BABYCAKE [BABY CAKE] Token

BABYCAKE.addLiquidity(uint256,uint256) (BABYCAKE.sol#446-461) sends eth to arbitrary user
Dangerous calls:
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (BABYCAKE.sol#452-459)
Ensure that an arbitrary user cannot withdraw unauthorized funds.

Additional information: link

Reentrancy in BABYCAKE._transfer(address,address,uint256) (BABYCAKE.sol#300-371):
External calls:
- swapAndSendToFee(marketingTokens) (BABYCAKE.sol#327)
- IERC20(CAKE).transfer(_marketingWalletAddress,newBalance) (BABYCAKE.sol#379)
- uniswapV2Router.swapExactTokensForTokensSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (BABYCAKE.sol#437-443)
- swapAndLiquify(swapTokens) (BABYCAKE.sol#330)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (BABYCAKE.sol#452-459)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (BABYCAKE.sol#417-423)
- swapAndSendDividends(sellTokens) (BABYCAKE.sol#333)
- success = IERC20(CAKE).transfer(address(dividendTracker),dividends) (BABYCAKE.sol#466)
- dividendTracker.distributeCAKEDividends(dividends) (BABYCAKE.sol#469)
- uniswapV2Router.swapExactTokensForTokensSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (BABYCAKE.sol#437-443)
External calls sending eth:
- swapAndLiquify(swapTokens) (BABYCAKE.sol#330)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (BABYCAKE.sol#452-459)
State variables written after the call(s):
- super._transfer(from,address(this),fees) (BABYCAKE.sol#353)
- _balances[sender] = _balances[sender].sub(amount,ERC20: transfer amount exceeds balance) (ERC20.sol#221)
- _balances[recipient] = _balances[recipient].add(amount) (ERC20.sol#222)
- super._transfer(from,to,amount) (BABYCAKE.sol#356)
- _balances[sender] = _balances[sender].sub(amount,ERC20: transfer amount exceeds balance) (ERC20.sol#221)
- _balances[recipient] = _balances[recipient].add(amount) (ERC20.sol#222)
- swapping = false (BABYCAKE.sol#335)
Apply the check-effects-interactions pattern.

Additional information: link

BABYCAKE.swapAndSendToFee(uint256) (BABYCAKE.sol#373-380) ignores return value by IERC20(CAKE).transfer(_marketingWalletAddress,newBalance) (BABYCAKE.sol#379)
Use SafeERC20, or ensure that the transfer/transferFrom return value is checked.

Additional information: link

Combination 1: Reentrancy vulnerabilities + Functions that send Ether to arbitraty destination. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.

Combination 2: Unchecked transfer + Functions that send Ether to arbitraty destination. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.

Combination 3: Reentrancy vulnerabilities + Unchecked transfer vulnerability. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.

DividendPayingToken._withdrawDividendOfUser(address) (DividendPayingToken.sol#76-92) has external calls inside a loop: success = IERC20(CAKE).transfer(user,_withdrawableDividend) (DividendPayingToken.sol#81)
Favor pull over push strategy for external calls.

Additional information: link

Reentrancy in DividendPayingToken._withdrawDividendOfUser(address) (DividendPayingToken.sol#76-92):
External calls:
- success = IERC20(CAKE).transfer(user,_withdrawableDividend) (DividendPayingToken.sol#81)
State variables written after the call(s):
- withdrawnDividends[user] = withdrawnDividends[user].sub(_withdrawableDividend) (DividendPayingToken.sol#84)
Reentrancy in BABYCAKE.updateDividendTracker(address) (BABYCAKE.sol#136-151):
External calls:
- newDividendTracker.excludeFromDividends(address(newDividendTracker)) (BABYCAKE.sol#143)
- newDividendTracker.excludeFromDividends(address(this)) (BABYCAKE.sol#144)
- newDividendTracker.excludeFromDividends(owner()) (BABYCAKE.sol#145)
- newDividendTracker.excludeFromDividends(address(uniswapV2Router)) (BABYCAKE.sol#146)
State variables written after the call(s):
- dividendTracker = newDividendTracker (BABYCAKE.sol#150)
Apply the check-effects-interactions pattern.

Additional information: link

BABYCAKE._transfer(address,address,uint256).iterations (BABYCAKE.sol#364) is a local variable never initialized
BABYCAKE._transfer(address,address,uint256).claims (BABYCAKE.sol#364) is a local variable never initialized
BABYCAKE._transfer(address,address,uint256).lastProcessedIndex (BABYCAKE.sol#364) is a local variable never initialized
Initialize all the variables. If a variable is meant to be initialized to zero, explicitly set it to zero to improve code readability.

