AI [Ai Smart Chain] Token

AI.addLiquidity(uint256,uint256) (#725-738) sends eth to arbitrary user
Dangerous calls:
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,teamWalletAddress,block.timestamp) (#730-737)
Ensure that an arbitrary user cannot withdraw unauthorized funds.

Additional information: link

Reentrancy in AI._transfer(address,address,uint256) (#620-672):
External calls:
- swapAndLiquify(contractTokenBalance) (#647)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,teamWalletAddress,block.timestamp) (#730-737)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#714-720)
External calls sending eth:
- swapAndLiquify(contractTokenBalance) (#647)
- recipient.transfer(amount) (#584)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,teamWalletAddress,block.timestamp) (#730-737)
State variables written after the call(s):
- _balances[sender] = _balances[sender].sub(amount,Insufficient Balance) (#650)
- finalAmount = takeFee(sender,recipient,amount) (#660)
- _balances[address(this)] = _balances[address(this)].add(feeAmount) (#752)
- _balances[recipient] = _balances[recipient].add(finalAmount) (#666)
Apply the check-effects-interactions pattern.

Additional information: link

AI.claimToken(address,uint256) (#575-577) ignores return value by IERC20(token).transfer(teamWalletAddress,amount) (#576)
Use SafeERC20, or ensure that the transfer/transferFrom return value is checked.

Additional information: link

Unable to find manual contract audit (e.g. Certik, PeckShield, Solidity...)

Combination 1: Reentrancy vulnerabilities + Functions that send Ether to arbitraty destination. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.

Combination 2: Unchecked transfer + Functions that send Ether to arbitraty destination. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.

Combination 3: Reentrancy vulnerabilities + Unchecked transfer vulnerability. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.

Contract ownership is not renounced (belongs to a wallet)

Reentrancy in AI.transferFrom(address,address,uint256) (#614-618):
External calls:
- _transfer(sender,recipient,amount) (#615)
- recipient.transfer(amount) (#584)
External calls sending eth:
- _transfer(sender,recipient,amount) (#615)
- recipient.transfer(amount) (#584)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,teamWalletAddress,block.timestamp) (#730-737)
State variables written after the call(s):
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#616)
- _allowances[owner][spender] = amount (#551)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#552)
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#616)
Reentrancy in AI._transfer(address,address,uint256) (#620-672):
External calls:
- swapAndLiquify(contractTokenBalance) (#647)
- recipient.transfer(amount) (#584)
External calls sending eth:
- swapAndLiquify(contractTokenBalance) (#647)
- recipient.transfer(amount) (#584)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,teamWalletAddress,block.timestamp) (#730-737)
State variables written after the call(s):
- _balances[sender] = _balances[sender].sub(amount,Insufficient Balance) (#650)
- finalAmount = takeFee(sender,recipient,amount) (#660)
- _balances[address(this)] = _balances[address(this)].add(feeAmount) (#752)
- _balances[recipient] = _balances[recipient].add(finalAmount) (#666)
Event emitted after the call(s):
- Transfer(sender,address(this),feeAmount) (#753)
- finalAmount = takeFee(sender,recipient,amount) (#660)
- Transfer(sender,recipient,finalAmount) (#668)
Reentrancy in AI.swapAndLiquify(uint256) (#681-703):
External calls:
- transferToAddressETH(marketingWalletAddress,amountBNBMarketing) (#696)
- recipient.transfer(amount) (#584)
- transferToAddressETH(teamWalletAddress,amountBNBTeam) (#699)
- recipient.transfer(amount) (#584)
External calls sending eth:
- transferToAddressETH(marketingWalletAddress,amountBNBMarketing) (#696)
- recipient.transfer(amount) (#584)
- transferToAddressETH(teamWalletAddress,amountBNBTeam) (#699)
- recipient.transfer(amount) (#584)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#702)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,teamWalletAddress,block.timestamp) (#730-737)
State variables written after the call(s):
- addLiquidity(tokensForLP,amountBNBLiquidity) (#702)
- _allowances[owner][spender] = amount (#551)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#552)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#702)
Apply the check-effects-interactions pattern.

Additional information: link

Variable IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountADesired (#267) is too similar to IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountBDesired (#268)
Prevent variables from having similar names.

