BabyDoge [Baby Doge Coin] Token

CoinToken.addLiquidity(uint256,uint256) (#1089-1102) sends eth to arbitrary user
Dangerous calls:
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1094-1101)
Ensure that an arbitrary user cannot withdraw unauthorized funds.

Additional information: link

Reentrancy in CoinToken._transfer(address,address,uint256) (#1002-1046):
External calls:
- swapAndLiquify(contractTokenBalance) (#1033)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1094-1101)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1080-1086)
External calls sending eth:
- swapAndLiquify(contractTokenBalance) (#1033)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1094-1101)
State variables written after the call(s):
- _tokenTransfer(from,to,amount,takeFee) (#1045)
- _rOwned[address(this)] = _rOwned[address(this)].add(rLiquidity) (#953)
- _rOwned[sender] = _rOwned[sender].sub(rAmount) (#1127)
- _rOwned[sender] = _rOwned[sender].sub(rAmount) (#1136)
- _rOwned[sender] = _rOwned[sender].sub(rAmount) (#1147)
- _rOwned[recipient] = _rOwned[recipient].add(rTransferAmount) (#1128)
- _rOwned[sender] = _rOwned[sender].sub(rAmount) (#867)
- _rOwned[recipient] = _rOwned[recipient].add(rTransferAmount) (#1138)
- _rOwned[recipient] = _rOwned[recipient].add(rTransferAmount) (#1148)
- _rOwned[recipient] = _rOwned[recipient].add(rTransferAmount) (#869)
- _tokenTransfer(from,to,amount,takeFee) (#1045)
- _rTotal = _rTotal.sub(rFee) (#908)
- _tokenTransfer(from,to,amount,takeFee) (#1045)
- _tOwned[address(this)] = _tOwned[address(this)].add(tLiquidity) (#955)
- _tOwned[sender] = _tOwned[sender].sub(tAmount) (#866)
- _tOwned[sender] = _tOwned[sender].sub(tAmount) (#1146)
- _tOwned[recipient] = _tOwned[recipient].add(tTransferAmount) (#1137)
- _tOwned[recipient] = _tOwned[recipient].add(tTransferAmount) (#868)
Apply the check-effects-interactions pattern.

Additional information: link

Combination 1: Reentrancy vulnerabilities + Functions that send Ether to arbitraty destination. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.

CoinToken.allowance(address,address).owner (#783) shadows:
- Ownable.owner() (#404-406) (function)
CoinToken._approve(address,address,uint256).owner (#994) shadows:
- Ownable.owner() (#404-406) (function)
Rename the local variables that shadow another component.

Additional information: link

CoinToken.setLiquidityFeePercent(uint256) (#887-889) should emit an event for:
- _liquidityFee = liquidityFee (#888)
CoinToken.setNumTokensSellToAddToLiquidity(uint256) (#891-893) should emit an event for:
- numTokensSellToAddToLiquidity = swapNumber * 10 ** _decimals (#892)
CoinToken.setMaxTxPercent(uint256) (#895-897) should emit an event for:
- _maxTxAmount = maxTxPercent * 10 ** _decimals (#896)
CoinToken.setTaxFeePercent(uint256) (#883-885) should emit an event for:
- _taxFee = taxFee (#884)
Emit an event for critical parameter changes.

Additional information: link

Ownable.unlock() (#451-456) uses timestamp for comparisons
Dangerous comparisons:
- require(bool,string)(now > _lockTime,Contract is locked until 7 days) (#453)
Avoid relying on block.timestamp.

Additional information: link

Redundant expression "this (#237)" inContext (#231-240)
Remove redundant statements if they congest code but offer no value.

