Skip to content
PancakeSwap logo

PancakeSwap Review

The most linked audit reports and a GPL-licensed core

of 10

PancakeSwap scores 8.2 out of 10 among decentralized exchanges. It links 32 audit reports, licenses its Infinity core under GPL-2.0 and publishes v2 and v3 fee tiers with exact splits. Infinity pool fees are published only as caps, and upgradeability is not stated. The score comes from desk research of primary sources checked on 1 November 2026.

Overall score

8.2 / 10 = (8 + 9 + 6 + 8 + 10) ÷ 5; previously 7.6

v3 fees (EVM)

0.01%, 0.05%, 0.25%, 1%; LPs get 66% to 68% of the fee

Infinity fees

Caps only: CLAMM up to 100%, LBAMM up to 10%; protocol 33% of LP fee

Licence

GPL-2.0 on infinity-core; no licence detected on v3 contracts

Networks

11 named in the docs, including BNB Chain, Ethereum, Solana and Base

Audits

32 linked reports (25 EVM, 7 Aptos), 2021 to 2026

Scores

Fee transparency
8.0
Licence & code openness
9.0
Immutability & governance
6.0
Chain coverage
8.0
Audit disclosure
10.0

Each criterion carries equal weight. The overall score is the average of these 5 scores — (8.0 + 9.0 + 6.0 + 8.0 + 10.0) ÷ 5 = 8.2.

Pros

  • 32 audit reports linked; ten firms named, with Infinity reports filed under Hexens, OtterSec and Zellic
  • Infinity core under GPL-2.0, a recognized open-source licence with no change date
  • v3 EVM tiers of 0.01%, 0.05%, 0.25% and 1% published with LP, burn and treasury shares
  • Eleven networks named in the documentation, from BNB Chain to Monad and opBNB

Cons

  • Infinity pools publish only caps: up to 100% for CLAMM and 10% for LBAMM
  • The v3 contracts repository carries no licence file GitHub can detect
  • Docs cite multisig and timelocks but do not state which contracts can be upgraded
  • Only the core team can submit binding governance proposals, and there is no quorum

PancakeSwap is rated in our decentralized exchange ranking, which scores nine protocols on five equally weighted criteria. This entry covers the protocol as its own documentation, audits page and GitHub repositories described it on 1 November 2026. The basis is desk research; we did not trade or provide liquidity.

How PancakeSwap scores in decentralized exchanges

CriterionFinding (checked 1 Nov 2026)Mark
Fee transparencyv2 fixed at 0.25%. v3 tiers of 0.01%, 0.05%, 0.25% and 1% on EVM chains, each with its split. 18 Solana tiers. Infinity pools publish only caps.8
Licence & code opennessInfinity core under GPL-2.0. The v3 contracts repository carries no licence.9
Immutability & governanceDocs say all contracts sit behind multisig and timelocks. Upgradeability itself is not stated.6
Chain coverageEleven networks named in the documentation.8
Audit disclosure32 linked reports. Ten firms named on the page; Infinity reports by Hexens, OtterSec and Zellic in the linked folders.10

Every criterion carries the same weight, so the overall score is the plain average: (8 + 9 + 6 + 8 + 10) ÷ 5 = 41 ÷ 5 = 8.2 out of 10.

This is a re-score. The previous entry, checked on 24 July 2026, stood at 7.6. Fee transparency rose from 6 to 8 after we found the v2 and v3 tiers and their splits on PancakeSwap's pools page. The earlier check had read only the Infinity caps. Chain coverage rose from 7 to 8 because the documentation now names eleven networks. The other three marks are unchanged.

Strongest criteria: audits and licence

Audit disclosure (10)

PancakeSwap's audits page lists 25 EVM and 7 Aptos reports, each linked. They are dated by month or year and cover products from the 2021 factory and router to the CAKE token in 2026. Ten firms are named on the page: Cyfrin, BlockSec, HashDit, PeckShield, SlowMist, Burrasec, Pashov, OtterSec, Zellic and Halborn. The two newest core entries, Infinity Core and Infinity Periphery (2024), carry no firm name on the page itself. They link to GitHub folders whose reports are filed under Hexens, OtterSec and Zellic, so the auditor can still be identified and checked. No other protocol in this ranking links as many reports. An audit is still not insurance, and it covers only the code version reviewed.

Licence & code openness (9)

The Infinity core repository carries the GNU General Public License v2.0, a recognized open-source licence with no change date and no revocation clause. GitHub detects no licence on the v3 contracts repository, so v3 code is visible but comes with no written grant of rights. That gap keeps the mark at 9 rather than 10.

Weaker criteria: fees and upgrade control

Fee transparency (8): mostly published, partly bounded

PancakeSwap's pools page gives a fixed 0.25% fee for v2, of which 0.17% goes to liquidity providers (LPs). The other 0.08% is not attributed there. For v3 on EVM chains, it lists four tiers with an exact split. The 0.01% tier pays 67% to LPs, 15% to the CAKE burn and 18% to the treasury. The 0.05% tier pays 66%, 15% and 19%. The 0.25% and 1% tiers pay 68%, 23% and 9%. On a $1,000 swap through a 0.25% v3 pool, the pool fee is $2.50: $1.70 to LPs, about $0.58 to the burn and about $0.23 to the treasury. The Solana v3 pools use 18 tiers from 0.01% to 4% with an 84/8/8 split.

