SlideShare a Scribd company logo
Parallax
Smart Contract Security Audit
TechRate
January, 2022
Disclaimer
This is a limited report on our findings based on our analysis, in accordance with
good industry practice as at the date of this report, in relation to cybersecurity
vulnerabilities and issues in the framework and algorithms based on smart contracts,
the details of which are set out in this report. In order to get a full view of our
analysis, it is crucial for you to read the full report. While we have done our best in
conducting our analysis and producing this report, it is important to note that you
should not rely on this report and cannot claim against us on the basis of what it says
or doesn’t say, or how we produced it, and it is important for you to conduct your own
independent investigations before making any decisions. We go into more detail on
this in the below disclaimer below – please make sure to read it in full.
DISCLAIMER: By reading this report or any part of it, you agree to the terms of this
disclaimer. If you do not agree to the terms, then please immediately cease reading
this report, and delete and destroy any and all copies of this report downloaded
and/or printed by you. This report is provided for information purposes only and on a
non-reliance basis, and does not constitute investment advice. No one shall have any
right to rely on the report or its contents, and TechRate and its affiliates (including
holding companies, shareholders, subsidiaries, employees, directors, officers and
other representatives) (TechRate) owe no duty of care towards you or any other
person, nor does TechRate make any warranty or representation to any person on
the accuracy or completeness of the report. The report is provided "as is", without
any conditions, warranties or other terms of any kind except as set out in this
disclaimer, and TechRate hereby excludes all representations, warranties,
conditions and other terms (including, without limitation, the warranties implied by
law of satisfactory quality, fitness for purpose and the use of reasonable care and
skill) which, but for this clause, might have effect in relation to the report. Except and
only to the extent that it is prohibited by law, TechRate hereby excludes all liability
and responsibility, and neither you nor any other person shall have any claim against
TechRate, for any amount or kind of loss or damage that may result to you or any
other person (including without limitation, any direct, indirect, special, punitive,
consequential or pure economic loss or damages, or any loss of income, profits,
goodwill, data, contracts, use of money, or business interruption, and whether in
delict, tort (including without limitation negligence), contract, breach of statutory
duty, misrepresentation (whether innocent or negligent) or otherwise under any
claim of any nature whatsoever in any jurisdiction) in any way arising from or
connected with this report and the use, inability to use or the results of use of this
report, and any reliance on this report.
The analysis of the security is purely based on the smart contracts alone. No
applications or operations were reviewed for security. No product code has been
reviewed.
Background
TechRate was commissioned by Parallax to perform an audit of smart
contracts:
https://testnet.bscscan.com/address/0x70d2ace4f5c69b3298d92d85ffb6d274c1e88f
eb#code
The purpose of the audit was to achieve the following:
● Ensure that the smart contract functions as intended.
● Identify potential security issues with the smart contract.
The information in this report should be used to understand the risk exposure of the
smart contract, and as a guide to improve the security posture of the smart contract
by remediating the issues that were identified.
Issues Checking Status
Issue description Checking status
1. Compiler errors. Passed
2. Race conditions and Reentrancy. Cross-function race
conditions.
Passed
3. Possible delays in data delivery. Passed
4. Oracle calls. Passed
5. Front running. Passed
6. Timestamp dependence. Passed
7. Integer Overflow and Underflow. Passed
8. DoS with Revert. Passed
9. DoS with block gas limit. Passed
10. Methods execution permissions. Passed
11. Economy model of the contract. Passed
12. The impact of the exchange rate on the logic. Passed
13. Private user data leaks. Passed
14. Malicious Event log. Passed
15. Scoping and Declarations. Passed
16. Uninitialized storage pointers. Passed
17. Arithmetic accuracy. Passed
18. Design Logic. Passed
19. Cross-function race conditions. Passed
20. Safe Open Zeppelin contracts implementation and
usage.
Passed
21. Fallback function security. Passed
Security Issues
High Severity Issues
No high severity issues found.
Medium Severity Issues
No medium severity issues found.
Low Severity Issues
No low severity issues found.
Owner privileges (In the period when the owner is not
renounced)
• Owner can change _arrayLength value.
• Owner can enable trading.
• Owner can disable launchPhase.
• Owner can blacklist and authorize addresses.
• Owner can exclude from the fee.
• Owner can mark addresses as pairs.
• Owner can change fees.
• Owner can change triggerTokens value.
• Owner can enable/disable noFeeToTransfer.
• Owner can change the maximum transaction amount and maximum
wallet token.
• Owner can withdraw contract ERC20 tokens.
• Owner can change router and pair addresses.
Conclusion
Smart contracts do not contain high severity issues! Liquidity pair
contract’s security is not checked due to out of scope.
Liquidity locking details are NOT provided by the team.
TechRate note:
Please check the disclaimer above and note, the audit makes no
statements or warranties on business model, investment
attractiveness or code sustainability. The report is provided for the
only contract mentioned in the report and does not include any
other potential contracts deployed by Owner.

