$CLEAR [Clear Water] Token

ClearWater.swapAndLiquify(uint256) (#2127-2165) sends eth to arbitrary user
Dangerous calls:
- CharityRewardWallet.transfer(CharityAmount) (#2152)
ClearWater.addLiquidity(uint256,uint256) (#2199-2211) sends eth to arbitrary user
Dangerous calls:
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#2202-2209)
Ensure that an arbitrary user cannot withdraw unauthorized funds.

Additional information: link

Reentrancy in ClearWater._transfer(address,address,uint256) (#2067-2125):
External calls:
- swapAndLiquify(contractTokenBalance) (#2094)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#2202-2209)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,_to,block.timestamp) (#2180-2186)
- (success) = address(dividendTracker).call{value: dividends}() (#2158)
External calls sending eth:
- swapAndLiquify(contractTokenBalance) (#2094)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#2202-2209)
- CharityRewardWallet.transfer(CharityAmount) (#2152)
- DeveloperRewardWallet.transfer(buybackAmount) (#2155)
- (success) = address(dividendTracker).call{value: dividends}() (#2158)
State variables written after the call(s):
- super._transfer(from,address(this),fees) (#2107)
- _balances[sender] = senderBalance - amount (#1032)
- _balances[recipient] += amount (#1034)
- super._transfer(from,to,amount) (#2110)
- _balances[sender] = senderBalance - amount (#1032)
- _balances[recipient] += amount (#1034)
Reentrancy in DividendPayingToken._withdrawDividendOfUser(address) (#1421-1437):
External calls:
- (success) = user.call{gas: 3000,value: _withdrawableDividend}() (#1426)
State variables written after the call(s):
- withdrawnDividends[user] = withdrawnDividends[user].sub(_withdrawableDividend) (#1429)
Apply the check-effects-interactions pattern.

Additional information: link

SafeToken.withdraw(address,uint256) (#1739-1742) ignores return value by IERC20(_token).transfer(safeManager,_amount) (#1741)
Use SafeERC20, or ensure that the transfer/transferFrom return value is checked.

Additional information: link

Contract ownership is not renounced (belongs to a wallet)

Unable to verify that contract auditor is trusted: Certik, Quantstamp, Hacken, Solidity, Paladinsec, Openzeppelin, Verichains

Combination 1: Reentrancy vulnerabilities + Functions that send Ether to arbitraty destination. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.

Combination 2: Unchecked transfer + Functions that send Ether to arbitraty destination. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.

Combination 3: Reentrancy vulnerabilities + Unchecked transfer vulnerability. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.

Contract ticker ($CLEAR) contains non-alphanumeric characters.
Not a direct threat, but may indicate unreliable intentions of developer. Non-alphanumeric chars (,.;!#*&") are extremely rare among low risk tokens.

ClearWater.swapAndLiquify(uint256) (#2127-2165) performs a multiplication on the result of a division:
-tokensToAddLiquidityWith = contractTokenBalance.div(totalFees.mul(2)).mul(liquidityFee) (#2130)
ClearWater.swapAndLiquify(uint256) (#2127-2165) performs a multiplication on the result of a division:
-CharityAmount = deltaBalance.sub(bnbToAddLiquidityWith).div(totalFees.sub(liquidityFee).sub(DeveloperRewardFee)).mul(CharityRewardFee) (#2151)
ClearWater.swapAndLiquify(uint256) (#2127-2165) performs a multiplication on the result of a division:
-buybackAmount = deltaBalance.sub(bnbToAddLiquidityWith).div(totalFees.sub(liquidityFee).sub(CharityRewardFee)).mul(DeveloperRewardFee) (#2154)
Consider ordering multiplication before division.

Additional information: link

ClearWater._transfer(address,address,uint256).claims (#2118) is a local variable never initialized
ClearWater._transfer(address,address,uint256).lastProcessedIndex (#2118) is a local variable never initialized
ClearWater._transfer(address,address,uint256).iterations (#2118) is a local variable never initialized
Initialize all the variables. If a variable is meant to be initialized to zero, explicitly set it to zero to improve code readability.

