CertiK Foundation Logo
CertiKShield
Explorer
DeepWallet
Technology
Blog

Security Leaderboard

Provable Trust For All

icon

Auditing

Static Protection
Play Button
REQUEST AUDIT
arrow
icon

Skynet

Security Intelligence
Play Button
ENABLE SKYNET
arrow
icon

Shield

Flexible Protection
Play Button
JOIN CERTIKSHIELD
skynet iconSkynet24/7 Running Security Intelligence Engine
project logo
Aave0xb2f579fbe334006ed4dd9f154962ff510bce303e
Scanning
project logo
PancakeSwapbsc:0x009cf7bc57584b7998236eff51b98a168dcea9b0
Done: 93
project logo
Binancebsc:0xbb4cdb9cbd36b01bd1cbaebf2de08d9173bc095c
Done: 94
Skynet Console
$   
 
 
 
 
CertiK Community Alerts
Report Project
NowSwapNowSwap
9/15/2021
Exploited NowSwap suffered from the hack and the estimated loss to holders was listed as 158.28 WETH & 535,706 USDT was stolen, approx worth $ 1M.
Confirmed
Zabu FinanceZabu Finance
9/13/2021
Exploited Zabu Finance, an Avalanche-based decentralized finance (DeFi) protocol, has been exploited for $3.2 million on Sep 11, 2021.
Confirmed
The DAO MarkerThe DAO Marker
9/4/2021
Exploited The DAO Maker suffered an attack and resulted in $4 million assets lost. The attacker invoked the `emergencyExit()` functions multiple times from unverified contracts.
Confirmed
NowSwapNowSwap
9/15/2021
Exploited NowSwap suffered from the hack and the estimated loss to holders was listed as 158.28 WETH & 535,706 USDT was stolen, approx worth $ 1M.
Confirmed
Zabu FinanceZabu Finance
9/13/2021
Exploited Zabu Finance, an Avalanche-based decentralized finance (DeFi) protocol, has been exploited for $3.2 million on Sep 11, 2021.
Confirmed
The DAO MarkerThe DAO Marker
9/4/2021
Exploited The DAO Maker suffered an attack and resulted in $4 million assets lost. The attacker invoked the `emergencyExit()` functions multiple times from unverified contracts.
Confirmed
Dao MakerDao Maker
8/12/2021
Exploited Dao Maker suffered an attack and resulted in 7M$ assets lost. The admin's private key was used to grant the attacker's contract permission to withdraw funds from the exploited contract.
Confirmed
Castleswap FinanceCastleswap Finance
7/28/2021
Possible Backdoor The MasterChef contract contains the updateLiqProvider function that allows the contract owner (not a TimeLock) to transfer LP tokens to itself, resulting in a possible rug pull at any time. Be cautious and DO NOT engage.
Unconfirmed
Baby Doge FlokiBaby Doge Floki
7/15/2021
High Risk We've received inbounds that indicate high risks regarding a project named Baby Doge Floki. The token charges a 99% liquidity fee when executing a transaction, although it claimed to have only 9% liquidity and 3% tax fees on its website. Be cautious and DO NOT engage.
Confirmed
AnyswapAnyswap
7/12/2021
Exploited Anyswap multichain V3 router was exploited and result in 7.5M$ worth of assets lost. The attacker deduced the private key to the Anyswap V3 Router MPC account based on two transactions that have the same R value signature.
Confirmed
StableMagnetStableMagnet
6/23/2021
RugPull StableMagnet rug pulled over $22 million worth of assets. The scammers swap their SwapUtils library for their swap contract to an unverified linked library. They used code in the unverified linked library to drain all tokens from the swap contract. We recommend users unstake and revoke token approvals.
Confirmed
Eleven FinanceEleven Finance
6/22/2021
Exploited A hacker exploited the logic error in the "emergencyBurn()" function in the "ElevenNeverSellVault" contract. The error allows the attacker to withdraw more Nerve tokens from the contract than it supposes to, and the attacker enlarges the profit with the assist of flash loans.
Confirmed
Popit FinancePopit Finance
6/21/2021
High Risks The MasterChef contract contains the migrateCakeLPsToPopitSwap function that allows the contract owner (not a TimeLock) to transfer LP tokens to any address, resulting in a possible rug pull at any time. Be cautious and DO NOT engage.
Unconfirmed
MayoSwapMayoSwap
6/12/2021
