Unable to find manual contract audit (e.g. Certik, PeckShield, Solidity...)
CheddaDoge.swapBack() (#331-372) sends eth to arbitrary user
Dangerous calls:
- (MarketingSuccess) = address(marketingFeeReceiver).call{gas: 30000,value: amountBNBMarketing}() (#356)
- (teamSuccess) = address(teamFeeReceiver).call{gas: 30000,value: amountBNBteam}() (#358)
Ensure that an arbitrary user cannot withdraw unauthorized funds.
Additional information: link
Reentrancy in CheddaDoge._transferFrom(address,address,uint256) (#272-292):
External calls:
- swapBack() (#281)
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(amountToSwap,0,path,address(this),block.timestamp) (#342-348)
- (MarketingSuccess) = address(marketingFeeReceiver).call{gas: 30000,value: amountBNBMarketing}() (#356)
- (teamSuccess) = address(teamFeeReceiver).call{gas: 30000,value: amountBNBteam}() (#358)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,marketingFeeReceiver,block.timestamp) (#362-369)
External calls sending eth:
- swapBack() (#281)
- (MarketingSuccess) = address(marketingFeeReceiver).call{gas: 30000,value: amountBNBMarketing}() (#356)
- (teamSuccess) = address(teamFeeReceiver).call{gas: 30000,value: amountBNBteam}() (#358)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,marketingFeeReceiver,block.timestamp) (#362-369)
State variables written after the call(s):
- _balances[sender] = _balances[sender].sub(amount,Insufficient Balance) (#285)
- _balances[recipient] = _balances[recipient].add(amountReceived) (#288)
- amountReceived = takeFee(sender,recipient,amount) (#287)
- _balances[address(this)] = _balances[address(this)].add(feeAmount) (#318)
Apply the check-effects-interactions pattern.
Additional information: link
Combination 1: Reentrancy vulnerabilities + Functions that send Ether to arbitraty destination. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.
CheddaDoge.slitherConstructorVariables() (#187-456) performs a multiplication on the result of a division:
-swapThreshold = _totalSupply / 1000 * 3 (#223)
Consider ordering multiplication before division.
Additional information: link
CheddaDoge.swapBack() (#331-372) ignores return value by router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,marketingFeeReceiver,block.timestamp) (#362-369)
Ensure that all the return values of the function calls are used.
Additional information: link
CheddaDoge.setTxLimit(uint256) (#395-398) should emit an event for:
- _maxTxAmount = amount (#397)
CheddaDoge.setFees(uint256,uint256,uint256,uint256) (#413-419) should emit an event for:
- liquidityFee = _liquidityFee (#414)
- teamFee = _teamFee (#415)
- marketingFee = _marketingFee (#416)
- totalFee = _liquidityFee.add(_teamFee).add(_marketingFee) (#417)
- feeDenominator = _feeDenominator (#418)
Emit an event for critical parameter changes.
Additional information: link
Auth.transferOwnership(address).adr (#126) lacks a zero-check on :
- owner = adr (#127)
CheddaDoge.setFeeReceiver(address,address)._marketingFeeReceiver (#421) lacks a zero-check on :
- marketingFeeReceiver = _marketingFeeReceiver (#422)
CheddaDoge.setFeeReceiver(address,address)._teamFeeReceiver (#421) lacks a zero-check on :
- teamFeeReceiver = _teamFeeReceiver (#423)
Check that the address is not zero.