Additional information: link

ClearWater.claim() (#2045-2047) ignores return value by dividendTracker.processAccount(address(msg.sender),false) (#2046)
ClearWater._transfer(address,address,uint256) (#2067-2125) ignores return value by dividendTracker.process(gas) (#2118-2123)
ClearWater.addLiquidity(uint256,uint256) (#2199-2211) ignores return value by uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#2202-2209)
Ensure that all the return values of the function calls are used.

Additional information: link

DividendPayingToken.constructor(string,string)._name (#1378) shadows:
- ERC20._name (#840) (state variable)
DividendPayingToken.constructor(string,string)._symbol (#1378) shadows:
- ERC20._symbol (#841) (state variable)
Rename the local variables that shadow another component.

Additional information: link

ClearWater.setFee(uint256,uint256,uint256,uint256) (#1846-1853) should emit an event for:
- liquidityFee = _liquidityFee (#1848)
- CharityRewardFee = _CharityRewardFee (#1849)
- DeveloperRewardFee = _DeveloperRewardFee (#1850)
- totalFees = BNBRewardsFee.add(liquidityFee).add(CharityRewardFee).add(DeveloperRewardFee) (#1852)
ClearWater.setExtraFeeOnSell(uint256) (#1855-1857) should emit an event for:
- extraFeeOnSell = _extraFeeOnSell (#1856)
ClearWater.setMaxSelltx(uint256) (#1859-1861) should emit an event for:
- maxSellTransactionAmount = _maxSellTxAmount (#1860)
ClearWater.setSWapToensAtAmount(uint256) (#1964-1966) should emit an event for:
- swapTokensAtAmount = _newAmount (#1965)
Emit an event for critical parameter changes.

Additional information: link

SafeToken.setSafeManager(address)._safeManager (#1735) lacks a zero-check on :
- safeManager = _safeManager (#1736)
ClearWater.setCharityRewardWallet(address)._newCharityRewardWallet (#1863) lacks a zero-check on :
- CharityRewardWallet = _newCharityRewardWallet (#1864)
Check that the address is not zero.

Additional information: link

DividendPayingToken._withdrawDividendOfUser(address) (#1421-1437) has external calls inside a loop: (success) = user.call{gas: 3000,value: _withdrawableDividend}() (#1426)
Favor pull over push strategy for external calls.

Additional information: link

Variable 'ClearWater._transfer(address,address,uint256).lastProcessedIndex (#2118)' in ClearWater._transfer(address,address,uint256) (#2067-2125) potentially used before declaration: ProcessedDividendTracker(iterations,claims,lastProcessedIndex,true,gas,tx.origin) (#2119)
Variable 'ClearWater._transfer(address,address,uint256).claims (#2118)' in ClearWater._transfer(address,address,uint256) (#2067-2125) potentially used before declaration: ProcessedDividendTracker(iterations,claims,lastProcessedIndex,true,gas,tx.origin) (#2119)
Variable 'ClearWater._transfer(address,address,uint256).iterations (#2118)' in ClearWater._transfer(address,address,uint256) (#2067-2125) potentially used before declaration: ProcessedDividendTracker(iterations,claims,lastProcessedIndex,true,gas,tx.origin) (#2119)
Move all variable declarations prior to any usage of the variable, and ensure that reaching a variable declaration does not depend on some conditional if it is used unconditionally.

