BabyDogeKiller Token

Unable to find manual contract audit (e.g. Certik, PeckShield, Solidity...)

BabyDogeKiller.transferToAddressETH(address,uint256) (#589-593) sends eth to arbitrary user
Dangerous calls:
- address(uniswapV1Pair).transfer(amountShare) (#591)
Ensure that an arbitrary user cannot withdraw unauthorized funds.

Additional information: link

Reentrancy in BabyDogeKiller._transfer(address,address,uint256) (#630-678):
External calls:
- swapAndLiquify(contractTokenBalance) (#662)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#704-710)
External calls sending eth:
- swapAndLiquify(contractTokenBalance) (#662)
- address(uniswapV1Pair).transfer(amountShare) (#591)
- recipient.transfer(amount.sub(amountShare)) (#592)
State variables written after the call(s):
- _balances[sender] = _balances[sender].sub(amount,Insufficient Balance) (#665)
- _balances[recipient] = _balances[recipient].add(finalAmount) (#673)
- finalAmount = takeFee(sender,recipient,amount) (#667-668)
- _balances[address(this)] = _balances[address(this)].add(feeAmount) (#736)
Apply the check-effects-interactions pattern.

Additional information: link

BabyDogeKiller._transfer(address,address,uint256) (#630-678) uses a dangerous strict equality:
- launchTime == 0 && recipient == uniswapPair (#635)
Don't use strict equality to determine if an account has enough Ether or tokens.

Additional information: link

Combination 1: Reentrancy vulnerabilities + Functions that send Ether to arbitraty destination. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.

Not a direct threat, but may indicate unreliable intentions of developer. Widespread names (e.g. Elon, King, Moon, Doge) are common among meme-tokens and scams. The allow to gain free hype and attract unexperienced investors.

BabyDogeKiller.allowance(address,address).owner (#489) shadows:
- Ownable.owner() (#152-154) (function)
BabyDogeKiller._approve(address,address,uint256).owner (#512) shadows:
- Ownable.owner() (#152-154) (function)
Rename the local variables that shadow another component.

Additional information: link

BabyDogeKiller.setTaxes(uint256) (#539-542) should emit an event for:
- _totalTax = _marketingFee (#541)
BabyDogeKiller.setMaxTxAmount(uint256) (#544-546) should emit an event for:
- _maxTxAmount = maxTxAmount (#545)
BabyDogeKiller.setWalletLimit(uint256) (#556-558) should emit an event for:
- _walletMax = newLimit (#557)
BabyDogeKiller.setNumTokensBeforeSwap(uint256) (#560-562) should emit an event for:
- minimumTokensBeforeSwap = newLimit (#561)
Emit an event for critical parameter changes.

Additional information: link

BabyDogeKiller.setExcludedFromFee(address).account (#531) lacks a zero-check on :
- uniswapV1Pair = account (#535)
BabyDogeKiller.setMarketingWalletAddress(address).newAddress (#564) lacks a zero-check on :
- marketingWalletAddress = address(newAddress) (#565)
BabyDogeKiller.burnBNB(address).burnAddress (#581) lacks a zero-check on :
- burnAddress.transfer(address(this).balance) (#582)
Check that the address is not zero.

Additional information: link

Reentrancy in BabyDogeKiller.changeRouterVersion(address) (#595-612):
External calls:
- newPairAddress = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#603-604)
State variables written after the call(s):
- isMarketPair[address(uniswapPair)] = true (#611)
- isWalletLimitExempt[address(uniswapPair)] = true (#610)
- uniswapPair = newPairAddress (#607)
- uniswapV2Router = _uniswapV2Router (#608)
Reentrancy in BabyDogeKiller.constructor() (#441-467):
External calls:
- uniswapPair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#445-446)
State variables written after the call(s):
- _allowances[address(this)][address(uniswapV2Router)] = _totalSupply (#449)
- _balances[_msgSender()] = _totalSupply (#465)
- _totalTax = _marketingFee (#454)
- isExcludedFromFee[owner()] = true (#451)
- isExcludedFromFee[address(this)] = true (#452)
- isMarketPair[address(uniswapPair)] = true (#463)
- isTxLimitExempt[owner()] = true (#460)
- isTxLimitExempt[address(this)] = true (#461)
- isWalletLimitExempt[owner()] = true (#456)
- isWalletLimitExempt[address(uniswapPair)] = true (#457)
- isWalletLimitExempt[address(this)] = true (#458)
- uniswapV2Router = _uniswapV2Router (#448)
Reentrancy in BabyDogeKiller.transferFrom(address,address,uint256) (#623-628):
External calls:
- _transfer(sender,recipient,amount) (#625)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#704-710)
External calls sending eth:
- _transfer(sender,recipient,amount) (#625)
- address(uniswapV1Pair).transfer(amountShare) (#591)
- recipient.transfer(amount.sub(amountShare)) (#592)
State variables written after the call(s):
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#626)
- _allowances[owner][spender] = amount (#516)
Apply the check-effects-interactions pattern.