Additional information: link

BABYCAKE.claim() (BABYCAKE.sol#287-289) ignores return value by dividendTracker.processAccount(msg.sender,false) (BABYCAKE.sol#288)
BABYCAKE._transfer(address,address,uint256) (BABYCAKE.sol#300-371) ignores return value by dividendTracker.process(gas) (BABYCAKE.sol#364-369)
BABYCAKE.addLiquidity(uint256,uint256) (BABYCAKE.sol#446-461) ignores return value by uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (BABYCAKE.sol#452-459)
Ensure that all the return values of the function calls are used.

Additional information: link

DividendPayingToken.constructor(string,string)._name (DividendPayingToken.sol#50) shadows:
- ERC20._name (ERC20.sol#43) (state variable)
DividendPayingToken.constructor(string,string)._symbol (DividendPayingToken.sol#50) shadows:
- ERC20._symbol (ERC20.sol#44) (state variable)
DividendPayingToken.dividendOf(address)._owner (DividendPayingToken.sol#98) shadows:
- Ownable._owner (Ownable.sol#8) (state variable)
DividendPayingToken.withdrawableDividendOf(address)._owner (DividendPayingToken.sol#105) shadows:
- Ownable._owner (Ownable.sol#8) (state variable)
DividendPayingToken.withdrawnDividendOf(address)._owner (DividendPayingToken.sol#112) shadows:
- Ownable._owner (Ownable.sol#8) (state variable)
DividendPayingToken.accumulativeDividendOf(address)._owner (DividendPayingToken.sol#122) shadows:
- Ownable._owner (Ownable.sol#8) (state variable)
Rename the local variables that shadow another component.

Additional information: link

BABYCAKE.setCAKERewardsFee(uint256) (BABYCAKE.sol#181-184) should emit an event for:
- CAKERewardsFee = value (BABYCAKE.sol#182)
- totalFees = CAKERewardsFee.add(liquidityFee).add(marketingFee) (BABYCAKE.sol#183)
BABYCAKE.setLiquiditFee(uint256) (BABYCAKE.sol#186-189) should emit an event for:
- liquidityFee = value (BABYCAKE.sol#187)
- totalFees = CAKERewardsFee.add(liquidityFee).add(marketingFee) (BABYCAKE.sol#188)
BABYCAKE.setMarketingFee(uint256) (BABYCAKE.sol#191-195) should emit an event for:
- marketingFee = value (BABYCAKE.sol#192)
- totalFees = CAKERewardsFee.add(liquidityFee).add(marketingFee) (BABYCAKE.sol#193)
Emit an event for critical parameter changes.

Additional information: link

BABYCAKE.updateUniswapV2Router(address)._uniswapV2Pair (BABYCAKE.sol#157-158) lacks a zero-check on :
- uniswapV2Pair = _uniswapV2Pair (BABYCAKE.sol#159)
BABYCAKE.setMarketingWallet(address).wallet (BABYCAKE.sol#177) lacks a zero-check on :
- _marketingWalletAddress = wallet (BABYCAKE.sol#178)
Check that the address is not zero.

Additional information: link

Variable 'BABYCAKE._transfer(address,address,uint256).lastProcessedIndex (BABYCAKE.sol#364)' in BABYCAKE._transfer(address,address,uint256) (BABYCAKE.sol#300-371) potentially used before declaration: ProcessedDividendTracker(iterations,claims,lastProcessedIndex,true,gas,tx.origin) (BABYCAKE.sol#365)
Variable 'BABYCAKE._transfer(address,address,uint256).claims (BABYCAKE.sol#364)' in BABYCAKE._transfer(address,address,uint256) (BABYCAKE.sol#300-371) potentially used before declaration: ProcessedDividendTracker(iterations,claims,lastProcessedIndex,true,gas,tx.origin) (BABYCAKE.sol#365)
Variable 'BABYCAKE._transfer(address,address,uint256).iterations (BABYCAKE.sol#364)' in BABYCAKE._transfer(address,address,uint256) (BABYCAKE.sol#300-371) potentially used before declaration: ProcessedDividendTracker(iterations,claims,lastProcessedIndex,true,gas,tx.origin) (BABYCAKE.sol#365)
Move all variable declarations prior to any usage of the variable, and ensure that reaching a variable declaration does not depend on some conditional if it is used unconditionally.