Additional information: link

AI._transfer(address,address,uint256) (#620-672) performs a multiplication on the result of a division:
-_sellReserveFeeAmount = amount.div(100).mul(_sellReserveFee) (#632)
Consider ordering multiplication before division.

Additional information: link

AI.addLiquidity(uint256,uint256) (#725-738) ignores return value by uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,teamWalletAddress,block.timestamp) (#730-737)
Ensure that all the return values of the function calls are used.

Additional information: link

AI.allowance(address,address).owner (#524) shadows:
- Ownable.owner() (#152-154) (function)
AI._approve(address,address,uint256).owner (#547) shadows:
- Ownable.owner() (#152-154) (function)
Rename the local variables that shadow another component.

Additional information: link

Reentrancy in AI.changeRouterVersion(address) (#587-604):
External calls:
- newPairAddress = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#595-596)
State variables written after the call(s):
- isMarketPair[address(uniswapPair)] = true (#603)
- isWalletLimitExempt[address(uniswapPair)] = true (#602)
- uniswapPair = newPairAddress (#599)
- uniswapV2Router = _uniswapV2Router (#600)
Reentrancy in AI.swapAndLiquify(uint256) (#681-703):
External calls:
- swapTokensForEth(tokensForSwap) (#686)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#714-720)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#702)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,teamWalletAddress,block.timestamp) (#730-737)
External calls sending eth:
- transferToAddressETH(marketingWalletAddress,amountBNBMarketing) (#696)
- recipient.transfer(amount) (#584)
- transferToAddressETH(teamWalletAddress,amountBNBTeam) (#699)
- recipient.transfer(amount) (#584)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#702)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,teamWalletAddress,block.timestamp) (#730-737)
State variables written after the call(s):
- addLiquidity(tokensForLP,amountBNBLiquidity) (#702)
- _allowances[owner][spender] = amount (#551)
Reentrancy in AI.transferFrom(address,address,uint256) (#614-618):
External calls:
- _transfer(sender,recipient,amount) (#615)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,teamWalletAddress,block.timestamp) (#730-737)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#714-720)
External calls sending eth:
- _transfer(sender,recipient,amount) (#615)
- recipient.transfer(amount) (#584)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,teamWalletAddress,block.timestamp) (#730-737)
State variables written after the call(s):
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#616)
- _allowances[owner][spender] = amount (#551)
Apply the check-effects-interactions pattern.

Additional information: link

Reentrancy in AI.swapAndLiquify(uint256) (#681-703):
External calls:
- swapTokensForEth(tokensForSwap) (#686)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#714-720)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#702)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,teamWalletAddress,block.timestamp) (#730-737)
External calls sending eth:
- transferToAddressETH(marketingWalletAddress,amountBNBMarketing) (#696)
- recipient.transfer(amount) (#584)
- transferToAddressETH(teamWalletAddress,amountBNBTeam) (#699)
- recipient.transfer(amount) (#584)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#702)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,teamWalletAddress,block.timestamp) (#730-737)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#552)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#702)
Reentrancy in AI.swapTokensForEth(uint256) (#705-723):
External calls:
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#714-720)
Event emitted after the call(s):
- SwapTokensForETH(tokenAmount,path) (#722)
Reentrancy in AI.transferFrom(address,address,uint256) (#614-618):
External calls:
- _transfer(sender,recipient,amount) (#615)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,teamWalletAddress,block.timestamp) (#730-737)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#714-720)
External calls sending eth:
- _transfer(sender,recipient,amount) (#615)
- recipient.transfer(amount) (#584)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,teamWalletAddress,block.timestamp) (#730-737)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#552)
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#616)
Reentrancy in AI._transfer(address,address,uint256) (#620-672):
External calls:
- swapAndLiquify(contractTokenBalance) (#647)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,teamWalletAddress,block.timestamp) (#730-737)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#714-720)
External calls sending eth:
- swapAndLiquify(contractTokenBalance) (#647)
- recipient.transfer(amount) (#584)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,teamWalletAddress,block.timestamp) (#730-737)
Event emitted after the call(s):
- Transfer(sender,address(this),feeAmount) (#753)
- finalAmount = takeFee(sender,recipient,amount) (#660)
- Transfer(sender,recipient,finalAmount) (#668)
Apply the check-effects-interactions pattern.

Additional information: link

Ownable.unlock() (#187-192) uses timestamp for comparisons
Dangerous comparisons:
- require(bool,string)(block.timestamp > _lockTime,Contract is locked until 7 days) (#189)
Avoid relying on block.timestamp.

