiquify #
       - modifiers: lockTheSwap
    - [Prv] swapTokensForEth #
    - [Prv] addLiquidity #
    - [Ext]  ($)