Read the findings of the 2022 Web3 Security Report

In the contract `BeeTradeFactory`, the role `feeToSetter` has authority over the following functions:
- function setFeeTo()
- function setFeeToSetter()

In the contract `BeeTradeBridgeMigrationRouter`, the role `admin` has authority over the following functions:
- function addAdmin()
- function removeAdmin()
- function addMigrator()

Any compromise to these accounts may allow a hacker to take advantage of this authority.

Centralization Related Risks

It is possible that `quote0` may be greater than `amountIn0` in L114 and L353.

Missing Output Validation

According to the logic of function `_arePairsCompatible()`, both of `pairA` and `pairB` need to do the zero address validation.

Error Validation

The function `calculateChargeBack` is missing check for whether the input pairs are compatible. If the pairs are not compatible, the return values are meaningless.

Missing Pairs Compatible Validation

The contract balance of `bridgeMigrator[tokenAddress]` may not be the migrated amount. Some bridge tokens could be accidentally sent to the contract by anyone, making the contract hold some bridge tokens. In this case, this judgment will not be passed, causing the transaction to fail.
```solidity
function _migrateToken(
    address tokenAddress,
    uint amount
) internal {
    require(tokenAddress != address(0), "BeeTradeBridgeMigrationRouter: tokenAddress 0 not supported");
    IBridgeToken(bridgeMigrator[tokenAddress]).swap(tokenAddress, amount);
    require(
        IBridgeToken(bridgeMigrator[tokenAddress]).balanceOf(address(this)) == amount,
        "BeeTradeBridgeMigrationRouter: Didn't yield the correct amount"
    );
}
```

Inaccurate Judgment Condition

SafeMath from OpenZeppelin is not used in the following functions which makes them possible for overflow/underflow and will lead to an inaccurate calculation result.

SafeMath Not Used

The usage of `allPairs` array is as a counter to maintain the number of created pairs.

Unnecessary Array as Counter

The call to `burn()` function will fail if the value of `totalSupply` is 0.

Divide by Zero

Libraries `UQ112x112`, `SafeMath` and `Math` will be inherited by the contract `UniswapV2Pair.sol` every time a new pair is created, which will cost extra gas on creating new pairs

Replace Libraries with Inherited Contract in Contract Template

When users add or remove LP tokens into the router, and the `mint` and `burn` operations are performed. When transferring standard ERC20 deflationary tokens, the input amount may not be equal to the received amount due to the charged transaction fee. As a result, the amount inconsistency will occur and the transaction may fail due to the validation checks.

Incompatibility With Deflationary Tokens

Bee Trade Dex-Audit

AddressStringUtil.sol

Math.sol

SafeMath.sol

PairNamer.sol

IBridgeToken.sol

IERC20.sol

TransferHelper.sol

UQ112x112.sol

interfaces

Roles.sol

UniswapV2OracleLibrary.sol

libraries

IBeeTradePair.sol

SafeERC20Namer.sol

FixedPoint.sol

IBeeTradeFactory.sol

FullMath.sol

BeeTradeFactory.sol

BeeTradeBridgeMigrationRouter.sol

IBeeTradeRouter.sol

IWAVAX.sol

BeeTradeRouter.sol

Babylonian.sol

BeeTradeERC20.sol

BeeTradeLibrary.sol

IBeeTradeCallee.sol

BeeTradePair.sol

IBeeTradeERC20.sol

Bee Trade Dex 

Wolf of Wall Street Jordan Belfort Admits He Lost $300,000 in Crypto Hacking – This is What Happened

Halal Gold Stablecoins Offer Gram-By-Gram Hedge Against Finance Maelstrom

Sushi DAO agrees to implement a new corporate legal structure

PancakeSwap eyes Aptos following Ethereum integration

How Artists Can Raise Money for Social Causes With NFTs

Inside Bonk Inu: How 22 Developers Put the Shiba Inu Fun Into Solana and Away From FTX

Crypto Services Firm GLEEC Greenlighted by Estonian Regulators

Hacker returns $7.8 million stolen from Moola Market

Chainlink ‘Smart Money’ Might Be Pulling LINK Tokens Off Exchanges to Stake Them

Ex-Ark Invest Analyst: "Crypto Will Grow Again," Here's When

LBank Exchange Will List Balto Token (BALTO) on February 3, 2023

Leading Utility Token YES WORLD hits a significant milestone of 2 million token transactions count

The Who's Who of the FTX Inner Circle

Mango hack drama and other major crypto stories of the past week

Mango Smashed As Attacker Holds $100 Million Hostage Over Debt Gripe

An Ethereum team has warped Uniswap onto StarkNet

Tether Dominates Curve's 3pool Liquidity With DAI, USDC Accounting for Just 20%

Solana-Based Raydium Exchange Victim of 7-figure Exploit

Crypto Veterans Praise USDT Highly Amid Market Drama, Why?

Pancake (CAKE) And Zilliqa (ZIL) Investors Creep Toward Budblockz (BLUNT) For Growth

FTX Collapse Will Trigger a Crypto Crackdown - MarketWatch

Bee Trade Dex

Highlights & Alerts

This is just a placeholder

highlight placeholder lorem Ipsum...

highlight lorem

This is a alert demo

Alert demo

Code Audit History

10

0

4

0

6