High Risks The MasterChef contract contains the emergencyWithdraw functionality that would take a penalty charge of 30% of the user’s LP tokens if the liquidity lock is enabled, and it could be set to 100% at any time given the owner is not a timelock. Be cautious and DO NOT engage.
Unconfirmed
FlashLoan ScamFlashLoan Scam
6/10/2021
Scam We detected an ongoing scam claims that you can 'earned BNB/ETH using Flashloans'. We advise community members to stay away from the scam and do not engage. Following the video instruction or interacting with the scammer's website only results in sending tokens to the scammer's wallet.
Confirmed
PantySwapPantySwap
6/6/2021
Potential RugPull We've received inbounds that indicate high risks regarding a project named PantySwap. The MasterChef contract contains the migrate function that could be leveraged by the owner (not a TimeLock) to drain all LP tokens, resulting in a possible rug pull at any time. Be cautious and DO NOT engage.
Confirmed
taba.financetaba.finance
6/5/2021
Potential RugPull We've received inbounds that indicate high risks regarding a project named taba.finance. They claimed to have the CertiK audit in progress, but it's fake. The owner can use a privileged function in the contract to withdraw all users' funds. Be cautious and DO NOT engage with them.
Confirmed
Belt FinanceBelt Finance
5/29/2021
Flash Loan Attack A hacker exploited Belt Finance with a flash loan attack to steal over $6.2M BUSD. The attacker was able to manipulate the beltBUSD price by exploiting a balance calculation bug in the bEllipsisBUSD strategy contract.
Confirmed
JulSwapJulSwap
5/29/2021
Flash Loan Attack A hacker exploited JulSwap with a flash loan attack to gain 4k JULb tokens. The price of JULb tokens dropped 75% after the hacker swapped all JULb tokens to BNB.
Confirmed
BurgerSwapBurgerSwap
5/27/2021
Exploited Burger Swap suffered a flash loan assisted reentrancy attack, resulting in over $7M worth of assets lost. The attacker was able to swap twice before the number of tokens in the reserve got updated.
Confirmed
AutoSharkAutoShark
5/24/2021
Flash Loan Attack A hacker exploited AutoShark with a flash loan attack to gain 100M Shark tokens. The price of shark tokens dropped 95% after the hacker swapped all shark tokens to BNB.
Confirmed
BogtoolsBogtools
5/22/2021
Exploited BogTools suffered a flash loan attack that resulted in a loss of over $3.41M(11378 BNB).
Confirmed
DeFi100DeFi100
5/22/2021
Rug Pull A excit scams is confirmed on a project called DeFi100, the project rugged $32 million
Confirmed
PancakeBunnyPancakeBunny
5/19/2021
Flash Loan Attack The project suffered from a flash loan attack that resulted in a loss of 114K WBNB and 697K BUNNY.
Confirmed
FinNexusFinNexus
5/17/2021
Potentially Hacked The owner of the FinNexus(FNX) contract on Ethereum and BSC was changed. The new owner minted 400M FNX tokens and dumped them on the market, which caused the price of the FNX tokens to drop over 90%. The root cause of the incident is still under investigation.
Confirmed
bEarn FibEarn Fi
5/16/2021
Exploited A unit inconsistency issue was exploited in the BvaultsStrategy & BvaultsBank contracts which resulted in approximately $11M BUSD lost in the vault.
Confirmed
xTokenxToken
5/12/2021
Exploited xToken's xBNTa and xSNXa contracts were exploited, resulting in $25 million assets lost. The attacker drained the xSNXa pool by manipulating SNX token's price in the Kyber Oracle with flash loans and drained the xBNTa pool by exploiting an unverified function argument 'path' to mint infinite xBNTa tokens.
Confirmed
Spartan ProtocolSpartan Protocol
5/1/2021
Exploited The Spartan Protocol V1 contract got exploited with approximately $30M so far in funds removed from pools.
Confirmed
Uranium Finance V2Uranium Finance V2
4/28/2021
Exploited The attackers exploited a bug in Uranium Finance V2’s smart contract to swap a single token for almost all other tokens in the protocol’s liquidity pool. The result of loss is estimated at $50M.
Confirmed
MoonhereMoonhere
4/20/2021