Additional information: link

totalFees() should be declared external:
- CoinToken.totalFees() (#812-814)
renounceOwnership() should be declared external:
- Ownable.renounceOwnership() (#423-426)
totalSupply() should be declared external:
- CoinToken.totalSupply() (#769-771)
setSwapAndLiquifyEnabled(bool) should be declared external:
- CoinToken.setSwapAndLiquifyEnabled(bool) (#899-902)
includeInFee(address) should be declared external:
- CoinToken.includeInFee(address) (#879-881)
isExcludedFromReward(address) should be declared external:
- CoinToken.isExcludedFromReward(address) (#808-810)
approve(address,uint256) should be declared external:
- CoinToken.approve(address,uint256) (#787-790)
reflectionFromToken(uint256,bool) should be declared external:
- CoinToken.reflectionFromToken(uint256,bool) (#825-834)
excludeFromReward(address) should be declared external:
- CoinToken.excludeFromReward(address) (#842-850)
deliver(uint256) should be declared external:
- CoinToken.deliver(uint256) (#816-823)
setNumTokensSellToAddToLiquidity(uint256) should be declared external:
- CoinToken.setNumTokensSellToAddToLiquidity(uint256) (#891-893)
decreaseAllowance(address,uint256) should be declared external:
- CoinToken.decreaseAllowance(address,uint256) (#803-806)
excludeFromFee(address) should be declared external:
- CoinToken.excludeFromFee(address) (#875-877)
transferOwnership(address) should be declared external:
- Ownable.transferOwnership(address) (#432-436)
isExcludedFromFee(address) should be declared external:
- CoinToken.isExcludedFromFee(address) (#990-992)
geUnlockTime() should be declared external:
- Ownable.geUnlockTime() (#438-440)
transfer(address,uint256) should be declared external:
- CoinToken.transfer(address,uint256) (#778-781)
transferFrom(address,address,uint256) should be declared external:
- CoinToken.transferFrom(address,address,uint256) (#792-796)
decimals() should be declared external:
- CoinToken.decimals() (#765-767)
symbol() should be declared external:
- CoinToken.symbol() (#761-763)
unlock() should be declared external:
- Ownable.unlock() (#451-456)
increaseAllowance(address,uint256) should be declared external:
- CoinToken.increaseAllowance(address,uint256) (#798-801)
name() should be declared external:
- CoinToken.name() (#757-759)
allowance(address,address) should be declared external:
- CoinToken.allowance(address,address) (#783-785)
lock(uint256) should be declared external:
- Ownable.lock(uint256) (#443-448)
setMaxTxPercent(uint256) should be declared external:
- CoinToken.setMaxTxPercent(uint256) (#895-897)
claimTokens() should be declared external:
- CoinToken.claimTokens() (#959-961)
Use the external attribute for functions never called from the contract.

Additional information: link

CoinToken.includeInReward(address) (#852-863) has costly operations inside a loop:
- _excluded.pop() (#859)
Use a local variable to hold the loop computation result.

Additional information: link

Reentrancy in CoinToken.swapAndLiquify(uint256) (#1048-1069):
External calls:
- swapTokensForEth(half) (#1060)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1080-1086)
- addLiquidity(otherHalf,newBalance) (#1066)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1094-1101)
External calls sending eth:
- addLiquidity(otherHalf,newBalance) (#1066)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1094-1101)
State variables written after the call(s):
- addLiquidity(otherHalf,newBalance) (#1066)
- _allowances[owner][spender] = amount (#998)
Reentrancy in CoinToken.transferFrom(address,address,uint256) (#792-796):
External calls:
- _transfer(sender,recipient,amount) (#793)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1094-1101)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1080-1086)
External calls sending eth:
- _transfer(sender,recipient,amount) (#793)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1094-1101)
State variables written after the call(s):
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#794)
- _allowances[owner][spender] = amount (#998)
Reentrancy in CoinToken._transfer(address,address,uint256) (#1002-1046):
External calls:
- swapAndLiquify(contractTokenBalance) (#1033)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1094-1101)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1080-1086)
External calls sending eth:
- swapAndLiquify(contractTokenBalance) (#1033)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1094-1101)
State variables written after the call(s):
- _tokenTransfer(from,to,amount,takeFee) (#1045)
- _liquidityFee = _previousLiquidityFee (#987)
- _liquidityFee = 0 (#982)
- _tokenTransfer(from,to,amount,takeFee) (#1045)
- _previousLiquidityFee = _liquidityFee (#979)
- _tokenTransfer(from,to,amount,takeFee) (#1045)
- _previousTaxFee = _taxFee (#978)
- _tokenTransfer(from,to,amount,takeFee) (#1045)
- _tFeeTotal = _tFeeTotal.add(tFee) (#909)
- _tokenTransfer(from,to,amount,takeFee) (#1045)
- _taxFee = _previousTaxFee (#986)
- _taxFee = 0 (#981)
Apply the check-effects-interactions pattern.

