Unable to find manual contract audit (e.g. Certik, PeckShield, Solidity...)
AYang.addLiquidity(uint256,uint256) (#686-699) sends eth to arbitrary user
Dangerous calls:
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#691-698)
Ensure that an arbitrary user cannot withdraw unauthorized funds.
Additional information: link
Reentrancy in AYang._transfer(address,address,uint256) (#584-633):
External calls:
- swapAndLiquify(contractTokenBalance) (#617)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#691-698)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#675-681)
External calls sending eth:
- swapAndLiquify(contractTokenBalance) (#617)
- recipient.transfer(amount) (#548)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#691-698)
State variables written after the call(s):
- _balances[sender] = _balances[sender].sub(amount,Insufficient Balance) (#620)
- _balances[recipient] = _balances[recipient].add(finalAmount) (#628)
- finalAmount = takeFee(sender,recipient,amount) (#622-623)
- _balances[address(this)] = _balances[address(this)].add(feeAmount) (#713)
Apply the check-effects-interactions pattern.
Additional information: link
AYang.feeTXtime (#437) is never initialized. It is used in:
- AYang._transfer(address,address,uint256) (#584-633)
Initialize all the variables. If a variable is meant to be initialized to zero, explicitly set it to zero to improve code readability.
Additional information: link
Combination 1: Reentrancy vulnerabilities + Functions that send Ether to arbitraty destination. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.
AYang.addLiquidity(uint256,uint256) (#686-699) ignores return value by uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#691-698)
Ensure that all the return values of the function calls are used.
Additional information: link
AYang.allowance(address,address).owner (#512) shadows:
- Ownable.owner() (#152-154) (function)
AYang._approve(address,address,uint256).owner (#535) shadows:
- Ownable.owner() (#152-154) (function)
Rename the local variables that shadow another component.
Additional information: link
Reentrancy in AYang.changeRouterVersion(address) (#551-568):
External calls:
- newPairAddress = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#559-560)
State variables written after the call(s):
- isMarketPair[address(uniswapPair)] = true (#567)
- isWalletLimitExempt[address(uniswapPair)] = true (#566)
- uniswapPair = newPairAddress (#563)
- uniswapV2Router = _uniswapV2Router (#564)
Reentrancy in AYang.constructor() (#462-490):
External calls:
- uniswapPair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#466-467)
State variables written after the call(s):
- _allowances[address(this)][address(uniswapV2Router)] = _totalSupply (#470)
- _balances[_msgSender()] = _totalSupply (#488)
- _totalDistributionShares = _liquidityShare.add(_marketingShare).add(_teamShare) (#477)
- _totalTaxIfBuying = _buyLiquidityFee.add(_buyMarketingFee).add(_buyTeamFee) (#475)
- _totalTaxIfSelling = _sellLiquidityFee.add(_sellMarketingFee).add(_sellTeamFee) (#476)
- isExcludedFromFee[owner()] = true (#472)
- isExcludedFromFee[address(this)] = true (#473)
- isMarketPair[address(uniswapPair)] = true (#486)
- isTxLimitExempt[owner()] = true (#483)
- isTxLimitExempt[address(this)] = true (#484)
- isWalletLimitExempt[owner()] = true (#479)
- isWalletLimitExempt[address(uniswapPair)] = true (#480)
- isWalletLimitExempt[address(this)] = true (#481)
- uniswapV2Router = _uniswapV2Router (#469)
Reentrancy in AYang.swapAndLiquify(uint256) (#642-664):
External calls:
- swapTokensForEth(tokensForSwap) (#647)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#675-681)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#663)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#691-698)
External calls sending eth:
- transferToAddressETH(marketingWalletAddress,amountBNBMarketing) (#657)
- recipient.transfer(amount) (#548)
- transferToAddressETH(teamWalletAddress,amountBNBTeam) (#660)
- recipient.transfer(amount) (#548)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#663)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#691-698)
State variables written after the call(s):
- addLiquidity(tokensForLP,amountBNBLiquidity) (#663)
- _allowances[owner][spender] = amount (#539)
Reentrancy in AYang.transferFrom(address,address,uint256) (#578-582):
External calls:
- _transfer(sender,recipient,amount) (#579)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#691-698)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#675-681)
External calls sending eth:
- _transfer(sender,recipient,amount) (#579)
- recipient.transfer(amount) (#548)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#691-698)
State variables written after the call(s):
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#580)
- _allowances[owner][spender] = amount (#539)
Apply the check-effects-interactions pattern.
