Unable to find manual contract audit (e.g. Certik, PeckShield, Solidity...)
McHopeium.swapBack() (#307-350) sends eth to arbitrary user
Dangerous calls:
- (MarketingSuccess) = address(marketingFeeReceiver).call{gas: 30000,value: amountBNBMarketing}() (#342)
- (buybackSuccess) = address(buybackFeeReceiver).call{gas: 30000,value: amountBNBbuyback}() (#344)
- (devSuccess) = address(devFeeReceiver).call{gas: 30000,value: amountBNBDev}() (#346)
Ensure that an arbitrary user cannot withdraw unauthorized funds.
Additional information: link
Reentrancy in McHopeium._transferFrom(address,address,uint256) (#228-261):
External calls:
- swapBack() (#252)
- router.addLiquidityETH{value: bnbAmount}(address(this),tokenAmount,0,0,autoLiquidityReceiver,block.timestamp) (#354-361)
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(amountToSwap,0,path,address(this),block.timestamp) (#325-331)
- (MarketingSuccess) = address(marketingFeeReceiver).call{gas: 30000,value: amountBNBMarketing}() (#342)
- (buybackSuccess) = address(buybackFeeReceiver).call{gas: 30000,value: amountBNBbuyback}() (#344)
- (devSuccess) = address(devFeeReceiver).call{gas: 30000,value: amountBNBDev}() (#346)
External calls sending eth:
- swapBack() (#252)
- router.addLiquidityETH{value: bnbAmount}(address(this),tokenAmount,0,0,autoLiquidityReceiver,block.timestamp) (#354-361)
- (MarketingSuccess) = address(marketingFeeReceiver).call{gas: 30000,value: amountBNBMarketing}() (#342)
- (buybackSuccess) = address(buybackFeeReceiver).call{gas: 30000,value: amountBNBbuyback}() (#344)
- (devSuccess) = address(devFeeReceiver).call{gas: 30000,value: amountBNBDev}() (#346)
State variables written after the call(s):
- _balances[sender] = _balances[sender] - amount (#254)
- _balances[recipient] = _balances[recipient] + amountReceived (#257)
- amountReceived = takeFee(recipient,amount) (#256)
- _balances[address(this)] = _balances[address(this)] + (feeAmount) (#294)
Apply the check-effects-interactions pattern.
Additional information: link
Combination 1: Reentrancy vulnerabilities + Functions that send Ether to arbitraty destination. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.
McHopeium.takeFee(address,uint256) (#291-298) performs a multiplication on the result of a division:
-feeAmount = amount / 100 * (totalFee) (#292)
McHopeium.swapBack() (#307-350) performs a multiplication on the result of a division:
-amountToLiquify = tokensToSell / (totalFee) * (liquidityFee) / (2) (#316)
McHopeium.setSwapBackSettings(bool,uint256,uint256) (#411-415) performs a multiplication on the result of a division:
-swapThreshold = _totalSupply / (10000) * (_percentage_min_base10000) (#413)
McHopeium.setSwapBackSettings(bool,uint256,uint256) (#411-415) performs a multiplication on the result of a division:
-maxSwapSize = _totalSupply / (10000) * (_percentage_max_base10000) (#414)
McHopeium.setMaxWalletPercent_base1000(uint256) (#425-427) performs a multiplication on the result of a division:
-_maxWalletToken = _totalSupply / (1000) * (maxWallPercent_base1000) (#426)
McHopeium.setMaxBuyTxPercent_base1000(uint256) (#429-431) performs a multiplication on the result of a division:
-_maxBuyTxAmount = _totalSupply / (1000) * (maxBuyTXPercentage_base1000) (#430)
McHopeium.setMaxSellTxPercent_base1000(uint256) (#433-435) performs a multiplication on the result of a division:
-_maxSellTxAmount = _totalSupply / (1000) * (maxSellTXPercentage_base1000) (#434)
McHopeium.slitherConstructorVariables() (#128-450) performs a multiplication on the result of a division:
-_maxBuyTxAmount = _totalSupply / (100) * (1) (#164)
McHopeium.slitherConstructorVariables() (#128-450) performs a multiplication on the result of a division:
-_maxSellTxAmount = _totalSupply / (100) * (1) (#165)
McHopeium.slitherConstructorVariables() (#128-450) performs a multiplication on the result of a division:
-_maxWalletToken = _totalSupply / (100) * (1) (#166)
McHopeium.slitherConstructorVariables() (#128-450) performs a multiplication on the result of a division:
-swapThreshold = _totalSupply / 1000 * 1 (#178)
McHopeium.slitherConstructorVariables() (#128-450) performs a multiplication on the result of a division:
-maxSwapSize = _totalSupply / 100 * 1 (#179)
Consider ordering multiplication before division.