Additional information: link
Reentrancy in CheddaDoge._transferFrom(address,address,uint256) (#272-292):
External calls:
- swapBack() (#281)
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(amountToSwap,0,path,address(this),block.timestamp) (#342-348)
- (MarketingSuccess) = address(marketingFeeReceiver).call{gas: 30000,value: amountBNBMarketing}() (#356)
- (teamSuccess) = address(teamFeeReceiver).call{gas: 30000,value: amountBNBteam}() (#358)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,marketingFeeReceiver,block.timestamp) (#362-369)
External calls sending eth:
- swapBack() (#281)
- (MarketingSuccess) = address(marketingFeeReceiver).call{gas: 30000,value: amountBNBMarketing}() (#356)
- (teamSuccess) = address(teamFeeReceiver).call{gas: 30000,value: amountBNBteam}() (#358)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,marketingFeeReceiver,block.timestamp) (#362-369)
State variables written after the call(s):
- launch() (#283)
- launchedAt = block.number (#392)
Reentrancy in CheddaDoge.constructor() (#227-238):
External calls:
- pair = IDEXFactory(router.factory()).createPair(WBNB,address(this)) (#229)
State variables written after the call(s):
- _allowances[address(this)][address(router)] = type()(uint256).max (#230)
- _balances[_owner] = _totalSupply (#236)
- isFeeExempt[_owner] = true (#233)
- isTxLimitExempt[_owner] = true (#234)
Apply the check-effects-interactions pattern.
Additional information: link
Reentrancy in CheddaDoge._transferFrom(address,address,uint256) (#272-292):
External calls:
- swapBack() (#281)
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(amountToSwap,0,path,address(this),block.timestamp) (#342-348)
- (MarketingSuccess) = address(marketingFeeReceiver).call{gas: 30000,value: amountBNBMarketing}() (#356)
- (teamSuccess) = address(teamFeeReceiver).call{gas: 30000,value: amountBNBteam}() (#358)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,marketingFeeReceiver,block.timestamp) (#362-369)
External calls sending eth:
- swapBack() (#281)
- (MarketingSuccess) = address(marketingFeeReceiver).call{gas: 30000,value: amountBNBMarketing}() (#356)
- (teamSuccess) = address(teamFeeReceiver).call{gas: 30000,value: amountBNBteam}() (#358)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,marketingFeeReceiver,block.timestamp) (#362-369)
Event emitted after the call(s):
- Transfer(sender,address(this),feeAmount) (#319)
- amountReceived = takeFee(sender,recipient,amount) (#287)
- Transfer(sender,recipient,amountReceived) (#290)
Reentrancy in CheddaDoge.constructor() (#227-238):
External calls:
- pair = IDEXFactory(router.factory()).createPair(WBNB,address(this)) (#229)
Event emitted after the call(s):
- Transfer(address(0),_owner,_totalSupply) (#237)
Reentrancy in CheddaDoge.swapBack() (#331-372):
External calls:
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(amountToSwap,0,path,address(this),block.timestamp) (#342-348)
- (MarketingSuccess) = address(marketingFeeReceiver).call{gas: 30000,value: amountBNBMarketing}() (#356)
- (teamSuccess) = address(teamFeeReceiver).call{gas: 30000,value: amountBNBteam}() (#358)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,marketingFeeReceiver,block.timestamp) (#362-369)
External calls sending eth:
- (MarketingSuccess) = address(marketingFeeReceiver).call{gas: 30000,value: amountBNBMarketing}() (#356)
- (teamSuccess) = address(teamFeeReceiver).call{gas: 30000,value: amountBNBteam}() (#358)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,marketingFeeReceiver,block.timestamp) (#362-369)
Event emitted after the call(s):
- AutoLiquify(amountBNBLiquidity,amountToLiquify) (#370)
Apply the check-effects-interactions pattern.
Additional information: link
CheddaDoge.buyTokens(uint256,address) (#374-385) is never used and should be removed
Remove unused functions.
Additional information: link
CheddaDoge._maxTxAmount (#199) is set pre-construction with a non-constant function or state variable:
- (_totalSupply * 1) / 100
CheddaDoge._maxWalletSize (#200) is set pre-construction with a non-constant function or state variable:
- (_totalSupply * 2) / 100
CheddaDoge.swapThreshold (#223) is set pre-construction with a non-constant function or state variable:
- _totalSupply / 1000 * 3
Remove any initialization of state variables via non-constant state variables or function calls. If variables must be set upon contract deployment, locate initialization in the constructor instead.