Additional information: link
Reentrancy in AYang._transfer(address,address,uint256) (#584-633):
External calls:
- swapAndLiquify(contractTokenBalance) (#617)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#691-698)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#675-681)
External calls sending eth:
- swapAndLiquify(contractTokenBalance) (#617)
- recipient.transfer(amount) (#548)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#691-698)
Event emitted after the call(s):
- Transfer(sender,address(this),feeAmount) (#714)
- finalAmount = takeFee(sender,recipient,amount) (#622-623)
- Transfer(sender,recipient,finalAmount) (#630)
Reentrancy in AYang.constructor() (#462-490):
External calls:
- uniswapPair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#466-467)
Event emitted after the call(s):
- Transfer(address(0),_msgSender(),_totalSupply) (#489)
Reentrancy in AYang.swapAndLiquify(uint256) (#642-664):
External calls:
- swapTokensForEth(tokensForSwap) (#647)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#675-681)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#663)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#691-698)
External calls sending eth:
- transferToAddressETH(marketingWalletAddress,amountBNBMarketing) (#657)
- recipient.transfer(amount) (#548)
- transferToAddressETH(teamWalletAddress,amountBNBTeam) (#660)
- recipient.transfer(amount) (#548)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#663)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#691-698)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#540)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#663)
Reentrancy in AYang.swapTokensForEth(uint256) (#666-684):
External calls:
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#675-681)
Event emitted after the call(s):
- SwapTokensForETH(tokenAmount,path) (#683)
Reentrancy in AYang.transferFrom(address,address,uint256) (#578-582):
External calls:
- _transfer(sender,recipient,amount) (#579)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#691-698)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#675-681)
External calls sending eth:
- _transfer(sender,recipient,amount) (#579)
- recipient.transfer(amount) (#548)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#691-698)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#540)
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#580)
Apply the check-effects-interactions pattern.
Additional information: link
AYang._transfer(address,address,uint256) (#584-633) uses timestamp for comparisons
Dangerous comparisons:
- endtime == 0 (#589)
- endtime > block.timestamp (#592)
Avoid relying on block.timestamp.
Additional information: link
Address.isContract(address) (#83-92) uses assembly
- INLINE ASM (#90)
Address._functionCallWithValue(address,bytes,uint256,string) (#119-136) uses assembly
- INLINE ASM (#128-131)
Do not use evm assembly.
Additional information: link
Address._functionCallWithValue(address,bytes,uint256,string) (#119-136) is never used and should be removed
Address.functionCall(address,bytes) (#102-104) is never used and should be removed
Address.functionCall(address,bytes,string) (#106-108) is never used and should be removed
Address.functionCallWithValue(address,bytes,uint256) (#110-112) is never used and should be removed
Address.functionCallWithValue(address,bytes,uint256,string) (#114-117) is never used and should be removed
Address.isContract(address) (#83-92) is never used and should be removed
Address.sendValue(address,uint256) (#94-100) is never used and should be removed
Context._msgData() (#10-13) is never used and should be removed
SafeMath.mod(uint256,uint256) (#71-73) is never used and should be removed
SafeMath.mod(uint256,uint256,string) (#75-78) is never used and should be removed
Remove unused functions.