More Related Content

Similar to Parallax DeFi [PRLX] BSC BEP-20 | Techrate Final Audit

OMG DDS Security (6th Revised Submission)
OMG DDS Security (6th Revised Submission)OMG DDS Security (6th Revised Submission)
OMG DDS Security (6th Revised Submission)
Gerardo Pardo-Castellote
 
Factsheet Trakx Diversifier - 30Nov2020
Factsheet Trakx Diversifier - 30Nov2020Factsheet Trakx Diversifier - 30Nov2020
Factsheet Trakx Diversifier - 30Nov2020
Trakx
 
dynaCERT 2016 December 09 Press Release
dynaCERT 2016 December 09 Press ReleasedynaCERT 2016 December 09 Press Release
dynaCERT 2016 December 09 Press Release
dynaCERT Inc.
 
DDS for eXtremely Resource Constrained Environments 1.0 Beta
DDS for eXtremely Resource Constrained Environments 1.0 BetaDDS for eXtremely Resource Constrained Environments 1.0 Beta
DDS for eXtremely Resource Constrained Environments 1.0 Beta
Gerardo Pardo-Castellote
 
Factsheet - Top 10 DeFi
Factsheet - Top 10 DeFiFactsheet - Top 10 DeFi
Factsheet - Top 10 DeFi
Trakx
 
FxThinker2016Liner
FxThinker2016LinerFxThinker2016Liner
FxThinker2016LinerSantanu Nag
 
DDOG 2024 Investor Day.pdf - Q4 2024 Datadog
DDOG 2024 Investor Day.pdf - Q4 2024 DatadogDDOG 2024 Investor Day.pdf - Q4 2024 Datadog
DDOG 2024 Investor Day.pdf - Q4 2024 Datadog
RaviNeppalli
 
DDS Security Specification (Adopted Beta1 June 2014)
DDS Security Specification (Adopted Beta1 June 2014)DDS Security Specification (Adopted Beta1 June 2014)
DDS Security Specification (Adopted Beta1 June 2014)
Gerardo Pardo-Castellote
 
How to launch a token_ Operational guidelines from creation to custody - a16z...
How to launch a token_ Operational guidelines from creation to custody - a16z...How to launch a token_ Operational guidelines from creation to custody - a16z...
How to launch a token_ Operational guidelines from creation to custody - a16z...
Harsha MV
 
DDS for eXtremely Resource Constrained Environments
DDS for eXtremely Resource Constrained EnvironmentsDDS for eXtremely Resource Constrained Environments
DDS for eXtremely Resource Constrained Environments
Gerardo Pardo-Castellote
 
Nivaura Reinsurance Contract Deployment 2016
Nivaura Reinsurance Contract Deployment 2016Nivaura Reinsurance Contract Deployment 2016
Nivaura Reinsurance Contract Deployment 2016
Avtar Sehra
 
Pulsar Summit Asia 2022 - Keeping on top of hybrid cloud usage with Pulsar
Pulsar Summit Asia 2022 - Keeping on top of hybrid cloud usage with PulsarPulsar Summit Asia 2022 - Keeping on top of hybrid cloud usage with Pulsar
Pulsar Summit Asia 2022 - Keeping on top of hybrid cloud usage with Pulsar
Shivji Kumar Jha
 
