Unable to find manual contract audit (e.g. Certik, PeckShield, Solidity...)
DOGE.addLiquidity(uint256,uint256) (#779-792) sends eth to arbitrary user
Dangerous calls:
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#784-791)
Ensure that an arbitrary user cannot withdraw unauthorized funds.
Additional information: link
Reentrancy in DOGE._transfer(address,address,uint256) (#677-726):
External calls:
- swapAndLiquify(contractTokenBalance) (#710)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#784-791)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#768-774)
External calls sending eth:
- swapAndLiquify(contractTokenBalance) (#710)
- recipient.transfer(amount) (#641)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#784-791)
State variables written after the call(s):
- _balances[sender] = _balances[sender].sub(amount,Insufficient Balance) (#713)
- _balances[recipient] = _balances[recipient].add(finalAmount) (#721)
- finalAmount = takeFee(sender,recipient,amount) (#715-716)
- _balances[address(this)] = _balances[address(this)].add(feeAmount) (#806)
Apply the check-effects-interactions pattern.
Additional information: link
Combination 1: Reentrancy vulnerabilities + Functions that send Ether to arbitraty destination. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.
DOGE.slitherConstructorVariables() (#404-829) uses literals with too many digits:
- deadAddress = 0x000000000000000000000000000000000000dEaD (#415)
Use: Ether suffix, Time suffix, or The scientific notation
Additional information: link
DOGE._decimals (#411) should be constant
DOGE._name (#409) should be constant
DOGE._symbol (#410) should be constant
Add the constant attributes to state variables that never change.
Additional information: link
waiveOwnership() should be declared external:
- Ownable.waiveOwnership() (#170-173)
transferOwnership(address) should be declared external:
- Ownable.transferOwnership(address) (#175-179)
getUnlockTime() should be declared external:
- Ownable.getUnlockTime() (#181-183)
getTime() should be declared external:
- Ownable.getTime() (#185-187)
lock(uint256) should be declared external:
- Ownable.lock(uint256) (#189-194)
unlock() should be declared external:
- Ownable.unlock() (#196-201)
name() should be declared external:
- DOGE.name() (#512-514)
symbol() should be declared external:
- DOGE.symbol() (#516-518)
decimals() should be declared external:
- DOGE.decimals() (#520-522)
totalSupply() should be declared external:
- DOGE.totalSupply() (#524-526)
allowance(address,address) should be declared external:
- DOGE.allowance(address,address) (#532-534)
increaseAllowance(address,uint256) should be declared external:
- DOGE.increaseAllowance(address,uint256) (#536-539)
decreaseAllowance(address,uint256) should be declared external:
- DOGE.decreaseAllowance(address,uint256) (#541-544)
minimumTokensBeforeSwapAmount() should be declared external:
- DOGE.minimumTokensBeforeSwapAmount() (#546-548)
approve(address,uint256) should be declared external:
- DOGE.approve(address,uint256) (#550-553)
setMarketPairStatus(address,bool) should be declared external:
- DOGE.setMarketPairStatus(address,bool) (#563-565)
setIsExcludedFromFee(address,bool) should be declared external:
- DOGE.setIsExcludedFromFee(address,bool) (#571-573)
setSwapAndLiquifyEnabled(bool) should be declared external:
- DOGE.setSwapAndLiquifyEnabled(bool) (#627-630)
setSwapAndLiquifyByLimitOnly(bool) should be declared external:
- DOGE.setSwapAndLiquifyByLimitOnly(bool) (#632-634)
getCirculatingSupply() should be declared external:
- DOGE.getCirculatingSupply() (#636-638)
changeRouterVersion(address) should be declared external:
- DOGE.changeRouterVersion(address) (#644-661)
transfer(address,uint256) should be declared external:
- DOGE.transfer(address,uint256) (#666-669)
transferFrom(address,address,uint256) should be declared external:
- DOGE.transferFrom(address,address,uint256) (#671-675)
Use the external attribute for functions never called from the contract.
Additional information: link
DOGE.addLiquidity(uint256,uint256) (#779-792) ignores return value by uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#784-791)
Ensure that all the return values of the function calls are used.
Additional information: link
DOGE.allowance(address,address).owner (#532) shadows:
- Ownable.owner() (#161-163) (function)
DOGE._approve(address,address,uint256).owner (#555) shadows:
- Ownable.owner() (#161-163) (function)
Rename the local variables that shadow another component.