Additional information: link
AYang._liquidityShare (#416) is set pre-construction with a non-constant function or state variable:
- _buyLiquidityFee.add(_sellLiquidityFee)
AYang._marketingShare (#417) is set pre-construction with a non-constant function or state variable:
- _buyMarketingFee.add(_sellMarketingFee)
AYang._teamShare (#418) is set pre-construction with a non-constant function or state variable:
- _buyTeamFee.add(_sellTeamFee)
AYang._totalSupply (#424) is set pre-construction with a non-constant function or state variable:
- 100 * 10 ** 4 * 10 ** _decimals
AYang._maxTxAmount (#425) is set pre-construction with a non-constant function or state variable:
- _totalSupply.div(10)
AYang._walletMax (#426) is set pre-construction with a non-constant function or state variable:
- _totalSupply.div(10)
AYang.minimumTokensBeforeSwap (#427) is set pre-construction with a non-constant function or state variable:
- _totalSupply.div(10000)
Remove any initialization of state variables via non-constant state variables or function calls. If variables must be set upon contract deployment, locate initialization in the constructor instead.
Additional information: link
Low level call in Address.sendValue(address,uint256) (#94-100):
- (success) = recipient.call{value: amount}() (#98)
Low level call in Address._functionCallWithValue(address,bytes,uint256,string) (#119-136):
- (success,returndata) = target.call{value: weiValue}(data) (#122)
Avoid low-level calls. Check the call success. If the call is meant for a contract, check for code existence
Additional information: link
Function IUniswapV2Pair.DOMAIN_SEPARATOR() (#215) is not in mixedCase
Function IUniswapV2Pair.PERMIT_TYPEHASH() (#216) is not in mixedCase
Function IUniswapV2Pair.MINIMUM_LIQUIDITY() (#232) is not in mixedCase
Function IUniswapV2Router01.WETH() (#251) is not in mixedCase
Variable AYang._balances (#397) is not in mixedCase
Variable AYang._buyLiquidityFee (#408) is not in mixedCase
Variable AYang._buyMarketingFee (#409) is not in mixedCase
Variable AYang._buyTeamFee (#410) is not in mixedCase
Variable AYang._sellLiquidityFee (#412) is not in mixedCase
Variable AYang._sellMarketingFee (#413) is not in mixedCase
Variable AYang._sellTeamFee (#414) is not in mixedCase
Variable AYang._liquidityShare (#416) is not in mixedCase
Variable AYang._marketingShare (#417) is not in mixedCase
Variable AYang._teamShare (#418) is not in mixedCase
Variable AYang._totalTaxIfBuying (#420) is not in mixedCase
Variable AYang._totalTaxIfSelling (#421) is not in mixedCase
Variable AYang._totalDistributionShares (#422) is not in mixedCase
Variable AYang._maxTxAmount (#425) is not in mixedCase
Variable AYang._walletMax (#426) is not in mixedCase
Follow the Solidity naming convention.
Additional information: link
Redundant expression "this (#11)" inContext (#4-14)
Remove redundant statements if they congest code but offer no value.
Additional information: link
Reentrancy in AYang._transfer(address,address,uint256) (#584-633):
External calls:
- swapAndLiquify(contractTokenBalance) (#617)
- recipient.transfer(amount) (#548)
External calls sending eth:
- swapAndLiquify(contractTokenBalance) (#617)
- recipient.transfer(amount) (#548)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#691-698)
State variables written after the call(s):
- _balances[sender] = _balances[sender].sub(amount,Insufficient Balance) (#620)
- _balances[recipient] = _balances[recipient].add(finalAmount) (#628)
- finalAmount = takeFee(sender,recipient,amount) (#622-623)
- _balances[address(this)] = _balances[address(this)].add(feeAmount) (#713)
Event emitted after the call(s):
- Transfer(sender,address(this),feeAmount) (#714)
- finalAmount = takeFee(sender,recipient,amount) (#622-623)
- Transfer(sender,recipient,finalAmount) (#630)
Reentrancy in AYang.swapAndLiquify(uint256) (#642-664):
External calls:
- transferToAddressETH(marketingWalletAddress,amountBNBMarketing) (#657)
- recipient.transfer(amount) (#548)
- transferToAddressETH(teamWalletAddress,amountBNBTeam) (#660)
- recipient.transfer(amount) (#548)
External calls sending eth:
- transferToAddressETH(marketingWalletAddress,amountBNBMarketing) (#657)
- recipient.transfer(amount) (#548)
- transferToAddressETH(teamWalletAddress,amountBNBTeam) (#660)
- recipient.transfer(amount) (#548)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#663)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#691-698)
State variables written after the call(s):
- addLiquidity(tokensForLP,amountBNBLiquidity) (#663)
- _allowances[owner][spender] = amount (#539)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#540)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#663)
Reentrancy in AYang.transferFrom(address,address,uint256) (#578-582):
External calls:
- _transfer(sender,recipient,amount) (#579)
- recipient.transfer(amount) (#548)
External calls sending eth:
- _transfer(sender,recipient,amount) (#579)
- recipient.transfer(amount) (#548)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#691-698)
State variables written after the call(s):
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#580)
- _allowances[owner][spender] = amount (#539)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#540)
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#580)
Apply the check-effects-interactions pattern.