OMG DDS Security Specification - 4th revised submission document
OMG DDS Security Specification - 4th revised submission documentOMG DDS Security Specification - 4th revised submission document
OMG DDS Security Specification - 4th revised submission document
Gerardo Pardo-Castellote
 
PharmaLedger – Requirement document report for governance application
PharmaLedger – Requirement document report for governance applicationPharmaLedger – Requirement document report for governance application
PharmaLedger – Requirement document report for governance application
PharmaLedger
 
OPC UA/DDS Gateway version 1.0 Beta
OPC UA/DDS Gateway version 1.0 BetaOPC UA/DDS Gateway version 1.0 Beta
OPC UA/DDS Gateway version 1.0 Beta
Gerardo Pardo-Castellote
 
RPC over DDS Beta 1
RPC over DDS Beta 1RPC over DDS Beta 1
RPC over DDS Beta 1
Sumant Tambe
 
RAC Release 2.0 Software Overview
RAC Release 2.0 Software OverviewRAC Release 2.0 Software Overview
RAC Release 2.0 Software Overview
TJC Group
 
RAC Release 2.0 Software Overview
RAC Release 2.0 Software OverviewRAC Release 2.0 Software Overview
RAC Release 2.0 Software Overview
TJC Group
 
Siyata Mobile Investor Presentation Q2
Siyata Mobile Investor Presentation Q2Siyata Mobile Investor Presentation Q2
Siyata Mobile Investor Presentation Q2
RedChip Companies, Inc.
 

Similar to Parallax DeFi [PRLX] BSC BEP-20 | Techrate Final Audit (20)

OMG DDS Security (6th Revised Submission)
OMG DDS Security (6th Revised Submission)OMG DDS Security (6th Revised Submission)
OMG DDS Security (6th Revised Submission)
 
Factsheet Trakx Diversifier - 30Nov2020
Factsheet Trakx Diversifier - 30Nov2020Factsheet Trakx Diversifier - 30Nov2020
Factsheet Trakx Diversifier - 30Nov2020
 
dynaCERT 2016 December 09 Press Release
dynaCERT 2016 December 09 Press ReleasedynaCERT 2016 December 09 Press Release
dynaCERT 2016 December 09 Press Release
 
DDS for eXtremely Resource Constrained Environments 1.0 Beta
DDS for eXtremely Resource Constrained Environments 1.0 BetaDDS for eXtremely Resource Constrained Environments 1.0 Beta
DDS for eXtremely Resource Constrained Environments 1.0 Beta
 
Factsheet - Top 10 DeFi
Factsheet - Top 10 DeFiFactsheet - Top 10 DeFi
Factsheet - Top 10 DeFi
 
FxThinker2016Liner
FxThinker2016LinerFxThinker2016Liner
FxThinker2016Liner
 
DDOG 2024 Investor Day.pdf - Q4 2024 Datadog
DDOG 2024 Investor Day.pdf - Q4 2024 DatadogDDOG 2024 Investor Day.pdf - Q4 2024 Datadog
DDOG 2024 Investor Day.pdf - Q4 2024 Datadog
 
DDS Security Specification (Adopted Beta1 June 2014)
DDS Security Specification (Adopted Beta1 June 2014)DDS Security Specification (Adopted Beta1 June 2014)
DDS Security Specification (Adopted Beta1 June 2014)
 
Bpmn
BpmnBpmn
Bpmn
 
How to launch a token_ Operational guidelines from creation to custody - a16z...
How to launch a token_ Operational guidelines from creation to custody - a16z...How to launch a token_ Operational guidelines from creation to custody - a16z...
How to launch a token_ Operational guidelines from creation to custody - a16z...
 
