second liquidity pool creation

[YouStillAlive]

closes #28

[github-actions[bot]]

Methods

Symbol	Meaning
◯	Execution gas for this method does not include intrinsic gas overhead
△	Cost was non-zero but below the precision setting for the currency display (see options)

	Min	Max	Avg	Calls	usd avg
BNBPartyFactory
createParty(string,string)	5,668,441	5,849,823	5,734,592	12	3.34
joinParty(address,uint256)	130,488	5,613,976	4,047,826	7	2.36
leaveParty(address,uint256,uint256)	171,638	185,318	176,198	3	0.10
setNonfungiblePositionManager(address,address)	27,399	68,928	55,085	3	0.03
setSwapRouter(address)	24,097	46,237	38,857	3	0.02
NonfungiblePositionManager
approve(address,uint256)	46,052	46,383	46,273	3	0.03
SwapRouter
exactInput((bytes,address,uint256,uint256,uint256))	109,789	119,347	116,161	3	0.07
multicall(bytes[])	-	-	141,278	2	0.08

Deployments

	Min	Max	Avg	Block %	usd avg
BNBPartyFactory	-	-	2,809,964	2.2 %	1.64
MockNonfungibleTokenPositionDescriptor	-	-	111,537	0.1 %	0.06
NonfungiblePositionManager	-	-	5,171,512	4 %	3.01
SwapRouter	-	-	2,201,090	1.7 %	1.28
UniswapV3Factory	-	-	5,437,109	4.2 %	3.17

Solidity and Network Config

Settings	Value
Solidity: version	0.8.24
Solidity: optimized	true
Solidity: runs	200
Solidity: viaIR	false
Block Limit	130,000,000
L1 Gas Price	1 gwei
Token Price	582.70 usd/bnb
Network	BINANCE
Toolchain	hardhat

[github-actions[bot]]

Slither report

THIS CHECKLIST IS NOT COMPLETE. Use --show-ignored-findings to show all the results. Summary

• incorrect-equality (1 results) (Medium)
• reentrancy-no-eth (1 results) (Medium)
• uninitialized-local (2 results) (Medium)
• unused-return (7 results) (Medium)
• shadowing-local (2 results) (Low)
• reentrancy-benign (3 results) (Low)
• reentrancy-events (5 results) (Low)
• assembly (1 results) (Informational)
• low-level-calls (6 results) (Informational)
• naming-convention (7 results) (Informational)
• unused-import (1 results) (Informational)

  incorrect-equality

  Impact: Medium Confidence: High

• [ ] ID-0 BNBPartyInternal._createFLP(address) uses a dangerous strict equality:
  • IERC20(tokenA).balanceOf(address(this)) == party.initialTokenAmount

https://github.com/bnb-party/BNBParty.Factory/blob/e33808395dda819246984943037f65dda734fe76/contracts/BNBPartyInternal.sol#L9-L34

reentrancy-no-eth

Impact: Medium Confidence: Medium

• [ ] ID-1 Reentrancy in BNBPartyInternal._handleLiquidity(address): External calls:
  • (amount0,amount1) = BNBPositionManager.decreaseLiquidity(INonfungiblePositionManager.DecreaseLiquidityParams({tokenId:lpToTokenId[msg.sender],liquidity:pool.liquidity(),amount0Min:0,amount1Min:0,deadline:block.timestamp}))
  • BNBPositionManager.collect(INonfungiblePositionManager.CollectParams({tokenId:lpToTokenId[msg.sender],recipient:address(this),amount0Max:uint128(amount0),amount1Max:uint128(amount1)}))
  • IERC20(token0).approve(address(positionManager),amount0)
  • IERC20(token1).approve(address(positionManager),amount1)
  • _createLP(positionManager,token0,token1,amount0,amount1,sqrtPriceX96,party.lpFee)
    • liquidityPool = liquidityManager.createAndInitializePoolIfNecessary(token0,token1,fee,sqrtPriceX96)
    • (lpToTokenId[liquidityPool],None,None,None) = liquidityManager.mint(INonfungiblePositionManager.MintParams({token0:token0,token1:token1,fee:fee,tickLower:party.tickLower,tickUpper:party.tickUpper,amount0Desired:amount0,amount1Desired:amount1,amount0Min:0,amount1Min:0,recipient:address(this),deadline:block.timestamp})) State variables written after the call(s):
  • _createLP(positionManager,token0,token1,amount0,amount1,sqrtPriceX96,party.lpFee)
    • (lpToTokenId[liquidityPool],None,None,None) = liquidityManager.mint(INonfungiblePositionManager.MintParams({token0:token0,token1:token1,fee:fee,tickLower:party.tickLower,tickUpper:party.tickUpper,amount0Desired:amount0,amount1Desired:amount1,amount0Min:0,amount1Min:0,recipient:address(this),deadline:block.timestamp})) BNBPartyState.lpToTokenId can be used in cross function reentrancies:
  • BNBPartyState.lpToTokenId

