CLOAK [Cloak Coin] Token
About CLOAK
Listings
Website
CLOAK is the second token within the Milo Inu ecosystem and is an indispensable companion of Milo in our animated series. They will work together in unison to sustain the entire ecosystem. CLOAK NFT’s are a collection of images created by MILO artists based on
IP’s from various fields with a total supply of 1,111 including 54 1/1 NFT’s. Each CLOAK is unique and as such each will have important
powers within the MILO ecosystem and the metaverse.
Social
Laser Scorebeta Last Audit: 27 September 2022
Anti-Scam
Links
CLOAK.withdrawToken(address[],address) (#1191-1209) ignores return value by erc20.transfer(recipient,balance) (#1206)
CLOAK.burnMilo() (#1186-1189) ignores return value by IBEP20(_milo).transfer(_burn,amount) (#1188)
Use SafeERC20, or ensure that the transfer/transferFrom return value is checked.
Additional information: link
Contract ownership is not renounced (belongs to a wallet)
CLOAK.withdrawToken(address[],address).recipient (#1191) lacks a zero-check on :
- address(recipient).transfer(ethers) (#1200)
CLOAK.setMiloAddress(address)._addr (#1017) lacks a zero-check on :
- _milo = _addr (#1018)
Check that the address is not zero.
Additional information: link
CLOAK._transfer(address,address,uint256).DFee (#1123) is a local variable never initialized
CLOAK._transfer(address,address,uint256).fees (#1122) is a local variable never initialized
Initialize all the variables. If a variable is meant to be initialized to zero, explicitly set it to zero to improve code readability.
Additional information: link
Reentrancy in CLOAK._transfer(address,address,uint256) (#1066-1145):
External calls:
- market2MiloDead(contractTokenBalance) (#1109)
- IBEP20(_milo).transfer(_burn,amount) (#1188)
- uniswapV2Router.swapExactTokensForTokensSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1172-1178)
State variables written after the call(s):
- _tokenTransfer(from,_burn,DFee) (#1140)
- _balances[sender] = _balances[sender].sub(amount) (#1217)
- _balances[recipient] = _balances[recipient].add(amount) (#1218)
- _tokenTransfer(from,address(this),fees.sub(DFee)) (#1142)
- _balances[sender] = _balances[sender].sub(amount) (#1217)
- _balances[recipient] = _balances[recipient].add(amount) (#1218)
- _tokenTransfer(from,to,amount) (#1144)
- _balances[sender] = _balances[sender].sub(amount) (#1217)
- _balances[recipient] = _balances[recipient].add(amount) (#1218)
- inSwapAndLiquify = false (#1110)
Apply the check-effects-interactions pattern.
Additional information: link
Address._functionCallWithValue(address,bytes,uint256,string) (#398-426) uses assembly
- INLINE ASM (#418-421)
Address.isContract(address) (#272-283) uses assembly
- INLINE ASM (#279-281)
Do not use evm assembly.
Additional information: link
CLOAK.allowance(address,address).owner (#928) shadows:
- Ownable.owner() (#463-465) (function)
CLOAK._approve(address,address,uint256).owner (#1055) shadows:
- Ownable.owner() (#463-465) (function)
Rename the local variables that shadow another component.
Additional information: link
CLOAK.setNumTokensSellToMarket(uint256) (#1026-1028) should emit an event for:
- numTokensSellToMarket = num (#1027)
CLOAK.setDeadFeePercent(uint256,uint256) (#1009-1015) should emit an event for:
- buyDeadFee = _buyDeadFee (#1013)
- sellDeadFee = _sellDeadFee (#1014)
CLOAK.setMarketFeePercent(uint256,uint256) (#1001-1007) should emit an event for:
- buyMarketFee = _buyMarketFee (#1005)
- sellMarketFee = _sellMarketFee (#1006)
Emit an event for critical parameter changes.
Additional information: link
CLOAK.burnMilo() (#1186-1189) has external calls inside a loop: amount = IBEP20(_milo).balanceOf(address(this)) (#1187)
CLOAK.withdrawToken(address[],address) (#1191-1209) has external calls inside a loop: erc20.transfer(recipient,balance) (#1206)
CLOAK.withdrawToken(address[],address) (#1191-1209) has external calls inside a loop: balance = erc20.balanceOf(address(this)) (#1205)
CLOAK.swapTokensForMilo(uint256) (#1165-1179) has external calls inside a loop: uniswapV2Router.swapExactTokensForTokensSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1172-1178)
CLOAK.burnMilo() (#1186-1189) has external calls inside a loop: IBEP20(_milo).transfer(_burn,amount) (#1188)
CLOAK.swapTokensForMilo(uint256) (#1165-1179) has external calls inside a loop: path[1] = uniswapV2Router.WETH() (#1168)
Favor pull over push strategy for external calls.