DDS for eXtremely Resource Constrained Environments
DDS for eXtremely Resource Constrained EnvironmentsDDS for eXtremely Resource Constrained Environments
DDS for eXtremely Resource Constrained Environments
 
Nivaura Reinsurance Contract Deployment 2016
Nivaura Reinsurance Contract Deployment 2016Nivaura Reinsurance Contract Deployment 2016
Nivaura Reinsurance Contract Deployment 2016
 
Pulsar Summit Asia 2022 - Keeping on top of hybrid cloud usage with Pulsar
Pulsar Summit Asia 2022 - Keeping on top of hybrid cloud usage with PulsarPulsar Summit Asia 2022 - Keeping on top of hybrid cloud usage with Pulsar
Pulsar Summit Asia 2022 - Keeping on top of hybrid cloud usage with Pulsar
 
OMG DDS Security Specification - 4th revised submission document
OMG DDS Security Specification - 4th revised submission documentOMG DDS Security Specification - 4th revised submission document
OMG DDS Security Specification - 4th revised submission document
 
PharmaLedger – Requirement document report for governance application
PharmaLedger – Requirement document report for governance applicationPharmaLedger – Requirement document report for governance application
PharmaLedger – Requirement document report for governance application
 
OPC UA/DDS Gateway version 1.0 Beta
OPC UA/DDS Gateway version 1.0 BetaOPC UA/DDS Gateway version 1.0 Beta
OPC UA/DDS Gateway version 1.0 Beta
 
RPC over DDS Beta 1
RPC over DDS Beta 1RPC over DDS Beta 1
RPC over DDS Beta 1
 
RAC Release 2.0 Software Overview
RAC Release 2.0 Software OverviewRAC Release 2.0 Software Overview
RAC Release 2.0 Software Overview
 
RAC Release 2.0 Software Overview
RAC Release 2.0 Software OverviewRAC Release 2.0 Software Overview
RAC Release 2.0 Software Overview
 
Siyata Mobile Investor Presentation Q2
Siyata Mobile Investor Presentation Q2Siyata Mobile Investor Presentation Q2
Siyata Mobile Investor Presentation Q2
 

More from 47corporation

47corporation HR
47corporation HR47corporation HR
47corporation HR
47corporation
 
STRAINZ | NFT Game
STRAINZ | NFT GameSTRAINZ | NFT Game
STRAINZ | NFT Game
47corporation
 
FLUX Grant Marketing Proposal
FLUX Grant Marketing ProposalFLUX Grant Marketing Proposal
FLUX Grant Marketing Proposal
47corporation
 
D474forex Revised Presentation
D474forex Revised PresentationD474forex Revised Presentation
D474forex Revised Presentation
47corporation
 
D474forex Trading Advice
D474forex Trading AdviceD474forex Trading Advice
D474forex Trading Advice
47corporation
 
iXport
iXportiXport
D474forex
D474forexD474forex
D474forex
47corporation
 
Portfolio
PortfolioPortfolio
Portfolio
47corporation
 
Portfolio Extended
Portfolio ExtendedPortfolio Extended
Portfolio Extended
47corporation
 
DataDesigns™ © 2015®
DataDesigns™ © 2015®DataDesigns™ © 2015®
DataDesigns™ © 2015®
47corporation
 

More from 47corporation (10)

47corporation HR
47corporation HR47corporation HR
47corporation HR
 
STRAINZ | NFT Game
STRAINZ | NFT GameSTRAINZ | NFT Game
STRAINZ | NFT Game
 
FLUX Grant Marketing Proposal
FLUX Grant Marketing ProposalFLUX Grant Marketing Proposal
FLUX Grant Marketing Proposal
 
D474forex Revised Presentation
D474forex Revised PresentationD474forex Revised Presentation
D474forex Revised Presentation
 
D474forex Trading Advice
D474forex Trading AdviceD474forex Trading Advice
D474forex Trading Advice
 
iXport
iXportiXport
iXport
 
D474forex
D474forexD474forex
D474forex
 
Portfolio
PortfolioPortfolio
Portfolio
 
Portfolio Extended
Portfolio ExtendedPortfolio Extended
Portfolio Extended
 
DataDesigns™ © 2015®
DataDesigns™ © 2015®DataDesigns™ © 2015®
DataDesigns™ © 2015®
 

Recently uploaded

Accelerate your Kubernetes clusters with Varnish Caching
Accelerate your Kubernetes clusters with Varnish CachingAccelerate your Kubernetes clusters with Varnish Caching
Accelerate your Kubernetes clusters with Varnish Caching
Thijs Feryn
 
