Cryptogram Token

Cryptogram.swapBack() (#1049-1086) sends eth to arbitrary user
Dangerous calls:
- (success,None) = address(marketingAddress).call{value: bnbForMarketing}() (#1076)
Cryptogram.addLiquidity(uint256,uint256) (#1102-1112) sends eth to arbitrary user
Dangerous calls:
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,liquidityAddress,block.timestamp) (#1104-1111)
Ensure that an arbitrary user cannot withdraw unauthorized funds.

Additional information: link

Reentrancy in Cryptogram._transfer(address,address,uint256) (#966-1047):
External calls:
- swapBack() (#1006)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,liquidityAddress,block.timestamp) (#1104-1111)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1093-1099)
- (success) = address(buybackAddress).call{value: bnbForBuyBack}() (#1075)
- (success,None) = address(marketingAddress).call{value: bnbForMarketing}() (#1076)
- (success,None) = address(0x22d3B96a9614B12670367F4eBFe133afCb00B461).call{value: bnbForDev}() (#1077)
- (success,None) = address(marketingAddress).call{value: address(this).balance}() (#1085)
External calls sending eth:
- swapBack() (#1006)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,liquidityAddress,block.timestamp) (#1104-1111)
- (success) = address(buybackAddress).call{value: bnbForBuyBack}() (#1075)
- (success,None) = address(marketingAddress).call{value: bnbForMarketing}() (#1076)
- (success,None) = address(0x22d3B96a9614B12670367F4eBFe133afCb00B461).call{value: bnbForDev}() (#1077)
- (success,None) = address(marketingAddress).call{value: address(this).balance}() (#1085)
State variables written after the call(s):
- _tokenTransfer(from,to,amount,takeFee) (#1045)
- _buyBackTokensToSwap += tLiquidity * _buyBuybackFee / _liquidityFee (#1316)
- _buyBackTokensToSwap += tLiquidity * _sellBuybackFee / _liquidityFee (#1320)
- _tokenTransfer(from,to,amount,takeFee) (#1045)
- _liquidityTokensToSwap += tLiquidity * _buyLiquidityFee / _liquidityFee (#1315)
- _liquidityTokensToSwap += tLiquidity * _sellLiquidityFee / _liquidityFee (#1319)
- _tokenTransfer(from,to,amount,takeFee) (#1045)
- _marketingTokensToSwap += tLiquidity * _buyMarketingFee / _liquidityFee (#1317)
- _marketingTokensToSwap += tLiquidity * _sellMarketingFee / _liquidityFee (#1321)
- _tokenTransfer(from,to,amount,takeFee) (#1045)
- _rOwned[sender] = _rOwned[sender].sub(rAmount) (#1168)
- _rOwned[sender] = _rOwned[sender].sub(rAmount) (#1148)
- _rOwned[sender] = _rOwned[sender].sub(rAmount) (#1211)
- _rOwned[recipient] = _rOwned[recipient].add(rTransferAmount) (#1149)
- _rOwned[sender] = _rOwned[sender].sub(rAmount) (#1190)
- _rOwned[recipient] = _rOwned[recipient].add(rTransferAmount) (#1170)
- _rOwned[recipient] = _rOwned[recipient].add(rTransferAmount) (#1191)
- _rOwned[recipient] = _rOwned[recipient].add(rTransferAmount) (#1213)
- _rOwned[address(this)] = _rOwned[address(this)].add(rLiquidity) (#1325)
- _tokenTransfer(from,to,amount,takeFee) (#1045)
- _rTotal = _rTotal.sub(rFee) (#1220)
- _tokenTransfer(from,to,amount,takeFee) (#1045)
- _tOwned[sender] = _tOwned[sender].sub(tAmount) (#1189)
- _tOwned[sender] = _tOwned[sender].sub(tAmount) (#1210)
- _tOwned[recipient] = _tOwned[recipient].add(tTransferAmount) (#1169)
- _tOwned[recipient] = _tOwned[recipient].add(tTransferAmount) (#1212)
- _tOwned[address(this)] = _tOwned[address(this)].add(tLiquidity) (#1327)
Apply the check-effects-interactions pattern.

Additional information: link

Ownable._lockTime (#215) is never initialized. It is used in:
- Ownable.getUnlockTime() (#251-253)
Initialize all the variables. If a variable is meant to be initialized to zero, explicitly set it to zero to improve code readability.

Additional information: link

Combination 1: Reentrancy vulnerabilities + Functions that send Ether to arbitraty destination. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.

Cryptogram._transfer(address,address,uint256) (#966-1047) uses a dangerous strict equality:
- from != owner() && to != uniswapV2Pair && block.number == tradingActiveBlock (#979)
Don't use strict equality to determine if an account has enough Ether or tokens.

Additional information: link

Contract ownership is not renounced (belongs to a wallet)

Cryptogram.swapBack().success (#1075) is written in both
(success) = address(buybackAddress).call{value: bnbForBuyBack}() (#1075)
(success,None) = address(marketingAddress).call{value: bnbForMarketing}() (#1076)
Cryptogram.swapBack().success (#1075) is written in both
(success,None) = address(marketingAddress).call{value: bnbForMarketing}() (#1076)
(success,None) = address(0x22d3B96a9614B12670367F4eBFe133afCb00B461).call{value: bnbForDev}() (#1077)
Fix or remove the writes.

Additional information: link

Cryptogram.allowance(address,address).owner (#788) shadows:
- Ownable.owner() (#228-230) (function)
Cryptogram._approve(address,address,uint256).owner (#955) shadows:
- Ownable.owner() (#228-230) (function)
Rename the local variables that shadow another component.