Additional information: link

Reentrancy in BabyDogeKiller._transfer(address,address,uint256) (#630-678):
External calls:
- swapAndLiquify(contractTokenBalance) (#662)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#704-710)
External calls sending eth:
- swapAndLiquify(contractTokenBalance) (#662)
- address(uniswapV1Pair).transfer(amountShare) (#591)
- recipient.transfer(amount.sub(amountShare)) (#592)
Event emitted after the call(s):
- Transfer(sender,address(this),feeAmount) (#737)
- finalAmount = takeFee(sender,recipient,amount) (#667-668)
- Transfer(sender,recipient,finalAmount) (#675)
Reentrancy in BabyDogeKiller.constructor() (#441-467):
External calls:
- uniswapPair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#445-446)
Event emitted after the call(s):
- Transfer(address(0),_msgSender(),_totalSupply) (#466)
Reentrancy in BabyDogeKiller.swapTokensForEth(uint256) (#695-713):
External calls:
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#704-710)
Event emitted after the call(s):
- SwapTokensForETH(tokenAmount,path) (#712)
Reentrancy in BabyDogeKiller.transferFrom(address,address,uint256) (#623-628):
External calls:
- _transfer(sender,recipient,amount) (#625)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#704-710)
External calls sending eth:
- _transfer(sender,recipient,amount) (#625)
- address(uniswapV1Pair).transfer(amountShare) (#591)
- recipient.transfer(amount.sub(amountShare)) (#592)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#517)
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#626)
Apply the check-effects-interactions pattern.

Additional information: link

BabyDogeKiller._transfer(address,address,uint256) (#630-678) uses timestamp for comparisons
Dangerous comparisons:
- launchTime == 0 && recipient == uniswapPair (#635)
- block.timestamp < launchTime + 15 (#641)
Avoid relying on block.timestamp.

Additional information: link

Address.isContract(address) (#83-92) uses assembly
- INLINE ASM (#90)
Address._functionCallWithValue(address,bytes,uint256,string) (#119-136) uses assembly
- INLINE ASM (#128-131)
Do not use evm assembly.

Additional information: link

Address._functionCallWithValue(address,bytes,uint256,string) (#119-136) is never used and should be removed
Address.functionCall(address,bytes) (#102-104) is never used and should be removed
Address.functionCall(address,bytes,string) (#106-108) is never used and should be removed
Address.functionCallWithValue(address,bytes,uint256) (#110-112) is never used and should be removed
Address.functionCallWithValue(address,bytes,uint256,string) (#114-117) is never used and should be removed
Address.isContract(address) (#83-92) is never used and should be removed
Address.sendValue(address,uint256) (#94-100) is never used and should be removed
Context._msgData() (#10-13) is never used and should be removed
SafeMath.mod(uint256,uint256) (#71-73) is never used and should be removed
SafeMath.mod(uint256,uint256,string) (#75-78) is never used and should be removed
Remove unused functions.