Empowering NextGen Mobility via Large Action Model Infrastructure (LAMI): pav...
Empowering NextGen Mobility via Large Action Model Infrastructure (LAMI): pav...Empowering NextGen Mobility via Large Action Model Infrastructure (LAMI): pav...
Empowering NextGen Mobility via Large Action Model Infrastructure (LAMI): pav...
Thierry Lestable
 
Monitoring Java Application Security with JDK Tools and JFR Events
Monitoring Java Application Security with JDK Tools and JFR EventsMonitoring Java Application Security with JDK Tools and JFR Events
Monitoring Java Application Security with JDK Tools and JFR Events
Ana-Maria Mihalceanu
 
Knowledge engineering: from people to machines and back
Knowledge engineering: from people to machines and backKnowledge engineering: from people to machines and back
Knowledge engineering: from people to machines and back
Elena Simperl
 
Connector Corner: Automate dynamic content and events by pushing a button
Connector Corner: Automate dynamic content and events by pushing a buttonConnector Corner: Automate dynamic content and events by pushing a button
Connector Corner: Automate dynamic content and events by pushing a button
DianaGray10
 
Assuring Contact Center Experiences for Your Customers With ThousandEyes
Assuring Contact Center Experiences for Your Customers With ThousandEyesAssuring Contact Center Experiences for Your Customers With ThousandEyes
Assuring Contact Center Experiences for Your Customers With ThousandEyes
ThousandEyes
 
Key Trends Shaping the Future of Infrastructure.pdf
Key Trends Shaping the Future of Infrastructure.pdfKey Trends Shaping the Future of Infrastructure.pdf
Key Trends Shaping the Future of Infrastructure.pdf
Cheryl Hung
 
Transcript: Selling digital books in 2024: Insights from industry leaders - T...
Transcript: Selling digital books in 2024: Insights from industry leaders - T...Transcript: Selling digital books in 2024: Insights from industry leaders - T...
Transcript: Selling digital books in 2024: Insights from industry leaders - T...
BookNet Canada
 
UiPath Test Automation using UiPath Test Suite series, part 4
UiPath Test Automation using UiPath Test Suite series, part 4UiPath Test Automation using UiPath Test Suite series, part 4
UiPath Test Automation using UiPath Test Suite series, part 4
DianaGray10
 
Encryption in Microsoft 365 - ExpertsLive Netherlands 2024
Encryption in Microsoft 365 - ExpertsLive Netherlands 2024Encryption in Microsoft 365 - ExpertsLive Netherlands 2024
Encryption in Microsoft 365 - ExpertsLive Netherlands 2024
Albert Hoitingh
 
Kubernetes & AI - Beauty and the Beast !?! @KCD Istanbul 2024
Kubernetes & AI - Beauty and the Beast !?! @KCD Istanbul 2024Kubernetes & AI - Beauty and the Beast !?! @KCD Istanbul 2024
Kubernetes & AI - Beauty and the Beast !?! @KCD Istanbul 2024
Tobias Schneck
 
When stars align: studies in data quality, knowledge graphs, and machine lear...
When stars align: studies in data quality, knowledge graphs, and machine lear...When stars align: studies in data quality, knowledge graphs, and machine lear...
When stars align: studies in data quality, knowledge graphs, and machine lear...
Elena Simperl
 
DevOps and Testing slides at DASA Connect
DevOps and Testing slides at DASA ConnectDevOps and Testing slides at DASA Connect
DevOps and Testing slides at DASA Connect
Kari Kakkonen
 
Smart TV Buyer Insights Survey 2024 by 91mobiles.pdf
Smart TV Buyer Insights Survey 2024 by 91mobiles.pdfSmart TV Buyer Insights Survey 2024 by 91mobiles.pdf
Smart TV Buyer Insights Survey 2024 by 91mobiles.pdf
91mobiles
 