Exit Scam A project called Moonhere is likely to exit scam once the fair launch ends. Investigation indicates that the scam group behind may be identical to Cryptoption (Alerted before). Please do not engage and stay vigilant.
Confirmed
CryptoptionCryptoption
4/19/2021
Exit Scam Community alerts were received on a project named Cryptoption that exit scammed. The scammers abandoned the project after the token pre-sale and took away 189,117 BUSD funds received in the pre-sale.
Confirmed
SexyAPYSexyAPY
4/16/2021
RugPull Community alerts received on a project named SexyAPY that got rug pulled, with a total value of $113,655 in BUSD. The funds were washed across platforms via bridges.
Confirmed
Vine ProtocolVine Protocol
4/13/2021
Potential high risks Inbounds received that indicated as protention high risks regarding a project named Vine Protocol. The project claimed to have been audited by CertiK, which is misleading, and not true at all.
Unconfirmed
NoaSwapNoaSwap
4/11/2021
Potential RugPull The project has been identified as being run by the same scammers responsible for SheepSwap. Please be cautious and stay vigilant.
Confirmed
Uranium FinanceUranium Finance
4/9/2021
Exploited The attacker drained RADS/sRADS rewards tokens from the vulnerable contract and sold them for $1.3M worth of BUSD and BNB.
Confirmed
GhostmixerGhostmixer
4/7/2021
High risks Tokens are being minted irregularly via the deposits of suspicious vaults. Please do not interact with any smart contracts related to the project.
Confirmed
Mozart FinanceMozart Finance
4/6/2021
High risks Alert inbound - a project called Mozart finance that got hack by internal team. The developer left a backdoor in _mint function to a personal wallet address.
Confirmed
MonsterSlayerFinanceMonsterSlayerFinance
4/6/2021
High risks Suspicious relocation of Stabilization fund which could result in a potential rug pull. Be cautious and DO NOT engage with any of its smart contracts.
Confirmed
ForceDAOForceDAO
4/4/2021
High risks A community alert is confirmed on a project called ForceDAO that indicated high risks and the project informed the halt on trading. The hack was due to a vulnerable function that would result in unlimited MINTs of its protocol tokens tradable on SUSHISWAP and UNISWAP. DYOR with caution
Confirmed
RizeSwapRizeSwap
3/25/2021
Potential high risks Alert inbound received from our community on a project called RizeSwap that may indicate high risks. Its website is currently down and the token contract is not verified on BSCScan, meanwhile the deployer (owner) of the contract holds 99% of the token supply. DYOR with caution
Unconfirmed
DelicacyDefiDelicacyDefi
3/20/2021
Potential high risks We’ve received inbounds that may indicate high risks regarding a project named DelicacyDefi. Malicious code snippets appear in the smart contract and we wish the community DYOR with caution before interacting.
Unconfirmed
SheepSwapSheepSwap
3/17/2021
Rug Pull We’ve received inbounds that may indicate high risks regarding to a project named SheepSwap. Privileged functionalities appear in those smart contracts and we wish the community DYOR enough before interacting with the dApp.
Confirmed
Onboarding Projects
Paycheck
Paycheck
Air Carbon
Air Carbon
BuffSwap
BuffSwap
Subsquid
Subsquid
Pollo Finance
Pollo Finance
Xverse
Xverse
Bull Launch Pad
Bull Launch Pad
Brinc Finance
Brinc Finance
Black Collateral
Black Collateral
Bingo cash
Bingo cash
NSURcoin
NSURcoin
Agrinoble
Agrinoble
Goldfinch
Goldfinch
Copycat Finance
Copycat Finance
Boot Finance
Boot Finance
Hedgey
Hedgey
Punk Protocol
Punk Protocol
Crosspoly
Crosspoly
Bifrost Finance
Bifrost Finance
Solarbeam
Solarbeam
xDollar
xDollar
Xtoken Market
Xtoken Market
Zeppelin.dao
Zeppelin.dao
Ouro
Ouro
Baby Doge
Baby Doge
Graviton
Graviton
Slingshot
Slingshot
Sadbaby
Sadbaby
CrowdPoint
CrowdPoint
BOA
BOA
ClearSight
ClearSight
BeGlobal Finance
BeGlobal Finance
Universe.XYZ
Universe.XYZ
Taboo
Taboo
Nebula
Nebula
Ogee Finance
Ogee Finance
Nano DogeCoin
Nano DogeCoin
Globe
Globe
Bitgo
Bitgo
Marshmallow DeFi
Marshmallow DeFi
Baby BNB
Baby BNB
Joinswap
Joinswap