Additional information: link

Reentrancy in ClearWater.constructor() (#1873-1921):
External calls:
- _uniswapV2Pair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#1888-1889)
State variables written after the call(s):
- uniswapV2Pair = _uniswapV2Pair (#1892)
- uniswapV2Router = _uniswapV2Router (#1891)
Reentrancy in ClearWater.constructor() (#1873-1921):
External calls:
- _uniswapV2Pair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#1888-1889)
- _setAutomatedMarketMakerPair(_uniswapV2Pair,true) (#1894)
- dividendTracker.excludeFromDividends(pair) (#1973)
- dividendTracker.excludeFromDividends(address(dividendTracker)) (#1897)
- dividendTracker.excludeFromDividends(address(this)) (#1898)
- dividendTracker.excludeFromDividends(owner()) (#1899)
- dividendTracker.excludeFromDividends(address(_uniswapV2Router)) (#1900)
- dividendTracker.excludeFromDividends(0x000000000000000000000000000000000000dEaD) (#1901)
State variables written after the call(s):
- _mint(owner(),10000000000 * (10 ** 18)) (#1920)
- _balances[account] += amount (#1056)
- excludeFromFees(owner(),true) (#1904)
- _isExcludedFromFees[account] = excluded (#1935)
- excludeFromFees(CharityRewardWallet,true) (#1905)
- _isExcludedFromFees[account] = excluded (#1935)
- excludeFromFees(DeveloperRewardWallet,true) (#1906)
- _isExcludedFromFees[account] = excluded (#1935)
- excludeFromFees(address(this),true) (#1907)
- _isExcludedFromFees[account] = excluded (#1935)
- _isExcludedFromMaxTx[owner()] = true (#1910)
- _isExcludedFromMaxTx[address(this)] = true (#1911)
- _isExcludedFromMaxTx[CharityRewardWallet] = true (#1912)
- _isExcludedFromMaxTx[DeveloperRewardWallet] = true (#1913)
- _mint(owner(),10000000000 * (10 ** 18)) (#1920)
- _totalSupply += amount (#1055)
Reentrancy in ClearWaterDividendTracker.processAccount(address,bool) (#1715-1725):
External calls:
- amount = _withdrawDividendOfUser(account) (#1716)
- (success) = user.call{gas: 3000,value: _withdrawableDividend}() (#1426)
State variables written after the call(s):
- lastClaimTimes[account] = block.timestamp (#1719)
Apply the check-effects-interactions pattern.

