CGOLD [CITY GOLD] Token

CGOLDToken._writeCheckpoint(address,uint32,uint256,uint256) (contracts/Token.sol#271-289) uses a dangerous strict equality:
- nCheckpoints > 0 && checkpoints[delegatee][nCheckpoints - 1].fromBlock == blockNumber (contracts/Token.sol#281)
Don't use strict equality to determine if an account has enough Ether or tokens.

Additional information: link

Unable to verify that contract auditor is trusted: Certik, Quantstamp, Hacken, Solidity, Paladinsec, Openzeppelin, Verichains

Contract ownership is not renounced (belongs to a wallet)

BEP20Extended._transfer(address,address,uint256) (contracts/BEP20Extended.sol#300-323) contains a tautology or contradiction:
- _balances[sender].sub(amount).sub(receiedAmount) < 0 (contracts/BEP20Extended.sol#315)
Fix the incorrect comparison by changing the value type or the comparison.

Additional information: link

Address.isContract(address) (contracts/Address.sol#26-35) uses assembly
- INLINE ASM (contracts/Address.sol#33)
Address._verifyCallResult(bool,bytes,string) (contracts/Address.sol#171-188) uses assembly
- INLINE ASM (contracts/Address.sol#180-183)
CGOLDToken.getChainId() (contracts/Token.sol#296-300) uses assembly
- INLINE ASM (contracts/Token.sol#298)
Do not use evm assembly.

Additional information: link

Redundant expression "this (contracts/Context.sol#25)" inContext (contracts/Context.sol#15-29)
Remove redundant statements if they congest code but offer no value.

Additional information: link

BEP20Extended.dev(address)._devaddr (contracts/BEP20Extended.sol#77) lacks a zero-check on :
- devaddr = _devaddr (contracts/BEP20Extended.sol#79)
BEP20Extended.setSellContract(address).sellContract (contracts/BEP20Extended.sol#256) lacks a zero-check on :
- SELL_CONTRACT = sellContract (contracts/BEP20Extended.sol#257)
Check that the address is not zero.

Additional information: link

BEP20Extended.constructor(string,string).name (contracts/BEP20Extended.sol#67) shadows:
- BEP20Extended.name() (contracts/BEP20Extended.sol#92-94) (function)
- IBEP20.name() (contracts/IBEP20.sol#24) (function)
BEP20Extended.constructor(string,string).symbol (contracts/BEP20Extended.sol#67) shadows:
- BEP20Extended.symbol() (contracts/BEP20Extended.sol#106-108) (function)
- IBEP20.symbol() (contracts/IBEP20.sol#19) (function)
BEP20Extended.allowance(address,address).owner (contracts/BEP20Extended.sol#161) shadows:
- Ownable.owner() (contracts/Ownable.sol#36-38) (function)
BEP20Extended._approve(address,address,uint256).owner (contracts/BEP20Extended.sol#375) shadows:
- Ownable.owner() (contracts/Ownable.sol#36-38) (function)
CGOLDToken.permit(address,address,uint256,uint256,uint8,bytes32,bytes32).owner (contracts/Token.sol#83) shadows:
- Ownable.owner() (contracts/Ownable.sol#36-38) (function)
Rename the local variables that shadow another component.

Additional information: link

CGOLDToken.permit(address,address,uint256,uint256,uint8,bytes32,bytes32) (contracts/Token.sol#82-106) uses timestamp for comparisons
Dangerous comparisons:
- require(bool,string)(block.timestamp <= deadline,INVALID_EXPIRATION) (contracts/Token.sol#93)
CGOLDToken.delegateBySig(address,uint256,uint256,uint8,bytes32,bytes32) (contracts/Token.sol#137-178) uses timestamp for comparisons
Dangerous comparisons:
- require(bool,string)(now <= expiry,CGOLD::delegateBySig: signature expired) (contracts/Token.sol#176)
Avoid relying on block.timestamp.

Additional information: link

Address._verifyCallResult(bool,bytes,string) (contracts/Address.sol#171-188) is never used and should be removed
Address.functionCall(address,bytes) (contracts/Address.sol#79-81) is never used and should be removed
Address.functionCall(address,bytes,string) (contracts/Address.sol#89-91) is never used and should be removed
Address.functionCallWithValue(address,bytes,uint256) (contracts/Address.sol#104-106) is never used and should be removed
Address.functionCallWithValue(address,bytes,uint256,string) (contracts/Address.sol#114-121) is never used and should be removed
Address.functionDelegateCall(address,bytes) (contracts/Address.sol#153-155) is never used and should be removed
Address.functionDelegateCall(address,bytes,string) (contracts/Address.sol#163-169) is never used and should be removed
Address.functionStaticCall(address,bytes) (contracts/Address.sol#129-131) is never used and should be removed
Address.functionStaticCall(address,bytes,string) (contracts/Address.sol#139-145) is never used and should be removed
Address.isContract(address) (contracts/Address.sol#26-35) is never used and should be removed
Address.sendValue(address,uint256) (contracts/Address.sol#53-59) is never used and should be removed
BEP20Extended._burnFrom(address,uint256) (contracts/BEP20Extended.sol#392-399) is never used and should be removed
Context._msgData() (contracts/Context.sol#24-27) is never used and should be removed
SafeMath.min(uint256,uint256) (contracts/SafeMath.sol#172-174) is never used and should be removed
SafeMath.mod(uint256,uint256) (contracts/SafeMath.sol#147-149) is never used and should be removed
SafeMath.mod(uint256,uint256,string) (contracts/SafeMath.sol#163-170) is never used and should be removed
SafeMath.sqrt(uint256) (contracts/SafeMath.sol#177-188) is never used and should be removed
Remove unused functions.