https://github.com/bnb-party/BNBParty.Factory/blob/e33808395dda819246984943037f65dda734fe76/contracts/BNBPartyInternal.sol#L91-L132

uninitialized-local

Impact: Medium Confidence: Medium

• [ ] ID-2 BNBPartyInternal._createFLP(address).amount0 is a local variable never initialized

https://github.com/bnb-party/BNBParty.Factory/blob/e33808395dda819246984943037f65dda734fe76/contracts/BNBPartyInternal.sol#L13

• [ ] ID-3 BNBPartyInternal._createFLP(address).amount1 is a local variable never initialized

https://github.com/bnb-party/BNBParty.Factory/blob/e33808395dda819246984943037f65dda734fe76/contracts/BNBPartyInternal.sol#L14

unused-return

Impact: Medium Confidence: Medium

• [ ] ID-4 BNBPartyInternal._createFLP(address) ignores return value by IERC20(_token).approve(address(BNBPositionManager),party.initialTokenAmount)

https://github.com/bnb-party/BNBParty.Factory/blob/e33808395dda819246984943037f65dda734fe76/contracts/BNBPartyInternal.sol#L9-L34

• [ ] ID-5 BNBPartyInternal._executeSwap(address,address,address,uint256,uint256) ignores return value by swapRouter.exactInput{value: value}(params)

https://github.com/bnb-party/BNBParty.Factory/blob/e33808395dda819246984943037f65dda734fe76/contracts/BNBPartyInternal.sol#L139-L156

• [ ] ID-6 BNBPartyInternal._handleLiquidity(address) ignores return value by IERC20(token0).approve(address(positionManager),amount0)

https://github.com/bnb-party/BNBParty.Factory/blob/e33808395dda819246984943037f65dda734fe76/contracts/BNBPartyInternal.sol#L91-L132

• [ ] ID-7 BNBPartyInternal._handleLiquidity(address) ignores return value by BNBPositionManager.collect(INonfungiblePositionManager.CollectParams({tokenId:lpToTokenId[msg.sender],recipient:address(this),amount0Max:uint128(amount0),amount1Max:uint128(amount1)}))

https://github.com/bnb-party/BNBParty.Factory/blob/e33808395dda819246984943037f65dda734fe76/contracts/BNBPartyInternal.sol#L91-L132

• [ ] ID-8 BNBPartyInternal._handleLiquidity(address) ignores return value by (sqrtPriceX96,None,None,None,None,None,None) = pool.slot0()

https://github.com/bnb-party/BNBParty.Factory/blob/e33808395dda819246984943037f65dda734fe76/contracts/BNBPartyInternal.sol#L91-L132

• [ ] ID-9 BNBPartyInternal._createLP(INonfungiblePositionManager,address,address,uint256,uint256,uint160,uint24) ignores return value by (lpToTokenId[liquidityPool],None,None,None) = liquidityManager.mint(INonfungiblePositionManager.MintParams({token0:token0,token1:token1,fee:fee,tickLower:party.tickLower,tickUpper:party.tickUpper,amount0Desired:amount0,amount1Desired:amount1,amount0Min:0,amount1Min:0,recipient:address(this),deadline:block.timestamp}))

https://github.com/bnb-party/BNBParty.Factory/blob/e33808395dda819246984943037f65dda734fe76/contracts/BNBPartyInternal.sol#L36-L69

• [ ] ID-10 BNBPartyInternal._handleLiquidity(address) ignores return value by IERC20(token1).approve(address(positionManager),amount1)

https://github.com/bnb-party/BNBParty.Factory/blob/e33808395dda819246984943037f65dda734fe76/contracts/BNBPartyInternal.sol#L91-L132

shadowing-local

Impact: Low Confidence: High

• [ ] ID-11 ERC20Token.constructor(string,string,uint256).name shadows:
  • ERC20.name() (function)
  • IERC20Metadata.name() (function)

https://github.com/bnb-party/BNBParty.Factory/blob/e33808395dda819246984943037f65dda734fe76/contracts/token/ERC20Token.sol#L9

