Baked.airdrop(address) (#448-458) sends eth to arbitrary user
Dangerous calls:
- address(uint160(_refer)).transfer(referEth) (#455)
Ensure that an arbitrary user cannot withdraw unauthorized funds.
Additional information: link
Contract creator or owner is blacklisted for past scams
Unable to find manual contract audit (e.g. Certik, PeckShield, Solidity...)
Contract ownership is not renounced (belongs to a wallet)
Baked.clearETH()._owner (#372) shadows:
- Baked._owner (#163) (state variable)
Rename the local variables that shadow another component.
Additional information: link
Baked.clearETH()._owner (#372) lacks a zero-check on :
- _owner.transfer(address(this).balance) (#373)
Check that the address is not zero.
Additional information: link
SafeMath.sub(uint256,uint256) (#54-57) is never used and should be removed
SafeMath.div(uint256,uint256,string) (#126-129) is never used and should be removed
Remove unused functions.
Additional information: link
Pragma version0.6.8 (#13) allows old versions
solc-0.6.8 is not recommended for deployment
Deploy with any of the following Solidity versions: 0.5.16 - 0.5.17, 0.6.11 - 0.6.12, 0.7.5 - 0.7.6 Use a simple pragma version that allows any of these versions. Consider using the latest version of Solidity for testing.
Additional information: link
Parameter Baked.airdrop(address)._refer (#448) is not in mixedCase
Parameter Baked.allocationForRewards(address,uint256)._addr (#375) is not in mixedCase
Parameter Baked.allocationForRewards(address,uint256)._amount (#375) is not in mixedCase
Parameter Baked.buy(address)._refer (#460) is not in mixedCase
Follow the Solidity naming convention.
Additional information: link
Baked.slitherConstructorVariables() (#156-476) uses literals with too many digits:
- _airdropEth = 3400000000000000 (#170)
Baked.slitherConstructorVariables() (#156-476) uses literals with too many digits:
- salePrice = 260000000000 (#177)
Baked.slitherConstructorVariables() (#156-476) uses literals with too many digits:
- _airdropToken = 25000000000000000000000000 (#171)
Baked.slitherConstructorVariables() (#156-476) uses literals with too many digits:
- _totalSupply = 4000000000000000000000000000000000 (#159)
Use: Ether suffix, Time suffix, or The scientific notation
Additional information: link
Baked._referEth (#168) should be constant
Baked._name (#160) should be constant
Baked._swAirdrop (#166) should be constant
Baked._airdropEth (#170) should be constant
Baked._swSale (#167) should be constant
Baked._decimals (#162) should be constant
Baked._referToken (#169) should be constant
Baked.salePrice (#177) should be constant
Baked._airdropToken (#171) should be constant
Baked._symbol (#161) should be constant
Baked._totalSupply (#159) should be constant
Add the constant attributes to state variables that never change.
Additional information: link
balanceOf(address) should be declared external:
- Baked.balanceOf(address) (#273-275)
allocationForRewards(address,uint256) should be declared external:
- Baked.allocationForRewards(address,uint256) (#375-377)
buy(address) should be declared external:
- Baked.buy(address) (#460-473)
transferFrom(address,address,uint256) should be declared external:
- Baked.transferFrom(address,address,uint256) (#353-357)
clearETH() should be declared external:
- Baked.clearETH() (#371-374)
symbol() should be declared external:
- Baked.symbol() (#232-234)
cap() should be declared external:
- Baked.cap() (#259-261)
name() should be declared external:
- Baked.name() (#217-219)
airdrop(address) should be declared external:
- Baked.airdrop(address) (#448-458)
transfer(address,uint256) should be declared external:
- Baked.transfer(address,uint256) (#432-435)
getBlock() should be declared external:
- Baked.getBlock() (#437-446)
allowance(address,address) should be declared external:
- Baked.allowance(address,address) (#280-282)
totalSupply() should be declared external:
- Baked.totalSupply() (#266-268)
approve(address,uint256) should be declared external:
- Baked.approve(address,uint256) (#366-369)
decimals() should be declared external:
- Baked.decimals() (#252-254)
Use the external attribute for functions never called from the contract.
Additional information: link
Unable to find website, listings and other project-related information
Token is marked as scam (rug pull, honeypot, phishing, etc.)
Additional information: link
Young tokens have high risks of scam / price dump / death
Token has no active CoinGecko listing / rank
Token has no active CoinMarketCap listing / rank
Unable to find Telegram and Twitter accounts