PetPals
PetPals
Emergent
Emergent
Quiverx
Quiverx
Full Send Token
Full Send Token
Gemdoge
Gemdoge
ANT Troop
ANT Troop
Shopping.io
Shopping.io
MyMasterWar
MyMasterWar
Distinct Fortune
Distinct Fortune
Quiver Protocol
Quiver Protocol
OutletFinance
OutletFinance
Honeypad
Honeypad
Binapet
Binapet
Wooter
Wooter
NoviDao
NoviDao
DRK Chain
DRK Chain
Electric Cash
Electric Cash
Sunrise Gaming
Sunrise Gaming
Hashbon
Hashbon
EUR+
EUR+
Ubiquity DAO
Ubiquity DAO
Acet Finance
Acet Finance
WOM Protocol
WOM Protocol
Royal Protocol
Royal Protocol
Commonwealth
Commonwealth
Kishu Inu
Kishu Inu
Vava
Vava
Amasa
Amasa
Cleaner Earth Token
Cleaner Earth Token
Inverse
Inverse
Polycat Finance
Polycat Finance
SHED
SHED
Vera Swap
Vera Swap
Tethermore
Tethermore
KuSwap Finance
KuSwap Finance
Eswap.tube
Eswap.tube
MX Samurai
MX Samurai
DeepSpace
DeepSpace
Project SEED
Project SEED
Daoland
Daoland
Fractal
Fractal
UniArts Network
UniArts Network
DAWG
DAWG
CoinOne
CoinOne
BetFury
BetFury
revault.network
revault.network
Primex Token
Primex Token
Nyan Finance
Nyan Finance
DAIQ
DAIQ
Aidapps
Aidapps
Meta.World
Meta.World
Fanatics Finance
Fanatics Finance
Sofa
Sofa
Bichon
Bichon
BlueBerry
BlueBerry
TenupSmart
TenupSmart
Calamari Network
Calamari Network
MegaBsc
MegaBsc
Hoard Token
Hoard Token
InPoker
InPoker
Let's Go!
Let's Go!
Rookit Finance
Rookit Finance
WenMoon
WenMoon
Hodlers Network
Hodlers Network
PredictX
PredictX
BloXmove
BloXmove
Panther Protocol
Panther Protocol
Heroes of NFT
Heroes of NFT
Galaxy
Galaxy
Ixinium
Ixinium
Derived
Derived
Dozen Finance
Dozen Finance
HyruleSwap
HyruleSwap
Baconlabs
Baconlabs
Lithium Finance
Lithium Finance
CredeFi
CredeFi
Centaurify
Centaurify
Fatoshi
Fatoshi
YapeSwap
YapeSwap
Pinecone Finance
Pinecone Finance
Opulous
Opulous
Artex
Artex
KeplerSwap
KeplerSwap
Strips Finance
Strips Finance
CoinWind
CoinWind
Vether
Vether
Hell Hounds
Hell Hounds
Polysky Finance
Polysky Finance
Rise of Dynasty
Rise of Dynasty
Reality Cards
Reality Cards
TBCC
TBCC
Strite Finance
Strite Finance
ITAM
ITAM
TreasureKey
TreasureKey
FutureCoin
FutureCoin
Flarefinance
Flarefinance
Anubitoken
Anubitoken
GhostMarket
GhostMarket
Liquidus Finance
Liquidus Finance
OWL DAO
OWL DAO
NFTStar
NFTStar
ATM(Autonomous Trust Momentum)
ATM(Autonomous Trust Momentum)
Bscex
Bscex
Swapp Protocol
Swapp Protocol
BHOLDUS
BHOLDUS
Celery
Celery
Hodl Finance
Hodl Finance
Celestial
Celestial
NFTb
NFTb
TechnoDoge
TechnoDoge
ZCore Finance
ZCore Finance
Keep
Keep
Totem Finance
Totem Finance
Infinitee Finance
Infinitee Finance
Elemon
Elemon
Air Next
Air Next
PrivacySwap
PrivacySwap
Float Protocol
Float Protocol
Drops NFT
Drops NFT
Augury Finance
Augury Finance
MerchDAO
MerchDAO
Zapper
Zapper
Lixir
Lixir
Ownix
Ownix
Liquidify.io
Liquidify.io
Liquidity Token
Liquidity Token
GoldFox
GoldFox
Windmill Token
Windmill Token
Waggle Network
Waggle Network
Ekta
Ekta
GalaxySwap Development Project
GalaxySwap Development Project
Knight War The Holy Trio
Knight War The Holy Trio
SUPERDOGE
SUPERDOGE
Earnable
Earnable
MistNFT
MistNFT
Sport Investing
Sport Investing
Neverswap
Neverswap
Visor Finance
Visor Finance
Vidya
Vidya
Bit.Country
Bit.Country
Genius Coin
Genius Coin
WEYU
WEYU
Bonus Cake
Bonus Cake
Modurich
Modurich
WorldofWhales
WorldofWhales
Project Galaxy
Project Galaxy
Doge DeFi
Doge DeFi
MonetaSwap
MonetaSwap
CakeTools
CakeTools
Katana Inu
Katana Inu
Egoras
Egoras
AutoShark
AutoShark
MyCoinStory
MyCoinStory
DOMINO
DOMINO
IHC
IHC
Infinity Skies
Infinity Skies
Sparkpoint
Sparkpoint
Meow Swap
Meow Swap
DoveSwap
DoveSwap
Poken Company
Poken Company
JaguarSwap
JaguarSwap
Wemp Token
Wemp Token
Moontography
Moontography
zkTube
zkTube
Ass Finance
Ass Finance
ChainGuardians
ChainGuardians
Alaska Inu
Alaska Inu
Osmosis
Osmosis
PETPLE
PETPLE
IRON Finance
IRON Finance
D.SYSTEMS
D.SYSTEMS
Kaizen.Finance
Kaizen.Finance
Pixl Coin
Pixl Coin
Deus Finance
Deus Finance
Cashcowswap
Cashcowswap
Philanthropy Finance
Philanthropy Finance
SafeLaunchpad
SafeLaunchpad
Arcadix Token
Arcadix Token
T1 Racing
T1 Racing
Punk.Network
Punk.Network
Leading Projects

