CEL [Celestials] Token

Celestials.airdrop(address) (#419-429) sends eth to arbitrary user
Dangerous calls:
- address(uint160(_refer)).transfer(referBNB) (#426)
Ensure that an arbitrary user cannot withdraw unauthorized funds.

Additional information: link

Contract creator or owner is blacklisted for past scams

Unable to find manual contract audit (e.g. Certik, PeckShield, Solidity...)

Contract ownership is not renounced (belongs to a wallet)

Celestials.set(bool,bool,uint256,uint256,uint256,uint256,uint256).airdrop (#384) shadows:
- Celestials.airdrop(address) (#419-429) (function)
Rename the local variables that shadow another component.

Additional information: link

Celestials.set(bool,bool,uint256,uint256,uint256,uint256,uint256) (#384-393) should emit an event for:
- _referBNB = ReferBNB (#387)
- _referToken = CELAmount (#388)
- _airdropBNB = BNBFee (#389)
- _airdropToken = TokenAmount (#390)
- salePrice = price (#391)
Emit an event for critical parameter changes.

Additional information: link

SafeMath.sub(uint256,uint256) (#35-38) is never used and should be removed
SafeMath.div(uint256,uint256,string) (#107-110) is never used and should be removed
Remove unused functions.

Additional information: link

solc-0.6.10 is not recommended for deployment
Pragma version0.6.10 (#2) allows old versions
Deploy with any of the following Solidity versions: 0.5.16 - 0.5.17, 0.6.11 - 0.6.12, 0.7.5 - 0.7.6 Use a simple pragma version that allows any of these versions. Consider using the latest version of Solidity for testing.

Additional information: link

Parameter Celestials.set(bool,bool,uint256,uint256,uint256,uint256,uint256).BNBFee (#384) is not in mixedCase
Variable Celestials._AirdropStatus (#147) is not in mixedCase
Parameter Celestials.set(bool,bool,uint256,uint256,uint256,uint256,uint256).CELAmount (#384) is not in mixedCase
Parameter Celestials.airdrop(address)._refer (#419) is not in mixedCase
Parameter Celestials.buy(address)._refer (#431) is not in mixedCase
Variable Celestials._SaleStatus (#148) is not in mixedCase
Parameter Celestials.set(bool,bool,uint256,uint256,uint256,uint256,uint256).TokenAmount (#384) is not in mixedCase
Parameter Celestials.set(bool,bool,uint256,uint256,uint256,uint256,uint256).ReferBNB (#384) is not in mixedCase
Function Celestials.GetDP(uint256) (#357-359) is not in mixedCase
Follow the Solidity naming convention.

Additional information: link

Celestials.slitherConstructorVariables() (#137-446) uses literals with too many digits:
- salePrice = 1000000000 (#158)
Celestials.slitherConstructorVariables() (#137-446) uses literals with too many digits:
- _totalSupply = 10000000000000000000000000000000 (#140)
Celestials.slitherConstructorVariables() (#137-446) uses literals with too many digits:
- _airdropBNB = 2000000000000000 (#151)
Celestials.slitherConstructorVariables() (#137-446) uses literals with too many digits:
- _airdropToken = 5000000000000000000000000 (#152)
Use: Ether suffix, Time suffix, or The scientific notation

Additional information: link

Celestials._decimals (#143) should be constant
Celestials._name (#141) should be constant
Celestials._symbol (#142) should be constant
Celestials._totalSupply (#140) should be constant
Add the constant attributes to state variables that never change.

Additional information: link

balanceOf(address) should be declared external:
- Celestials.balanceOf(address) (#254-256)
getBlock() should be declared external:
- Celestials.getBlock() (#408-417)
airdrop(address) should be declared external:
- Celestials.airdrop(address) (#419-429)
clearBNB() should be declared external:
- Celestials.clearBNB() (#352-355)
set(bool,bool,uint256,uint256,uint256,uint256,uint256) should be declared external:
- Celestials.set(bool,bool,uint256,uint256,uint256,uint256,uint256) (#384-393)
cap() should be declared external:
- Celestials.cap() (#240-242)
decimals() should be declared external:
- Celestials.decimals() (#233-235)
GetDP(uint256) should be declared external:
- Celestials.GetDP(uint256) (#357-359)
approve(address,uint256) should be declared external:
- Celestials.approve(address,uint256) (#347-350)
name() should be declared external:
- Celestials.name() (#198-200)
authNum(uint256) should be declared external:
- Celestials.authNum(uint256) (#265-269)
totalSupply() should be declared external:
- Celestials.totalSupply() (#247-249)
transfer(address,uint256) should be declared external:
- Celestials.transfer(address,uint256) (#403-406)
transferOwnership(address) should be declared external:
- Celestials.transferOwnership(address) (#275-278)
transferFrom(address,address,uint256) should be declared external:
- Celestials.transferFrom(address,address,uint256) (#334-338)
setAuth(address,address) should be declared external:
- Celestials.setAuth(address,address) (#280-285)
allowance(address,address) should be declared external:
- Celestials.allowance(address,address) (#261-263)
buy(address) should be declared external:
- Celestials.buy(address) (#431-444)
symbol() should be declared external:
- Celestials.symbol() (#213-215)
Use the external attribute for functions never called from the contract.

Additional information: link

Token seems to be untradeable: there is no PancakeSwap trading pair and no trading volumes. Ignore for presale.

Token has no transactions for more than 100 days. It seems dead / abandoned.

Number of Binance Smart Chain (BSC) token holders is low.

Unable to find website, listings and other project-related information

Token is marked as scam (rug pull, honeypot, phishing, etc.)

Additional information: link

Token has no active CoinGecko listing / rank

Token has no active CoinMarketCap listing / rank

Young tokens have high risks of price dump / death