Additional information: link

Low level call in Address.sendValue(address,uint256) (contracts/Address.sol#53-59):
- (success) = recipient.call{value: amount}() (contracts/Address.sol#57)
Low level call in Address.functionCallWithValue(address,bytes,uint256,string) (contracts/Address.sol#114-121):
- (success,returndata) = target.call{value: value}(data) (contracts/Address.sol#119)
Low level call in Address.functionStaticCall(address,bytes,string) (contracts/Address.sol#139-145):
- (success,returndata) = target.staticcall(data) (contracts/Address.sol#143)
Low level call in Address.functionDelegateCall(address,bytes,string) (contracts/Address.sol#163-169):
- (success,returndata) = target.delegatecall(data) (contracts/Address.sol#167)
Avoid low-level calls. Check the call success. If the call is meant for a contract, check for code existence

Additional information: link

Parameter BEP20Extended.dev(address)._devaddr (contracts/BEP20Extended.sol#77) is not in mixedCase
Parameter BEP20Extended.setFee(uint256)._enable (contracts/BEP20Extended.sol#266) is not in mixedCase
Parameter BEP20Extended.setTransferBurnRate(uint256)._rate (contracts/BEP20Extended.sol#271) is not in mixedCase
Parameter BEP20Extended.addTransferBurnAddress(address)._transferBurnAddress (contracts/BEP20Extended.sol#276) is not in mixedCase
Parameter BEP20Extended.removeTransferBurnAddress(address)._transferBurnAddress (contracts/BEP20Extended.sol#281) is not in mixedCase
Variable BEP20Extended.SELL_CONTRACT (contracts/BEP20Extended.sol#57) is not in mixedCase
Parameter CGOLDToken.mintTo(address,uint256)._to (contracts/Token.sol#31) is not in mixedCase
Parameter CGOLDToken.mintTo(address,uint256)._amount (contracts/Token.sol#31) is not in mixedCase
Variable CGOLDToken._nonces (contracts/Token.sol#11) is not in mixedCase
Variable CGOLDToken.DOMAIN_SEPARATOR (contracts/Token.sol#15) is not in mixedCase
Variable CGOLDToken._delegates (contracts/Token.sol#43) is not in mixedCase
Follow the Solidity naming convention.

Additional information: link

dev(address) should be declared external:
- BEP20Extended.dev(address) (contracts/BEP20Extended.sol#77-80)
decimals() should be declared external:
- BEP20Extended.decimals() (contracts/BEP20Extended.sol#99-101)
symbol() should be declared external:
- BEP20Extended.symbol() (contracts/BEP20Extended.sol#106-108)
transferBurnRate() should be declared external:
- BEP20Extended.transferBurnRate() (contracts/BEP20Extended.sol#127-129)
enableFee() should be declared external:
- BEP20Extended.enableFee() (contracts/BEP20Extended.sol#134-136)
cap() should be declared external:
- BEP20Extended.cap() (contracts/BEP20Extended.sol#141-143)
transfer(address,uint256) should be declared external:
- BEP20Extended.transfer(address,uint256) (contracts/BEP20Extended.sol#153-156)
allowance(address,address) should be declared external:
- BEP20Extended.allowance(address,address) (contracts/BEP20Extended.sol#161-163)
approve(address,uint256) should be declared external:
- BEP20Extended.approve(address,uint256) (contracts/BEP20Extended.sol#172-175)
transferFrom(address,address,uint256) should be declared external:
- BEP20Extended.transferFrom(address,address,uint256) (contracts/BEP20Extended.sol#189-201)
increaseAllowance(address,uint256) should be declared external:
- BEP20Extended.increaseAllowance(address,uint256) (contracts/BEP20Extended.sol#215-218)
decreaseAllowance(address,uint256) should be declared external:
- BEP20Extended.decreaseAllowance(address,uint256) (contracts/BEP20Extended.sol#234-241)
mint(uint256) should be declared external:
- BEP20Extended.mint(uint256) (contracts/BEP20Extended.sol#251-254)
setSellContract(address) should be declared external:
- BEP20Extended.setSellContract(address) (contracts/BEP20Extended.sol#256-259)
burn(uint256) should be declared external:
- BEP20Extended.burn(uint256) (contracts/BEP20Extended.sol#261-264)
setFee(uint256) should be declared external:
- BEP20Extended.setFee(uint256) (contracts/BEP20Extended.sol#266-269)
setTransferBurnRate(uint256) should be declared external:
- BEP20Extended.setTransferBurnRate(uint256) (contracts/BEP20Extended.sol#271-274)
addTransferBurnAddress(address) should be declared external:
- BEP20Extended.addTransferBurnAddress(address) (contracts/BEP20Extended.sol#276-279)
removeTransferBurnAddress(address) should be declared external:
- BEP20Extended.removeTransferBurnAddress(address) (contracts/BEP20Extended.sol#281-284)
renounceOwnership() should be declared external:
- Ownable.renounceOwnership() (contracts/Ownable.sol#55-58)
transferOwnership(address) should be declared external:
- Ownable.transferOwnership(address) (contracts/Ownable.sol#64-66)
Use the external attribute for functions never called from the contract.

Additional information: link

Token seems to be untradeable: there is no PancakeSwap trading pair and no trading volumes. Ignore for presale.

BscScan page for the token does not contain additional info: website, socials, description, etc.

Additional information: link

Unable to find audit link on the website

Unable to find whitepaper link on the website

Unable to find token on CoinGecko

Additional information: link

Unable to find token on CoinMarketCap

Additional information: link

Unable to find token on CoinHunt

Additional information: link

Unable to find code repository for the project

Token is not listed at Mobula.Finance

Additional information: link

Young tokens have high risks of price dump / death

Token has no active CoinGecko listing / rank

Token has no active CoinMarketCap listing / rank