Additional information: link

Reentrancy in BABYCAKE._transfer(address,address,uint256) (BABYCAKE.sol#300-371):
External calls:
- swapAndSendToFee(marketingTokens) (BABYCAKE.sol#327)
- IERC20(CAKE).transfer(_marketingWalletAddress,newBalance) (BABYCAKE.sol#379)
- uniswapV2Router.swapExactTokensForTokensSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (BABYCAKE.sol#437-443)
- swapAndLiquify(swapTokens) (BABYCAKE.sol#330)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (BABYCAKE.sol#452-459)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (BABYCAKE.sol#417-423)
External calls sending eth:
- swapAndLiquify(swapTokens) (BABYCAKE.sol#330)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (BABYCAKE.sol#452-459)
State variables written after the call(s):
- swapAndLiquify(swapTokens) (BABYCAKE.sol#330)
- _allowances[owner][spender] = amount (ERC20.sol#287)
Reentrancy in BABYCAKE._transfer(address,address,uint256) (BABYCAKE.sol#300-371):
External calls:
- swapAndSendToFee(marketingTokens) (BABYCAKE.sol#327)
- IERC20(CAKE).transfer(_marketingWalletAddress,newBalance) (BABYCAKE.sol#379)
- uniswapV2Router.swapExactTokensForTokensSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (BABYCAKE.sol#437-443)
- swapAndLiquify(swapTokens) (BABYCAKE.sol#330)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (BABYCAKE.sol#452-459)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (BABYCAKE.sol#417-423)
- swapAndSendDividends(sellTokens) (BABYCAKE.sol#333)
- success = IERC20(CAKE).transfer(address(dividendTracker),dividends) (BABYCAKE.sol#466)
- dividendTracker.distributeCAKEDividends(dividends) (BABYCAKE.sol#469)
- uniswapV2Router.swapExactTokensForTokensSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (BABYCAKE.sol#437-443)
External calls sending eth:
- swapAndLiquify(swapTokens) (BABYCAKE.sol#330)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (BABYCAKE.sol#452-459)
State variables written after the call(s):
- swapAndSendDividends(sellTokens) (BABYCAKE.sol#333)
- _allowances[owner][spender] = amount (ERC20.sol#287)
Reentrancy in BABYCAKE.constructor() (BABYCAKE.sol#98-130):
External calls:
- _uniswapV2Pair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (BABYCAKE.sol#105-106)
State variables written after the call(s):
- uniswapV2Pair = _uniswapV2Pair (BABYCAKE.sol#109)
- uniswapV2Router = _uniswapV2Router (BABYCAKE.sol#108)
Reentrancy in BABYCAKE.constructor() (BABYCAKE.sol#98-130):
External calls:
- _uniswapV2Pair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (BABYCAKE.sol#105-106)
- _setAutomatedMarketMakerPair(_uniswapV2Pair,true) (BABYCAKE.sol#111)
- dividendTracker.excludeFromDividends(pair) (BABYCAKE.sol#214)
- dividendTracker.excludeFromDividends(address(dividendTracker)) (BABYCAKE.sol#114)
- dividendTracker.excludeFromDividends(address(this)) (BABYCAKE.sol#115)
- dividendTracker.excludeFromDividends(owner()) (BABYCAKE.sol#116)
- dividendTracker.excludeFromDividends(deadWallet) (BABYCAKE.sol#117)
- dividendTracker.excludeFromDividends(address(_uniswapV2Router)) (BABYCAKE.sol#118)
State variables written after the call(s):
- _mint(owner(),100000000000 * (10 ** 18)) (BABYCAKE.sol#129)
- _balances[account] = _balances[account].add(amount) (ERC20.sol#241)
- excludeFromFees(owner(),true) (BABYCAKE.sol#121)
- _isExcludedFromFees[account] = excluded (BABYCAKE.sol#164)
- excludeFromFees(_marketingWalletAddress,true) (BABYCAKE.sol#122)
- _isExcludedFromFees[account] = excluded (BABYCAKE.sol#164)
- excludeFromFees(address(this),true) (BABYCAKE.sol#123)
- _isExcludedFromFees[account] = excluded (BABYCAKE.sol#164)
- _mint(owner(),100000000000 * (10 ** 18)) (BABYCAKE.sol#129)
- _totalSupply = _totalSupply.add(amount) (ERC20.sol#240)
Reentrancy in BABYCAKEDividendTracker.processAccount(address,bool) (BABYCAKE.sol#671-681):
External calls:
- amount = _withdrawDividendOfUser(account) (BABYCAKE.sol#672)
- success = IERC20(CAKE).transfer(user,_withdrawableDividend) (DividendPayingToken.sol#81)
State variables written after the call(s):
- lastClaimTimes[account] = block.timestamp (BABYCAKE.sol#675)
Reentrancy in BABYCAKE.swapAndLiquify(uint256) (BABYCAKE.sol#382-403):
External calls:
- swapTokensForEth(half) (BABYCAKE.sol#394)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (BABYCAKE.sol#417-423)
- addLiquidity(otherHalf,newBalance) (BABYCAKE.sol#400)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (BABYCAKE.sol#452-459)
External calls sending eth:
- addLiquidity(otherHalf,newBalance) (BABYCAKE.sol#400)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (BABYCAKE.sol#452-459)
State variables written after the call(s):
- addLiquidity(otherHalf,newBalance) (BABYCAKE.sol#400)
- _allowances[owner][spender] = amount (ERC20.sol#287)
Reentrancy in BABYCAKE.updateUniswapV2Router(address) (BABYCAKE.sol#153-160):
External calls:
- _uniswapV2Pair = IUniswapV2Factory(uniswapV2Router.factory()).createPair(address(this),uniswapV2Router.WETH()) (BABYCAKE.sol#157-158)
State variables written after the call(s):
- uniswapV2Pair = _uniswapV2Pair (BABYCAKE.sol#159)
Apply the check-effects-interactions pattern.