Additional information: link
DOGE.setBuyTaxes(uint256,uint256,uint256) (#575-581) should emit an event for:
- _buyLiquidityFee = newLiquidityTax (#576)
- _buyMarketingFee = newMarketingTax (#577)
- _buyTeamFee = newTeamTax (#578)
- _totalTaxIfBuying = _buyLiquidityFee.add(_buyMarketingFee).add(_buyTeamFee) (#580)
DOGE.setSellTaxes(uint256,uint256,uint256) (#583-589) should emit an event for:
- _sellLiquidityFee = newLiquidityTax (#584)
- _sellMarketingFee = newMarketingTax (#585)
- _sellTeamFee = newTeamTax (#586)
- _totalTaxIfSelling = _sellLiquidityFee.add(_sellMarketingFee).add(_sellTeamFee) (#588)
DOGE.setDistributionSettings(uint256,uint256,uint256) (#591-597) should emit an event for:
- _liquidityShare = newLiquidityShare (#592)
- _teamShare = newTeamShare (#594)
- _totalDistributionShares = _liquidityShare.add(_marketingShare).add(_teamShare) (#596)
DOGE.setMaxTxAmount(uint256) (#599-601) should emit an event for:
- _maxTxAmount = maxTxAmount (#600)
DOGE.setWalletLimit(uint256) (#611-613) should emit an event for:
- _walletMax = newLimit (#612)
DOGE.setNumTokensBeforeSwap(uint256) (#615-617) should emit an event for:
- minimumTokensBeforeSwap = newLimit (#616)
DOGE.UPfeeTXtime(uint256) (#821-823) should emit an event for:
- feeTXtime = _feeTXtime (#822)
DOGE.UPendtime(uint256) (#825-827) should emit an event for:
- endtime = _endtime (#826)
Emit an event for critical parameter changes.
Additional information: link
DOGE.setMarketingWalletAddress(address).newAddress (#619) lacks a zero-check on :
- marketingWalletAddress = address(newAddress) (#620)
DOGE.setTeamWalletAddress(address).newAddress (#623) lacks a zero-check on :
- teamWalletAddress = address(newAddress) (#624)
Check that the address is not zero.
Additional information: link
Reentrancy in DOGE.changeRouterVersion(address) (#644-661):
External calls:
- newPairAddress = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#652-653)
State variables written after the call(s):
- isMarketPair[address(uniswapPair)] = true (#660)
- isWalletLimitExempt[address(uniswapPair)] = true (#659)
- uniswapPair = newPairAddress (#656)
- uniswapV2Router = _uniswapV2Router (#657)
Reentrancy in DOGE.constructor() (#482-510):
External calls:
- uniswapPair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#486-487)
State variables written after the call(s):
- _allowances[address(this)][address(uniswapV2Router)] = _totalSupply (#490)
- _balances[_msgSender()] = _totalSupply (#508)
- _totalDistributionShares = _liquidityShare.add(_marketingShare).add(_teamShare) (#497)
- _totalTaxIfBuying = _buyLiquidityFee.add(_buyMarketingFee).add(_buyTeamFee) (#495)
- _totalTaxIfSelling = _sellLiquidityFee.add(_sellMarketingFee).add(_sellTeamFee) (#496)
- isExcludedFromFee[owner()] = true (#492)
- isExcludedFromFee[address(this)] = true (#493)
- isMarketPair[address(uniswapPair)] = true (#506)
- isTxLimitExempt[owner()] = true (#503)
- isTxLimitExempt[address(this)] = true (#504)
- isWalletLimitExempt[owner()] = true (#499)
- isWalletLimitExempt[address(uniswapPair)] = true (#500)
- isWalletLimitExempt[address(this)] = true (#501)
- uniswapV2Router = _uniswapV2Router (#489)
Reentrancy in DOGE.swapAndLiquify(uint256) (#735-757):
External calls:
- swapTokensForEth(tokensForSwap) (#740)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#768-774)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#756)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#784-791)
External calls sending eth:
- transferToAddressETH(marketingWalletAddress,amountBNBMarketing) (#750)
- recipient.transfer(amount) (#641)
- transferToAddressETH(teamWalletAddress,amountBNBTeam) (#753)
- recipient.transfer(amount) (#641)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#756)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#784-791)
State variables written after the call(s):
- addLiquidity(tokensForLP,amountBNBLiquidity) (#756)
- _allowances[owner][spender] = amount (#559)
Reentrancy in DOGE.transferFrom(address,address,uint256) (#671-675):
External calls:
- _transfer(sender,recipient,amount) (#672)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#784-791)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#768-774)
External calls sending eth:
- _transfer(sender,recipient,amount) (#672)
- recipient.transfer(amount) (#641)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#784-791)
State variables written after the call(s):
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#673)
- _allowances[owner][spender] = amount (#559)
Apply the check-effects-interactions pattern.
