$BOMB is an algorithmic token pegged to #Bitcoin. Best APR available on #BTC, anywhere! $BTC price stability, DeFi yields! Socials: https://t.co/e423pRH4im
Unable to verify that contract auditor is trusted: Certik, Quantstamp, Hacken, Solidity, Paladinsec, Openzeppelin, Verichains
Contract ownership is not renounced (belongs to a wallet)
Domain.constructor() (@boringcrypto/boring-solidity/contracts/Domain.sol#29-32) uses assembly
- INLINE ASM (@boringcrypto/boring-solidity/contracts/Domain.sol#30)
Domain._domainSeparator() (@boringcrypto/boring-solidity/contracts/Domain.sol#38-41) uses assembly
- INLINE ASM (@boringcrypto/boring-solidity/contracts/Domain.sol#39)
Do not use evm assembly.
Additional information: link
BoringMath.sub(uint256,uint256) (@boringcrypto/boring-solidity/contracts/libraries/BoringMath.sol#11-13) is never used and should be removed
BoringMath.to32(uint256) (@boringcrypto/boring-solidity/contracts/libraries/BoringMath.sol#29-32) is never used and should be removed
BoringMath.to64(uint256) (@boringcrypto/boring-solidity/contracts/libraries/BoringMath.sol#24-27) is never used and should be removed
BoringMath128.add(uint128,uint128) (@boringcrypto/boring-solidity/contracts/libraries/BoringMath.sol#37-39) is never used and should be removed
BoringMath128.sub(uint128,uint128) (@boringcrypto/boring-solidity/contracts/libraries/BoringMath.sol#41-43) is never used and should be removed
BoringMath32.add(uint32,uint32) (@boringcrypto/boring-solidity/contracts/libraries/BoringMath.sol#59-61) is never used and should be removed
BoringMath32.sub(uint32,uint32) (@boringcrypto/boring-solidity/contracts/libraries/BoringMath.sol#63-65) is never used and should be removed
BoringMath64.add(uint64,uint64) (@boringcrypto/boring-solidity/contracts/libraries/BoringMath.sol#48-50) is never used and should be removed
BoringMath64.sub(uint64,uint64) (@boringcrypto/boring-solidity/contracts/libraries/BoringMath.sol#52-54) is never used and should be removed
ERC20WithSupply._burn(address,uint256) (@boringcrypto/boring-solidity/contracts/ERC20.sol#136-140) is never used and should be removed
ERC20WithSupply._mint(address,uint256) (@boringcrypto/boring-solidity/contracts/ERC20.sol#129-134) is never used and should be removed
RebaseLibrary.add(Rebase,uint256,bool) (@boringcrypto/boring-solidity/contracts/libraries/BoringRebase.sol#50-59) is never used and should be removed
RebaseLibrary.add(Rebase,uint256,uint256) (@boringcrypto/boring-solidity/contracts/libraries/BoringRebase.sol#76-84) is never used and should be removed
RebaseLibrary.addElastic(Rebase,uint256) (@boringcrypto/boring-solidity/contracts/libraries/BoringRebase.sol#99-101) is never used and should be removed
RebaseLibrary.sub(Rebase,uint256,bool) (@boringcrypto/boring-solidity/contracts/libraries/BoringRebase.sol#64-73) is never used and should be removed
RebaseLibrary.sub(Rebase,uint256,uint256) (@boringcrypto/boring-solidity/contracts/libraries/BoringRebase.sol#87-95) is never used and should be removed
RebaseLibrary.subElastic(Rebase,uint256) (@boringcrypto/boring-solidity/contracts/libraries/BoringRebase.sol#105-107) is never used and should be removed
RebaseLibrary.toBase(Rebase,uint256,bool) (@boringcrypto/boring-solidity/contracts/libraries/BoringRebase.sol#16-29) is never used and should be removed
RebaseLibrary.toElastic(Rebase,uint256,bool) (@boringcrypto/boring-solidity/contracts/libraries/BoringRebase.sol#32-45) is never used and should be removed
Remove unused functions.
Additional information: link
Variable Domain._DOMAIN_SEPARATOR (@boringcrypto/boring-solidity/contracts/Domain.sol#15) is not in mixedCase
Variable Domain.DOMAIN_SEPARATOR_CHAIN_ID (@boringcrypto/boring-solidity/contracts/Domain.sol#16) is not in mixedCase
Function ERC20.DOMAIN_SEPARATOR() (@boringcrypto/boring-solidity/contracts/ERC20.sol#93-95) is not in mixedCase
Follow the Solidity naming convention.