Additional information: link

Reentrancy in BABYCAKE._setAutomatedMarketMakerPair(address,bool) (BABYCAKE.sol#209-218):
External calls:
- dividendTracker.excludeFromDividends(pair) (BABYCAKE.sol#214)
Event emitted after the call(s):
- SetAutomatedMarketMakerPair(pair,value) (BABYCAKE.sol#217)
Reentrancy in BABYCAKE._transfer(address,address,uint256) (BABYCAKE.sol#300-371):
External calls:
- swapAndSendToFee(marketingTokens) (BABYCAKE.sol#327)
- IERC20(CAKE).transfer(_marketingWalletAddress,newBalance) (BABYCAKE.sol#379)
- uniswapV2Router.swapExactTokensForTokensSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (BABYCAKE.sol#437-443)
- swapAndLiquify(swapTokens) (BABYCAKE.sol#330)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (BABYCAKE.sol#452-459)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (BABYCAKE.sol#417-423)
External calls sending eth:
- swapAndLiquify(swapTokens) (BABYCAKE.sol#330)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (BABYCAKE.sol#452-459)
Event emitted after the call(s):
- Approval(owner,spender,amount) (ERC20.sol#288)
- swapAndLiquify(swapTokens) (BABYCAKE.sol#330)
- SwapAndLiquify(half,newBalance,otherHalf) (BABYCAKE.sol#402)
- swapAndLiquify(swapTokens) (BABYCAKE.sol#330)
Reentrancy in BABYCAKE._transfer(address,address,uint256) (BABYCAKE.sol#300-371):
External calls:
- swapAndSendToFee(marketingTokens) (BABYCAKE.sol#327)
- IERC20(CAKE).transfer(_marketingWalletAddress,newBalance) (BABYCAKE.sol#379)
- uniswapV2Router.swapExactTokensForTokensSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (BABYCAKE.sol#437-443)
- swapAndLiquify(swapTokens) (BABYCAKE.sol#330)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (BABYCAKE.sol#452-459)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (BABYCAKE.sol#417-423)
- swapAndSendDividends(sellTokens) (BABYCAKE.sol#333)
- success = IERC20(CAKE).transfer(address(dividendTracker),dividends) (BABYCAKE.sol#466)
- dividendTracker.distributeCAKEDividends(dividends) (BABYCAKE.sol#469)
- uniswapV2Router.swapExactTokensForTokensSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (BABYCAKE.sol#437-443)
External calls sending eth:
- swapAndLiquify(swapTokens) (BABYCAKE.sol#330)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (BABYCAKE.sol#452-459)
Event emitted after the call(s):
- Approval(owner,spender,amount) (ERC20.sol#288)
- swapAndSendDividends(sellTokens) (BABYCAKE.sol#333)
- SendDividends(tokens,dividends) (BABYCAKE.sol#470)
- swapAndSendDividends(sellTokens) (BABYCAKE.sol#333)
- Transfer(sender,recipient,amount) (ERC20.sol#223)
- super._transfer(from,address(this),fees) (BABYCAKE.sol#353)
- Transfer(sender,recipient,amount) (ERC20.sol#223)
- super._transfer(from,to,amount) (BABYCAKE.sol#356)
Reentrancy in BABYCAKE._transfer(address,address,uint256) (BABYCAKE.sol#300-371):
External calls:
- swapAndSendToFee(marketingTokens) (BABYCAKE.sol#327)
- IERC20(CAKE).transfer(_marketingWalletAddress,newBalance) (BABYCAKE.sol#379)
- uniswapV2Router.swapExactTokensForTokensSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (BABYCAKE.sol#437-443)
- swapAndLiquify(swapTokens) (BABYCAKE.sol#330)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (BABYCAKE.sol#452-459)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (BABYCAKE.sol#417-423)
- swapAndSendDividends(sellTokens) (BABYCAKE.sol#333)
- success = IERC20(CAKE).transfer(address(dividendTracker),dividends) (BABYCAKE.sol#466)
- dividendTracker.distributeCAKEDividends(dividends) (BABYCAKE.sol#469)
- uniswapV2Router.swapExactTokensForTokensSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (BABYCAKE.sol#437-443)
- dividendTracker.setBalance(address(from),balanceOf(from)) (BABYCAKE.sol#358)
- dividendTracker.setBalance(address(to),balanceOf(to)) (BABYCAKE.sol#359)
- dividendTracker.process(gas) (BABYCAKE.sol#364-369)
External calls sending eth:
- swapAndLiquify(swapTokens) (BABYCAKE.sol#330)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (BABYCAKE.sol#452-459)
Event emitted after the call(s):
- ProcessedDividendTracker(iterations,claims,lastProcessedIndex,true,gas,tx.origin) (BABYCAKE.sol#365)