Additional information: link

Address.isContract(address) (#83-92) uses assembly
- INLINE ASM (#90)
Address._functionCallWithValue(address,bytes,uint256,string) (#119-136) uses assembly
- INLINE ASM (#128-131)
Do not use evm assembly.

Additional information: link

Address.sendValue(address,uint256) (#94-100) is never used and should be removed
Address.functionCallWithValue(address,bytes,uint256) (#110-112) is never used and should be removed
SafeMath.mod(uint256,uint256,string) (#75-78) is never used and should be removed
Address.functionCallWithValue(address,bytes,uint256,string) (#114-117) is never used and should be removed
Context._msgData() (#10-13) is never used and should be removed
SafeMath.mod(uint256,uint256) (#71-73) is never used and should be removed
Address._functionCallWithValue(address,bytes,uint256,string) (#119-136) is never used and should be removed
Address.isContract(address) (#83-92) is never used and should be removed
Address.functionCall(address,bytes,string) (#106-108) is never used and should be removed
Address.functionCall(address,bytes) (#102-104) is never used and should be removed
Remove unused functions.

Additional information: link

AI.minimumTokensBeforeSwap (#441) is set pre-construction with a non-constant function or state variable:
- 100000000000 * 5 ** _decimals
AI._maxTxAmount (#439) is set pre-construction with a non-constant function or state variable:
- 100000000000 * 10 ** _decimals
AI._totalSupply (#438) is set pre-construction with a non-constant function or state variable:
- 100000000 * 10 ** _decimals
AI._walletMax (#440) is set pre-construction with a non-constant function or state variable:
- 100000000000 * 10 ** _decimals
Remove any initialization of state variables via non-constant state variables or function calls. If variables must be set upon contract deployment, locate initialization in the constructor instead.

Additional information: link

solc-0.8.17 is not recommended for deployment
Deploy with any of the following Solidity versions: 0.5.16 - 0.5.17, 0.6.11 - 0.6.12, 0.7.5 - 0.7.6 Use a simple pragma version that allows any of these versions. Consider using the latest version of Solidity for testing.

Additional information: link

Low level call in Address.sendValue(address,uint256) (#94-100):
- (success) = recipient.call{value: amount}() (#98)
Low level call in Address._functionCallWithValue(address,bytes,uint256,string) (#119-136):
- (success,returndata) = target.call{value: weiValue}(data) (#122)
Avoid low-level calls. Check the call success. If the call is meant for a contract, check for code existence

Additional information: link

Variable AI._buyTeamFee (#422) is not in mixedCase
Variable AI._sellLiquidityFee (#424) is not in mixedCase
Variable AI._sellMarketingFee (#425) is not in mixedCase
Function IUniswapV2Pair.PERMIT_TYPEHASH() (#227) is not in mixedCase
Function IUniswapV2Pair.MINIMUM_LIQUIDITY() (#243) is not in mixedCase
Function IUniswapV2Pair.DOMAIN_SEPARATOR() (#226) is not in mixedCase
Variable AI._sellReserveFee (#428) is not in mixedCase
Variable AI._totalTaxIfBuying (#434) is not in mixedCase
Variable AI._buyMarketingFee (#421) is not in mixedCase
Variable AI._sellTeamFee (#426) is not in mixedCase
Variable AI._totalDistributionShares (#436) is not in mixedCase
Variable AI._teamShare (#432) is not in mixedCase
Variable AI._totalTaxIfSelling (#435) is not in mixedCase
Function IUniswapV2Router01.WETH() (#262) is not in mixedCase
Function AI.Launch() (#555-558) is not in mixedCase
Variable AI._liquidityShare (#430) is not in mixedCase
Variable AI._buyLiquidityFee (#420) is not in mixedCase
Variable AI._balances (#411) is not in mixedCase
Variable AI._marketingShare (#431) is not in mixedCase
Variable AI._maxTxAmount (#439) is not in mixedCase
Variable AI._walletMax (#440) is not in mixedCase
Follow the Solidity naming convention.

Additional information: link

Redundant expression "this (#11)" inContext (#4-14)
Remove redundant statements if they congest code but offer no value.

