SuperBase Token - Audit Report

Summary

SuperBase is a new rebase token.

We reviewed SuperBase at 0x92E1b3BfA290c65C42a5ba55eAaF8408f0f9dd34 on the Ethereum mainnet.

Notes on the Contract:
  • The SuperBase token rebases based on data provided by the team.
  • Tokens can only be minted via the rebase function.
  • The rebase function can only be called by an address which is either the contract's owner and has the rebaser role.
  • The contract uses the fee-redistribution method from RFI. The contract charges an fee on transfers; the proceeds of which are partially redistributed to existing token holders instantly and automatically at the time of each transaction.
  • The other portion of the fee charged on transactions is stored in the contract and, once a threshold value is met, used to fund UniSwap liqudity.
  • Liquidity-adds are funded by selling half of the tokens collected as fees, pairing the received ETH with the token, and adding it as liquidity to the ETH pair.
  • The owner can exclude any address from the fee mechanism.
  • There is an additional fee incurred on selling the token, which the owner can update.
  • The team can update the fees incurred on transfers at any time as well as the address of the rebaser.
  • The owner/rebaser provides the supply delta (change in SushiSwap/UniSwap liquidity) manually when rebasing.
  • The owner of the contract can exclude and include users from the fee mechanism.
  • The rebase function properly calls sync() on the Uniswap pair contract(s) to prevent theft-of-liquidity attacks which have occured with other rebase tokens. The owner can add/remove other liquidity pools to this list to sync them after rebases.
  • Some functions can be declared external instead of public to save some gas.
  • The contract utilizes SafeMath libraries to prevent overflows along with following the ERC20 standard.

  • Audit Findings Summary:
  • No security issues from external attackers were identified.
  • Investing requires placing substantial trust in the project team as they have significant control over the ecosystem and must provide rebase data manually.
  • Date: April 30th, 2021.
  • Update May 1st - The team has retained 22% of the supply. Ensure trust in the team as these tokens are unlocked.
  • Vulnerability Category Notes Result
    Arbitrary Storage Write N/A PASS
    Arbitrary Jump N/A PASS
    Delegate Call to Untrusted Contract N/A PASS
    Dependence on Predictable Variables N/A PASS
    Deprecated Opcodes N/A PASS
    Ether Thief N/A PASS
    Exceptions N/A PASS
    External Calls N/A PASS
    Flash Loans N/A PASS
    Integer Over/Underflow N/A PASS
    Multiple Sends N/A PASS
    Oracles N/A PASS
    Suicide N/A PASS
    State Change External Calls N/A Pass
    Unchecked Retval N/A PASS
    User Supplied Assertion N/A PASS
    Critical Solidity Compiler N/A PASS
    Overall Contract Safety   PASS

    Smart Contract Graph

    Contract Inheritance

    
       ($) = payable function
        # = non-constant function
    
     + [Lib] Address 
        - [Int] isContract
        - [Int] sendValue #
        - [Int] functionCall #
        - [Int] functionCall #
        - [Int] functionCallWithValue #
        - [Int] functionCallWithValue #
        - [Prv] _functionCallWithValue #
    
     +  Context 
        - [Int] _msgSender
        - [Int] _msgData
    
     +  Ownable (Context)
        - [Int]  #
        - [Pub] owner
        - [Pub] renounceOwnership #
           - modifiers: onlyOwner
        - [Pub] transferOwnership #
           - modifiers: onlyOwner
    
     +  Rebasable (Ownable)
        - [Int]  #
        - [Pub] Rebaser
        - [Pub] transferRebasership #
           - modifiers: onlyOwner
    
     + [Int] IUniswapV2Factory 
        - [Ext] createPair #
    
     + [Int] IUniswapV2Pair 
        - [Ext] sync #
    
     + [Int] IUniswapV2Router01 
        - [Ext] factory
        - [Ext] WETH
        - [Ext] addLiquidity #
        - [Ext] addLiquidityETH ($)
    