LF Energy Webinar: Electrical Grid Modelling and Simulation Through PowSyBl -...
LF Energy Webinar: Electrical Grid Modelling and Simulation Through PowSyBl -...LF Energy Webinar: Electrical Grid Modelling and Simulation Through PowSyBl -...
LF Energy Webinar: Electrical Grid Modelling and Simulation Through PowSyBl -...
DanBrown980551
 
De-mystifying Zero to One: Design Informed Techniques for Greenfield Innovati...
De-mystifying Zero to One: Design Informed Techniques for Greenfield Innovati...De-mystifying Zero to One: Design Informed Techniques for Greenfield Innovati...
De-mystifying Zero to One: Design Informed Techniques for Greenfield Innovati...
Product School
 
To Graph or Not to Graph Knowledge Graph Architectures and LLMs
To Graph or Not to Graph Knowledge Graph Architectures and LLMsTo Graph or Not to Graph Knowledge Graph Architectures and LLMs
To Graph or Not to Graph Knowledge Graph Architectures and LLMs
Paul Groth
 
The Art of the Pitch: WordPress Relationships and Sales
The Art of the Pitch: WordPress Relationships and SalesThe Art of the Pitch: WordPress Relationships and Sales
The Art of the Pitch: WordPress Relationships and Sales
Laura Byrne
 
From Siloed Products to Connected Ecosystem: Building a Sustainable and Scala...
From Siloed Products to Connected Ecosystem: Building a Sustainable and Scala...From Siloed Products to Connected Ecosystem: Building a Sustainable and Scala...
From Siloed Products to Connected Ecosystem: Building a Sustainable and Scala...
Product School
 
Generating a custom Ruby SDK for your web service or Rails API using Smithy
Generating a custom Ruby SDK for your web service or Rails API using SmithyGenerating a custom Ruby SDK for your web service or Rails API using Smithy
Generating a custom Ruby SDK for your web service or Rails API using Smithy
g2nightmarescribd
 

Recently uploaded (20)

Accelerate your Kubernetes clusters with Varnish Caching
Accelerate your Kubernetes clusters with Varnish CachingAccelerate your Kubernetes clusters with Varnish Caching
Accelerate your Kubernetes clusters with Varnish Caching
 
Empowering NextGen Mobility via Large Action Model Infrastructure (LAMI): pav...
Empowering NextGen Mobility via Large Action Model Infrastructure (LAMI): pav...Empowering NextGen Mobility via Large Action Model Infrastructure (LAMI): pav...
Empowering NextGen Mobility via Large Action Model Infrastructure (LAMI): pav...
 
Monitoring Java Application Security with JDK Tools and JFR Events
Monitoring Java Application Security with JDK Tools and JFR EventsMonitoring Java Application Security with JDK Tools and JFR Events
Monitoring Java Application Security with JDK Tools and JFR Events
 
Knowledge engineering: from people to machines and back
Knowledge engineering: from people to machines and backKnowledge engineering: from people to machines and back
Knowledge engineering: from people to machines and back
 
Connector Corner: Automate dynamic content and events by pushing a button
Connector Corner: Automate dynamic content and events by pushing a buttonConnector Corner: Automate dynamic content and events by pushing a button
Connector Corner: Automate dynamic content and events by pushing a button
 
Assuring Contact Center Experiences for Your Customers With ThousandEyes
Assuring Contact Center Experiences for Your Customers With ThousandEyesAssuring Contact Center Experiences for Your Customers With ThousandEyes
Assuring Contact Center Experiences for Your Customers With ThousandEyes
 
Key Trends Shaping the Future of Infrastructure.pdf
Key Trends Shaping the Future of Infrastructure.pdfKey Trends Shaping the Future of Infrastructure.pdf
Key Trends Shaping the Future of Infrastructure.pdf
 
Transcript: Selling digital books in 2024: Insights from industry leaders - T...
Transcript: Selling digital books in 2024: Insights from industry leaders - T...Transcript: Selling digital books in 2024: Insights from industry leaders - T...
Transcript: Selling digital books in 2024: Insights from industry leaders - T...
 