Additional information: link

AI.slitherConstructorVariables() (#395-760) uses literals with too many digits:
- _totalSupply = 100000000 * 10 ** _decimals (#438)
AI.slitherConstructorVariables() (#395-760) uses literals with too many digits:
- minimumTokensBeforeSwap = 100000000000 * 5 ** _decimals (#441)
AI.slitherConstructorVariables() (#395-760) uses literals with too many digits:
- deadAddress = 0x000000000000000000000000000000000000dEaD (#409)
AI.slitherConstructorVariables() (#395-760) uses literals with too many digits:
- _walletMax = 100000000000 * 10 ** _decimals (#440)
AI.slitherConstructorVariables() (#395-760) uses literals with too many digits:
- _maxTxAmount = 100000000000 * 10 ** _decimals (#439)
Use: Ether suffix, Time suffix, or The scientific notation

Additional information: link

AI.killblock (#405) is never used in AI (#395-760)
AI._isbclisted (#418) is never used in AI (#395-760)
Remove unused state variables.

Additional information: link

AI._decimals (#402) should be constant
AI._sellLiquidityFee (#424) should be constant
AI._teamShare (#432) should be constant
AI._sellMarketingFee (#425) should be constant
AI._liquidityShare (#430) should be constant
AI._symbol (#401) should be constant
AI._buyLiquidityFee (#420) should be constant
AI._sellReserveFee (#428) should be constant
AI.teamWalletAddress (#408) should be constant
AI.marketingWalletAddress (#407) should be constant
AI.swapAndLiquifyEnabled (#447) should be constant
AI.checkWalletLimit (#449) should be constant
AI._buyTeamFee (#422) should be constant
AI._sellTeamFee (#426) should be constant
AI._name (#400) should be constant
AI._marketingShare (#431) should be constant
AI.killblock (#405) should be constant
AI.swapAndLiquifyByLimitOnly (#448) should be constant
AI._buyMarketingFee (#421) should be constant
Add the constant attributes to state variables that never change.

Additional information: link

getCirculatingSupply() should be declared external:
- AI.getCirculatingSupply() (#579-581)
decreaseAllowance(address,uint256) should be declared external:
- AI.decreaseAllowance(address,uint256) (#533-536)
Launch() should be declared external:
- AI.Launch() (#555-558)
minimumTokensBeforeSwapAmount() should be declared external:
- AI.minimumTokensBeforeSwapAmount() (#538-540)
totalSupply() should be declared external:
- AI.totalSupply() (#516-518)
waiveOwnership() should be declared external:
- Ownable.waiveOwnership() (#161-164)
setIsExcludedFromFee(address,bool) should be declared external:
- AI.setIsExcludedFromFee(address,bool) (#560-562)
transfer(address,uint256) should be declared external:
- AI.transfer(address,uint256) (#609-612)
symbol() should be declared external:
- AI.symbol() (#508-510)
name() should be declared external:
- AI.name() (#504-506)
increaseAllowance(address,uint256) should be declared external:
- AI.increaseAllowance(address,uint256) (#528-531)
decimals() should be declared external:
- AI.decimals() (#512-514)
transferFrom(address,address,uint256) should be declared external:
- AI.transferFrom(address,address,uint256) (#614-618)
getTime() should be declared external:
- Ownable.getTime() (#176-178)
transferOwnership(address) should be declared external:
- Ownable.transferOwnership(address) (#166-170)
approve(address,uint256) should be declared external:
- AI.approve(address,uint256) (#542-545)
allowance(address,address) should be declared external:
- AI.allowance(address,address) (#524-526)
changeRouterVersion(address) should be declared external:
- AI.changeRouterVersion(address) (#587-604)
unlock() should be declared external:
- Ownable.unlock() (#187-192)
lock(uint256) should be declared external:
- Ownable.lock(uint256) (#180-185)
excludeMultipleAccountsFromFees(address[],bool) should be declared external:
- AI.excludeMultipleAccountsFromFees(address[],bool) (#564-568)
getUnlockTime() should be declared external:
- Ownable.getUnlockTime() (#172-174)
Use the external attribute for functions never called from the contract.

Additional information: link

Token seems to be untradeable: there is no PancakeSwap trading pair and no trading volumes. Ignore for presale.

Unable to find website, listings and other project-related information

Young tokens have high risks of scam / price dump / death

Token has no active CoinGecko listing / rank

Token has no active CoinMarketCap listing / rank