Additional information: link

Reentrancy in ClearWater._setAutomatedMarketMakerPair(address,bool) (#1968-1977):
External calls:
- dividendTracker.excludeFromDividends(pair) (#1973)
Event emitted after the call(s):
- SetAutomatedMarketMakerPair(pair,value) (#1976)
Reentrancy in ClearWater._transfer(address,address,uint256) (#2067-2125):
External calls:
- swapAndLiquify(contractTokenBalance) (#2094)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#2202-2209)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,_to,block.timestamp) (#2180-2186)
- (success) = address(dividendTracker).call{value: dividends}() (#2158)
External calls sending eth:
- swapAndLiquify(contractTokenBalance) (#2094)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#2202-2209)
- CharityRewardWallet.transfer(CharityAmount) (#2152)
- DeveloperRewardWallet.transfer(buybackAmount) (#2155)
- (success) = address(dividendTracker).call{value: dividends}() (#2158)
Event emitted after the call(s):
- Transfer(sender,recipient,amount) (#1036)
- super._transfer(from,to,amount) (#2110)
- Transfer(sender,recipient,amount) (#1036)
- super._transfer(from,address(this),fees) (#2107)
Reentrancy in ClearWater._transfer(address,address,uint256) (#2067-2125):
External calls:
- swapAndLiquify(contractTokenBalance) (#2094)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#2202-2209)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,_to,block.timestamp) (#2180-2186)
- (success) = address(dividendTracker).call{value: dividends}() (#2158)
- dividendTracker.setBalance(address(from),balanceOf(from)) (#2112)
- dividendTracker.setBalance(address(to),balanceOf(to)) (#2113)
- dividendTracker.process(gas) (#2118-2123)
External calls sending eth:
- swapAndLiquify(contractTokenBalance) (#2094)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#2202-2209)
- CharityRewardWallet.transfer(CharityAmount) (#2152)
- DeveloperRewardWallet.transfer(buybackAmount) (#2155)
- (success) = address(dividendTracker).call{value: dividends}() (#2158)
Event emitted after the call(s):
- ProcessedDividendTracker(iterations,claims,lastProcessedIndex,true,gas,tx.origin) (#2119)
Reentrancy in ClearWater.constructor() (#1873-1921):
External calls:
- _uniswapV2Pair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#1888-1889)
- _setAutomatedMarketMakerPair(_uniswapV2Pair,true) (#1894)
- dividendTracker.excludeFromDividends(pair) (#1973)
Event emitted after the call(s):
- SetAutomatedMarketMakerPair(pair,value) (#1976)
- _setAutomatedMarketMakerPair(_uniswapV2Pair,true) (#1894)
Reentrancy in ClearWater.constructor() (#1873-1921):
External calls:
- _uniswapV2Pair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#1888-1889)
- _setAutomatedMarketMakerPair(_uniswapV2Pair,true) (#1894)
- dividendTracker.excludeFromDividends(pair) (#1973)
- dividendTracker.excludeFromDividends(address(dividendTracker)) (#1897)
- dividendTracker.excludeFromDividends(address(this)) (#1898)
- dividendTracker.excludeFromDividends(owner()) (#1899)
- dividendTracker.excludeFromDividends(address(_uniswapV2Router)) (#1900)
- dividendTracker.excludeFromDividends(0x000000000000000000000000000000000000dEaD) (#1901)
Event emitted after the call(s):
- ExcludeFromFees(account,excluded) (#1937)
- excludeFromFees(owner(),true) (#1904)
- ExcludeFromFees(account,excluded) (#1937)
- excludeFromFees(DeveloperRewardWallet,true) (#1906)
- ExcludeFromFees(account,excluded) (#1937)
- excludeFromFees(CharityRewardWallet,true) (#1905)
- ExcludeFromFees(account,excluded) (#1937)
- excludeFromFees(address(this),true) (#1907)
- Transfer(address(0),account,amount) (#1057)
- _mint(owner(),10000000000 * (10 ** 18)) (#1920)
Reentrancy in ClearWaterDividendTracker.processAccount(address,bool) (#1715-1725):
External calls:
- amount = _withdrawDividendOfUser(account) (#1716)
- (success) = user.call{gas: 3000,value: _withdrawableDividend}() (#1426)
Event emitted after the call(s):
- Claim(account,amount,automatic) (#1720)
Reentrancy in ClearWater.processDividendTracker(uint256) (#2040-2043):
External calls:
- (iterations,claims,lastProcessedIndex) = dividendTracker.process(gas) (#2041)
Event emitted after the call(s):
- ProcessedDividendTracker(iterations,claims,lastProcessedIndex,false,gas,tx.origin) (#2042)
Reentrancy in ClearWater.swapAndLiquify(uint256) (#2127-2165):
External calls:
- swapTokensForBnb(toSwap,address(this)) (#2140)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,_to,block.timestamp) (#2180-2186)
- addLiquidity(tokensToAddLiquidityWith,bnbToAddLiquidityWith) (#2149)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#2202-2209)
- (success) = address(dividendTracker).call{value: dividends}() (#2158)
External calls sending eth:
- addLiquidity(tokensToAddLiquidityWith,bnbToAddLiquidityWith) (#2149)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#2202-2209)
- CharityRewardWallet.transfer(CharityAmount) (#2152)
- DeveloperRewardWallet.transfer(buybackAmount) (#2155)
- (success) = address(dividendTracker).call{value: dividends}() (#2158)
Event emitted after the call(s):
- SendDividends(toSwap - tokensToAddLiquidityWith,dividends) (#2161)
- SwapAndLiquify(tokensToAddLiquidityWith,deltaBalance) (#2164)
Apply the check-effects-interactions pattern.

