Unable to find manual contract audit (e.g. Certik, PeckShield, Solidity...)
ChineseGrimaceCoin.addLiquidity(uint256,uint256) (#713-726) sends eth to arbitrary user
Dangerous calls:
- router.addLiquidityETH{value: bnbAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#718-725)
Ensure that an arbitrary user cannot withdraw unauthorized funds.
Additional information: link
Reentrancy in ChineseGrimaceCoin._transfer(address,address,uint256) (#565-654):
External calls:
- handle_fees(feeswap,currentTaxes) (#642)
- router.addLiquidityETH{value: bnbAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#718-725)
- (success) = recipient.call{value: amount}() (#374)
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#704-710)
- address(marketingWallet).sendValue(marketingAmt) (#684)
- address(devWallet).sendValue(devAmt) (#689)
External calls sending eth:
- handle_fees(feeswap,currentTaxes) (#642)
- router.addLiquidityETH{value: bnbAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#718-725)
- (success) = recipient.call{value: amount}() (#374)
State variables written after the call(s):
- super._transfer(sender,recipient,amount - fee) (#645)
- _balances[sender] = senderBalance - amount (#275)
- _balances[recipient] += amount (#276)
- super._transfer(sender,address(this),feeAmount) (#650)
- _balances[sender] = senderBalance - amount (#275)
- _balances[recipient] += amount (#276)
Apply the check-effects-interactions pattern.
Additional information: link
ChineseGrimaceCoin.rescueBEP20(address,uint256) (#819-821) ignores return value by IERC20(tokenAdd).transfer(devWallet,amount) (#820)
Use SafeERC20, or ensure that the transfer/transferFrom return value is checked.
Additional information: link
Too many vulnerabilities (Unchecked transfer, Reentrancy vulnerability, etc.). High risk of a scam. DYOR & manual audit are advised.
ChineseGrimaceCoin._transfer(address,address,uint256).fee (#607) is written in both
fee = 0 (#616)
fee = (amount * feesum) / 100 (#638)
Fix or remove the writes.
Additional information: link
Combination 1: Reentrancy vulnerabilities + Functions that send Ether to arbitraty destination. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.
Combination 2: Unchecked transfer + Functions that send Ether to arbitraty destination. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.
Combination 3: Reentrancy vulnerabilities + Unchecked transfer vulnerability. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.
ChineseGrimaceCoin.handle_fees(uint256,ChineseGrimaceCoin.Taxes) (#656-693) performs a multiplication on the result of a division:
-unitBalance = deltaBalance / (denominator - swapTaxes.liquidity) (#674)
-bnbToAddLiquidityWith = unitBalance * swapTaxes.liquidity (#675)
ChineseGrimaceCoin.handle_fees(uint256,ChineseGrimaceCoin.Taxes) (#656-693) performs a multiplication on the result of a division:
-unitBalance = deltaBalance / (denominator - swapTaxes.liquidity) (#674)
-marketingAmt = unitBalance * 2 * swapTaxes.marketing (#682)
ChineseGrimaceCoin.handle_fees(uint256,ChineseGrimaceCoin.Taxes) (#656-693) performs a multiplication on the result of a division:
-unitBalance = deltaBalance / (denominator - swapTaxes.liquidity) (#674)
-devAmt = unitBalance * 2 * swapTaxes.dev (#687)
Consider ordering multiplication before division.
Additional information: link
ChineseGrimaceCoin._transfer(address,address,uint256).feeswap (#605) is a local variable never initialized
ChineseGrimaceCoin._transfer(address,address,uint256).currentTaxes (#608) is a local variable never initialized
ChineseGrimaceCoin._transfer(address,address,uint256).feesum (#606) is a local variable never initialized
Initialize all the variables. If a variable is meant to be initialized to zero, explicitly set it to zero to improve code readability.
Additional information: link
ChineseGrimaceCoin.addLiquidity(uint256,uint256) (#713-726) ignores return value by router.addLiquidityETH{value: bnbAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#718-725)
Ensure that all the return values of the function calls are used.
Additional information: link
ChineseGrimaceCoin.updateLiquidityTreshhold(uint256) (#733-736) should emit an event for:
- tokenLiquidityThreshold = new_amount * 10 ** decimals() (#735)
ChineseGrimaceCoin.updateTradingEnabled(bool,uint256,uint256) (#751-761) should emit an event for:
- deadline = _deadline (#756)
- launchtax = _launchtax (#757)
ChineseGrimaceCoin.updateCooldown(bool,uint256) (#771-774) should emit an event for:
- coolDownTime = time * 1 (#772)
ChineseGrimaceCoin.updateMaxTxLimit(uint256,uint256) (#806-809) should emit an event for:
- maxBuyLimit = maxBuy * 10 ** decimals() (#807)
- maxSellLimit = maxSell * 10 ** decimals() (#808)
ChineseGrimaceCoin.updateMaxWalletlimit(uint256) (#811-813) should emit an event for:
- maxWalletLimit = amount * 10 ** decimals() (#812)
Emit an event for critical parameter changes.