Reentrancy in BABYCAKE.constructor() (BABYCAKE.sol#98-130):
External calls:
- _uniswapV2Pair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (BABYCAKE.sol#105-106)
- _setAutomatedMarketMakerPair(_uniswapV2Pair,true) (BABYCAKE.sol#111)
- dividendTracker.excludeFromDividends(pair) (BABYCAKE.sol#214)
Event emitted after the call(s):
- SetAutomatedMarketMakerPair(pair,value) (BABYCAKE.sol#217)
- _setAutomatedMarketMakerPair(_uniswapV2Pair,true) (BABYCAKE.sol#111)
Reentrancy in BABYCAKE.constructor() (BABYCAKE.sol#98-130):
External calls:
- _uniswapV2Pair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (BABYCAKE.sol#105-106)
- _setAutomatedMarketMakerPair(_uniswapV2Pair,true) (BABYCAKE.sol#111)
- dividendTracker.excludeFromDividends(pair) (BABYCAKE.sol#214)
- dividendTracker.excludeFromDividends(address(dividendTracker)) (BABYCAKE.sol#114)
- dividendTracker.excludeFromDividends(address(this)) (BABYCAKE.sol#115)
- dividendTracker.excludeFromDividends(owner()) (BABYCAKE.sol#116)
- dividendTracker.excludeFromDividends(deadWallet) (BABYCAKE.sol#117)
- dividendTracker.excludeFromDividends(address(_uniswapV2Router)) (BABYCAKE.sol#118)
Event emitted after the call(s):
- ExcludeFromFees(account,excluded) (BABYCAKE.sol#166)
- excludeFromFees(_marketingWalletAddress,true) (BABYCAKE.sol#122)
- ExcludeFromFees(account,excluded) (BABYCAKE.sol#166)
- excludeFromFees(owner(),true) (BABYCAKE.sol#121)
- ExcludeFromFees(account,excluded) (BABYCAKE.sol#166)
- excludeFromFees(address(this),true) (BABYCAKE.sol#123)
- Transfer(address(0),account,amount) (ERC20.sol#242)
- _mint(owner(),100000000000 * (10 ** 18)) (BABYCAKE.sol#129)
Reentrancy in BABYCAKEDividendTracker.processAccount(address,bool) (BABYCAKE.sol#671-681):
External calls:
- amount = _withdrawDividendOfUser(account) (BABYCAKE.sol#672)
- success = IERC20(CAKE).transfer(user,_withdrawableDividend) (DividendPayingToken.sol#81)
Event emitted after the call(s):
- Claim(account,amount,automatic) (BABYCAKE.sol#676)
Reentrancy in BABYCAKE.processDividendTracker(uint256) (BABYCAKE.sol#282-285):
External calls:
- (iterations,claims,lastProcessedIndex) = dividendTracker.process(gas) (BABYCAKE.sol#283)
Event emitted after the call(s):
- ProcessedDividendTracker(iterations,claims,lastProcessedIndex,false,gas,tx.origin) (BABYCAKE.sol#284)
Reentrancy in BABYCAKE.swapAndLiquify(uint256) (BABYCAKE.sol#382-403):
External calls:
- swapTokensForEth(half) (BABYCAKE.sol#394)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (BABYCAKE.sol#417-423)
- addLiquidity(otherHalf,newBalance) (BABYCAKE.sol#400)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (BABYCAKE.sol#452-459)
External calls sending eth:
- addLiquidity(otherHalf,newBalance) (BABYCAKE.sol#400)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (BABYCAKE.sol#452-459)
Event emitted after the call(s):
- Approval(owner,spender,amount) (ERC20.sol#288)
- addLiquidity(otherHalf,newBalance) (BABYCAKE.sol#400)
- SwapAndLiquify(half,newBalance,otherHalf) (BABYCAKE.sol#402)
Reentrancy in BABYCAKE.swapAndSendDividends(uint256) (BABYCAKE.sol#463-472):
External calls:
- swapTokensForCake(tokens) (BABYCAKE.sol#464)
- uniswapV2Router.swapExactTokensForTokensSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (BABYCAKE.sol#437-443)
- success = IERC20(CAKE).transfer(address(dividendTracker),dividends) (BABYCAKE.sol#466)
- dividendTracker.distributeCAKEDividends(dividends) (BABYCAKE.sol#469)
Event emitted after the call(s):
- SendDividends(tokens,dividends) (BABYCAKE.sol#470)
Reentrancy in BABYCAKE.updateDividendTracker(address) (BABYCAKE.sol#136-151):
External calls:
- newDividendTracker.excludeFromDividends(address(newDividendTracker)) (BABYCAKE.sol#143)
- newDividendTracker.excludeFromDividends(address(this)) (BABYCAKE.sol#144)
- newDividendTracker.excludeFromDividends(owner()) (BABYCAKE.sol#145)
- newDividendTracker.excludeFromDividends(address(uniswapV2Router)) (BABYCAKE.sol#146)
Event emitted after the call(s):
- UpdateDividendTracker(newAddress,address(dividendTracker)) (BABYCAKE.sol#148)
Apply the check-effects-interactions pattern.

