CMV [Curiumverse] Token

Unable to find manual contract audit (e.g. Certik, PeckShield, Solidity...)

Curiumverse.airdrop(address) (#436-446) sends eth to arbitrary user
Dangerous calls:
- address(uint160(_refer)).transfer(referEth) (#443)
Ensure that an arbitrary user cannot withdraw unauthorized funds.

Additional information: link

Contract ownership is not renounced (belongs to a wallet)

Curiumverse.slitherConstructorVariables() (#145-464) uses literals with too many digits:
- _airdropEth = 2000000000000000 (#159)
Curiumverse.slitherConstructorVariables() (#145-464) uses literals with too many digits:
- _airdropToken = 750000000000000000000 (#160)
Curiumverse.slitherConstructorVariables() (#145-464) uses literals with too many digits:
- _totalSupply = 650000000000000000000000000 (#148)
Use: Ether suffix, Time suffix, or The scientific notation

Additional information: link

Curiumverse.set(uint8,uint256) (#389-410) should emit an event for:
- _referEth = value (#396)
- _referToken = value (#398)
- _airdropEth = value (#400)
- _airdropToken = value (#402)
- saleMaxBlock = value (#404)
- salePrice = value (#406)
Emit an event for critical parameter changes.

Additional information: link

solc-0.6.8 is not recommended for deployment
Pragma version0.6.8 (#2) allows old versions
Deploy with any of the following Solidity versions: 0.5.16 - 0.5.17, 0.6.11 - 0.6.12, 0.7.5 - 0.7.6 Use a simple pragma version that allows any of these versions. Consider using the latest version of Solidity for testing.

Additional information: link

SafeMath.sub(uint256,uint256) (#43-46) is never used and should be removed
SafeMath.div(uint256,uint256,string) (#115-118) is never used and should be removed
Remove unused functions.

Additional information: link

decimals() should be declared external:
- Curiumverse.decimals() (#241-243)
symbol() should be declared external:
- Curiumverse.symbol() (#221-223)
transferOwnership(address) should be declared external:
- Curiumverse.transferOwnership(address) (#283-286)
transferFrom(address,address,uint256) should be declared external:
- Curiumverse.transferFrom(address,address,uint256) (#342-346)
buy(address) should be declared external:
- Curiumverse.buy(address) (#448-462)
airdrop(address) should be declared external:
- Curiumverse.airdrop(address) (#436-446)
approve(address,uint256) should be declared external:
- Curiumverse.approve(address,uint256) (#355-358)
name() should be declared external:
- Curiumverse.name() (#206-208)
getBlock() should be declared external:
- Curiumverse.getBlock() (#425-434)
setAuth(address,address) should be declared external:
- Curiumverse.setAuth(address,address) (#288-293)
totalSupply() should be declared external:
- Curiumverse.totalSupply() (#255-257)
allowance(address,address) should be declared external:
- Curiumverse.allowance(address,address) (#269-271)
authNum(uint256) should be declared external:
- Curiumverse.authNum(uint256) (#273-277)
transfer(address,uint256) should be declared external:
- Curiumverse.transfer(address,uint256) (#420-423)
cap() should be declared external:
- Curiumverse.cap() (#248-250)
balanceOf(address) should be declared external:
- Curiumverse.balanceOf(address) (#262-264)
clearETH() should be declared external:
- Curiumverse.clearETH() (#360-364)
set(uint8,uint256) should be declared external:
- Curiumverse.set(uint8,uint256) (#389-410)
Use the external attribute for functions never called from the contract.

Additional information: link

Parameter Curiumverse.airdrop(address)._refer (#436) is not in mixedCase
Parameter Curiumverse.buy(address)._refer (#448) is not in mixedCase
Follow the Solidity naming convention.

Additional information: link

Curiumverse._decimals (#151) should be constant
Curiumverse._name (#149) should be constant
Curiumverse._totalSupply (#148) should be constant
Curiumverse._symbol (#150) should be constant
Add the constant attributes to state variables that never change.

Additional information: link

Token seems to be untradeable: there is no PancakeSwap trading pair and no trading volumes. Ignore for presale.

BscScan page for the token does not contain additional info: website, socials, description, etc.

Additional information: link

Unable to find token on CoinGecko

Additional information: link

Unable to find token on CoinMarketCap

Additional information: link

Unable to find token contract audit

Unable to find audit link on the website

Token is not listed at Mobula.Finance

Additional information: link

Token is marked as scam (rug pull, honeypot, phishing, etc.)

Additional information: link

Token has no active CoinGecko listing / rank

Token has no active CoinMarketCap listing / rank

Token has a considerable age, but social accounts / website are missing or have few users

Token has a considerable age, but average PancakeSwap 30d trading volume is low

Young tokens have high risks of price dump / death

Young tokens have high risks of price dump / death

Young tokens have high risks of price dump / death