• [ ] ID-12 ERC20Token.constructor(string,string,uint256).symbol shadows:
  • ERC20.symbol() (function)
  • IERC20Metadata.symbol() (function)

https://github.com/bnb-party/BNBParty.Factory/blob/e33808395dda819246984943037f65dda734fe76/contracts/token/ERC20Token.sol#L10

reentrancy-benign

Impact: Low Confidence: Medium

• [ ] ID-13 Reentrancy in BNBPartyInternal._createFLP(address): External calls:
  • IERC20(_token).approve(address(BNBPositionManager),party.initialTokenAmount)
  • liquidityPool = _createLP(BNBPositionManager,tokenA,tokenB,amount0,amount1,sqrtPrice,party.partyLpFee)
    • liquidityPool = liquidityManager.createAndInitializePoolIfNecessary(token0,token1,fee,sqrtPriceX96)
    • (lpToTokenId[liquidityPool],None,None,None) = liquidityManager.mint(INonfungiblePositionManager.MintParams({token0:token0,token1:token1,fee:fee,tickLower:party.tickLower,tickUpper:party.tickUpper,amount0Desired:amount0,amount1Desired:amount1,amount0Min:0,amount1Min:0,recipient:address(this),deadline:block.timestamp})) State variables written after the call(s):
  • isParty[liquidityPool] = true
  • liquidityPool = _createLP(BNBPositionManager,tokenA,tokenB,amount0,amount1,sqrtPrice,party.partyLpFee)
    • (lpToTokenId[liquidityPool],None,None,None) = liquidityManager.mint(INonfungiblePositionManager.MintParams({token0:token0,token1:token1,fee:fee,tickLower:party.tickLower,tickUpper:party.tickUpper,amount0Desired:amount0,amount1Desired:amount1,amount0Min:0,amount1Min:0,recipient:address(this),deadline:block.timestamp}))

https://github.com/bnb-party/BNBParty.Factory/blob/e33808395dda819246984943037f65dda734fe76/contracts/BNBPartyInternal.sol#L9-L34

• [ ] ID-14 Reentrancy in BNBPartyInternal._createLP(INonfungiblePositionManager,address,address,uint256,uint256,uint160,uint24): External calls:
  • liquidityPool = liquidityManager.createAndInitializePoolIfNecessary(token0,token1,fee,sqrtPriceX96)
  • (lpToTokenId[liquidityPool],None,None,None) = liquidityManager.mint(INonfungiblePositionManager.MintParams({token0:token0,token1:token1,fee:fee,tickLower:party.tickLower,tickUpper:party.tickUpper,amount0Desired:amount0,amount1Desired:amount1,amount0Min:0,amount1Min:0,recipient:address(this),deadline:block.timestamp})) State variables written after the call(s):
  • (lpToTokenId[liquidityPool],None,None,None) = liquidityManager.mint(INonfungiblePositionManager.MintParams({token0:token0,token1:token1,fee:fee,tickLower:party.tickLower,tickUpper:party.tickUpper,amount0Desired:amount0,amount1Desired:amount1,amount0Min:0,amount1Min:0,recipient:address(this),deadline:block.timestamp}))

https://github.com/bnb-party/BNBParty.Factory/blob/e33808395dda819246984943037f65dda734fe76/contracts/BNBPartyInternal.sol#L36-L69

• [ ] ID-15 Reentrancy in BNBPartyFactory.createParty(string,string): External calls:
  • liquidityPool = _createFLP(address(newToken))
    • liquidityPool = liquidityManager.createAndInitializePoolIfNecessary(token0,token1,fee,sqrtPriceX96)
    • (lpToTokenId[liquidityPool],None,None,None) = liquidityManager.mint(INonfungiblePositionManager.MintParams({token0:token0,token1:token1,fee:fee,tickLower:party.tickLower,tickUpper:party.tickUpper,amount0Desired:amount0,amount1Desired:amount1,amount0Min:0,amount1Min:0,recipient:address(this),deadline:block.timestamp}))
    • IERC20(_token).approve(address(BNBPositionManager),party.initialTokenAmount) State variables written after the call(s):
  • lpToCreator[liquidityPool] = msg.sender

https://github.com/bnb-party/BNBParty.Factory/blob/e33808395dda819246984943037f65dda734fe76/contracts/BNBPartyFactory.sol#L20-L41

reentrancy-events

Impact: Low Confidence: Medium

• [ ] ID-16 Reentrancy in BNBPartyInternal._unwrapAndSendBNB(address,uint256): External calls:
  • WBNB.withdraw(unwrapAmount)
  • _transferBNB(recipient,party.bonusTargetReach)
    • (success,None) = recipient.call{value: amount}() External calls sending eth:
  • _transferBNB(recipient,party.bonusTargetReach)
    • (success,None) = recipient.call{value: amount}() Event emitted after the call(s):
  • TransferOutBNB(recipient,amount)
    • _transferBNB(recipient,party.bonusTargetReach)

https://github.com/bnb-party/BNBParty.Factory/blob/e33808395dda819246984943037f65dda734fe76/contracts/BNBPartyInternal.sol#L71-L80