Infinity is the gap. Static-fee Infinity pools set their fee at creation and cannot change it. The documentation still publishes only ceilings: up to 100% for CLAMM pools and 10% for LBAMM pools, with the protocol taking 33% of the LP fee, capped at 0.4%. A trader routed through an Infinity pool has to read the fee on the swap screen. The rubric scores discrete tiers above upper bounds, and PancakeSwap publishes both, so the mark sits between the two.

Immutability & governance (6): stated in part

The documentation home page says the team uses multisig for all contracts and that the contracts are time-locked. It does not say which contracts can be upgraded, paused or replaced. It also does not name multisig thresholds or timelock durations. Governance gives CAKE holders a vote, but only the core team can submit binding proposals and there is no quorum. This is partial disclosure, not a measured adverse finding, which is why the mark sits mid-table.

Chain coverage (8)

The documentation names eleven networks: BNB Chain, Ethereum, Solana, Base, Arbitrum, Aptos, ZKsync, Linea, Monad, Robinhood and opBNB. That is wider than the single-chain protocols in this ranking, but below Uniswap's 21 and SushiSwap's 22 active networks.

What the score does not cover

The rating does not measure execution quality, liquidity depth, interface design, perpetuals (run on Aster's infrastructure), tokenized stocks, the lottery or prediction games, or CAKE as an investment. It does not cover the operator either. PancakeSwap's terms name no legal entity and send disputes to Hong Kong arbitration, which this rubric does not score. Tokens and pools can be created by anyone, so check contract addresses before trading. See our guide on avoiding wallet scams and phishing.

PancakeSwap vs Uniswap and SushiSwap

The two other multi-chain EVM exchanges in the ranking are the closest comparison. Their marks below are as recorded on 1 November 2026.

CriterionPancakeSwapUniswapSushiSwap
Fee transparency896
Licence & code openness956
Immutability & governance6105
Chain coverage899
Audit disclosure1093
Overall8.28.45.8

PancakeSwap beats Uniswap on licence and audits. Uniswap's narrow lead comes from stating plainly that its core contracts cannot be upgraded or paused, and from wider documented deployment. The gap to SushiSwap is mostly audit disclosure. Raydium also scores 8.2. Ties are listed alphabetically, so PancakeSwap appears first.

Who this rating suits

The score suits someone who wants named, linked audits and a genuinely open-source core, and who trades on BNB Chain or one of the other listed networks. It is weaker for a user who needs to know a pool's exact fee before routing through Infinity, or who wants a clear statement of what the team can change after deployment. If pool fees and slippage are new to you, read how to compare DEXs first. A high score here reflects disclosure, not a guarantee that a given trade or pool is safe.

How it compares

Sources

Scored from published primary sources rather than hands-on use. Every figure above comes from one of the pages below, on the date shown. Manufacturers change prices and specifications without notice — if something here no longer matches the source, tell us and we will correct it.

  1. 1.PancakeSwap docs — Liquidity pools and fee tiers — checked
  2. 2.PancakeSwap docs — Swap FAQ (v3 fee split) — checked
  3. 3.PancakeSwap docs — Infinity CLAMM and LBAMM pool fees — checked
  4. 4.PancakeSwap docs — Home (networks, multisig, timelocks) — checked
  5. 5.PancakeSwap docs — Audits — checked
  6. 6.GitHub — pancakeswap/infinity-core audit reports — checked
  7. 7.GitHub — pancakeswap/infinity-core LICENSE (GPL-2.0) — checked
  8. 8.GitHub — pancakeswap/pancake-v3-contracts — checked
  9. 9.PancakeSwap docs — Voting — checked
  10. 10.PancakeSwap — Terms of service — checked

Frequently asked questions

Why does PancakeSwap score 8.2?

Its marks are 8 for fees, 9 for licence, 6 for immutability and governance, 8 for chain coverage and 10 for audits. The plain average is 8.2. Audit disclosure and an open-source core lead; partial fee and upgrade disclosure hold it back.

What holds PancakeSwap's score back?

Two disclosure gaps. Infinity pools publish only fee caps, not the rate a pool charges. The documentation says contracts sit behind multisig and timelocks without stating which can be upgraded or paused.

Why did PancakeSwap's score rise from 7.6?

The 1 November 2026 check found v2 and v3 fee tiers with their splits on the pools page, which lifted fee transparency from 6 to 8. The documentation now names eleven networks, which lifted chain coverage from 7 to 8.

Who is this rating most useful for?

Readers who want to check audits and licence terms before using a DEX, especially on BNB Chain. It is less useful to someone who needs a pool's exact Infinity fee in advance, since that is shown only on the swap screen.

How does PancakeSwap compare with Uniswap and SushiSwap?

On marks recorded on 1 November 2026, PancakeSwap's 8.2 sits just below Uniswap's 8.4 and above SushiSwap's 5.8. It leads Uniswap on licence and audits but trails it on stated immutability and network count.

Nothing here is financial advice. Editorial policy · How we score · How we're funded.