Multicall

[github-actions[bot]]

Methods

Symbol	Meaning
◯	Execution gas for this method does not include intrinsic gas overhead
△	Cost was non-zero but below the precision setting for the currency display (see options)

	Min	Max	Avg	Calls	usd avg
BNBPartyFactory
createParty(string,string)	5,643,519	5,677,719	5,660,619	2	3.22
setNonfungiblePositionManager(address,address)	-	-	68,978	1	0.04
NonfungiblePositionManager
approve(address,uint256)	28,952	46,371	40,458	3	0.02
SwapRouter
exactInput((bytes,address,uint256,uint256,uint256))	112,087	243,171	199,476	3	0.11
multicall(bytes[])	-	-	155,876	2	0.09

Deployments

	Min	Max	Avg	Block %	usd avg
BNBPartyFactory	-	-	2,012,965	1.5 %	1.15
MockNonfungibleTokenPositionDescriptor	-	-	111,537	0.1 %	0.06
NonfungiblePositionManager	-	-	5,171,524	4 %	2.94
SwapRouter	-	-	2,201,090	1.7 %	1.25
UniswapV3Factory	-	-	5,437,109	4.2 %	3.10

Solidity and Network Config

Settings	Value
Solidity: version	0.8.24
Solidity: optimized	true
Solidity: runs	200
Solidity: viaIR	false
Block Limit	130,000,000
L1 Gas Price	1 gwei
Token Price	569.42 usd/bnb
Network	BINANCE
Toolchain	hardhat

[github-actions[bot]]

Slither report

THIS CHECKLIST IS NOT COMPLETE. Use --show-ignored-findings to show all the results. Summary

• incorrect-equality (1 results) (Medium)
• reentrancy-no-eth (1 results) (Medium)
• uninitialized-local (2 results) (Medium)
• unused-return (4 results) (Medium)
• shadowing-local (2 results) (Low)
• reentrancy-benign (2 results) (Low)
• low-level-calls (1 results) (Informational)
• naming-convention (5 results) (Informational)
• unused-import (1 results) (Informational)

  incorrect-equality

  Impact: Medium Confidence: High

• [ ] ID-0 BNBPartyInternal._createFLP(address) uses a dangerous strict equality:
  • IERC20(tokenA).balanceOf(address(this)) == party.initialTokenAmount

https://github.com/The-Poolz/BNBParty.Factory/blob/3102f601f1c7ce34947a05b8f8adc54132b8c9a7/contracts/BNBPartyInternal.sol#L8-L36

reentrancy-no-eth

Impact: Medium Confidence: Medium

• [ ] ID-1 Reentrancy in BNBPartyInternal._handleLiquidity(): External calls:
  • (amount0,amount1) = BNBPositionManager.decreaseLiquidity(INonfungiblePositionManager.DecreaseLiquidityParams({tokenId:lpToTokenId[msg.sender],liquidity:pool.liquidity(),amount0Min:0,amount1Min:0,deadline:block.timestamp}))
  • IERC20(token0).approve(address(positionManager),amount0)
  • IERC20(token1).approve(address(positionManager),amount1)
  • _createLP(positionManager,token0,token1,amount0,amount1,party.lpFee)
    • liquidityPool = liquidityManager.createAndInitializePoolIfNecessary(token0,token1,fee,party.sqrtPriceX96)
    • (lpToTokenId[liquidityPool],None,None,None) = liquidityManager.mint(INonfungiblePositionManager.MintParams({token0:token0,token1:token1,fee:fee,tickLower:party.tickLower,tickUpper:party.tickUpper,amount0Desired:amount0,amount1Desired:amount1,amount0Min:0,amount1Min:0,recipient:address(this),deadline:block.timestamp})) State variables written after the call(s):
  • _createLP(positionManager,token0,token1,amount0,amount1,party.lpFee)
    • (lpToTokenId[liquidityPool],None,None,None) = liquidityManager.mint(INonfungiblePositionManager.MintParams({token0:token0,token1:token1,fee:fee,tickLower:party.tickLower,tickUpper:party.tickUpper,amount0Desired:amount0,amount1Desired:amount1,amount0Min:0,amount1Min:0,recipient:address(this),deadline:block.timestamp})) BNBPartyState.lpToTokenId can be used in cross function reentrancies:
  • BNBPartyState.lpToTokenId

https://github.com/The-Poolz/BNBParty.Factory/blob/3102f601f1c7ce34947a05b8f8adc54132b8c9a7/contracts/BNBPartyInternal.sol#L78-L98

uninitialized-local

Impact: Medium Confidence: Medium

• [ ] ID-2 BNBPartyInternal._createFLP(address).amount0 is a local variable never initialized

https://github.com/The-Poolz/BNBParty.Factory/blob/3102f601f1c7ce34947a05b8f8adc54132b8c9a7/contracts/BNBPartyInternal.sol#L15

