Pink Panther Finance: I had bit time so did basic reverse engineering on their presales page and "0x75225489A145480274450a7388eeF485c8A842b6" is encoded. This contract has not been verified but "invest" method $CRO transaction matches what showed on frontend. Very suspecious.
Pink Panther Finance is likely rug. They were planning to start gen pool few hrs ago but (telegram) they mentioned they will start it after presales. They said pool for gen contract is already created, but I don't see the pool. I think their plan is just rob funds at presales.
Updated verification result for XFactory DarkX gen pool.
In short, solidity code is purposely messed compared to original Tomb, but I couldn't find clear indication of rug.
I know RugDoc flagged it as red, but I want to be fair to both dev and investors.
@Zapped32142010 Ty for info. Will have a look. (I did a sanity check for gen pool contract earlier, and order of each method was very different compared to original TF. Doesn't mean its shady but need bit of a time to verify so planning to do it tomorrow...)
Harbor Finance
-Dev purposely changed governanceRecoverUnsupported(). Dev can drain everyones funds after 30 days (default is 90 days).
-Dev modified order of operation within withdraw() compared from original Tomb Finance code
DYOR
Crouching Tiger Finance
-Dev mentioned they'll launch within 2 days
-But they haven't disclosed contract addresses
-Only cloned original TF frontend, still referencing TF contract
-Still using default domain provided by Vercel
Strange
I think I know how Spookie Finance rugged. Dev modified frontend withdraw button point to malicious contract, and I think the contract is "0xe316Baf1B01071fc44a0973147FFf11b23c7XXXX" (hiding last 4 digits). This contract has method that drains funds from approved address.
Karma Finance is suspected as rug.
Doc says their gen pool address is "0x25D2C72398D540F98FB3E788f845a70eD7CBF6B0", but frontend Frontend points to "0x218c2F2Ae74296418b01c710b5F8f7d1828B4efC" and the contract is not verified so can't read the actual code.