Leading Projects

BSC Projects

BSC Projects

Polygon Projects

Polygon Projects

#
Name
Audit
Security Score/24h
Last 7 Days
Market Cap/24h
Onboard Date
1
PancakeSwap
PancakeSwap
Audit
+0
93
0.00%
$5.06B
6.34%
2020-10-13
2
Aave
Aave
Audit
+0
88
1.15%
$4.79B
0.55%
2020-07-22
3
1inch
1inch
Audit
+2
N/A
0.00%
$584.17M
4.94%
2021-02-10
4
Binance
Binance
Audit
+1
94
0.00%
$64.28B
1.35%
2018-11-11
5
CertiK
CertiK
Audit
+0
93
2.20%
$117.57M
8.46%
2020-10-24
6
Kava
Kava
Audit
+3
N/A
0.00%
$571.94M
1.67%
2020-03-10
7
Terra
Terra
Audit
+0
N/A
0.00%
$14.07B
0.96%
2020-09-01
8
Thorchain
Thorchain
Audit
+0
N/A
0.00%
$2.72B
8.52%
2019-04-06
9
OMG Network
OMG Network
Audit
+0
N/A
0.00%
$1.20B
3.37%
2021-06-08
10
ZKSwap
ZKSwap
Audit
+5
N/A
0.00%
$182.85M
3.46%
2021-04-12
11
DODO
DODO
Audit
+2
N/A
0.00%
$166.33M
0.10%
2020-02-18
12
ShibaSwap
ShibaSwap
Audit
+0
90
1.10%
$3.98B
5.27%
2021-05-12
13
Polygon
Polygon
Audit
+0
91
2.25%
$9.23B
4.32%
2020-10-24
14
Celer.Network
Celer.Network
Audit
+1
94
0.00%
$665.06M
3.53%
2020-10-24
15
Fetch.ai
Fetch.ai
Audit
+4
92
0.00%
$592.72M
0.16%
2019-09-13
16
Bancor
Bancor
Audit
+1
90
1.12%
$960.45M
1.19%
2020-07-15
17
Sandbox.game
Sandbox.game
Audit
+3
90
2.17%
$690.37M
0.03%
2019-12-10
18
Oceanprotocol
Oceanprotocol
Audit
+2
90
1.10%
$356.74M
3.07%
2020-04-08
19
NuCypher
NuCypher
Audit
91
0.00%
$185.31M
0.64%
2021-05-25
20
SafeMoon
SafeMoon
Audit
+0
86
0.00%
$945.14M
0.37%
2021-05-03
21
Swipe
Swipe
Audit
+4
85
0.00%
$496.64M
0.75%
2019-08-25
22
DinoSwap
DinoSwap
Audit
+2
94
0.00%
$11.49M
1.84%
2021-06-18
23
Ampleforth
Ampleforth
Audit
+2
89
0.00%
$119.34M
1.00%
2020-05-06
24
Tellor
Tellor
Audit
+1
89
2.30%
$117.92M
4.35%
2019-08-06
25
Autofarm
Autofarm
Audit
+1
87
0.00%
$41.00M
0.14%
2021-03-03
26
Akropolis
Akropolis
Audit
+2
88
1.12%
$77.04M
0.22%
2020-10-24
27
Crypto.com
Crypto.com
Audit
+0
N/A
0.00%
$4.80B
0.77%
2018-11-30
28
Chiliz
Chiliz
Audit
+0
N/A
0.00%
$1.76B
0.23%
2021-02-22
29
Telcoin
Telcoin
Audit
+0
N/A
0.00%
$1.09B
1.06%
2018-12-01
30
TrueUSD
TrueUSD
Audit
+0
N/A
0.00%
$1.40B
0.27%
2018-07-10
CertiK Community Alerts
Report Project
NowSwapNowSwap
9/15/2021
Exploited NowSwap suffered from the hack and the estimated loss to holders was listed as 158.28 WETH & 535,706 USDT was stolen, approx worth $ 1M.
Confirmed
Zabu FinanceZabu Finance
9/13/2021
Exploited Zabu Finance, an Avalanche-based decentralized finance (DeFi) protocol, has been exploited for $3.2 million on Sep 11, 2021.
Confirmed
The DAO MarkerThe DAO Marker
9/4/2021
Exploited The DAO Maker suffered an attack and resulted in $4 million assets lost. The attacker invoked the `emergencyExit()` functions multiple times from unverified contracts.
Confirmed
NowSwapNowSwap
9/15/2021
Exploited NowSwap suffered from the hack and the estimated loss to holders was listed as 158.28 WETH & 535,706 USDT was stolen, approx worth $ 1M.
Confirmed
Zabu FinanceZabu Finance
9/13/2021
Exploited Zabu Finance, an Avalanche-based decentralized finance (DeFi) protocol, has been exploited for $3.2 million on Sep 11, 2021.
Confirmed
The DAO MarkerThe DAO Marker
9/4/2021
Exploited The DAO Maker suffered an attack and resulted in $4 million assets lost. The attacker invoked the `emergencyExit()` functions multiple times from unverified contracts.
Confirmed
Dao MakerDao Maker
8/12/2021