• [ ] ID-3 BNBPartyInternal._createFLP(address).amount1 is a local variable never initialized

https://github.com/The-Poolz/BNBParty.Factory/blob/3102f601f1c7ce34947a05b8f8adc54132b8c9a7/contracts/BNBPartyInternal.sol#L16

unused-return

Impact: Medium Confidence: Medium

• [ ] ID-4 BNBPartyInternal._createFLP(address) ignores return value by IERC20(_token).approve(address(BNBPositionManager),party.initialTokenAmount)

https://github.com/The-Poolz/BNBParty.Factory/blob/3102f601f1c7ce34947a05b8f8adc54132b8c9a7/contracts/BNBPartyInternal.sol#L8-L36

• [ ] ID-5 BNBPartyInternal._createLP(INonfungiblePositionManager,address,address,uint256,uint256,uint24) ignores return value by (lpToTokenId[liquidityPool],None,None,None) = liquidityManager.mint(INonfungiblePositionManager.MintParams({token0:token0,token1:token1,fee:fee,tickLower:party.tickLower,tickUpper:party.tickUpper,amount0Desired:amount0,amount1Desired:amount1,amount0Min:0,amount1Min:0,recipient:address(this),deadline:block.timestamp}))

https://github.com/The-Poolz/BNBParty.Factory/blob/3102f601f1c7ce34947a05b8f8adc54132b8c9a7/contracts/BNBPartyInternal.sol#L38-L70

• [ ] ID-6 BNBPartyInternal._handleLiquidity() ignores return value by IERC20(token1).approve(address(positionManager),amount1)

https://github.com/The-Poolz/BNBParty.Factory/blob/3102f601f1c7ce34947a05b8f8adc54132b8c9a7/contracts/BNBPartyInternal.sol#L78-L98

• [ ] ID-7 BNBPartyInternal._handleLiquidity() ignores return value by IERC20(token0).approve(address(positionManager),amount0)

https://github.com/The-Poolz/BNBParty.Factory/blob/3102f601f1c7ce34947a05b8f8adc54132b8c9a7/contracts/BNBPartyInternal.sol#L78-L98

shadowing-local

Impact: Low Confidence: High

• [ ] ID-8 ERC20Token.constructor(string,string,uint256).name shadows:
  • ERC20.name() (function)
  • IERC20Metadata.name() (function)

https://github.com/The-Poolz/BNBParty.Factory/blob/3102f601f1c7ce34947a05b8f8adc54132b8c9a7/contracts/token/ERC20Token.sol#L9

• [ ] ID-9 ERC20Token.constructor(string,string,uint256).symbol shadows:
  • ERC20.symbol() (function)
  • IERC20Metadata.symbol() (function)

https://github.com/The-Poolz/BNBParty.Factory/blob/3102f601f1c7ce34947a05b8f8adc54132b8c9a7/contracts/token/ERC20Token.sol#L10

reentrancy-benign

Impact: Low Confidence: Medium

• [ ] ID-10 Reentrancy in BNBPartyInternal._createLP(INonfungiblePositionManager,address,address,uint256,uint256,uint24): External calls:
  • liquidityPool = liquidityManager.createAndInitializePoolIfNecessary(token0,token1,fee,party.sqrtPriceX96)
  • (lpToTokenId[liquidityPool],None,None,None) = liquidityManager.mint(INonfungiblePositionManager.MintParams({token0:token0,token1:token1,fee:fee,tickLower:party.tickLower,tickUpper:party.tickUpper,amount0Desired:amount0,amount1Desired:amount1,amount0Min:0,amount1Min:0,recipient:address(this),deadline:block.timestamp})) State variables written after the call(s):
  • (lpToTokenId[liquidityPool],None,None,None) = liquidityManager.mint(INonfungiblePositionManager.MintParams({token0:token0,token1:token1,fee:fee,tickLower:party.tickLower,tickUpper:party.tickUpper,amount0Desired:amount0,amount1Desired:amount1,amount0Min:0,amount1Min:0,recipient:address(this),deadline:block.timestamp}))

https://github.com/The-Poolz/BNBParty.Factory/blob/3102f601f1c7ce34947a05b8f8adc54132b8c9a7/contracts/BNBPartyInternal.sol#L38-L70