Additional information: link
McHopeium.addLiquidity(uint256,uint256) (#352-364) ignores return value by router.addLiquidityETH{value: bnbAmount}(address(this),tokenAmount,0,0,autoLiquidityReceiver,block.timestamp) (#354-361)
Ensure that all the return values of the function calls are used.
Additional information: link
McHopeium.setBuyFees(uint256,uint256,uint256,uint256) (#388-394) should emit an event for:
- BuyliquidityFee = _liquidityFee (#389)
- BuybuybackFee = _buybackFee (#390)
- BuymarketingFee = _marketingFee (#391)
- BuydevFee = _devFee (#392)
- BuytotalFee = _liquidityFee + (_buybackFee) + (_marketingFee) + (_devFee) (#393)
McHopeium.setSellFees(uint256,uint256,uint256,uint256) (#396-402) should emit an event for:
- SellliquidityFee = _liquidityFee (#397)
- SellbuybackFee = _buybackFee (#398)
- SellmarketingFee = _marketingFee (#399)
- SelldevFee = _devFee (#400)
- SelltotalFee = _liquidityFee + (_buybackFee) + (_marketingFee) + (_devFee) (#401)
McHopeium.setSwapBackSettings(bool,uint256,uint256) (#411-415) should emit an event for:
- swapThreshold = _totalSupply / (10000) * (_percentage_min_base10000) (#413)
- maxSwapSize = _totalSupply / (10000) * (_percentage_max_base10000) (#414)
McHopeium.setMaxWalletPercent_base1000(uint256) (#425-427) should emit an event for:
- _maxWalletToken = _totalSupply / (1000) * (maxWallPercent_base1000) (#426)
McHopeium.setMaxBuyTxPercent_base1000(uint256) (#429-431) should emit an event for:
- _maxBuyTxAmount = _totalSupply / (1000) * (maxBuyTXPercentage_base1000) (#430)
McHopeium.setMaxSellTxPercent_base1000(uint256) (#433-435) should emit an event for:
- _maxSellTxAmount = _totalSupply / (1000) * (maxSellTXPercentage_base1000) (#434)
Emit an event for critical parameter changes.
Additional information: link
McHopeium.setFeeReceivers(address,address,address,address)._autoLiquidityReceiver (#404) lacks a zero-check on :
- autoLiquidityReceiver = _autoLiquidityReceiver (#405)
McHopeium.setFeeReceivers(address,address,address,address)._marketingFeeReceiver (#404) lacks a zero-check on :
- marketingFeeReceiver = _marketingFeeReceiver (#406)
McHopeium.setFeeReceivers(address,address,address,address)._buybackFeeReceiver (#404) lacks a zero-check on :
- buybackFeeReceiver = _buybackFeeReceiver (#407)
McHopeium.setFeeReceivers(address,address,address,address)._devFeeReceiver (#404) lacks a zero-check on :
- devFeeReceiver = _devFeeReceiver (#408)
Check that the address is not zero.
Additional information: link
Reentrancy in McHopeium.constructor() (#185-195):
External calls:
- pair = IDEXFactory(router.factory()).createPair(WBNB,address(this)) (#187)
State variables written after the call(s):
- _allowances[address(this)][address(router)] = type()(uint256).max (#188)
- _balances[msg.sender] = _totalSupply (#193)
- isFeeExempt[msg.sender] = true (#190)
- isTxLimitExempt[msg.sender] = true (#191)
Apply the check-effects-interactions pattern.