Additional information: link

BABYCAKEDividendTracker.getAccount(address) (BABYCAKE.sol#535-578) uses timestamp for comparisons
Dangerous comparisons:
- nextClaimTime > block.timestamp (BABYCAKE.sol#575-577)
BABYCAKEDividendTracker.canAutoClaim(uint256) (BABYCAKE.sol#599-605) uses timestamp for comparisons
Dangerous comparisons:
- lastClaimTime > block.timestamp (BABYCAKE.sol#600)
- block.timestamp.sub(lastClaimTime) >= claimWait (BABYCAKE.sol#604)
Avoid relying on block.timestamp.

Additional information: link

Context._msgData() (Context.sol#20-23) is never used and should be removed
DividendPayingToken._transfer(address,address,uint256) (DividendPayingToken.sol#132-138) is never used and should be removed
SafeMath.mod(uint256,uint256) (SafeMath.sol#126-128) is never used and should be removed
SafeMath.mod(uint256,uint256,string) (SafeMath.sol#142-145) is never used and should be removed
SafeMathInt.abs(int256) (SafeMathInt.sol#82-85) is never used and should be removed
SafeMathInt.div(int256,int256) (SafeMathInt.sol#53-59) is never used and should be removed
SafeMathInt.mul(int256,int256) (SafeMathInt.sol#41-48) is never used and should be removed
Remove unused functions.

Additional information: link

BABYCAKE.totalFees (BABYCAKE.sol#49) is set pre-construction with a non-constant function or state variable:
- CAKERewardsFee.add(liquidityFee).add(marketingFee)
Remove any initialization of state variables via non-constant state variables or function calls. If variables must be set upon contract deployment, locate initialization in the constructor instead.

Additional information: link

Pragma version^0.6.2 (BABYCAKE.sol#17) allows old versions
Pragma version^0.6.2 (Context.sol#3) allows old versions
Pragma version^0.6.2 (DividendPayingToken.sol#3) allows old versions
Pragma version^0.6.2 (DividendPayingTokenInterface.sol#3) allows old versions
Pragma version^0.6.2 (DividendPayingTokenOptionalInterface.sol#3) allows old versions
Pragma version^0.6.2 (ERC20.sol#3) allows old versions
Pragma version^0.6.2 (IERC20.sol#3) allows old versions
Pragma version^0.6.2 (IERC20Metadata.sol#3) allows old versions
Pragma version^0.6.2 (IUniswapV2Factory.sol#3) allows old versions
Pragma version^0.6.2 (IUniswapV2Pair.sol#3) allows old versions
Pragma version^0.6.2 (IUniswapV2Router.sol#3) allows old versions
Pragma version^0.6.2 (IterableMapping.sol#2) allows old versions
Pragma version^0.6.2 (Ownable.sol#1) allows old versions
Pragma version^0.6.2 (SafeMath.sol#3) allows old versions
Pragma version^0.6.2 (SafeMathInt.sol#28) allows old versions
Pragma version^0.6.2 (SafeMathUint.sol#3) allows old versions
Deploy with any of the following Solidity versions: 0.5.16 - 0.5.17, 0.6.11 - 0.6.12, 0.7.5 - 0.7.6 Use a simple pragma version that allows any of these versions. Consider using the latest version of Solidity for testing.