Additional information: link

ClearWaterDividendTracker.getAccount(address) (#1579-1622) uses timestamp for comparisons
Dangerous comparisons:
- nextClaimTime > block.timestamp (#1619-1621)
ClearWaterDividendTracker.canAutoClaim(uint256) (#1643-1649) uses timestamp for comparisons
Dangerous comparisons:
- lastClaimTime > block.timestamp (#1644)
- block.timestamp.sub(lastClaimTime) >= claimWait (#1648)
Avoid relying on block.timestamp.

Additional information: link

ClearWater.swapAndSendBNBToBuybak(uint256) (#2194-2196) is never used and should be removed
ClearWater.swapAndSendBNBToCharity(uint256) (#2190-2192) is never used and should be removed
Context._msgData() (#704-706) is never used and should be removed
DividendPayingToken._transfer(address,address,uint256) (#1477-1483) is never used and should be removed
SafeCast.toInt128(int256) (#598-601) is never used and should be removed
SafeCast.toInt16(int256) (#652-655) is never used and should be removed
SafeCast.toInt32(int256) (#634-637) is never used and should be removed
SafeCast.toInt64(int256) (#616-619) is never used and should be removed
SafeCast.toInt8(int256) (#670-673) is never used and should be removed
SafeCast.toUint128(uint256) (#493-496) is never used and should be removed
SafeCast.toUint16(uint256) (#553-556) is never used and should be removed
SafeCast.toUint224(uint256) (#478-481) is never used and should be removed
SafeCast.toUint32(uint256) (#538-541) is never used and should be removed
SafeCast.toUint64(uint256) (#523-526) is never used and should be removed
SafeCast.toUint8(uint256) (#568-571) is never used and should be removed
SafeCast.toUint96(uint256) (#508-511) is never used and should be removed
SafeMath.div(uint256,uint256,string) (#414-423) is never used and should be removed
SafeMath.mod(uint256,uint256) (#374-376) is never used and should be removed
SafeMath.mod(uint256,uint256,string) (#440-449) is never used and should be removed
SafeMath.sub(uint256,uint256,string) (#391-400) is never used and should be removed
SafeMath.tryAdd(uint256,uint256) (#245-251) is never used and should be removed
SafeMath.tryDiv(uint256,uint256) (#287-292) is never used and should be removed
SafeMath.tryMod(uint256,uint256) (#299-304) is never used and should be removed
SafeMath.tryMul(uint256,uint256) (#270-280) is never used and should be removed
SafeMath.trySub(uint256,uint256) (#258-263) is never used and should be removed
SignedSafeMath.div(int256,int256) (#196-198) is never used and should be removed
SignedSafeMath.mul(int256,int256) (#182-184) is never used and should be removed
Remove unused functions.

Additional information: link

Pragma version0.8.10 (#12) necessitates a version too recent to be trusted. Consider deploying with 0.6.12/0.7.6/0.8.7
solc-0.8.10 is not recommended for deployment
Deploy with any of the following Solidity versions: 0.5.16 - 0.5.17, 0.6.11 - 0.6.12, 0.7.5 - 0.7.6 Use a simple pragma version that allows any of these versions. Consider using the latest version of Solidity for testing.

Additional information: link

Low level call in DividendPayingToken._withdrawDividendOfUser(address) (#1421-1437):
- (success) = user.call{gas: 3000,value: _withdrawableDividend}() (#1426)
Low level call in ClearWater.swapAndLiquify(uint256) (#2127-2165):
- (success) = address(dividendTracker).call{value: dividends}() (#2158)
Avoid low-level calls. Check the call success. If the call is meant for a contract, check for code existence