Additional information: link
Reentrancy in McHopeium._transferFrom(address,address,uint256) (#228-261):
External calls:
- swapBack() (#252)
- router.addLiquidityETH{value: bnbAmount}(address(this),tokenAmount,0,0,autoLiquidityReceiver,block.timestamp) (#354-361)
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(amountToSwap,0,path,address(this),block.timestamp) (#325-331)
- (MarketingSuccess) = address(marketingFeeReceiver).call{gas: 30000,value: amountBNBMarketing}() (#342)
- (buybackSuccess) = address(buybackFeeReceiver).call{gas: 30000,value: amountBNBbuyback}() (#344)
- (devSuccess) = address(devFeeReceiver).call{gas: 30000,value: amountBNBDev}() (#346)
External calls sending eth:
- swapBack() (#252)
- router.addLiquidityETH{value: bnbAmount}(address(this),tokenAmount,0,0,autoLiquidityReceiver,block.timestamp) (#354-361)
- (MarketingSuccess) = address(marketingFeeReceiver).call{gas: 30000,value: amountBNBMarketing}() (#342)
- (buybackSuccess) = address(buybackFeeReceiver).call{gas: 30000,value: amountBNBbuyback}() (#344)
- (devSuccess) = address(devFeeReceiver).call{gas: 30000,value: amountBNBDev}() (#346)
Event emitted after the call(s):
- Transfer(sender,address(this),feeAmount) (#295)
- amountReceived = takeFee(recipient,amount) (#256)
- Transfer(sender,recipient,amountReceived) (#259)
Reentrancy in McHopeium.addLiquidity(uint256,uint256) (#352-364):
External calls:
- router.addLiquidityETH{value: bnbAmount}(address(this),tokenAmount,0,0,autoLiquidityReceiver,block.timestamp) (#354-361)
Event emitted after the call(s):
- AutoLiquify(bnbAmount,tokenAmount) (#362)
Reentrancy in McHopeium.constructor() (#185-195):
External calls:
- pair = IDEXFactory(router.factory()).createPair(WBNB,address(this)) (#187)
Event emitted after the call(s):
- Transfer(address(0),msg.sender,_totalSupply) (#194)
Reentrancy in McHopeium.swapBack() (#307-350):
External calls:
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(amountToSwap,0,path,address(this),block.timestamp) (#325-331)
- (MarketingSuccess) = address(marketingFeeReceiver).call{gas: 30000,value: amountBNBMarketing}() (#342)
- (buybackSuccess) = address(buybackFeeReceiver).call{gas: 30000,value: amountBNBbuyback}() (#344)
- (devSuccess) = address(devFeeReceiver).call{gas: 30000,value: amountBNBDev}() (#346)
- addLiquidity(amountToLiquify,amountBNBLiquidity) (#349)
- router.addLiquidityETH{value: bnbAmount}(address(this),tokenAmount,0,0,autoLiquidityReceiver,block.timestamp) (#354-361)
External calls sending eth:
- (MarketingSuccess) = address(marketingFeeReceiver).call{gas: 30000,value: amountBNBMarketing}() (#342)
- (buybackSuccess) = address(buybackFeeReceiver).call{gas: 30000,value: amountBNBbuyback}() (#344)
- (devSuccess) = address(devFeeReceiver).call{gas: 30000,value: amountBNBDev}() (#346)
- addLiquidity(amountToLiquify,amountBNBLiquidity) (#349)
- router.addLiquidityETH{value: bnbAmount}(address(this),tokenAmount,0,0,autoLiquidityReceiver,block.timestamp) (#354-361)
Event emitted after the call(s):
- AutoLiquify(bnbAmount,tokenAmount) (#362)
- addLiquidity(amountToLiquify,amountBNBLiquidity) (#349)
Apply the check-effects-interactions pattern.
Additional information: link
Ownable.Ownershipunlock() (#60-65) uses timestamp for comparisons
Dangerous comparisons:
- require(bool,string)(block.timestamp > _lockTime,Contract is locked) (#62)
Avoid relying on block.timestamp.