Additional information: link

Reentrancy in CoinToken.swapAndLiquify(uint256) (#1048-1069):
External calls:
- swapTokensForEth(half) (#1060)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1080-1086)
- addLiquidity(otherHalf,newBalance) (#1066)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1094-1101)
External calls sending eth:
- addLiquidity(otherHalf,newBalance) (#1066)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1094-1101)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#999)
- addLiquidity(otherHalf,newBalance) (#1066)
- SwapAndLiquify(half,newBalance,otherHalf) (#1068)
Reentrancy in CoinToken.transferFrom(address,address,uint256) (#792-796):
External calls:
- _transfer(sender,recipient,amount) (#793)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1094-1101)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1080-1086)
External calls sending eth:
- _transfer(sender,recipient,amount) (#793)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1094-1101)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#999)
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#794)
Reentrancy in CoinToken._transfer(address,address,uint256) (#1002-1046):
External calls:
- swapAndLiquify(contractTokenBalance) (#1033)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1094-1101)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1080-1086)
External calls sending eth:
- swapAndLiquify(contractTokenBalance) (#1033)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1094-1101)
Event emitted after the call(s):
- Transfer(sender,recipient,tTransferAmount) (#1131)
- _tokenTransfer(from,to,amount,takeFee) (#1045)
- Transfer(sender,recipient,tTransferAmount) (#1141)
- _tokenTransfer(from,to,amount,takeFee) (#1045)
- Transfer(sender,recipient,tTransferAmount) (#1151)
- _tokenTransfer(from,to,amount,takeFee) (#1045)
- Transfer(sender,recipient,tTransferAmount) (#872)
- _tokenTransfer(from,to,amount,takeFee) (#1045)
Apply the check-effects-interactions pattern.

Additional information: link

Address.isContract(address) (#264-273) uses assembly
- INLINE ASM (#271)
Address._functionCallWithValue(address,bytes,uint256,string) (#357-378) uses assembly
- INLINE ASM (#370-373)
Do not use evm assembly.

Additional information: link

Function IUniswapV2Pair.PERMIT_TYPEHASH() (#496) is not in mixedCase
Function IUniswapV2Pair.MINIMUM_LIQUIDITY() (#513) is not in mixedCase
Variable CoinToken._liquidityFee (#698) is not in mixedCase
Function IUniswapV2Pair.DOMAIN_SEPARATOR() (#495) is not in mixedCase
Parameter CoinToken.setSwapAndLiquifyEnabled(bool)._enabled (#899) is not in mixedCase
Variable CoinToken._maxTxAmount (#707) is not in mixedCase
Parameter CoinToken.calculateLiquidityFee(uint256)._amount (#969) is not in mixedCase
Variable Ownable._owner (#394) is not in mixedCase
Variable CoinToken._taxFee (#695) is not in mixedCase
Function IUniswapV2Router01.WETH() (#535) is not in mixedCase
Parameter CoinToken.calculateTaxFee(uint256)._amount (#963) is not in mixedCase
Follow the Solidity naming convention.

Additional information: link

CoinToken.addLiquidity(uint256,uint256) (#1089-1102) ignores return value by uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1094-1101)
Ensure that all the return values of the function calls are used.

Additional information: link

CoinToken.constructor(string,string,uint256,uint256,uint256,uint256,uint256,uint256,address,address).tokenOwner (#724) lacks a zero-check on :
- _owner = tokenOwner (#752)
Check that the address is not zero.