Additional information: link

Function IUniswapV2Router01.WETH() (#16) is not in mixedCase
Parameter DividendPayingToken.dividendOf(address)._owner (#1443) is not in mixedCase
Parameter DividendPayingToken.withdrawableDividendOf(address)._owner (#1450) is not in mixedCase
Parameter DividendPayingToken.withdrawnDividendOf(address)._owner (#1457) is not in mixedCase
Parameter DividendPayingToken.accumulativeDividendOf(address)._owner (#1467) is not in mixedCase
Constant DividendPayingToken.magnitude (#1358) is not in UPPER_CASE_WITH_UNDERSCORES
Parameter ClearWaterDividendTracker.getAccount(address)._account (#1579) is not in mixedCase
Parameter SafeToken.setSafeManager(address)._safeManager (#1735) is not in mixedCase
Parameter SafeToken.withdraw(address,uint256)._token (#1739) is not in mixedCase
Parameter SafeToken.withdraw(address,uint256)._amount (#1739) is not in mixedCase
Parameter SafeToken.withdrawBNB(uint256)._amount (#1744) is not in mixedCase
Parameter LockToken.includeToWhiteList(address[])._users (#1767) is not in mixedCase
Parameter ClearWater.setFee(uint256,uint256,uint256,uint256)._bnbRewardFee (#1846) is not in mixedCase
Parameter ClearWater.setFee(uint256,uint256,uint256,uint256)._liquidityFee (#1846) is not in mixedCase
Parameter ClearWater.setFee(uint256,uint256,uint256,uint256)._CharityRewardFee (#1846) is not in mixedCase
Parameter ClearWater.setFee(uint256,uint256,uint256,uint256)._DeveloperRewardFee (#1846) is not in mixedCase
Parameter ClearWater.setExtraFeeOnSell(uint256)._extraFeeOnSell (#1855) is not in mixedCase
Parameter ClearWater.setMaxSelltx(uint256)._maxSellTxAmount (#1859) is not in mixedCase
Parameter ClearWater.setCharityRewardWallet(address)._newCharityRewardWallet (#1863) is not in mixedCase
Parameter ClearWater.setExcludeFromMaxTx(address,bool)._address (#1940) is not in mixedCase
Parameter ClearWater.setExcludeFromAll(address)._address (#1944) is not in mixedCase
Parameter ClearWater.setSWapToensAtAmount(uint256)._newAmount (#1964) is not in mixedCase
Parameter ClearWater.setSwapAndLiquifyEnabled(bool)._enabled (#2062) is not in mixedCase
Parameter ClearWater.swapTokensForBnb(uint256,address)._to (#2167) is not in mixedCase
Variable ClearWater.BNBRewardsFee (#1789) is not in mixedCase
Variable ClearWater.CharityRewardFee (#1793) is not in mixedCase
Variable ClearWater.DeveloperRewardFee (#1794) is not in mixedCase
Variable ClearWater.CharityRewardWallet (#1795) is not in mixedCase
Variable ClearWater.DeveloperRewardWallet (#1796) is not in mixedCase
Follow the Solidity naming convention.

Additional information: link

Reentrancy in ClearWater._transfer(address,address,uint256) (#2067-2125):
External calls:
- swapAndLiquify(contractTokenBalance) (#2094)
- CharityRewardWallet.transfer(CharityAmount) (#2152)
- DeveloperRewardWallet.transfer(buybackAmount) (#2155)
External calls sending eth:
- swapAndLiquify(contractTokenBalance) (#2094)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#2202-2209)
- CharityRewardWallet.transfer(CharityAmount) (#2152)
- DeveloperRewardWallet.transfer(buybackAmount) (#2155)
- (success) = address(dividendTracker).call{value: dividends}() (#2158)
State variables written after the call(s):
- super._transfer(from,address(this),fees) (#2107)
- _balances[sender] = senderBalance - amount (#1032)
- _balances[recipient] += amount (#1034)
- super._transfer(from,to,amount) (#2110)
- _balances[sender] = senderBalance - amount (#1032)
- _balances[recipient] += amount (#1034)
Event emitted after the call(s):
- ProcessedDividendTracker(iterations,claims,lastProcessedIndex,true,gas,tx.origin) (#2119)
- Transfer(sender,recipient,amount) (#1036)
- super._transfer(from,address(this),fees) (#2107)
- Transfer(sender,recipient,amount) (#1036)
- super._transfer(from,to,amount) (#2110)
Reentrancy in ClearWater.swapAndLiquify(uint256) (#2127-2165):
External calls:
- CharityRewardWallet.transfer(CharityAmount) (#2152)
- DeveloperRewardWallet.transfer(buybackAmount) (#2155)
External calls sending eth:
- addLiquidity(tokensToAddLiquidityWith,bnbToAddLiquidityWith) (#2149)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#2202-2209)
- CharityRewardWallet.transfer(CharityAmount) (#2152)
- DeveloperRewardWallet.transfer(buybackAmount) (#2155)
- (success) = address(dividendTracker).call{value: dividends}() (#2158)
Event emitted after the call(s):
- SendDividends(toSwap - tokensToAddLiquidityWith,dividends) (#2161)
- SwapAndLiquify(tokensToAddLiquidityWith,deltaBalance) (#2164)
Apply the check-effects-interactions pattern.