• [ ] ID-17 Reentrancy in BNBPartyInternal._transferBNB(address,uint256): External calls:
  • (success,None) = recipient.call{value: amount}() Event emitted after the call(s):
  • TransferOutBNB(recipient,amount)

https://github.com/bnb-party/BNBParty.Factory/blob/e33808395dda819246984943037f65dda734fe76/contracts/BNBPartyInternal.sol#L82-L89

• [ ] ID-18 Reentrancy in BNBPartyInternal._handleLiquidity(address): External calls:
  • (amount0,amount1) = BNBPositionManager.decreaseLiquidity(INonfungiblePositionManager.DecreaseLiquidityParams({tokenId:lpToTokenId[msg.sender],liquidity:pool.liquidity(),amount0Min:0,amount1Min:0,deadline:block.timestamp}))
  • BNBPositionManager.collect(INonfungiblePositionManager.CollectParams({tokenId:lpToTokenId[msg.sender],recipient:address(this),amount0Max:uint128(amount0),amount1Max:uint128(amount1)}))
  • IERC20(token0).approve(address(positionManager),amount0)
  • IERC20(token1).approve(address(positionManager),amount1)
  • _createLP(positionManager,token0,token1,amount0,amount1,sqrtPriceX96,party.lpFee)
    • liquidityPool = liquidityManager.createAndInitializePoolIfNecessary(token0,token1,fee,sqrtPriceX96)
    • (lpToTokenId[liquidityPool],None,None,None) = liquidityManager.mint(INonfungiblePositionManager.MintParams({token0:token0,token1:token1,fee:fee,tickLower:party.tickLower,tickUpper:party.tickUpper,amount0Desired:amount0,amount1Desired:amount1,amount0Min:0,amount1Min:0,recipient:address(this),deadline:block.timestamp}))
  • _unwrapAndSendBNB(recipient,unwrapAmount)
    • (success,None) = recipient.call{value: amount}()
    • WBNB.withdraw(unwrapAmount) External calls sending eth:
  • _unwrapAndSendBNB(recipient,unwrapAmount)
    • (success,None) = recipient.call{value: amount}() Event emitted after the call(s):
  • TransferOutBNB(recipient,amount)
    • _unwrapAndSendBNB(recipient,unwrapAmount)

https://github.com/bnb-party/BNBParty.Factory/blob/e33808395dda819246984943037f65dda734fe76/contracts/BNBPartyInternal.sol#L91-L132

• [ ] ID-19 Reentrancy in BNBPartyInternal._unwrapAndSendBNB(address,uint256): External calls:
  • WBNB.withdraw(unwrapAmount)
  • _transferBNB(recipient,party.bonusTargetReach)
    • (success,None) = recipient.call{value: amount}()
  • _transferBNB(creator,party.bonusPartyCreator)
    • (success,None) = recipient.call{value: amount}() External calls sending eth:
  • _transferBNB(recipient,party.bonusTargetReach)
    • (success,None) = recipient.call{value: amount}()
  • _transferBNB(creator,party.bonusPartyCreator)
    • (success,None) = recipient.call{value: amount}() Event emitted after the call(s):
  • TransferOutBNB(recipient,amount)
    • _transferBNB(creator,party.bonusPartyCreator)

https://github.com/bnb-party/BNBParty.Factory/blob/e33808395dda819246984943037f65dda734fe76/contracts/BNBPartyInternal.sol#L71-L80

• [ ] ID-20 Reentrancy in BNBPartyInternal._unwrapAndSendBNB(address,uint256): External calls:
  • WBNB.withdraw(unwrapAmount)
  • _transferBNB(recipient,party.bonusTargetReach + party.bonusPartyCreator)
    • (success,None) = recipient.call{value: amount}() External calls sending eth:
  • _transferBNB(recipient,party.bonusTargetReach + party.bonusPartyCreator)
    • (success,None) = recipient.call{value: amount}() Event emitted after the call(s):
  • TransferOutBNB(recipient,amount)
    • _transferBNB(recipient,party.bonusTargetReach + party.bonusPartyCreator)

https://github.com/bnb-party/BNBParty.Factory/blob/e33808395dda819246984943037f65dda734fe76/contracts/BNBPartyInternal.sol#L71-L80

assembly

Impact: Informational Confidence: High

• [ ] ID-21 Address._revert(bytes) uses assembly
  • INLINE ASM

https://github.com/bnb-party/BNBParty.Factory/blob/e33808395dda819246984943037f65dda734fe76/node_modules/@openzeppelin/contracts/utils/Address.sol#L146-L158

low-level-calls

Impact: Informational Confidence: High

• [ ] ID-22 Low level call in SafeERC20._callOptionalReturnBool(IERC20,bytes):
  • (success,returndata) = address(token).call(data)

https://github.com/bnb-party/BNBParty.Factory/blob/e33808395dda819246984943037f65dda734fe76/node_modules/@openzeppelin/contracts/token/ERC20/utils/SafeERC20.sol#L110-L117