Additional information: link
Low level call in CheddaDoge.swapBack() (#331-372):
- (MarketingSuccess) = address(marketingFeeReceiver).call{gas: 30000,value: amountBNBMarketing}() (#356)
- (teamSuccess) = address(teamFeeReceiver).call{gas: 30000,value: amountBNBteam}() (#358)
Avoid low-level calls. Check the call success. If the call is meant for a contract, check for code existence
Additional information: link
Function IDEXRouter.WETH() (#141) is not in mixedCase
Parameter CheddaDoge.setFees(uint256,uint256,uint256,uint256)._liquidityFee (#413) is not in mixedCase
Parameter CheddaDoge.setFees(uint256,uint256,uint256,uint256)._teamFee (#413) is not in mixedCase
Parameter CheddaDoge.setFees(uint256,uint256,uint256,uint256)._marketingFee (#413) is not in mixedCase
Parameter CheddaDoge.setFees(uint256,uint256,uint256,uint256)._feeDenominator (#413) is not in mixedCase
Parameter CheddaDoge.setFeeReceiver(address,address)._marketingFeeReceiver (#421) is not in mixedCase
Parameter CheddaDoge.setFeeReceiver(address,address)._teamFeeReceiver (#421) is not in mixedCase
Parameter CheddaDoge.setSwapBackSettings(bool,uint256)._enabled (#426) is not in mixedCase
Parameter CheddaDoge.setSwapBackSettings(bool,uint256)._amount (#426) is not in mixedCase
Parameter CheddaDoge.transferForeignToken(address)._token (#436) is not in mixedCase
Variable CheddaDoge.WBNB (#190) is not in mixedCase
Variable CheddaDoge.DEAD (#191) is not in mixedCase
Variable CheddaDoge.ZERO (#192) is not in mixedCase
Constant CheddaDoge._name (#194) is not in UPPER_CASE_WITH_UNDERSCORES
Constant CheddaDoge._symbol (#195) is not in UPPER_CASE_WITH_UNDERSCORES
Constant CheddaDoge._decimals (#196) is not in UPPER_CASE_WITH_UNDERSCORES
Variable CheddaDoge._totalSupply (#198) is not in mixedCase
Variable CheddaDoge._maxTxAmount (#199) is not in mixedCase
Variable CheddaDoge._maxWalletSize (#200) is not in mixedCase
Variable CheddaDoge._balances (#202) is not in mixedCase
Variable CheddaDoge._allowances (#203) is not in mixedCase
Follow the Solidity naming convention.
Additional information: link
Variable IDEXRouter.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountADesired (#146) is too similar to IDEXRouter.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountBDesired (#147)
Prevent variables from having similar names.
Additional information: link
CheddaDoge.slitherConstructorVariables() (#187-456) uses literals with too many digits:
- DEAD = 0x000000000000000000000000000000000000dEaD (#191)
CheddaDoge.slitherConstructorVariables() (#187-456) uses literals with too many digits:
- ZERO = 0x0000000000000000000000000000000000000000 (#192)
CheddaDoge.slitherConstructorVariables() (#187-456) uses literals with too many digits:
- _totalSupply = 1000000000 * (10 ** _decimals) (#198)
Use: Ether suffix, Time suffix, or The scientific notation
Additional information: link
CheddaDoge.DEAD (#191) should be constant
CheddaDoge.WBNB (#190) should be constant
CheddaDoge.ZERO (#192) should be constant
CheddaDoge._totalSupply (#198) should be constant
Add the constant attributes to state variables that never change.
Additional information: link
authorize(address) should be declared external:
- Auth.authorize(address) (#98-100)
unauthorize(address) should be declared external:
- Auth.unauthorize(address) (#105-107)
transferOwnership(address) should be declared external:
- Auth.transferOwnership(address) (#126-130)
transferForeignToken(address) should be declared external:
- CheddaDoge.transferForeignToken(address) (#436-440)
isOverLiquified(uint256,uint256) should be declared external:
- CheddaDoge.isOverLiquified(uint256,uint256) (#450-452)
Use the external attribute for functions never called from the contract.
Additional information: link
Unable to find website, listings and other project-related information
Young tokens have high risks of scam / price dump / death
Token has no active CoinGecko listing / rank
Token has no active CoinMarketCap listing / rank
Unable to find Telegram and Twitter accounts