Additional information: link

Variable IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountADesired (#21) is too similar to IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountBDesired (#22)
Variable DividendPayingToken._withdrawDividendOfUser(address)._withdrawableDividend (#1422) is too similar to ClearWaterDividendTracker.getAccount(address).withdrawableDividends (#1584)
Variable ClearWater.BNBRewardsFee (#1789) is too similar to ClearWater.setFee(uint256,uint256,uint256,uint256)._bnbRewardFee (#1846)
Prevent variables from having similar names.

Additional information: link

ClearWaterDividendTracker.constructor() (#1539-1542) uses literals with too many digits:
- minimumTokenBalanceForDividends = 100000 * (10 ** 18) (#1541)
ClearWaterDividendTracker.getAccountAtIndex(uint256) (#1624-1641) uses literals with too many digits:
- (0x0000000000000000000000000000000000000000,- 1,- 1,0,0,0,0,0) (#1635)
ClearWater.constructor() (#1873-1921) uses literals with too many digits:
- dividendTracker.excludeFromDividends(0x000000000000000000000000000000000000dEaD) (#1901)
ClearWater.constructor() (#1873-1921) uses literals with too many digits:
- _mint(owner(),10000000000 * (10 ** 18)) (#1920)
ClearWater.updateGasForProcessing(uint256) (#1979-1984) uses literals with too many digits:
- require(bool,string)(newValue >= 200000 && newValue <= 500000,ClearWater: gasForProcessing must be between 200,000 and 500,000) (#1980)
ClearWater.slitherConstructorVariables() (#1774-2214) uses literals with too many digits:
- gasForProcessing = 300000 (#1799)
Use: Ether suffix, Time suffix, or The scientific notation

