MaticFund

BADGEImage

Front-End Design:

By checking and manually testing of all buttons functionality and other features of MaticFund's website, The CodeToDeploy Team for Front End Web Design found no malicious and blank contents from it.

Smart Contract:

As per issues for the auditing review, developers can deposit and then withdraw specific amount of funds inside the smart contract, also, investors/user can determine by user ID. By final checking and manually code reading of the MaticFund's Smart Contract, the CodeToDeploy Team found 2 malicious content that can lead to backdoors and exit scam script.

Audit Overview:

Severity Overview
Critical No critical issues found
High No medium issues found
Medium No medium issues found
Low - BOT Trading not found in Smart Contract - Developers can track investors by giving them specific IDs - Minimum investment, might cause critical severity issue.

Miner Description:

  • MaticFund is a Staking Yield Farming DApp base on Polygon Chain that promise 1.61% Daily ROI without any minimum and maximum deposit in a duration of 8 weeks (56 days) inside the pool.
  • "MaticFund's advanced bot technology is looking for profitable business opportunities in the crypto world. Once the bot finds a profitable opportunity make a trade very quickly to achieve the greatest profits."

    • Developers Fee:

  • Deposit Fee (6.4%).

    • Deposit (Matic):

  • No minimum and maximum investment.
  • Investment Duration 8 weeks (56 Days) for 1.61% Daily ROI.

    • Website's Bot Trading:

  • As per website they are using AI bot trading to profit from the capital investment. - No Bot Trading Found inside the Smart Contract.

    • Withdrawal:

  • Daily Rewards can withdraw every end of the day. (Reinvesting is suggested by the Devs).
  • Capital investment can be withdrawn only after the 8 weeks (56 days) investment duration.

    • Owner Ability Script:

  • Add funds to the Smart Contract(depositFunds).
  • Withdraw funds from the Smart Contract(withdrawFunds).
  • Renounce the Contract(renounce Ownership).
  • Inter-Change Dev Address(resetContract).
  • Transfer Contract Owner(transferOwnership).

    • User Ability Script:

  • Deposit (Matic).
  • Claim Rewards by Deposit ID(claimReward).
  • Claim all reward of the Investor/user(claimAllRewards).
  • Withdraw Capital Investment(withdrawCapital).
  • Remove self from being investor/user(removeInvestor).

    • CodeToDeploy Disclaimer:

    CodeToDeploy Team was only able to review the front-end/web design of the project and audit the Smart Contract itself. Team for the front-end/web design review was only able to check it based on its functionality and web aesthetics. On the side of Smart Contract, audits is analyzed, reviewed, and checked based on quality assurance and accordance to the best industrial standard practices of smart contract creation.

    Audits does not guarantee any profit and loss but as an Auditors we will do our best to deliver secured projects. We the CodeToDeploy Team suggests and encourages all investors and users to "DYOR" Do-Your-Own-Research to avoid any scams and capital loss. Any loss and at worst bancrupcy is not our Team's fault.