     + [Int] IUniswapV2Router02 (IUniswapV2Router01)
        - [Ext] removeLiquidityETHSupportingFeeOnTransferTokens #
        - [Ext] swapExactTokensForETHSupportingFeeOnTransferTokens #
        - [Ext] swapExactTokensForTokensSupportingFeeOnTransferTokens #
        - [Ext] swapExactETHForTokensSupportingFeeOnTransferTokens ($)
    
     +  SUPERBASE (Ownable, Rebasable)
        - [Pub]  #
           - modifiers: Ownable,Rebasable
        - [Pub] totalSupply
        - [Pub] getSellBurn
        - [Pub] getTxBurn
        - [Int] _isWhitelisted
        - [Int] _isUniswapPairAddress
        - [Ext] setWhitelistedTo #
           - modifiers: onlyOwner
        - [Ext] setTxFee #
           - modifiers: onlyOwner
        - [Ext] setFYFee #
           - modifiers: onlyOwner
        - [Ext] setSellFee #
           - modifiers: onlyOwner
        - [Ext] setBurnTop #
           - modifiers: onlyOwner
        - [Ext] setBurnBottom #
           - modifiers: onlyOwner
        - [Ext] setWhitelistedFrom #
           - modifiers: onlyOwner
        - [Ext] setUniswapPairAddress #
           - modifiers: onlyOwner
        - [Ext] addfuturePool #
           - modifiers: onlyOwner
        - [Ext] maxScalingFactor
        - [Int] _maxScalingFactor
        - [Pub] transfer #
        - [Pub] transferFrom #
        - [Pub] balanceOf
        - [Ext] balanceOfUnderlying
        - [Ext] allowance
        - [Pub] approve #
        - [Ext] increaseAllowance #
        - [Ext] decreaseAllowance #
        - [Prv] _approve #
        - [Pub] isExcluded
        - [Pub] totalFees
        - [Pub] reflect #
        - [Pub] reflectionFromToken
        - [Pub] tokenFromReflection
        - [Ext] excludeAccount #
           - modifiers: onlyOwner
        - [Ext] includeAccount #
           - modifiers: onlyOwner
        - [Prv] _transfer #
        - [Ext]  ($)
        - [Prv] swapAndLiquifyForEth #
           - modifiers: lockTheSwap
        - [Prv] swapTokensForEth #
        - [Prv] addLiquidityForEth #
        - [Prv] _transferStandard #
        - [Prv] _transferStandardSell #
        - [Prv] _transferStandardTx #
        - [Prv] _transferToExcluded #
        - [Prv] _transferToExcludedSell #
        - [Prv] _transferToExcludedTx #
        - [Prv] _transferFromExcluded #
        - [Prv] _transferFromExcludedSell #
        - [Prv] _transferFromExcludedTx #
        - [Prv] _transferBothExcluded #
        - [Prv] _transferBothExcludedSell #
        - [Prv] _transferBothExcludedTx #
        - [Prv] _scaling
        - [Prv] _reflectFee #
        - [Prv] _getTValues
        - [Prv] _getRValues
        - [Prv] _getRValues2
        - [Prv] _getRate
        - [Prv] _getCurrentSupply
        - [Ext] _setRewardAddress #
           - modifiers: onlyOwner
        - [Ext] rebase #
           - modifiers: onlyRebaser
        - [Pub] getCurrentPoolAddress
        - [Pub] getCurrentPairTokenAddress
        - [Ext] _setMaxTxAmount #
           - modifiers: onlyOwner
        - [Ext] _setMinTokensBeforeSwap #
           - modifiers: onlyOwner
        - [Ext] _setAutoSwapCallerFee #
           - modifiers: onlyOwner
        - [Pub] updateSwapAndLiquifyEnabled #
           - modifiers: onlyOwner
        - [Ext] _enableTrading #
           - modifiers: onlyOwner
    
     + [Lib] SBASESafeMath 
        - [Int] add
        - [Int] sub
        - [Int] sub
        - [Int] mul
        - [Int] div
        - [Int] div
        - [Int] mod
        - [Int] mod
        - [Int] ceil
        - [Int] divRound