UiPath Test Automation using UiPath Test Suite series, part 4
UiPath Test Automation using UiPath Test Suite series, part 4UiPath Test Automation using UiPath Test Suite series, part 4
UiPath Test Automation using UiPath Test Suite series, part 4
 
Encryption in Microsoft 365 - ExpertsLive Netherlands 2024
Encryption in Microsoft 365 - ExpertsLive Netherlands 2024Encryption in Microsoft 365 - ExpertsLive Netherlands 2024
Encryption in Microsoft 365 - ExpertsLive Netherlands 2024
 
Kubernetes & AI - Beauty and the Beast !?! @KCD Istanbul 2024
Kubernetes & AI - Beauty and the Beast !?! @KCD Istanbul 2024Kubernetes & AI - Beauty and the Beast !?! @KCD Istanbul 2024
Kubernetes & AI - Beauty and the Beast !?! @KCD Istanbul 2024
 
When stars align: studies in data quality, knowledge graphs, and machine lear...
When stars align: studies in data quality, knowledge graphs, and machine lear...When stars align: studies in data quality, knowledge graphs, and machine lear...
When stars align: studies in data quality, knowledge graphs, and machine lear...
 
DevOps and Testing slides at DASA Connect
DevOps and Testing slides at DASA ConnectDevOps and Testing slides at DASA Connect
DevOps and Testing slides at DASA Connect
 
Smart TV Buyer Insights Survey 2024 by 91mobiles.pdf
Smart TV Buyer Insights Survey 2024 by 91mobiles.pdfSmart TV Buyer Insights Survey 2024 by 91mobiles.pdf
Smart TV Buyer Insights Survey 2024 by 91mobiles.pdf
 
LF Energy Webinar: Electrical Grid Modelling and Simulation Through PowSyBl -...
LF Energy Webinar: Electrical Grid Modelling and Simulation Through PowSyBl -...LF Energy Webinar: Electrical Grid Modelling and Simulation Through PowSyBl -...
LF Energy Webinar: Electrical Grid Modelling and Simulation Through PowSyBl -...
 
De-mystifying Zero to One: Design Informed Techniques for Greenfield Innovati...
De-mystifying Zero to One: Design Informed Techniques for Greenfield Innovati...De-mystifying Zero to One: Design Informed Techniques for Greenfield Innovati...
De-mystifying Zero to One: Design Informed Techniques for Greenfield Innovati...
 
To Graph or Not to Graph Knowledge Graph Architectures and LLMs
To Graph or Not to Graph Knowledge Graph Architectures and LLMsTo Graph or Not to Graph Knowledge Graph Architectures and LLMs
To Graph or Not to Graph Knowledge Graph Architectures and LLMs
 
The Art of the Pitch: WordPress Relationships and Sales
The Art of the Pitch: WordPress Relationships and SalesThe Art of the Pitch: WordPress Relationships and Sales
The Art of the Pitch: WordPress Relationships and Sales
 
From Siloed Products to Connected Ecosystem: Building a Sustainable and Scala...
From Siloed Products to Connected Ecosystem: Building a Sustainable and Scala...From Siloed Products to Connected Ecosystem: Building a Sustainable and Scala...
From Siloed Products to Connected Ecosystem: Building a Sustainable and Scala...
 
Generating a custom Ruby SDK for your web service or Rails API using Smithy
Generating a custom Ruby SDK for your web service or Rails API using SmithyGenerating a custom Ruby SDK for your web service or Rails API using Smithy
Generating a custom Ruby SDK for your web service or Rails API using Smithy
 