Additional information: link
ChineseGrimaceCoin.constructor(address)._pair (#502) lacks a zero-check on :
- pair = _pair (#505)
ChineseGrimaceCoin.updateRouterAndPair(address,address).newPair (#746) lacks a zero-check on :
- pair = newPair (#748)
ChineseGrimaceCoin.updateMarketingWallet(address).newWallet (#763) lacks a zero-check on :
- marketingWallet = newWallet (#764)
ChineseGrimaceCoin.updateDevWallet(address).newWallet (#767) lacks a zero-check on :
- devWallet = newWallet (#768)
Check that the address is not zero.
Additional information: link
Modifier ChineseGrimaceCoin.mutexLock() (#488-494) does not always execute _; or revert
All the paths in a modifier must execute _ or revert.
Additional information: link
Reentrancy in ChineseGrimaceCoin.constructor(address) (#496-518):
External calls:
- _pair = IFactory(_router.factory()).createPair(address(this),_router.WETH()) (#502)
State variables written after the call(s):
- allowedTransfer[address(this)] = true (#511)
- allowedTransfer[owner()] = true (#512)
- allowedTransfer[pair] = true (#513)
- allowedTransfer[marketingWallet] = true (#514)
- allowedTransfer[devWallet] = true (#515)
- allowedTransfer[deadWallet] = true (#516)
- exemptFee[address(this)] = true (#506)
- exemptFee[marketingWallet] = true (#507)
- exemptFee[devWallet] = true (#508)
- exemptFee[deadWallet] = true (#509)
- pair = _pair (#505)
- router = _router (#504)
Reentrancy in ChineseGrimaceCoin.handle_fees(uint256,ChineseGrimaceCoin.Taxes) (#656-693):
External calls:
- swapTokensForBNB(toSwap) (#671)
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#704-710)
- addLiquidity(tokensToAddLiquidityWith,bnbToAddLiquidityWith) (#679)
- router.addLiquidityETH{value: bnbAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#718-725)
External calls sending eth:
- addLiquidity(tokensToAddLiquidityWith,bnbToAddLiquidityWith) (#679)
- router.addLiquidityETH{value: bnbAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#718-725)
State variables written after the call(s):
- addLiquidity(tokensToAddLiquidityWith,bnbToAddLiquidityWith) (#679)
- _allowances[owner][spender] = amount (#345)
Reentrancy in ChineseGrimaceCoin.transferFrom(address,address,uint256) (#525-537):
External calls:
- _transfer(sender,recipient,amount) (#530)
- router.addLiquidityETH{value: bnbAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#718-725)
- (success) = recipient.call{value: amount}() (#374)
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#704-710)
- address(marketingWallet).sendValue(marketingAmt) (#684)
- address(devWallet).sendValue(devAmt) (#689)
External calls sending eth:
- _transfer(sender,recipient,amount) (#530)
- router.addLiquidityETH{value: bnbAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#718-725)
- (success) = recipient.call{value: amount}() (#374)
State variables written after the call(s):
- _approve(sender,_msgSender(),currentAllowance - amount) (#534)
- _allowances[owner][spender] = amount (#345)
Apply the check-effects-interactions pattern.
Additional information: link
Reentrancy in ChineseGrimaceCoin._transfer(address,address,uint256) (#565-654):
External calls:
- handle_fees(feeswap,currentTaxes) (#642)
- router.addLiquidityETH{value: bnbAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#718-725)
- (success) = recipient.call{value: amount}() (#374)
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#704-710)
- address(marketingWallet).sendValue(marketingAmt) (#684)
- address(devWallet).sendValue(devAmt) (#689)
External calls sending eth:
- handle_fees(feeswap,currentTaxes) (#642)
- router.addLiquidityETH{value: bnbAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#718-725)
- (success) = recipient.call{value: amount}() (#374)
Event emitted after the call(s):
- Transfer(sender,recipient,amount) (#278)
- super._transfer(sender,recipient,amount - fee) (#645)
- Transfer(sender,recipient,amount) (#278)
- super._transfer(sender,address(this),feeAmount) (#650)
Reentrancy in ChineseGrimaceCoin.handle_fees(uint256,ChineseGrimaceCoin.Taxes) (#656-693):
External calls:
- swapTokensForBNB(toSwap) (#671)
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#704-710)
- addLiquidity(tokensToAddLiquidityWith,bnbToAddLiquidityWith) (#679)
- router.addLiquidityETH{value: bnbAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#718-725)
External calls sending eth:
- addLiquidity(tokensToAddLiquidityWith,bnbToAddLiquidityWith) (#679)
- router.addLiquidityETH{value: bnbAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#718-725)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#346)
- addLiquidity(tokensToAddLiquidityWith,bnbToAddLiquidityWith) (#679)
Reentrancy in ChineseGrimaceCoin.transferFrom(address,address,uint256) (#525-537):
External calls:
- _transfer(sender,recipient,amount) (#530)
- router.addLiquidityETH{value: bnbAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#718-725)
- (success) = recipient.call{value: amount}() (#374)
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#704-710)
- address(marketingWallet).sendValue(marketingAmt) (#684)
- address(devWallet).sendValue(devAmt) (#689)
External calls sending eth:
- _transfer(sender,recipient,amount) (#530)
- router.addLiquidityETH{value: bnbAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#718-725)
- (success) = recipient.call{value: amount}() (#374)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#346)
- _approve(sender,_msgSender(),currentAllowance - amount) (#534)
Apply the check-effects-interactions pattern.