Additional information: link
McHopeium.BuytotalFee (#155) is set pre-construction with a non-constant function or state variable:
- BuyliquidityFee + BuydevFee + BuymarketingFee + BuybuybackFee
McHopeium.SelltotalFee (#161) is set pre-construction with a non-constant function or state variable:
- SellliquidityFee + SelldevFee + SellmarketingFee + SellbuybackFee
McHopeium._maxBuyTxAmount (#164) is set pre-construction with a non-constant function or state variable:
- _totalSupply / (100) * (1)
McHopeium._maxSellTxAmount (#165) is set pre-construction with a non-constant function or state variable:
- _totalSupply / (100) * (1)
McHopeium._maxWalletToken (#166) is set pre-construction with a non-constant function or state variable:
- _totalSupply / (100) * (1)
McHopeium.swapThreshold (#178) is set pre-construction with a non-constant function or state variable:
- _totalSupply / 1000 * 1
McHopeium.maxSwapSize (#179) is set pre-construction with a non-constant function or state variable:
- _totalSupply / 100 * 1
Remove any initialization of state variables via non-constant state variables or function calls. If variables must be set upon contract deployment, locate initialization in the constructor instead.
Additional information: link
Low level call in McHopeium.swapBack() (#307-350):
- (MarketingSuccess) = address(marketingFeeReceiver).call{gas: 30000,value: amountBNBMarketing}() (#342)
- (buybackSuccess) = address(buybackFeeReceiver).call{gas: 30000,value: amountBNBbuyback}() (#344)
- (devSuccess) = address(devFeeReceiver).call{gas: 30000,value: amountBNBDev}() (#346)
Avoid low-level calls. Check the call success. If the call is meant for a contract, check for code existence
Additional information: link
Function Ownable.Ownershiplock(uint256) (#53-58) is not in mixedCase
Function Ownable.Ownershipunlock() (#60-65) is not in mixedCase
Function IDEXRouter.WETH() (#78) is not in mixedCase
Parameter McHopeium.setBuyFees(uint256,uint256,uint256,uint256)._liquidityFee (#388) is not in mixedCase
Parameter McHopeium.setBuyFees(uint256,uint256,uint256,uint256)._buybackFee (#388) is not in mixedCase
Parameter McHopeium.setBuyFees(uint256,uint256,uint256,uint256)._marketingFee (#388) is not in mixedCase
Parameter McHopeium.setBuyFees(uint256,uint256,uint256,uint256)._devFee (#388) is not in mixedCase
Parameter McHopeium.setSellFees(uint256,uint256,uint256,uint256)._liquidityFee (#396) is not in mixedCase
Parameter McHopeium.setSellFees(uint256,uint256,uint256,uint256)._buybackFee (#396) is not in mixedCase
Parameter McHopeium.setSellFees(uint256,uint256,uint256,uint256)._marketingFee (#396) is not in mixedCase
Parameter McHopeium.setSellFees(uint256,uint256,uint256,uint256)._devFee (#396) is not in mixedCase
Parameter McHopeium.setFeeReceivers(address,address,address,address)._autoLiquidityReceiver (#404) is not in mixedCase
Parameter McHopeium.setFeeReceivers(address,address,address,address)._marketingFeeReceiver (#404) is not in mixedCase
Parameter McHopeium.setFeeReceivers(address,address,address,address)._buybackFeeReceiver (#404) is not in mixedCase
Parameter McHopeium.setFeeReceivers(address,address,address,address)._devFeeReceiver (#404) is not in mixedCase
Parameter McHopeium.setSwapBackSettings(bool,uint256,uint256)._enabled (#411) is not in mixedCase
Parameter McHopeium.setSwapBackSettings(bool,uint256,uint256)._percentage_min_base10000 (#411) is not in mixedCase
Parameter McHopeium.setSwapBackSettings(bool,uint256,uint256)._percentage_max_base10000 (#411) is not in mixedCase
Function McHopeium.setMaxWalletPercent_base1000(uint256) (#425-427) is not in mixedCase
Parameter McHopeium.setMaxWalletPercent_base1000(uint256).maxWallPercent_base1000 (#425) is not in mixedCase
Function McHopeium.setMaxBuyTxPercent_base1000(uint256) (#429-431) is not in mixedCase