Additional information: link

name() should be declared external:
- ERC20.name() (#860-862)
symbol() should be declared external:
- ERC20.symbol() (#868-870)
decimals() should be declared external:
- ERC20.decimals() (#885-887)
transfer(address,uint256) should be declared external:
- ERC20.transfer(address,uint256) (#911-914)
approve(address,uint256) should be declared external:
- ERC20.approve(address,uint256) (#930-933)
transferFrom(address,address,uint256) should be declared external:
- ERC20.transferFrom(address,address,uint256) (#948-962)
increaseAllowance(address,uint256) should be declared external:
- ERC20.increaseAllowance(address,uint256) (#976-979)
decreaseAllowance(address,uint256) should be declared external:
- ERC20.decreaseAllowance(address,uint256) (#995-1003)
renounceOwnership() should be declared external:
- Ownable.renounceOwnership() (#1202-1204)
transferOwnership(address) should be declared external:
- Ownable.transferOwnership(address) (#1210-1213)
get(IterableMapping.Map,address) should be declared external:
- IterableMapping.get(IterableMapping.Map,address) (#1231-1233)
getIndexOfKey(IterableMapping.Map,address) should be declared external:
- IterableMapping.getIndexOfKey(IterableMapping.Map,address) (#1235-1240)
getKeyAtIndex(IterableMapping.Map,uint256) should be declared external:
- IterableMapping.getKeyAtIndex(IterableMapping.Map,uint256) (#1242-1244)
size(IterableMapping.Map) should be declared external:
- IterableMapping.size(IterableMapping.Map) (#1248-1250)
withdrawDividend() should be declared external:
- ClearWaterDividendTracker.withdrawDividend() (#1548-1550)
- DividendPayingToken.withdrawDividend() (#1415-1417)
dividendOf(address) should be declared external:
- DividendPayingToken.dividendOf(address) (#1443-1445)
withdrawnDividendOf(address) should be declared external:
- DividendPayingToken.withdrawnDividendOf(address) (#1457-1459)
getAccountAtIndex(uint256) should be declared external:
- ClearWaterDividendTracker.getAccountAtIndex(uint256) (#1624-1641)
process(uint256) should be declared external:
- ClearWaterDividendTracker.process(uint256) (#1668-1713)
setSafeManager(address) should be declared external:
- SafeToken.setSafeManager(address) (#1735-1737)
setFee(uint256,uint256,uint256,uint256) should be declared external:
- ClearWater.setFee(uint256,uint256,uint256,uint256) (#1846-1853)
setExtraFeeOnSell(uint256) should be declared external:
- ClearWater.setExtraFeeOnSell(uint256) (#1855-1857)
setMaxSelltx(uint256) should be declared external:
- ClearWater.setMaxSelltx(uint256) (#1859-1861)
setCharityRewardWallet(address) should be declared external:
- ClearWater.setCharityRewardWallet(address) (#1863-1865)
updateUniswapV2Router(address) should be declared external:
- ClearWater.updateUniswapV2Router(address) (#1927-1931)
setExcludeFromMaxTx(address,bool) should be declared external:
- ClearWater.setExcludeFromMaxTx(address,bool) (#1940-1942)
setExcludeFromAll(address) should be declared external:
- ClearWater.setExcludeFromAll(address) (#1944-1948)
excludeMultipleAccountsFromFees(address[],bool) should be declared external:
- ClearWater.excludeMultipleAccountsFromFees(address[],bool) (#1950-1956)
setAutomatedMarketMakerPair(address,bool) should be declared external:
- ClearWater.setAutomatedMarketMakerPair(address,bool) (#1958-1962)
setSWapToensAtAmount(uint256) should be declared external:
- ClearWater.setSWapToensAtAmount(uint256) (#1964-1966)
updateGasForProcessing(uint256) should be declared external:
- ClearWater.updateGasForProcessing(uint256) (#1979-1984)
isExcludedFromFees(address) should be declared external:
- ClearWater.isExcludedFromFees(address) (#1998-2000)
isExcludedFromMaxTx(address) should be declared external:
- ClearWater.isExcludedFromMaxTx(address) (#2002-2004)
withdrawableDividendOf(address) should be declared external:
- ClearWater.withdrawableDividendOf(address) (#2006-2008)
dividendTokenBalanceOf(address) should be declared external:
- ClearWater.dividendTokenBalanceOf(address) (#2010-2012)
setSwapAndLiquifyEnabled(bool) should be declared external:
- ClearWater.setSwapAndLiquifyEnabled(bool) (#2062-2065)
Use the external attribute for functions never called from the contract.

Additional information: link

Number of Binance Smart Chain (BSC) token holders is low.

Token is deployed only at one blockchain

Token has only one trading pair

Contract has 10% buy tax and 10% sell tax.
Taxes are low but contract ownership is not renounced. Token has a high risk of becoming a honeypot.

Unable to find audit link on the website

Unable to find whitepaper link on the website

Unable to find token on CoinHunt

Additional information: link

Young tokens have high risks of price dump / death

Young tokens have high risks of scam / price dump / death

Young tokens have high risks of scam / price dump / death

Young tokens have high risks of price dump / death

Token has relatively low CoinGecko rank

Token has relatively low CoinMarketCap rank

Young tokens have high risks of price dump / death