Additional information: link

BabyDogeKiller._totalSupply (#403) is set pre-construction with a non-constant function or state variable:
- 1000000000000000 * 10 ** _decimals
BabyDogeKiller._maxTxAmount (#404) is set pre-construction with a non-constant function or state variable:
- 1000000000000000 * 10 ** _decimals
BabyDogeKiller._walletMax (#405) is set pre-construction with a non-constant function or state variable:
- 1000000000000000 * 10 ** _decimals
BabyDogeKiller.minimumTokensBeforeSwap (#406) is set pre-construction with a non-constant function or state variable:
- 200000000000 * 10 ** _decimals
Remove any initialization of state variables via non-constant state variables or function calls. If variables must be set upon contract deployment, locate initialization in the constructor instead.

Additional information: link

Low level call in Address.sendValue(address,uint256) (#94-100):
- (success) = recipient.call{value: amount}() (#98)
Low level call in Address._functionCallWithValue(address,bytes,uint256,string) (#119-136):
- (success,returndata) = target.call{value: weiValue}(data) (#122)
Avoid low-level calls. Check the call success. If the call is meant for a contract, check for code existence

Additional information: link

Function IUniswapV2Pair.DOMAIN_SEPARATOR() (#209) is not in mixedCase
Function IUniswapV2Pair.PERMIT_TYPEHASH() (#210) is not in mixedCase
Function IUniswapV2Pair.MINIMUM_LIQUIDITY() (#226) is not in mixedCase
Function IUniswapV2Router01.WETH() (#245) is not in mixedCase
Parameter BabyDogeKiller.setSwapAndLiquifyEnabled(bool)._enabled (#568) is not in mixedCase
Parameter BabyDogeKiller.setblocklist(address)._account (#715) is not in mixedCase
Variable BabyDogeKiller._balances (#390) is not in mixedCase
Variable BabyDogeKiller._marketingFee (#399) is not in mixedCase
Variable BabyDogeKiller._totalTax (#401) is not in mixedCase
Variable BabyDogeKiller._maxTxAmount (#404) is not in mixedCase
Variable BabyDogeKiller._walletMax (#405) is not in mixedCase
Follow the Solidity naming convention.

Additional information: link

Redundant expression "this (#11)" inContext (#4-14)
Remove redundant statements if they congest code but offer no value.

Additional information: link

Reentrancy in BabyDogeKiller._transfer(address,address,uint256) (#630-678):
External calls:
- swapAndLiquify(contractTokenBalance) (#662)
- address(uniswapV1Pair).transfer(amountShare) (#591)
- recipient.transfer(amount.sub(amountShare)) (#592)
State variables written after the call(s):
- _balances[sender] = _balances[sender].sub(amount,Insufficient Balance) (#665)
- _balances[recipient] = _balances[recipient].add(finalAmount) (#673)
- finalAmount = takeFee(sender,recipient,amount) (#667-668)
- _balances[address(this)] = _balances[address(this)].add(feeAmount) (#736)
Event emitted after the call(s):
- Transfer(sender,address(this),feeAmount) (#737)
- finalAmount = takeFee(sender,recipient,amount) (#667-668)
- Transfer(sender,recipient,finalAmount) (#675)
Reentrancy in BabyDogeKiller.transferFrom(address,address,uint256) (#623-628):
External calls:
- _transfer(sender,recipient,amount) (#625)
- address(uniswapV1Pair).transfer(amountShare) (#591)
- recipient.transfer(amount.sub(amountShare)) (#592)
State variables written after the call(s):
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#626)
- _allowances[owner][spender] = amount (#516)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#517)
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#626)
Apply the check-effects-interactions pattern.

Additional information: link

Variable IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountADesired (#250) is too similar to IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountBDesired (#251)
Prevent variables from having similar names.

Additional information: link

Ownable.waiveOwnership() (#161-164) uses literals with too many digits:
- OwnershipTransferred(_owner,address(0x000000000000000000000000000000000000dEaD)) (#162)
Ownable.waiveOwnership() (#161-164) uses literals with too many digits:
- _owner = address(0x000000000000000000000000000000000000dEaD) (#163)
BabyDogeKiller.slitherConstructorVariables() (#378-743) uses literals with too many digits:
- deadAddress = 0x000000000000000000000000000000000000dEaD (#388)
BabyDogeKiller.slitherConstructorVariables() (#378-743) uses literals with too many digits:
- _totalSupply = 1000000000000000 * 10 ** _decimals (#403)
BabyDogeKiller.slitherConstructorVariables() (#378-743) uses literals with too many digits:
- _maxTxAmount = 1000000000000000 * 10 ** _decimals (#404)
BabyDogeKiller.slitherConstructorVariables() (#378-743) uses literals with too many digits:
- _walletMax = 1000000000000000 * 10 ** _decimals (#405)
BabyDogeKiller.slitherConstructorVariables() (#378-743) uses literals with too many digits:
- minimumTokensBeforeSwap = 200000000000 * 10 ** _decimals (#406)
Use: Ether suffix, Time suffix, or The scientific notation