Parameter McHopeium.setMaxBuyTxPercent_base1000(uint256).maxBuyTXPercentage_base1000 (#429) is not in mixedCase
Function McHopeium.setMaxSellTxPercent_base1000(uint256) (#433-435) is not in mixedCase
Parameter McHopeium.setMaxSellTxPercent_base1000(uint256).maxSellTXPercentage_base1000 (#433) is not in mixedCase
Variable McHopeium.WBNB (#130) is not in mixedCase
Variable McHopeium.DEAD (#131) is not in mixedCase
Variable McHopeium.ZERO (#132) is not in mixedCase
Constant McHopeium._name (#134) is not in UPPER_CASE_WITH_UNDERSCORES
Constant McHopeium._symbol (#135) is not in UPPER_CASE_WITH_UNDERSCORES
Constant McHopeium._decimals (#136) is not in UPPER_CASE_WITH_UNDERSCORES
Variable McHopeium._totalSupply (#137) is not in mixedCase
Variable McHopeium._balances (#139) is not in mixedCase
Variable McHopeium._allowances (#140) is not in mixedCase
Variable McHopeium.BuyliquidityFee (#151) is not in mixedCase
Variable McHopeium.BuydevFee (#152) is not in mixedCase
Variable McHopeium.BuymarketingFee (#153) is not in mixedCase
Variable McHopeium.BuybuybackFee (#154) is not in mixedCase
Variable McHopeium.BuytotalFee (#155) is not in mixedCase
Variable McHopeium.SellliquidityFee (#157) is not in mixedCase
Variable McHopeium.SelldevFee (#158) is not in mixedCase
Variable McHopeium.SellmarketingFee (#159) is not in mixedCase
Variable McHopeium.SellbuybackFee (#160) is not in mixedCase
Variable McHopeium.SelltotalFee (#161) is not in mixedCase
Variable McHopeium._maxBuyTxAmount (#164) is not in mixedCase
Variable McHopeium._maxSellTxAmount (#165) is not in mixedCase
Variable McHopeium._maxWalletToken (#166) is not in mixedCase
Follow the Solidity naming convention.
Additional information: link
Variable IDEXRouter.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountADesired (#83) is too similar to IDEXRouter.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountBDesired (#84)
Variable McHopeium.setSwapBackSettings(bool,uint256,uint256)._percentage_max_base10000 (#411) is too similar to McHopeium.setSwapBackSettings(bool,uint256,uint256)._percentage_min_base10000 (#411)
Prevent variables from having similar names.
Additional information: link
McHopeium.slitherConstructorVariables() (#128-450) uses literals with too many digits:
- DEAD = 0x000000000000000000000000000000000000dEaD (#131)
McHopeium.slitherConstructorVariables() (#128-450) uses literals with too many digits:
- ZERO = 0x0000000000000000000000000000000000000000 (#132)
Use: Ether suffix, Time suffix, or The scientific notation
Additional information: link
McHopeium.ZERO (#132) is never used in McHopeium (#128-450)
Remove unused state variables.
Additional information: link
McHopeium.DEAD (#131) should be constant
McHopeium.WBNB (#130) should be constant
McHopeium.ZERO (#132) should be constant
McHopeium._totalSupply (#137) should be constant
Add the constant attributes to state variables that never change.
Additional information: link
transferOwnership(address) should be declared external:
- Ownable.transferOwnership(address) (#43-47)
getUnlockTime() should be declared external:
- Ownable.getUnlockTime() (#49-51)
Ownershiplock(uint256) should be declared external:
- Ownable.Ownershiplock(uint256) (#53-58)
Ownershipunlock() should be declared external:
- Ownable.Ownershipunlock() (#60-65)
rescueToken(address,uint256) should be declared external:
- McHopeium.rescueToken(address,uint256) (#438-440)
Use the external attribute for functions never called from the contract.
Additional information: link
Unable to find website, listings and other project-related information
Young tokens have high risks of scam / price dump / death
Token has no active CoinGecko listing / rank
Token has no active CoinMarketCap listing / rank
Unable to find Telegram and Twitter accounts