Additional information: link
Reentrancy in DOGE._transfer(address,address,uint256) (#677-726):
External calls:
- swapAndLiquify(contractTokenBalance) (#710)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#784-791)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#768-774)
External calls sending eth:
- swapAndLiquify(contractTokenBalance) (#710)
- recipient.transfer(amount) (#641)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#784-791)
Event emitted after the call(s):
- Transfer(sender,address(this),feeAmount) (#807)
- finalAmount = takeFee(sender,recipient,amount) (#715-716)
- Transfer(sender,recipient,finalAmount) (#723)
Reentrancy in DOGE.constructor() (#482-510):
External calls:
- uniswapPair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#486-487)
Event emitted after the call(s):
- Transfer(address(0),_msgSender(),_totalSupply) (#509)
Reentrancy in DOGE.swapAndLiquify(uint256) (#735-757):
External calls:
- swapTokensForEth(tokensForSwap) (#740)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#768-774)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#756)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#784-791)
External calls sending eth:
- transferToAddressETH(marketingWalletAddress,amountBNBMarketing) (#750)
- recipient.transfer(amount) (#641)
- transferToAddressETH(teamWalletAddress,amountBNBTeam) (#753)
- recipient.transfer(amount) (#641)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#756)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#784-791)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#560)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#756)
Reentrancy in DOGE.swapTokensForEth(uint256) (#759-777):
External calls:
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#768-774)
Event emitted after the call(s):
- SwapTokensForETH(tokenAmount,path) (#776)
Reentrancy in DOGE.transferFrom(address,address,uint256) (#671-675):
External calls:
- _transfer(sender,recipient,amount) (#672)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#784-791)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#768-774)
External calls sending eth:
- _transfer(sender,recipient,amount) (#672)
- recipient.transfer(amount) (#641)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#784-791)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#560)
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#673)
Apply the check-effects-interactions pattern.
Additional information: link
Ownable.unlock() (#196-201) uses timestamp for comparisons
Dangerous comparisons:
- require(bool,string)(block.timestamp > _lockTime,Contract is locked until 7 days) (#198)
DOGE._transfer(address,address,uint256) (#677-726) uses timestamp for comparisons
Dangerous comparisons:
- endtime == 0 (#682)
- endtime > block.timestamp (#685)
Avoid relying on block.timestamp.
Additional information: link
Address.isContract(address) (#92-101) uses assembly
- INLINE ASM (#99)
Address._functionCallWithValue(address,bytes,uint256,string) (#128-145) uses assembly
- INLINE ASM (#137-140)
Do not use evm assembly.
Additional information: link
Address._functionCallWithValue(address,bytes,uint256,string) (#128-145) is never used and should be removed
Address.functionCall(address,bytes) (#111-113) is never used and should be removed
Address.functionCall(address,bytes,string) (#115-117) is never used and should be removed
Address.functionCallWithValue(address,bytes,uint256) (#119-121) is never used and should be removed
Address.functionCallWithValue(address,bytes,uint256,string) (#123-126) is never used and should be removed
Address.isContract(address) (#92-101) is never used and should be removed
Address.sendValue(address,uint256) (#103-109) is never used and should be removed
Context._msgData() (#19-22) is never used and should be removed
SafeMath.mod(uint256,uint256) (#80-82) is never used and should be removed
SafeMath.mod(uint256,uint256,string) (#84-87) is never used and should be removed
Remove unused functions.
Additional information: link
DOGE._liquidityShare (#436) is set pre-construction with a non-constant function or state variable:
- _buyLiquidityFee.add(_sellLiquidityFee)
DOGE._marketingShare (#437) is set pre-construction with a non-constant function or state variable:
- _buyMarketingFee.add(_sellMarketingFee)
DOGE._teamShare (#438) is set pre-construction with a non-constant function or state variable:
- _buyTeamFee.add(_sellTeamFee)
DOGE._totalSupply (#444) is set pre-construction with a non-constant function or state variable:
- 100 * 10 ** 4 * 10 ** _decimals
DOGE._maxTxAmount (#445) is set pre-construction with a non-constant function or state variable:
- _totalSupply.div(10)
DOGE._walletMax (#446) is set pre-construction with a non-constant function or state variable:
- _totalSupply.div(10)
DOGE.minimumTokensBeforeSwap (#447) is set pre-construction with a non-constant function or state variable:
- _totalSupply.div(10000)
Remove any initialization of state variables via non-constant state variables or function calls. If variables must be set upon contract deployment, locate initialization in the constructor instead.