Additional information: link
ChineseGrimaceCoin._transfer(address,address,uint256) (#565-654) uses timestamp for comparisons
Dangerous comparisons:
- require(bool,string)(timePassed >= coolDownTime,Cooldown enabled) (#600)
Avoid relying on block.timestamp.
Additional information: link
ChineseGrimaceCoin.updateTradingEnabled(bool,uint256,uint256) (#751-761) compares to a boolean constant:
-state == true (#760)
Remove the equality to the boolean constant.
Additional information: link
Context._msgData() (#17-20) is never used and should be removed
ERC20._burn(address,uint256) (#311-322) is never used and should be removed
Remove unused functions.
Additional information: link
Low level call in Address.sendValue(address,uint256) (#371-376):
- (success) = recipient.call{value: amount}() (#374)
Avoid low-level calls. Check the call success. If the call is meant for a contract, check for code existence
Additional information: link
Variable ERC20._balances (#63) is not in mixedCase
Variable ERC20._allowances (#65) is not in mixedCase
Function IRouter.WETH() (#420) is not in mixedCase
Function ChineseGrimaceCoin.handle_fees(uint256,ChineseGrimaceCoin.Taxes) (#656-693) is not in mixedCase
Parameter ChineseGrimaceCoin.updateLiquidityTreshhold(uint256).new_amount (#733) is not in mixedCase
Parameter ChineseGrimaceCoin.updateTradingEnabled(bool,uint256,uint256)._deadline (#753) is not in mixedCase
Parameter ChineseGrimaceCoin.updateTradingEnabled(bool,uint256,uint256)._launchtax (#754) is not in mixedCase
Parameter ChineseGrimaceCoin.updateExemptFee(address,bool)._address (#796) is not in mixedCase
Variable ChineseGrimaceCoin.genesis_block (#462) is not in mixedCase
Follow the Solidity naming convention.
Additional information: link
Redundant expression "this (#18)" inContext (#12-21)
Remove redundant statements if they congest code but offer no value.
Additional information: link
ChineseGrimaceCoin.slitherConstructorVariables() (#447-826) uses literals with too many digits:
- deadWallet = 0x000000000000000000000000000000000000dEaD (#466)
Use: Ether suffix, Time suffix, or The scientific notation
Additional information: link
ChineseGrimaceCoin.deadWallet (#466) should be constant
Add the constant attributes to state variables that never change.
Additional information: link
name() should be declared external:
- ERC20.name() (#89-91)
symbol() should be declared external:
- ERC20.symbol() (#97-99)
totalSupply() should be declared external:
- ERC20.totalSupply() (#121-123)
transfer(address,uint256) should be declared external:
- ChineseGrimaceCoin.transfer(address,uint256) (#560-563)
- ERC20.transfer(address,uint256) (#140-148)
allowance(address,address) should be declared external:
- ERC20.allowance(address,address) (#153-161)
approve(address,uint256) should be declared external:
- ChineseGrimaceCoin.approve(address,uint256) (#520-523)
- ERC20.approve(address,uint256) (#170-173)
transferFrom(address,address,uint256) should be declared external:
- ChineseGrimaceCoin.transferFrom(address,address,uint256) (#525-537)
- ERC20.transferFrom(address,address,uint256) (#188-200)
increaseAllowance(address,uint256) should be declared external:
- ChineseGrimaceCoin.increaseAllowance(address,uint256) (#539-546)
- ERC20.increaseAllowance(address,uint256) (#214-221)
decreaseAllowance(address,uint256) should be declared external:
- ChineseGrimaceCoin.decreaseAllowance(address,uint256) (#548-558)
- ERC20.decreaseAllowance(address,uint256) (#237-247)
renounceOwnership() should be declared external:
- Ownable.renounceOwnership() (#397-399)
transferOwnership(address) should be declared external:
- Ownable.transferOwnership(address) (#401-404)
Use the external attribute for functions never called from the contract.
Additional information: link
Unable to find website, listings and other project-related information
Young tokens have high risks of scam / price dump / death
Token has no active CoinGecko listing / rank
Token has no active CoinMarketCap listing / rank
Unable to find Telegram and Twitter accounts