Exploited Dao Maker suffered an attack and resulted in 7M$ assets lost. The admin's private key was used to grant the attacker's contract permission to withdraw funds from the exploited contract.
Confirmed
Castleswap FinanceCastleswap Finance
7/28/2021
Possible Backdoor The MasterChef contract contains the updateLiqProvider function that allows the contract owner (not a TimeLock) to transfer LP tokens to itself, resulting in a possible rug pull at any time. Be cautious and DO NOT engage.
Unconfirmed
Baby Doge FlokiBaby Doge Floki
7/15/2021
High Risk We've received inbounds that indicate high risks regarding a project named Baby Doge Floki. The token charges a 99% liquidity fee when executing a transaction, although it claimed to have only 9% liquidity and 3% tax fees on its website. Be cautious and DO NOT engage.
Confirmed
AnyswapAnyswap
7/12/2021
Exploited Anyswap multichain V3 router was exploited and result in 7.5M$ worth of assets lost. The attacker deduced the private key to the Anyswap V3 Router MPC account based on two transactions that have the same R value signature.
Confirmed
StableMagnetStableMagnet
6/23/2021
RugPull StableMagnet rug pulled over $22 million worth of assets. The scammers swap their SwapUtils library for their swap contract to an unverified linked library. They used code in the unverified linked library to drain all tokens from the swap contract. We recommend users unstake and revoke token approvals.
Confirmed
Eleven FinanceEleven Finance
6/22/2021
Exploited A hacker exploited the logic error in the "emergencyBurn()" function in the "ElevenNeverSellVault" contract. The error allows the attacker to withdraw more Nerve tokens from the contract than it supposes to, and the attacker enlarges the profit with the assist of flash loans.
Confirmed
Popit FinancePopit Finance
6/21/2021
High Risks The MasterChef contract contains the migrateCakeLPsToPopitSwap function that allows the contract owner (not a TimeLock) to transfer LP tokens to any address, resulting in a possible rug pull at any time. Be cautious and DO NOT engage.
Unconfirmed
MayoSwapMayoSwap
6/12/2021
High Risks The MasterChef contract contains the emergencyWithdraw functionality that would take a penalty charge of 30% of the user’s LP tokens if the liquidity lock is enabled, and it could be set to 100% at any time given the owner is not a timelock. Be cautious and DO NOT engage.
Unconfirmed
FlashLoan ScamFlashLoan Scam
6/10/2021
Scam We detected an ongoing scam claims that you can 'earned BNB/ETH using Flashloans'. We advise community members to stay away from the scam and do not engage. Following the video instruction or interacting with the scammer's website only results in sending tokens to the scammer's wallet.
Confirmed
PantySwapPantySwap
6/6/2021
Potential RugPull We've received inbounds that indicate high risks regarding a project named PantySwap. The MasterChef contract contains the migrate function that could be leveraged by the owner (not a TimeLock) to drain all LP tokens, resulting in a possible rug pull at any time. Be cautious and DO NOT engage.
Confirmed
taba.financetaba.finance
6/5/2021
Potential RugPull We've received inbounds that indicate high risks regarding a project named taba.finance. They claimed to have the CertiK audit in progress, but it's fake. The owner can use a privileged function in the contract to withdraw all users' funds. Be cautious and DO NOT engage with them.
Confirmed
Belt FinanceBelt Finance