Additional information: link
Low level call in Address.sendValue(address,uint256) (#103-109):
- (success) = recipient.call{value: amount}() (#107)
Low level call in Address._functionCallWithValue(address,bytes,uint256,string) (#128-145):
- (success,returndata) = target.call{value: weiValue}(data) (#131)
Avoid low-level calls. Check the call success. If the call is meant for a contract, check for code existence
Additional information: link
Function IUniswapV2Pair.DOMAIN_SEPARATOR() (#235) is not in mixedCase
Function IUniswapV2Pair.PERMIT_TYPEHASH() (#236) is not in mixedCase
Function IUniswapV2Pair.MINIMUM_LIQUIDITY() (#252) is not in mixedCase
Function IUniswapV2Router01.WETH() (#271) is not in mixedCase
Parameter DOGE.setSwapAndLiquifyEnabled(bool)._enabled (#627) is not in mixedCase
Parameter DOGE.setblocklist(address)._account (#813) is not in mixedCase
Function DOGE.UPfeeTXtime(uint256) (#821-823) is not in mixedCase
Parameter DOGE.UPfeeTXtime(uint256)._feeTXtime (#821) is not in mixedCase
Function DOGE.UPendtime(uint256) (#825-827) is not in mixedCase
Parameter DOGE.UPendtime(uint256)._endtime (#825) is not in mixedCase
Variable DOGE._balances (#417) is not in mixedCase
Variable DOGE._buyLiquidityFee (#428) is not in mixedCase
Variable DOGE._buyMarketingFee (#429) is not in mixedCase
Variable DOGE._buyTeamFee (#430) is not in mixedCase
Variable DOGE._sellLiquidityFee (#432) is not in mixedCase
Variable DOGE._sellMarketingFee (#433) is not in mixedCase
Variable DOGE._sellTeamFee (#434) is not in mixedCase
Variable DOGE._liquidityShare (#436) is not in mixedCase
Variable DOGE._marketingShare (#437) is not in mixedCase
Variable DOGE._teamShare (#438) is not in mixedCase
Variable DOGE._totalTaxIfBuying (#440) is not in mixedCase
Variable DOGE._totalTaxIfSelling (#441) is not in mixedCase
Variable DOGE._totalDistributionShares (#442) is not in mixedCase
Variable DOGE._maxTxAmount (#445) is not in mixedCase
Variable DOGE._walletMax (#446) is not in mixedCase
Follow the Solidity naming convention.
Additional information: link
Redundant expression "this (#20)" inContext (#13-23)
Remove redundant statements if they congest code but offer no value.
Additional information: link
Reentrancy in DOGE._transfer(address,address,uint256) (#677-726):
External calls:
- swapAndLiquify(contractTokenBalance) (#710)
- recipient.transfer(amount) (#641)
External calls sending eth:
- swapAndLiquify(contractTokenBalance) (#710)
- recipient.transfer(amount) (#641)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#784-791)
State variables written after the call(s):
- _balances[sender] = _balances[sender].sub(amount,Insufficient Balance) (#713)
- _balances[recipient] = _balances[recipient].add(finalAmount) (#721)
- finalAmount = takeFee(sender,recipient,amount) (#715-716)
- _balances[address(this)] = _balances[address(this)].add(feeAmount) (#806)
Event emitted after the call(s):
- Transfer(sender,address(this),feeAmount) (#807)
- finalAmount = takeFee(sender,recipient,amount) (#715-716)
- Transfer(sender,recipient,finalAmount) (#723)
Reentrancy in DOGE.swapAndLiquify(uint256) (#735-757):
External calls:
- transferToAddressETH(marketingWalletAddress,amountBNBMarketing) (#750)
- recipient.transfer(amount) (#641)
- transferToAddressETH(teamWalletAddress,amountBNBTeam) (#753)
- recipient.transfer(amount) (#641)
External calls sending eth:
- transferToAddressETH(marketingWalletAddress,amountBNBMarketing) (#750)
- recipient.transfer(amount) (#641)
- transferToAddressETH(teamWalletAddress,amountBNBTeam) (#753)
- recipient.transfer(amount) (#641)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#756)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#784-791)
State variables written after the call(s):
- addLiquidity(tokensForLP,amountBNBLiquidity) (#756)
- _allowances[owner][spender] = amount (#559)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#560)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#756)
Reentrancy in DOGE.transferFrom(address,address,uint256) (#671-675):
External calls:
- _transfer(sender,recipient,amount) (#672)
- recipient.transfer(amount) (#641)
External calls sending eth:
- _transfer(sender,recipient,amount) (#672)
- recipient.transfer(amount) (#641)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#784-791)
State variables written after the call(s):
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#673)
- _allowances[owner][spender] = amount (#559)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#560)
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#673)
Apply the check-effects-interactions pattern.
Additional information: link
Variable IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountADesired (#276) is too similar to IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountBDesired (#277)
Prevent variables from having similar names.
Additional information: link
Unable to find website, listings and other project-related information
Young tokens have high risks of scam / price dump / death
Token has no active CoinGecko listing / rank
Token has no active CoinMarketCap listing / rank
Unable to find Telegram and Twitter accounts