Baby Tart (BABY TART) security report
Radar AI scanned Baby Tart’s verified contract on BNB Smart Chain. Findings include discretionary tax exemptions and tax swaps with amountOutMin set to zero. No mint, blacklist, pause, or proxy-upgrade mechanism was identified in the reviewed source.
The verified source does not show minting, blacklist controls, transfer pausing, or upgradeability. However, the owner can selectively disable the 4% buy or sell tax for chosen addresses, and automated tax swaps accept any output because both router calls use amountOutMin = 0. These are medium-severity control and execution risks.
Trust score: 62/100. Source verified: Yes. Chain: bsc. Contract: 0x19243e2ca0ea10b1c7d18cb3e1cd548362dcc53e.
This report was last modified on 2026-10-29 and contains 2 material findings.
medium finding: Owner can selectively bypass trading taxes
The owner can mark any address as tax-exempt. Transfers involving an exempt sender or recipient skip the buy and sell tax logic, allowing the owner to selectively bypass the contract’s fixed 4% tax behavior or exempt a pair-related address.
Evidence: setTaxExempt(address account, bool exempt) is restricted only by onlyOwner and directly writes isTaxExempt[account]. In _transfer, tax calculation is skipped whenever isTaxExempt[from] or isTaxExempt[to] is true. BUY_TAX and SELL_TAX are both defined as 4.
Recommendation: Use a timelocked or multisignature governance process for tax-exemption changes, emit a dedicated event for each change, and document permitted exempt addresses. Consider removing discretionary exemption authority after deployment if it is not required.
medium finding: Tax swaps have no minimum-output protection
Tax processing performs token-to-BNB and BNB-to-reward-token swaps with zero minimum output. A transaction can therefore execute at materially unfavorable execution terms when the relevant pool price moves or is manipulated, reducing marketing proceeds or holder rewards.
Evidence: _processTax calls swapExactTokensForETHSupportingFeeOnTransferTokens with amountOutMin set to 0. _buyRewards calls swapExactETHForTokensSupportingFeeOnTransferTokens with amountOutMin set to 0. Both calls use the live router path without an on-chain minimum-output check.
Recommendation: Use bounded slippage parameters derived from a defensible pricing mechanism, enforce minimum proceeds for both swaps, and consider separating tax processing from user sell execution so failed or adverse swaps do not directly affect sell transactions.