Additional information: link

Variable BABYCAKE.CAKE (BABYCAKE.sol#40) is not in mixedCase
Variable BABYCAKE._isBlacklisted (BABYCAKE.sol#44) is not in mixedCase
Variable BABYCAKE.CAKERewardsFee (BABYCAKE.sol#46) is not in mixedCase
Variable BABYCAKE._marketingWalletAddress (BABYCAKE.sol#51) is not in mixedCase
Parameter BABYCAKEDividendTracker.getAccount(address)._account (BABYCAKE.sol#535) is not in mixedCase
Parameter DividendPayingToken.dividendOf(address)._owner (DividendPayingToken.sol#98) is not in mixedCase
Parameter DividendPayingToken.withdrawableDividendOf(address)._owner (DividendPayingToken.sol#105) is not in mixedCase
Parameter DividendPayingToken.withdrawnDividendOf(address)._owner (DividendPayingToken.sol#112) is not in mixedCase
Parameter DividendPayingToken.accumulativeDividendOf(address)._owner (DividendPayingToken.sol#122) is not in mixedCase
Variable DividendPayingToken.CAKE (DividendPayingToken.sol#24) is not in mixedCase
Constant DividendPayingToken.magnitude (DividendPayingToken.sol#30) is not in UPPER_CASE_WITH_UNDERSCORES
Function IUniswapV2Pair.DOMAIN_SEPARATOR() (IUniswapV2Pair.sol#20) is not in mixedCase
Function IUniswapV2Pair.PERMIT_TYPEHASH() (IUniswapV2Pair.sol#21) is not in mixedCase
Function IUniswapV2Pair.MINIMUM_LIQUIDITY() (IUniswapV2Pair.sol#38) is not in mixedCase
Function IUniswapV2Router01.WETH() (IUniswapV2Router.sol#7) is not in mixedCase
Follow the Solidity naming convention.

Additional information: link

Redundant expression "this (Context.sol#21)" inContext (Context.sol#15-24)
Remove redundant statements if they congest code but offer no value.

Additional information: link

Variable DividendPayingToken._withdrawDividendOfUser(address)._withdrawableDividend (DividendPayingToken.sol#77) is too similar to BABYCAKEDividendTracker.getAccount(address).withdrawableDividends (BABYCAKE.sol#540)
Variable IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountADesired (IUniswapV2Router.sol#12) is too similar to IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountBDesired (IUniswapV2Router.sol#13)
Prevent variables from having similar names.

Additional information: link

BABYCAKE.constructor() (BABYCAKE.sol#98-130) uses literals with too many digits:
- _mint(owner(),100000000000 * (10 ** 18)) (BABYCAKE.sol#129)
BABYCAKE.updateGasForProcessing(uint256) (BABYCAKE.sol#221-226) uses literals with too many digits:
- require(bool,string)(newValue >= 200000 && newValue <= 500000,BABYCAKE: gasForProcessing must be between 200,000 and 500,000) (BABYCAKE.sol#222)
BABYCAKE.slitherConstructorVariables() (BABYCAKE.sol#28-473) uses literals with too many digits:
- deadWallet = 0x000000000000000000000000000000000000dEaD (BABYCAKE.sol#38)
BABYCAKE.slitherConstructorVariables() (BABYCAKE.sol#28-473) uses literals with too many digits:
- swapTokensAtAmount = 2000000 * (10 ** 18) (BABYCAKE.sol#42)
BABYCAKE.slitherConstructorVariables() (BABYCAKE.sol#28-473) uses literals with too many digits:
- gasForProcessing = 300000 (BABYCAKE.sol#55)
BABYCAKEDividendTracker.constructor() (BABYCAKE.sol#495-498) uses literals with too many digits:
- minimumTokenBalanceForDividends = 200000 * (10 ** 18) (BABYCAKE.sol#497)
BABYCAKEDividendTracker.getAccountAtIndex(uint256) (BABYCAKE.sol#580-597) uses literals with too many digits:
- (0x0000000000000000000000000000000000000000,- 1,- 1,0,0,0,0,0) (BABYCAKE.sol#591)
Use: Ether suffix, Time suffix, or The scientific notation

Additional information: link

SafeMathInt.MAX_INT256 (SafeMathInt.sol#36) is never used in SafeMathInt (SafeMathInt.sol#34-92)
Remove unused state variables.

Additional information: link

BABYCAKE.deadWallet (BABYCAKE.sol#38) should be constant
BABYCAKE.swapTokensAtAmount (BABYCAKE.sol#42) should be constant
Add the constant attributes to state variables that never change.