• [ ] ID-23 Low level call in Address.functionStaticCall(address,bytes):
  • (success,returndata) = target.staticcall(data)

https://github.com/bnb-party/BNBParty.Factory/blob/e33808395dda819246984943037f65dda734fe76/node_modules/@openzeppelin/contracts/utils/Address.sol#L95-L98

• [ ] ID-24 Low level call in Address.functionDelegateCall(address,bytes):
  • (success,returndata) = target.delegatecall(data)

https://github.com/bnb-party/BNBParty.Factory/blob/e33808395dda819246984943037f65dda734fe76/node_modules/@openzeppelin/contracts/utils/Address.sol#L104-L107

• [ ] ID-25 Low level call in Address.sendValue(address,uint256):
  • (success,None) = recipient.call{value: amount}()

https://github.com/bnb-party/BNBParty.Factory/blob/e33808395dda819246984943037f65dda734fe76/node_modules/@openzeppelin/contracts/utils/Address.sol#L41-L50

• [ ] ID-26 Low level call in Address.functionCallWithValue(address,bytes,uint256):
  • (success,returndata) = target.call{value: value}(data)

https://github.com/bnb-party/BNBParty.Factory/blob/e33808395dda819246984943037f65dda734fe76/node_modules/@openzeppelin/contracts/utils/Address.sol#L83-L89

• [ ] ID-27 Low level call in BNBPartyInternal._transferBNB(address,uint256):
  • (success,None) = recipient.call{value: amount}()

https://github.com/bnb-party/BNBParty.Factory/blob/e33808395dda819246984943037f65dda734fe76/contracts/BNBPartyInternal.sol#L82-L89

naming-convention

Impact: Informational Confidence: High

• [ ] ID-28 Variable BNBPartyState.WBNB is not in mixedCase

https://github.com/bnb-party/BNBParty.Factory/blob/e33808395dda819246984943037f65dda734fe76/contracts/BNBPartyState.sol#L21

• [ ] ID-29 Parameter BNBPartyState.setNonfungiblePositionManager(INonfungiblePositionManager,INonfungiblePositionManager)._BNBPositionManager is not in mixedCase

https://github.com/bnb-party/BNBParty.Factory/blob/e33808395dda819246984943037f65dda734fe76/contracts/BNBPartyState.sol#L44

• [ ] ID-30 Variable BNBPartyState.BNBPositionManager is not in mixedCase

https://github.com/bnb-party/BNBParty.Factory/blob/e33808395dda819246984943037f65dda734fe76/contracts/BNBPartyState.sol#L12

• [ ] ID-31 Parameter BNBPartyState.setNonfungiblePositionManager(INonfungiblePositionManager,INonfungiblePositionManager)._positionManager is not in mixedCase

https://github.com/bnb-party/BNBParty.Factory/blob/e33808395dda819246984943037f65dda734fe76/contracts/BNBPartyState.sol#L45

• [ ] ID-32 Parameter BNBPartyState.setSwapRouter(ISwapRouter)._swapRouter is not in mixedCase

https://github.com/bnb-party/BNBParty.Factory/blob/e33808395dda819246984943037f65dda734fe76/contracts/BNBPartyState.sol#L54

• [ ] ID-33 Function INonfungiblePositionManager.WETH9() is not in mixedCase

https://github.com/bnb-party/BNBParty.Factory/blob/e33808395dda819246984943037f65dda734fe76/contracts/interfaces/INonfungiblePositionManager.sol#L184

• [ ] ID-34 Function IERC20Permit.DOMAIN_SEPARATOR() is not in mixedCase

https://github.com/bnb-party/BNBParty.Factory/blob/e33808395dda819246984943037f65dda734fe76/node_modules/@openzeppelin/contracts/token/ERC20/extensions/IERC20Permit.sol#L89

unused-import

Impact: Informational Confidence: High

• [ ] ID-35 The following unused import(s) in contracts/BNBPartyInternal.sol should be removed: -import "./token/ERC20Token.sol"; (contracts/BNBPartyInternal.sol#4)