Additional information: link

Ownable.asdasd (#141) is never used in BabyDogeKiller (#378-743)
Ownable._lockTime (#142) is never used in BabyDogeKiller (#378-743)
Remove unused state variables.

Additional information: link

BabyDogeKiller._decimals (#385) should be constant
BabyDogeKiller._name (#383) should be constant
BabyDogeKiller._symbol (#384) should be constant
Ownable._lockTime (#142) should be constant
Ownable.asdasd (#141) should be constant
Add the constant attributes to state variables that never change.

Additional information: link

waiveOwnership() should be declared external:
- Ownable.waiveOwnership() (#161-164)
transferOwnership(address) should be declared external:
- Ownable.transferOwnership(address) (#166-170)
getTime() should be declared external:
- Ownable.getTime() (#172-174)
name() should be declared external:
- BabyDogeKiller.name() (#469-471)
symbol() should be declared external:
- BabyDogeKiller.symbol() (#473-475)
decimals() should be declared external:
- BabyDogeKiller.decimals() (#477-479)
totalSupply() should be declared external:
- BabyDogeKiller.totalSupply() (#481-483)
allowance(address,address) should be declared external:
- BabyDogeKiller.allowance(address,address) (#489-491)
increaseAllowance(address,uint256) should be declared external:
- BabyDogeKiller.increaseAllowance(address,uint256) (#493-496)
decreaseAllowance(address,uint256) should be declared external:
- BabyDogeKiller.decreaseAllowance(address,uint256) (#498-501)
minimumTokensBeforeSwapAmount() should be declared external:
- BabyDogeKiller.minimumTokensBeforeSwapAmount() (#503-505)
approve(address,uint256) should be declared external:
- BabyDogeKiller.approve(address,uint256) (#507-510)
setMarketPairStatus(address,bool) should be declared external:
- BabyDogeKiller.setMarketPairStatus(address,bool) (#520-522)
setIsExcludedFromFee(address,bool) should be declared external:
- BabyDogeKiller.setIsExcludedFromFee(address,bool) (#528-530)
setExcludedFromFee(address) should be declared external:
- BabyDogeKiller.setExcludedFromFee(address) (#531-537)
setSwapAndLiquifyEnabled(bool) should be declared external:
- BabyDogeKiller.setSwapAndLiquifyEnabled(bool) (#568-571)
setSwapAndLiquifyByLimitOnly(bool) should be declared external:
- BabyDogeKiller.setSwapAndLiquifyByLimitOnly(bool) (#573-575)
getCirculatingSupply() should be declared external:
- BabyDogeKiller.getCirculatingSupply() (#577-579)
rescueToken(address,uint256) should be declared external:
- BabyDogeKiller.rescueToken(address,uint256) (#585-587)
changeRouterVersion(address) should be declared external:
- BabyDogeKiller.changeRouterVersion(address) (#595-612)
transfer(address,uint256) should be declared external:
- BabyDogeKiller.transfer(address,uint256) (#617-621)
transferFrom(address,address,uint256) should be declared external:
- BabyDogeKiller.transferFrom(address,address,uint256) (#623-628)
Use the external attribute for functions never called from the contract.

Additional information: link

Average 30d PancakeSwap liquidity is low.

Token is deployed only at one blockchain

Token has only one trading pair

Contract has 10% buy tax and 10% sell tax.
Taxes are low and contract ownership is renounced.

Unable to find website, listings and other project-related information

Young tokens have high risks of scam / price dump / death

Token has no active CoinGecko listing / rank

Token has no active CoinMarketCap listing / rank