Additional information: link
transferOwnership(address,bool,bool) should be declared external:
- BoringOwnable.transferOwnership(address,bool,bool) (@boringcrypto/boring-solidity/contracts/BoringOwnable.sol#27-44)
claimOwnership() should be declared external:
- BoringOwnable.claimOwnership() (@boringcrypto/boring-solidity/contracts/BoringOwnable.sol#47-57)
transfer(address,uint256) should be declared external:
- ERC20.transfer(address,uint256) (@boringcrypto/boring-solidity/contracts/ERC20.sol#34-48)
transferFrom(address,address,uint256) should be declared external:
- ERC20.transferFrom(address,address,uint256) (@boringcrypto/boring-solidity/contracts/ERC20.sol#55-80)
approve(address,uint256) should be declared external:
- ERC20.approve(address,uint256) (@boringcrypto/boring-solidity/contracts/ERC20.sol#86-90)
mintToBentoBox(address,uint256,IBentoBoxV1) should be declared external:
- BUSMMoney.mintToBentoBox(address,uint256,IBentoBoxV1) (contracts/BUSMMoney.sol#63-70)
burn(uint256) should be declared external:
- BUSMMoney.burn(uint256) (contracts/BUSMMoney.sol#72-78)
Use the external attribute for functions never called from the contract.
Additional information: link
Contract name (busm.money) contains non-alphanumeric characters.
Not a direct threat, but may indicate unreliable intentions of developer. Non-alphanumeric chars (,.;!#*&") are extremely rare among low risk tokens.
ERC20.permit(address,address,uint256,uint256,uint8,bytes32,bytes32) (@boringcrypto/boring-solidity/contracts/ERC20.sol#105-123) uses timestamp for comparisons
Dangerous comparisons:
- require(bool,string)(block.timestamp < deadline,ERC20: Expired) (@boringcrypto/boring-solidity/contracts/ERC20.sol#115)
BUSMMoney.mint(address,uint256) (contracts/BUSMMoney.sol#48-61) uses timestamp for comparisons
Dangerous comparisons:
- lastMint.time < block.timestamp - MINTING_PERIOD (contracts/BUSMMoney.sol#52)
Avoid relying on block.timestamp.
Additional information: link
RebaseLibrary.toBase(Rebase,uint256,bool) (@boringcrypto/boring-solidity/contracts/libraries/BoringRebase.sol#16-29) performs a multiplication on the result of a division:
-base = elastic.mul(total.base) / total.elastic (@boringcrypto/boring-solidity/contracts/libraries/BoringRebase.sol#24)
-roundUp && base.mul(total.elastic) / total.base < elastic (@boringcrypto/boring-solidity/contracts/libraries/BoringRebase.sol#25)
RebaseLibrary.toElastic(Rebase,uint256,bool) (@boringcrypto/boring-solidity/contracts/libraries/BoringRebase.sol#32-45) performs a multiplication on the result of a division:
-elastic = base.mul(total.elastic) / total.base (@boringcrypto/boring-solidity/contracts/libraries/BoringRebase.sol#40)
-roundUp && elastic.mul(total.base) / total.elastic < base (@boringcrypto/boring-solidity/contracts/libraries/BoringRebase.sol#41)
Consider ordering multiplication before division.
Additional information: link
BUSMMoney.mintToBentoBox(address,uint256,IBentoBoxV1) (contracts/BUSMMoney.sol#63-70) ignores return value by bentoBox.deposit(IERC20(address(this)),address(bentoBox),clone,amount,0) (contracts/BUSMMoney.sol#69)
Ensure that all the return values of the function calls are used.
Additional information: link
BoringOwnable.transferOwnership(address,bool,bool).newOwner (@boringcrypto/boring-solidity/contracts/BoringOwnable.sol#28) lacks a zero-check on :
- pendingOwner = newOwner (@boringcrypto/boring-solidity/contracts/BoringOwnable.sol#42)
Check that the address is not zero.
Additional information: link
Unable to crawl data from the website
BscScan page for the token does not contain additional info: website, socials, description, etc.
Additional information: link
Unable to find token on CoinGecko
Additional information: link
Unable to verify token contract address on the website
Unable to find audit link on the website
Unable to find whitepaper link on the website
Unable to find Telegram link on the website
Unable to find Twitter link on the website
Token is not listed at Mobula.Finance
Additional information: link
Unable to find token on CoinHunt
Additional information: link
Young tokens have high risks of scam / price dump / death
Young tokens have high risks of scam / price dump / death
Token has no active CoinGecko listing / rank
Young tokens have high risks of price dump / death
Unable to find Youtube account