5/29/2021
Flash Loan Attack A hacker exploited Belt Finance with a flash loan attack to steal over $6.2M BUSD. The attacker was able to manipulate the beltBUSD price by exploiting a balance calculation bug in the bEllipsisBUSD strategy contract.
Confirmed
JulSwapJulSwap
5/29/2021
Flash Loan Attack A hacker exploited JulSwap with a flash loan attack to gain 4k JULb tokens. The price of JULb tokens dropped 75% after the hacker swapped all JULb tokens to BNB.
Confirmed
BurgerSwapBurgerSwap
5/27/2021
Exploited Burger Swap suffered a flash loan assisted reentrancy attack, resulting in over $7M worth of assets lost. The attacker was able to swap twice before the number of tokens in the reserve got updated.
Confirmed
AutoSharkAutoShark
5/24/2021
Flash Loan Attack A hacker exploited AutoShark with a flash loan attack to gain 100M Shark tokens. The price of shark tokens dropped 95% after the hacker swapped all shark tokens to BNB.
Confirmed
BogtoolsBogtools
5/22/2021
Exploited BogTools suffered a flash loan attack that resulted in a loss of over $3.41M(11378 BNB).
Confirmed
DeFi100DeFi100
5/22/2021
Rug Pull A excit scams is confirmed on a project called DeFi100, the project rugged $32 million
Confirmed
PancakeBunnyPancakeBunny
5/19/2021
Flash Loan Attack The project suffered from a flash loan attack that resulted in a loss of 114K WBNB and 697K BUNNY.
Confirmed
FinNexusFinNexus
5/17/2021
Potentially Hacked The owner of the FinNexus(FNX) contract on Ethereum and BSC was changed. The new owner minted 400M FNX tokens and dumped them on the market, which caused the price of the FNX tokens to drop over 90%. The root cause of the incident is still under investigation.
Confirmed
bEarn FibEarn Fi
5/16/2021
Exploited A unit inconsistency issue was exploited in the BvaultsStrategy & BvaultsBank contracts which resulted in approximately $11M BUSD lost in the vault.
Confirmed
xTokenxToken
5/12/2021
Exploited xToken's xBNTa and xSNXa contracts were exploited, resulting in $25 million assets lost. The attacker drained the xSNXa pool by manipulating SNX token's price in the Kyber Oracle with flash loans and drained the xBNTa pool by exploiting an unverified function argument 'path' to mint infinite xBNTa tokens.
Confirmed
Spartan ProtocolSpartan Protocol
5/1/2021
Exploited The Spartan Protocol V1 contract got exploited with approximately $30M so far in funds removed from pools.
Confirmed
Uranium Finance V2Uranium Finance V2
4/28/2021
Exploited The attackers exploited a bug in Uranium Finance V2’s smart contract to swap a single token for almost all other tokens in the protocol’s liquidity pool. The result of loss is estimated at $50M.
Confirmed
MoonhereMoonhere
4/20/2021
Exit Scam A project called Moonhere is likely to exit scam once the fair launch ends. Investigation indicates that the scam group behind may be identical to Cryptoption (Alerted before). Please do not engage and stay vigilant.
Confirmed
CryptoptionCryptoption
4/19/2021
Exit Scam Community alerts were received on a project named Cryptoption that exit scammed. The scammers abandoned the project after the token pre-sale and took away 189,117 BUSD funds received in the pre-sale.
Confirmed
SexyAPYSexyAPY
4/16/2021
RugPull Community alerts received on a project named SexyAPY that got rug pulled, with a total value of $113,655 in BUSD. The funds were washed across platforms via bridges.