Additional information: link
Low level call in Address.sendValue(address,uint256) (#301-313):
- (success) = recipient.call{value: amount}() (#308)
Low level call in Address._functionCallWithValue(address,bytes,uint256,string) (#398-426):
- (success,returndata) = target.call{value: weiValue}(data) (#407-409)
Avoid low-level calls. Check the call success. If the call is meant for a contract, check for code existence
Additional information: link
Variable IUniswapV2Router.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountADesired (#648) is too similar to IUniswapV2Router.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountBDesired (#649)
Prevent variables from having similar names.
Additional information: link
renounceOwnership() should be declared external:
- Ownable.renounceOwnership() (#482-485)
withdrawToken(address[],address) should be declared external:
- CLOAK.withdrawToken(address[],address) (#1191-1209)
name() should be declared external:
- CLOAK.name() (#899-901)
symbol() should be declared external:
- CLOAK.symbol() (#903-905)
setMiloAddress(address) should be declared external:
- CLOAK.setMiloAddress(address) (#1017-1019)
increaseAllowance(address,uint256) should be declared external:
- CLOAK.increaseAllowance(address,uint256) (#963-974)
allowance(address,address) should be declared external:
- CLOAK.allowance(address,address) (#928-935)
setNumTokensSellToMarket(uint256) should be declared external:
- CLOAK.setNumTokensSellToMarket(uint256) (#1026-1028)
approve(address,uint256) should be declared external:
- CLOAK.approve(address,uint256) (#937-944)
transferOwnership(address) should be declared external:
- Ownable.transferOwnership(address) (#491-498)
excludeMultipleAccountsFromFee(address[],bool) should be declared external:
- CLOAK.excludeMultipleAccountsFromFee(address[],bool) (#992-999)
transferFrom(address,address,uint256) should be declared external:
- CLOAK.transferFrom(address,address,uint256) (#946-961)
totalSupply() should be declared external:
- CLOAK.totalSupply() (#911-913)
decimals() should be declared external:
- CLOAK.decimals() (#907-909)
transfer(address,uint256) should be declared external:
- CLOAK.transfer(address,uint256) (#919-926)
decreaseAllowance(address,uint256) should be declared external:
- CLOAK.decreaseAllowance(address,uint256) (#976-990)
setTradeEnabled(bool) should be declared external:
- CLOAK.setTradeEnabled(bool) (#1021-1024)
multiTransfer4AirDrop(address[],uint256) should be declared external:
- CLOAK.multiTransfer4AirDrop(address[],uint256) (#1043-1049)
Use the external attribute for functions never called from the contract.
Additional information: link
Reentrancy in CLOAK.transferFrom(address,address,uint256) (#946-961):
External calls:
- _transfer(sender,recipient,amount) (#951)
- IBEP20(_milo).transfer(_burn,amount) (#1188)
- uniswapV2Router.swapExactTokensForTokensSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1172-1178)
State variables written after the call(s):
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#952-959)
- _allowances[owner][spender] = amount (#1062)
Apply the check-effects-interactions pattern.
Additional information: link
Reentrancy in CLOAK._transfer(address,address,uint256) (#1066-1145):
External calls:
- market2MiloDead(contractTokenBalance) (#1109)
- IBEP20(_milo).transfer(_burn,amount) (#1188)
- uniswapV2Router.swapExactTokensForTokensSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1172-1178)
Event emitted after the call(s):
- Transfer(sender,recipient,amount) (#1219)
- _tokenTransfer(from,to,amount) (#1144)
- Transfer(sender,recipient,amount) (#1219)
- _tokenTransfer(from,_burn,DFee) (#1140)
- Transfer(sender,recipient,amount) (#1219)
- _tokenTransfer(from,address(this),fees.sub(DFee)) (#1142)
Reentrancy in CLOAK.transferFrom(address,address,uint256) (#946-961):
External calls:
- _transfer(sender,recipient,amount) (#951)
- IBEP20(_milo).transfer(_burn,amount) (#1188)
- uniswapV2Router.swapExactTokensForTokensSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1172-1178)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#1063)
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#952-959)
Apply the check-effects-interactions pattern.
Additional information: link
CLOAK._transfer(address,address,uint256) (#1066-1145) has costly operations inside a loop:
- inSwapAndLiquify = false (#1110)
CLOAK._transfer(address,address,uint256) (#1066-1145) has costly operations inside a loop:
- inSwapAndLiquify = true (#1108)
Use a local variable to hold the loop computation result.