Parallax DeFi [PRLX] BSC BEP-20 | Techrate Final Audit

  • 1. Parallax Smart Contract Security Audit TechRate January, 2022
  • 2. Disclaimer This is a limited report on our findings based on our analysis, in accordance with good industry practice as at the date of this report, in relation to cybersecurity vulnerabilities and issues in the framework and algorithms based on smart contracts, the details of which are set out in this report. In order to get a full view of our analysis, it is crucial for you to read the full report. While we have done our best in conducting our analysis and producing this report, it is important to note that you should not rely on this report and cannot claim against us on the basis of what it says or doesn’t say, or how we produced it, and it is important for you to conduct your own independent investigations before making any decisions. We go into more detail on this in the below disclaimer below – please make sure to read it in full. DISCLAIMER: By reading this report or any part of it, you agree to the terms of this disclaimer. If you do not agree to the terms, then please immediately cease reading this report, and delete and destroy any and all copies of this report downloaded and/or printed by you. This report is provided for information purposes only and on a non-reliance basis, and does not constitute investment advice. No one shall have any right to rely on the report or its contents, and TechRate and its affiliates (including holding companies, shareholders, subsidiaries, employees, directors, officers and other representatives) (TechRate) owe no duty of care towards you or any other person, nor does TechRate make any warranty or representation to any person on the accuracy or completeness of the report. The report is provided "as is", without any conditions, warranties or other terms of any kind except as set out in this disclaimer, and TechRate hereby excludes all representations, warranties, conditions and other terms (including, without limitation, the warranties implied by law of satisfactory quality, fitness for purpose and the use of reasonable care and skill) which, but for this clause, might have effect in relation to the report. Except and only to the extent that it is prohibited by law, TechRate hereby excludes all liability and responsibility, and neither you nor any other person shall have any claim against TechRate, for any amount or kind of loss or damage that may result to you or any other person (including without limitation, any direct, indirect, special, punitive, consequential or pure economic loss or damages, or any loss of income, profits, goodwill, data, contracts, use of money, or business interruption, and whether in delict, tort (including without limitation negligence), contract, breach of statutory duty, misrepresentation (whether innocent or negligent) or otherwise under any claim of any nature whatsoever in any jurisdiction) in any way arising from or connected with this report and the use, inability to use or the results of use of this report, and any reliance on this report. The analysis of the security is purely based on the smart contracts alone. No applications or operations were reviewed for security. No product code has been reviewed.
  • 3. Background TechRate was commissioned by Parallax to perform an audit of smart contracts: https://testnet.bscscan.com/address/0x70d2ace4f5c69b3298d92d85ffb6d274c1e88f eb#code The purpose of the audit was to achieve the following: ● Ensure that the smart contract functions as intended. ● Identify potential security issues with the smart contract. The information in this report should be used to understand the risk exposure of the smart contract, and as a guide to improve the security posture of the smart contract by remediating the issues that were identified.
  • 4. Issues Checking Status Issue description Checking status 1. Compiler errors. Passed 2. Race conditions and Reentrancy. Cross-function race conditions. Passed 3. Possible delays in data delivery. Passed 4. Oracle calls. Passed 5. Front running. Passed 6. Timestamp dependence. Passed 7. Integer Overflow and Underflow. Passed 8. DoS with Revert. Passed 9. DoS with block gas limit. Passed 10. Methods execution permissions. Passed 11. Economy model of the contract. Passed 12. The impact of the exchange rate on the logic. Passed 13. Private user data leaks. Passed 14. Malicious Event log. Passed 15. Scoping and Declarations. Passed 16. Uninitialized storage pointers. Passed 17. Arithmetic accuracy. Passed 18. Design Logic. Passed 19. Cross-function race conditions. Passed 20. Safe Open Zeppelin contracts implementation and usage. Passed 21. Fallback function security. Passed
  • 5. Security Issues High Severity Issues No high severity issues found. Medium Severity Issues No medium severity issues found. Low Severity Issues No low severity issues found. Owner privileges (In the period when the owner is not renounced) • Owner can change _arrayLength value. • Owner can enable trading. • Owner can disable launchPhase. • Owner can blacklist and authorize addresses. • Owner can exclude from the fee. • Owner can mark addresses as pairs. • Owner can change fees. • Owner can change triggerTokens value. • Owner can enable/disable noFeeToTransfer. • Owner can change the maximum transaction amount and maximum wallet token. • Owner can withdraw contract ERC20 tokens. • Owner can change router and pair addresses.
  • 6. Conclusion Smart contracts do not contain high severity issues! Liquidity pair contract’s security is not checked due to out of scope. Liquidity locking details are NOT provided by the team. TechRate note: Please check the disclaimer above and note, the audit makes no statements or warranties on business model, investment attractiveness or code sustainability. The report is provided for the only contract mentioned in the report and does not include any other potential contracts deployed by Owner.