Confirmed
Vine ProtocolVine Protocol
4/13/2021
Potential high risks Inbounds received that indicated as protention high risks regarding a project named Vine Protocol. The project claimed to have been audited by CertiK, which is misleading, and not true at all.
Unconfirmed
NoaSwapNoaSwap
4/11/2021
Potential RugPull The project has been identified as being run by the same scammers responsible for SheepSwap. Please be cautious and stay vigilant.
Confirmed
Uranium FinanceUranium Finance
4/9/2021
Exploited The attacker drained RADS/sRADS rewards tokens from the vulnerable contract and sold them for $1.3M worth of BUSD and BNB.
Confirmed
GhostmixerGhostmixer
4/7/2021
High risks Tokens are being minted irregularly via the deposits of suspicious vaults. Please do not interact with any smart contracts related to the project.
Confirmed
Mozart FinanceMozart Finance
4/6/2021
High risks Alert inbound - a project called Mozart finance that got hack by internal team. The developer left a backdoor in _mint function to a personal wallet address.
Confirmed
MonsterSlayerFinanceMonsterSlayerFinance
4/6/2021
High risks Suspicious relocation of Stabilization fund which could result in a potential rug pull. Be cautious and DO NOT engage with any of its smart contracts.
Confirmed
ForceDAOForceDAO
4/4/2021
High risks A community alert is confirmed on a project called ForceDAO that indicated high risks and the project informed the halt on trading. The hack was due to a vulnerable function that would result in unlimited MINTs of its protocol tokens tradable on SUSHISWAP and UNISWAP. DYOR with caution
Confirmed
RizeSwapRizeSwap
3/25/2021
Potential high risks Alert inbound received from our community on a project called RizeSwap that may indicate high risks. Its website is currently down and the token contract is not verified on BSCScan, meanwhile the deployer (owner) of the contract holds 99% of the token supply. DYOR with caution
Unconfirmed
DelicacyDefiDelicacyDefi
3/20/2021
Potential high risks We’ve received inbounds that may indicate high risks regarding a project named DelicacyDefi. Malicious code snippets appear in the smart contract and we wish the community DYOR with caution before interacting.
Unconfirmed
SheepSwapSheepSwap
3/17/2021
Rug Pull We’ve received inbounds that may indicate high risks regarding to a project named SheepSwap. Privileged functionalities appear in those smart contracts and we wish the community DYOR enough before interacting with the dApp.
Confirmed
Trending Projects
NameScoreMarket Cap
ShibaSwap
ShibaSwap
90
$3.98B
MOBOX
MOBOX
83
$184.74M
Bzzone
Bzzone
N/A
N/A
Biswap
Biswap
89
N/A
Baby Doge
Baby Doge
N/A
N/A
Score Risers
NameScore24Hr%
Kebab
Kebab
87
16.0%
MacaronSwap
MacaronSwap
88
6.02%
Kalata
Kalata
90
4.65%
Helmet
Helmet
88
3.53%
GMR Finance
GMR Finance
91
3.41%
Score Fallers
NameScore24Hr%
MOBOX
MOBOX
83
7.78%
MistNFT
MistNFT
86
4.44%
ZCore Finance
ZCore Finance
81
3.57%
Coinswap_Space
Coinswap_Space
83
2.35%
The Grand Banks
The Grand Banks
86
2.27%
BSC CampaignStake Now!
CertiK Foundation Logo
Copyright © 2021 by CertiK. All rights reserved.
Disclaimer
Directory
Build
Tools
Telegram
Twitter
Medium
WeChat
Discord
Subscribe to NewsletterSubscribe to our newsletter updates for info on chain upgrades, bug bounties, and other news
CertiK Foundation Logo
Copyright © 2021 by CertiK. All rights reserved.
Disclaimer