Pump Master Info

pumpmasterbsc.com

The $PMASTER is here! With a $PMASTER army big enough, anything is possible! We want to gather all our friends and make something memorable together bringing you plenty of gains. Utilizing tech from the previous bull run, tech that has yet to be seen, and memes – the $PMASTER take over is starting now! The newest and most exciting memecoin! With a community-driven approach and a burning passion for memes, we believe PumpMaster is the next big thing in the meme market. Join us on this journey to revolutionize the world of memecoins and let’s go to the moon together!

Pump Master Logo

Real-Time Threat Detection

Real-time threat detection, powered by Cyvers.io, is currently not activated for this project.

This advanced feature provides continuous monitoring and instant alerts to safeguard your assets from potential security threats. Real-time detection enhances your project's security by proactively identifying and mitigating risks. For more information, click here.

On-Chain Insights

Smart Contract Audit

Static Analysis Dynamic Analysis Symbolic Execution SWC Check Manual Review
Contract address
0x761c...40D4
Network BNB Smart Chain - Mainnet
License N/A
Compiler N/A N/A
Type N/A
Language Solidity
Onboard date 2023/04/27
Revision date In progress

Summary and Final Words

No crucial issues found

The contract does not contain issues of high or medium criticality. This means that no known vulnerabilities were found in the source code.

Contract owner cannot mint

It is not possible to mint new tokens.

Contract owner can blacklist addresses

It is possible to lock user funds by blacklisting addresses.

Contract owner cannot set high fees

The fees, if applicable, can be a maximum of 25% or lower. The contract can therefore not be locked. Please take a look in the comment section for more details.

Token transfer can be locked

Owner can lock user funds with owner functions.

Token cannot be burned

There is no burn function within the contract.

Ownership is not renounced

Contract can be manipulated by owner functions.

Final Words

The following provides a concise summary of the audit report, accompanied by insightful comments from the auditor. This overview captures the key findings and observations, offering valuable context and clarity.


Ownership Privileges
  • Include/Exclude accounts from fees, max transaction, blacklist and max wallet limit
  • Enable/Disable AMM address, and buy tax
  • Update fee divisor but cannot set it to more than 20%
  • Set max transaction amount, and max wallet limit to any arbitrary amount including zero, and lock user funds
  • Enable trading but cannot disable it
  • Withdraw any type of tokens from the contract except the native ones

Note for Investors: We only Audited an ERC20 token contract for PUMP MASTER Team. However, If the project has other contracts (for example, a Presale contract, etc), and they were not provided to us in the audit scope then we cannot comment on its security and we are not responsible for it in any way. We recommend everyone to do their own research

Scope of Work

Files and details

This audit covered the following files listed below with a SHA-1 Hash. The Team mentioned above provided us with the files that need to be evaluated.

The auditing process follows a routine series of steps:
  1. Review the specifications, sources, and instructions provided to SolidProof to ensure we understand the smart contract's size, scope, and functionality.
  2. Manual review of code, which is the process of reading source code line-by-line in an attempt to identify potential vulnerabilities.
  3. Specification comparison checks whether the code does what the specifications, sources, and instructions provided to SolidProof describe.
  4. Test coverage analysis determines whether the test cases are actually covering the code and how much code is exercised when we run those test cases.
  5. Symbolic execution is analyzing a program to determine what inputs cause each part of a program to execute.
  6. Based on the established industry and academic practices, recommendations, and research, best practices review smart contracts to improve efficiency, effectiveness, clarity, maintainability, security, and control.
  7. Specific, itemized, actionable recommendations to help you take steps to secure your smart contracts.

A file with a different Hash has been intentionally or otherwise modified after the security review. A different Hash could be (but not necessarily) an indication of a changed condition or potential vulnerability that was not within the scope of this review.

Findings and Audit result

low Issues | 3 findings

Pending

#1 low Issue
Local variables shadowing (shadowing-local)
PMASTER.sol
L609
L614
L619
L636
L642
L670
L682
Description

Rename the local variables that shadow another component.

Pending

#2 low Issue
Missing Events Arithmetic (events-maths)
PMASTER.sol
L869-871
L873-875
Description

Emit an event for critical parameter changes.

Pending

#3 low Issue
Missing Zero Address Validation (missing-zero-check)
PMASTER.sol
L877
L922
Description

Check that the address is not zero.

optimization Issues | 2 findings

Pending

#1 optimization Issue
State variables that could be declared constant (constable-states)
PMASTER.sol
L514
L512
L513
L505
Description

Add the `constant` attributes to state variables that never change.

Pending

#2 optimization Issue
Public function that could be declared external (external-function)
PMASTER.sol
L273-275
L277-280
L588-590
L592-594
L596-598
L600-602
L608-612
L618-622
L624-633
L635-639
L641-650
L652-654
L844-846
L848-850
L852-854
L881-884
Description

Use the `external` attribute for functions never called from the contract.

informational Issues | 2 findings

Pending

#1 informational Issue
Functions that are not used (dead-code)
PMASTER.sol
L132-134
L140-142
L144-147
L123-129
L19-22
L189-202
L213-224
L204-211
L226-240
L180-187
L100-102
L104-107
Description

Remove unused functions.

Pending

#2 informational Issue
Function initializing state variables (function-init-state)
PMASTER.sol
L519
L523
L524
L525
Description

Remove any initialization of state variables via non-constant state variables or function calls. If variables must be set upon contract deployment, locate initialization in the constructor instead.