Additional information: link
Address.sendValue(address,uint256) (#301-313) is never used and should be removed
Address.functionCallWithValue(address,bytes,uint256) (#365-377) is never used and should be removed
SafeMath.mod(uint256,uint256,string) (#230-237) is never used and should be removed
Address.functionCallWithValue(address,bytes,uint256,string) (#385-396) is never used and should be removed
Context._msgData() (#245-248) is never used and should be removed
SafeMath.mod(uint256,uint256) (#214-216) is never used and should be removed
Address._functionCallWithValue(address,bytes,uint256,string) (#398-426) is never used and should be removed
Address.isContract(address) (#272-283) is never used and should be removed
Address.functionCall(address,bytes,string) (#346-352) is never used and should be removed
CLOAK.swapTokensForEth(uint256) (#1147-1163) is never used and should be removed
Address.functionCall(address,bytes) (#333-338) is never used and should be removed
Remove unused functions.
Additional information: link
Parameter CLOAK.setDeadFeePercent(uint256,uint256)._buyDeadFee (#1009) is not in mixedCase
Parameter CLOAK.setMarketFeePercent(uint256,uint256)._buyMarketFee (#1001) is not in mixedCase
Parameter CLOAK.setMiloAddress(address)._addr (#1017) is not in mixedCase
Function IUniswapV2Pair.PERMIT_TYPEHASH() (#566) is not in mixedCase
Parameter CLOAK.setMarketFeePercent(uint256,uint256)._sellMarketFee (#1001) is not in mixedCase
Parameter CLOAK.setTradeEnabled(bool)._enabled (#1021) is not in mixedCase
Variable CLOAK._isExcludedFromFee (#851) is not in mixedCase
Function IUniswapV2Pair.MINIMUM_LIQUIDITY() (#597) is not in mixedCase
Function IUniswapV2Pair.DOMAIN_SEPARATOR() (#564) is not in mixedCase
Parameter CLOAK.setDeadFeePercent(uint256,uint256)._sellDeadFee (#1009) is not in mixedCase
Variable CLOAK._isCpalaceed (#852) is not in mixedCase
Function IUniswapV2Router.WETH() (#643) is not in mixedCase
Follow the Solidity naming convention.
Additional information: link
CLOAK.slitherConstructorVariables() (#844-1222) uses literals with too many digits:
- _burn = 0x000000000000000000000000000000000000dEaD (#872)
CLOAK.slitherConstructorVariables() (#844-1222) uses literals with too many digits:
- _tTotal = 69000000 * 10 ** _decimals (#855)
Use: Ether suffix, Time suffix, or The scientific notation
Additional information: link
CLOAK._burn (#872) should be constant
Ownable._previousOwner (#443) should be constant
CLOAK._symbol (#858) should be constant
Ownable._lockTime (#444) should be constant
CLOAK._decimals (#854) should be constant
CLOAK._name (#857) should be constant
Add the constant attributes to state variables that never change.
Additional information: link
CLOAK.numTokensSellToMarket (#876) is set pre-construction with a non-constant function or state variable:
- 1000 * 10 ** _decimals
CLOAK._tTotal (#855) is set pre-construction with a non-constant function or state variable:
- 69000000 * 10 ** _decimals
Remove any initialization of state variables via non-constant state variables or function calls. If variables must be set upon contract deployment, locate initialization in the constructor instead.
Additional information: link
solc-0.8.14 is not recommended for deployment
Deploy with any of the following Solidity versions: 0.5.16 - 0.5.17, 0.6.11 - 0.6.12, 0.7.5 - 0.7.6 Use a simple pragma version that allows any of these versions. Consider using the latest version of Solidity for testing.
Additional information: link
Redundant expression "this (#246)" inContext (#240-249)
Remove redundant statements if they congest code but offer no value.
Additional information: link
Ownable._lockTime (#444) is never used in CLOAK (#844-1222)
Ownable._previousOwner (#443) is never used in CLOAK (#844-1222)
Remove unused state variables.
Additional information: link
Contract has 3% buy tax and 3% sell tax.
Taxes are low but contract ownership is not renounced. Token has a high risk of becoming a honeypot.
Token is deployed only at one blockchain
Token has only one trading pair
Young tokens have high risks of scam / price dump / death
Token is relatively young, but twitter if very old (probably it's fake).
Young tokens have high risks of scam / price dump / death
Young tokens have high risks of scam / price dump / death
Token has no active CoinGecko listing / rank
Token has no active CoinMarketCap listing / rank
Young tokens have high risks of price dump / death
Price for CLOAK
LASER DESK beta
Unable to find Blog account (Reddit or Medium)
Unable to find Discord account