Additional information: link
Variable IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountADesired (#256) is too similar to IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountBDesired (#257)
Prevent variables from having similar names.
Additional information: link
AYang.slitherConstructorVariables() (#384-721) uses literals with too many digits:
- deadAddress = 0x000000000000000000000000000000000000dEaD (#395)
Use: Ether suffix, Time suffix, or The scientific notation
Additional information: link
AYang._buyLiquidityFee (#408) should be constant
AYang._buyMarketingFee (#409) should be constant
AYang._buyTeamFee (#410) should be constant
AYang._decimals (#391) should be constant
AYang._name (#389) should be constant
AYang._sellLiquidityFee (#412) should be constant
AYang._sellMarketingFee (#413) should be constant
AYang._sellTeamFee (#414) should be constant
AYang._symbol (#390) should be constant
AYang.checkWalletLimit (#435) should be constant
AYang.feeTXtime (#437) should be constant
AYang.marketingWalletAddress (#393) should be constant
AYang.swapAndLiquifyByLimitOnly (#434) should be constant
AYang.swapAndLiquifyEnabled (#433) should be constant
AYang.teamWalletAddress (#394) should be constant
Add the constant attributes to state variables that never change.
Additional information: link
transferOwnership(address) should be declared external:
- Ownable.transferOwnership(address) (#161-165)
getUnlockTime() should be declared external:
- Ownable.getUnlockTime() (#167-169)
getTime() should be declared external:
- Ownable.getTime() (#171-173)
lock(uint256) should be declared external:
- Ownable.lock(uint256) (#175-180)
name() should be declared external:
- AYang.name() (#492-494)
symbol() should be declared external:
- AYang.symbol() (#496-498)
decimals() should be declared external:
- AYang.decimals() (#500-502)
totalSupply() should be declared external:
- AYang.totalSupply() (#504-506)
allowance(address,address) should be declared external:
- AYang.allowance(address,address) (#512-514)
increaseAllowance(address,uint256) should be declared external:
- AYang.increaseAllowance(address,uint256) (#516-519)
decreaseAllowance(address,uint256) should be declared external:
- AYang.decreaseAllowance(address,uint256) (#521-524)
minimumTokensBeforeSwapAmount() should be declared external:
- AYang.minimumTokensBeforeSwapAmount() (#526-528)
approve(address,uint256) should be declared external:
- AYang.approve(address,uint256) (#530-533)
getCirculatingSupply() should be declared external:
- AYang.getCirculatingSupply() (#543-545)
changeRouterVersion(address) should be declared external:
- AYang.changeRouterVersion(address) (#551-568)
transfer(address,uint256) should be declared external:
- AYang.transfer(address,uint256) (#573-576)
transferFrom(address,address,uint256) should be declared external:
- AYang.transferFrom(address,address,uint256) (#578-582)
Use the external attribute for functions never called from the contract.
Additional information: link
Unable to find website, listings and other project-related information
Young tokens have high risks of scam / price dump / death
Token has no active CoinGecko listing / rank
Token has no active CoinMarketCap listing / rank
Unable to find Telegram and Twitter accounts