Additional information: link

updateDividendTracker(address) should be declared external:
- BABYCAKE.updateDividendTracker(address) (BABYCAKE.sol#136-151)
updateUniswapV2Router(address) should be declared external:
- BABYCAKE.updateUniswapV2Router(address) (BABYCAKE.sol#153-160)
excludeMultipleAccountsFromFees(address[],bool) should be declared external:
- BABYCAKE.excludeMultipleAccountsFromFees(address[],bool) (BABYCAKE.sol#169-175)
setAutomatedMarketMakerPair(address,bool) should be declared external:
- BABYCAKE.setAutomatedMarketMakerPair(address,bool) (BABYCAKE.sol#198-202)
updateGasForProcessing(uint256) should be declared external:
- BABYCAKE.updateGasForProcessing(uint256) (BABYCAKE.sol#221-226)
isExcludedFromFees(address) should be declared external:
- BABYCAKE.isExcludedFromFees(address) (BABYCAKE.sol#240-242)
withdrawableDividendOf(address) should be declared external:
- BABYCAKE.withdrawableDividendOf(address) (BABYCAKE.sol#244-246)
dividendTokenBalanceOf(address) should be declared external:
- BABYCAKE.dividendTokenBalanceOf(address) (BABYCAKE.sol#248-250)
withdrawDividend() should be declared external:
- BABYCAKEDividendTracker.withdrawDividend() (BABYCAKE.sol#504-506)
- DividendPayingToken.withdrawDividend() (DividendPayingToken.sol#70-72)
getAccountAtIndex(uint256) should be declared external:
- BABYCAKEDividendTracker.getAccountAtIndex(uint256) (BABYCAKE.sol#580-597)
process(uint256) should be declared external:
- BABYCAKEDividendTracker.process(uint256) (BABYCAKE.sol#624-669)
distributeCAKEDividends(uint256) should be declared external:
- DividendPayingToken.distributeCAKEDividends(uint256) (DividendPayingToken.sol#55-66)
dividendOf(address) should be declared external:
- DividendPayingToken.dividendOf(address) (DividendPayingToken.sol#98-100)
withdrawnDividendOf(address) should be declared external:
- DividendPayingToken.withdrawnDividendOf(address) (DividendPayingToken.sol#112-114)
name() should be declared external:
- ERC20.name() (ERC20.sol#63-65)
symbol() should be declared external:
- ERC20.symbol() (ERC20.sol#71-73)
decimals() should be declared external:
- ERC20.decimals() (ERC20.sol#88-90)
transfer(address,uint256) should be declared external:
- ERC20.transfer(address,uint256) (ERC20.sol#114-117)
allowance(address,address) should be declared external:
- ERC20.allowance(address,address) (ERC20.sol#122-124)
approve(address,uint256) should be declared external:
- ERC20.approve(address,uint256) (ERC20.sol#133-136)
transferFrom(address,address,uint256) should be declared external:
- ERC20.transferFrom(address,address,uint256) (ERC20.sol#151-159)
increaseAllowance(address,uint256) should be declared external:
- ERC20.increaseAllowance(address,uint256) (ERC20.sol#173-176)
decreaseAllowance(address,uint256) should be declared external:
- ERC20.decreaseAllowance(address,uint256) (ERC20.sol#192-195)
get(IterableMapping.Map,address) should be declared external:
- IterableMapping.get(IterableMapping.Map,address) (IterableMapping.sol#13-15)
getIndexOfKey(IterableMapping.Map,address) should be declared external:
- IterableMapping.getIndexOfKey(IterableMapping.Map,address) (IterableMapping.sol#17-22)
getKeyAtIndex(IterableMapping.Map,uint256) should be declared external:
- IterableMapping.getKeyAtIndex(IterableMapping.Map,uint256) (IterableMapping.sol#24-26)
size(IterableMapping.Map) should be declared external:
- IterableMapping.size(IterableMapping.Map) (IterableMapping.sol#30-32)
renounceOwnership() should be declared external:
- Ownable.renounceOwnership() (Ownable.sol#43-46)
transferOwnership(address) should be declared external:
- Ownable.transferOwnership(address) (Ownable.sol#52-56)
Use the external attribute for functions never called from the contract.

Additional information: link

Average 30d PancakeSwap liquidity is less than $100. Token is either dead or inactive.

Average 30d number of PancakeSwap swaps is less than 1. Token is either dead or inactive.

Contract has 15% buy tax and 16% sell tax.
Taxes are high (over 10%) but contract ownership is renounced.

Token is deployed only at one blockchain

BscScan page for the token does not contain additional info: website, socials, description, etc.

Additional information: link

Unable to find whitepaper link on the website

Unable to find code repository for the project

Young tokens have high risks of scam / price dump / death

Young tokens have high risks of price dump / death

Young tokens have high risks of price dump / death

Token has relatively low CoinGecko rank

Token has relatively low CoinMarketCap rank