Additional information: link

Variable CoinToken._getRValues(uint256,uint256,uint256,uint256).rTransferAmount (#929) is too similar to CoinToken._transferToExcluded(address,address,uint256).tTransferAmount (#1135)
Variable CoinToken._transferStandard(address,address,uint256).rTransferAmount (#1126) is too similar to CoinToken._getValues(uint256).tTransferAmount (#913)
Variable CoinToken._getValues(uint256).rTransferAmount (#914) is too similar to CoinToken._transferStandard(address,address,uint256).tTransferAmount (#1126)
Variable CoinToken._getValues(uint256).rTransferAmount (#914) is too similar to CoinToken._transferBothExcluded(address,address,uint256).tTransferAmount (#865)
Variable CoinToken._getRValues(uint256,uint256,uint256,uint256).rTransferAmount (#929) is too similar to CoinToken._transferStandard(address,address,uint256).tTransferAmount (#1126)
Variable CoinToken._transferToExcluded(address,address,uint256).rTransferAmount (#1135) is too similar to CoinToken._getValues(uint256).tTransferAmount (#913)
Variable CoinToken.reflectionFromToken(uint256,bool).rTransferAmount (#831) is too similar to CoinToken._transferToExcluded(address,address,uint256).tTransferAmount (#1135)
Variable CoinToken._getValues(uint256).rTransferAmount (#914) is too similar to CoinToken._transferToExcluded(address,address,uint256).tTransferAmount (#1135)
Variable CoinToken.reflectionFromToken(uint256,bool).rTransferAmount (#831) is too similar to CoinToken._getTValues(uint256).tTransferAmount (#921)
Variable CoinToken._getValues(uint256).rTransferAmount (#914) is too similar to CoinToken._getTValues(uint256).tTransferAmount (#921)
Variable CoinToken._transferStandard(address,address,uint256).rTransferAmount (#1126) is too similar to CoinToken._transferFromExcluded(address,address,uint256).tTransferAmount (#1145)
Variable CoinToken._transferStandard(address,address,uint256).rTransferAmount (#1126) is too similar to CoinToken._transferStandard(address,address,uint256).tTransferAmount (#1126)
Variable CoinToken.reflectionFromToken(uint256,bool).rTransferAmount (#831) is too similar to CoinToken._getValues(uint256).tTransferAmount (#913)
Variable CoinToken._transferFromExcluded(address,address,uint256).rTransferAmount (#1145) is too similar to CoinToken._transferBothExcluded(address,address,uint256).tTransferAmount (#865)
Variable CoinToken._transferBothExcluded(address,address,uint256).rTransferAmount (#865) is too similar to CoinToken._transferBothExcluded(address,address,uint256).tTransferAmount (#865)
Variable CoinToken._transferToExcluded(address,address,uint256).rTransferAmount (#1135) is too similar to CoinToken._transferStandard(address,address,uint256).tTransferAmount (#1126)
Variable CoinToken._transferStandard(address,address,uint256).rTransferAmount (#1126) is too similar to CoinToken._transferToExcluded(address,address,uint256).tTransferAmount (#1135)
Variable CoinToken._transferToExcluded(address,address,uint256).rTransferAmount (#1135) is too similar to CoinToken._getTValues(uint256).tTransferAmount (#921)
Variable CoinToken._transferStandard(address,address,uint256).rTransferAmount (#1126) is too similar to CoinToken._transferBothExcluded(address,address,uint256).tTransferAmount (#865)
Variable CoinToken._getValues(uint256).rTransferAmount (#914) is too similar to CoinToken._transferFromExcluded(address,address,uint256).tTransferAmount (#1145)
Variable CoinToken._getValues(uint256).rTransferAmount (#914) is too similar to CoinToken._getValues(uint256).tTransferAmount (#913)
Variable CoinToken.reflectionFromToken(uint256,bool).rTransferAmount (#831) is too similar to CoinToken._transferFromExcluded(address,address,uint256).tTransferAmount (#1145)
Variable CoinToken._transferStandard(address,address,uint256).rTransferAmount (#1126) is too similar to CoinToken._getTValues(uint256).tTransferAmount (#921)
Variable CoinToken._transferToExcluded(address,address,uint256).rTransferAmount (#1135) is too similar to CoinToken._transferBothExcluded(address,address,uint256).tTransferAmount (#865)
Variable CoinToken._transferBothExcluded(address,address,uint256).rTransferAmount (#865) is too similar to CoinToken._transferFromExcluded(address,address,uint256).tTransferAmount (#1145)
Variable CoinToken._getRValues(uint256,uint256,uint256,uint256).rTransferAmount (#929) is too similar to CoinToken._transferFromExcluded(address,address,uint256).tTransferAmount (#1145)