• [ ] ID-11 Reentrancy in BNBPartyInternal._createFLP(address): External calls:
  • IERC20(_token).approve(address(BNBPositionManager),party.initialTokenAmount)
  • liquidityPool = _createLP(BNBPositionManager,tokenA,tokenB,amount0,amount1,party.partyLpFee)
    • liquidityPool = liquidityManager.createAndInitializePoolIfNecessary(token0,token1,fee,party.sqrtPriceX96)
    • (lpToTokenId[liquidityPool],None,None,None) = liquidityManager.mint(INonfungiblePositionManager.MintParams({token0:token0,token1:token1,fee:fee,tickLower:party.tickLower,tickUpper:party.tickUpper,amount0Desired:amount0,amount1Desired:amount1,amount0Min:0,amount1Min:0,recipient:address(this),deadline:block.timestamp})) State variables written after the call(s):
  • isParty[liquidityPool] = true
  • liquidityPool = _createLP(BNBPositionManager,tokenA,tokenB,amount0,amount1,party.partyLpFee)
    • (lpToTokenId[liquidityPool],None,None,None) = liquidityManager.mint(INonfungiblePositionManager.MintParams({token0:token0,token1:token1,fee:fee,tickLower:party.tickLower,tickUpper:party.tickUpper,amount0Desired:amount0,amount1Desired:amount1,amount0Min:0,amount1Min:0,recipient:address(this),deadline:block.timestamp}))

https://github.com/The-Poolz/BNBParty.Factory/blob/3102f601f1c7ce34947a05b8f8adc54132b8c9a7/contracts/BNBPartyInternal.sol#L8-L36

low-level-calls

Impact: Informational Confidence: High

• [ ] ID-12 Low level call in BNBPartyInternal._unwrapAndSendBNB(address):
  • (success,None) = recipient.call{value: party.bonusTargetReach}()

https://github.com/The-Poolz/BNBParty.Factory/blob/3102f601f1c7ce34947a05b8f8adc54132b8c9a7/contracts/BNBPartyInternal.sol#L72-L76

naming-convention

Impact: Informational Confidence: High

• [ ] ID-13 Variable BNBPartyState.WBNB is not in mixedCase

https://github.com/The-Poolz/BNBParty.Factory/blob/3102f601f1c7ce34947a05b8f8adc54132b8c9a7/contracts/BNBPartyState.sol#L17

• [ ] ID-14 Parameter BNBPartyState.setNonfungiblePositionManager(INonfungiblePositionManager,INonfungiblePositionManager)._BNBPositionManager is not in mixedCase

https://github.com/The-Poolz/BNBParty.Factory/blob/3102f601f1c7ce34947a05b8f8adc54132b8c9a7/contracts/BNBPartyState.sol#L32

• [ ] ID-15 Variable BNBPartyState.BNBPositionManager is not in mixedCase

https://github.com/The-Poolz/BNBParty.Factory/blob/3102f601f1c7ce34947a05b8f8adc54132b8c9a7/contracts/BNBPartyState.sol#L10

• [ ] ID-16 Parameter BNBPartyState.setNonfungiblePositionManager(INonfungiblePositionManager,INonfungiblePositionManager)._positionManager is not in mixedCase

https://github.com/The-Poolz/BNBParty.Factory/blob/3102f601f1c7ce34947a05b8f8adc54132b8c9a7/contracts/BNBPartyState.sol#L33

• [ ] ID-17 Function INonfungiblePositionManager.WETH9() is not in mixedCase

https://github.com/The-Poolz/BNBParty.Factory/blob/3102f601f1c7ce34947a05b8f8adc54132b8c9a7/contracts/interfaces/INonfungiblePositionManager.sol#L184

unused-import

Impact: Informational Confidence: High

• [ ] ID-18 The following unused import(s) in contracts/BNBPartyInternal.sol should be removed: -import "./token/ERC20Token.sol"; (contracts/BNBPartyInternal.sol#4)