Variable IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountADesired (#540) is too similar to IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountBDesired (#541)
Variable CoinToken.reflectionFromToken(uint256,bool).rTransferAmount (#831) is too similar to CoinToken._transferStandard(address,address,uint256).tTransferAmount (#1126)
Variable CoinToken._getRValues(uint256,uint256,uint256,uint256).rTransferAmount (#929) is too similar to CoinToken._getTValues(uint256).tTransferAmount (#921)
Variable CoinToken._transferFromExcluded(address,address,uint256).rTransferAmount (#1145) is too similar to CoinToken._getTValues(uint256).tTransferAmount (#921)
Variable CoinToken._transferBothExcluded(address,address,uint256).rTransferAmount (#865) is too similar to CoinToken._getTValues(uint256).tTransferAmount (#921)
Variable CoinToken._transferFromExcluded(address,address,uint256).rTransferAmount (#1145) is too similar to CoinToken._getValues(uint256).tTransferAmount (#913)
Variable CoinToken._transferFromExcluded(address,address,uint256).rTransferAmount (#1145) is too similar to CoinToken._transferFromExcluded(address,address,uint256).tTransferAmount (#1145)
Variable CoinToken._transferBothExcluded(address,address,uint256).rTransferAmount (#865) is too similar to CoinToken._getValues(uint256).tTransferAmount (#913)
Variable CoinToken._getRValues(uint256,uint256,uint256,uint256).rTransferAmount (#929) is too similar to CoinToken._getValues(uint256).tTransferAmount (#913)
Variable CoinToken._transferBothExcluded(address,address,uint256).rTransferAmount (#865) is too similar to CoinToken._transferToExcluded(address,address,uint256).tTransferAmount (#1135)
Variable CoinToken._transferToExcluded(address,address,uint256).rTransferAmount (#1135) is too similar to CoinToken._transferFromExcluded(address,address,uint256).tTransferAmount (#1145)
Variable CoinToken._transferToExcluded(address,address,uint256).rTransferAmount (#1135) is too similar to CoinToken._transferToExcluded(address,address,uint256).tTransferAmount (#1135)
Variable CoinToken._transferBothExcluded(address,address,uint256).rTransferAmount (#865) is too similar to CoinToken._transferStandard(address,address,uint256).tTransferAmount (#1126)
Variable CoinToken.reflectionFromToken(uint256,bool).rTransferAmount (#831) is too similar to CoinToken._transferBothExcluded(address,address,uint256).tTransferAmount (#865)
Variable CoinToken._getRValues(uint256,uint256,uint256,uint256).rTransferAmount (#929) is too similar to CoinToken._transferBothExcluded(address,address,uint256).tTransferAmount (#865)
Variable CoinToken._transferFromExcluded(address,address,uint256).rTransferAmount (#1145) is too similar to CoinToken._transferToExcluded(address,address,uint256).tTransferAmount (#1135)
Variable CoinToken._transferFromExcluded(address,address,uint256).rTransferAmount (#1145) is too similar to CoinToken._transferStandard(address,address,uint256).tTransferAmount (#1126)
Prevent variables from having similar names.

Additional information: link

Address.sendValue(address,uint256) (#291-297) is never used and should be removed
Address.functionCallWithValue(address,bytes,uint256) (#342-344) is never used and should be removed
SafeMath.mod(uint256,uint256,string) (#225-228) is never used and should be removed
Address.functionCallWithValue(address,bytes,uint256,string) (#352-355) is never used and should be removed
Context._msgData() (#236-239) is never used and should be removed
SafeMath.mod(uint256,uint256) (#209-211) is never used and should be removed
Address._functionCallWithValue(address,bytes,uint256,string) (#357-378) is never used and should be removed
Address.isContract(address) (#264-273) is never used and should be removed
Address.functionCall(address,bytes,string) (#327-329) is never used and should be removed
Address.functionCall(address,bytes) (#317-319) is never used and should be removed
Remove unused functions.

Additional information: link

Low level call in Address._functionCallWithValue(address,bytes,uint256,string) (#357-378):
- (success,returndata) = target.call{value: weiValue}(data) (#361)
Low level call in Address.sendValue(address,uint256) (#291-297):
- (success) = recipient.call{value: amount}() (#295)
Avoid low-level calls. Check the call success. If the call is meant for a contract, check for code existence

Additional information: link

Unable to find audit link on the website