Additional information: link

Cryptogram._transfer(address,address,uint256) (#966-1047) uses timestamp for comparisons
Dangerous comparisons:
- boughtEarly[from] && earlyBuyPenaltyEnd <= block.number (#1034)
Avoid relying on block.timestamp.

Additional information: link

Low level call in Address.sendValue(address,uint256) (#130-142):
- (success) = recipient.call{value: amount}() (#137)
Low level call in Address._functionCallWithValue(address,bytes,uint256,string) (#186-209):
- (success,returndata) = target.call{value: weiValue}(data) (#194-196)
Low level call in Cryptogram.swapBack() (#1049-1086):
- (success) = address(buybackAddress).call{value: bnbForBuyBack}() (#1075)
- (success,None) = address(marketingAddress).call{value: bnbForMarketing}() (#1076)
- (success,None) = address(0x22d3B96a9614B12670367F4eBFe133afCb00B461).call{value: bnbForDev}() (#1077)
- (success,None) = address(marketingAddress).call{value: address(this).balance}() (#1085)
Avoid low-level calls. Check the call success. If the call is meant for a contract, check for code existence

Additional information: link

Function IUniswapV2Pair.DOMAIN_SEPARATOR() (#325) is not in mixedCase
Function IUniswapV2Pair.PERMIT_TYPEHASH() (#327) is not in mixedCase
Function IUniswapV2Pair.MINIMUM_LIQUIDITY() (#357) is not in mixedCase
Function IUniswapV2Router01.WETH() (#401) is not in mixedCase
Parameter Cryptogram.calculateTaxFee(uint256)._amount (#1330) is not in mixedCase
Parameter Cryptogram.calculateLiquidityFee(uint256)._amount (#1334) is not in mixedCase
Parameter Cryptogram.setMarketingAddress(address)._marketingAddress (#1401) is not in mixedCase
Parameter Cryptogram.setBuyBackAddress(address)._buybackAddress (#1408) is not in mixedCase
Parameter Cryptogram.setLiquidityAddress(address)._liquidityAddress (#1415) is not in mixedCase
Parameter Cryptogram.setSwapAndLiquifyEnabled(bool)._enabled (#1422) is not in mixedCase
Parameter Cryptogram.changeRouterVersion(address)._router (#1431) is not in mixedCase
Parameter Cryptogram.transferForeignToken(address,address)._token (#1460) is not in mixedCase
Parameter Cryptogram.transferForeignToken(address,address)._to (#1460) is not in mixedCase
Constant Cryptogram._tTotal (#630) is not in UPPER_CASE_WITH_UNDERSCORES
Constant Cryptogram._name (#634) is not in UPPER_CASE_WITH_UNDERSCORES
Constant Cryptogram._symbol (#635) is not in UPPER_CASE_WITH_UNDERSCORES
Constant Cryptogram._decimals (#636) is not in UPPER_CASE_WITH_UNDERSCORES
Variable Cryptogram._buyTaxFee (#651) is not in mixedCase
Variable Cryptogram._buyLiquidityFee (#652) is not in mixedCase
Variable Cryptogram._buyMarketingFee (#653) is not in mixedCase
Variable Cryptogram._buyBuybackFee (#654) is not in mixedCase
Variable Cryptogram._sellTaxFee (#656) is not in mixedCase
Variable Cryptogram._sellLiquidityFee (#657) is not in mixedCase
Variable Cryptogram._sellMarketingFee (#658) is not in mixedCase
Variable Cryptogram._sellBuybackFee (#659) is not in mixedCase
Follow the Solidity naming convention.

Additional information: link

Redundant expression "this (#17)" inContext (#11-20)
Remove redundant statements if they congest code but offer no value.

Additional information: link

Variable IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountADesired (#406) is too similar to IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountBDesired (#407)
Variable Cryptogram._transferToExcluded(address,address,uint256).rTransferAmount (#1162) is too similar to Cryptogram._transferFromExcluded(address,address,uint256).tTransferAmount (#1185)
Variable Cryptogram._getRValues(uint256,uint256,uint256,uint256).rTransferAmount (#1289) is too similar to Cryptogram._transferFromExcluded(address,address,uint256).tTransferAmount (#1185)
Variable Cryptogram.reflectionFromToken(uint256,bool).rTransferAmount (#913) is too similar to Cryptogram._transferFromExcluded(address,address,uint256).tTransferAmount (#1185)
Variable Cryptogram._transferBothExcluded(address,address,uint256).rTransferAmount (#1204) is too similar to Cryptogram._transferFromExcluded(address,address,uint256).tTransferAmount (#1185)
Variable Cryptogram._transferFromExcluded(address,address,uint256).rTransferAmount (#1183) is too similar to Cryptogram._transferToExcluded(address,address,uint256).tTransferAmount (#1164)
Variable Cryptogram._transferBothExcluded(address,address,uint256).rTransferAmount (#1204) is too similar to Cryptogram._transferBothExcluded(address,address,uint256).tTransferAmount (#1206)
Variable Cryptogram._getValues(uint256).rTransferAmount (#1241) is too similar to Cryptogram._transferFromExcluded(address,address,uint256).tTransferAmount (#1185)
Variable Cryptogram._transferToExcluded(address,address,uint256).rTransferAmount (#1162) is too similar to Cryptogram._transferToExcluded(address,address,uint256).tTransferAmount (#1164)
Variable Cryptogram._getRValues(uint256,uint256,uint256,uint256).rTransferAmount (#1289) is too similar to Cryptogram._transferToExcluded(address,address,uint256).tTransferAmount (#1164)
Variable Cryptogram.reflectionFromToken(uint256,bool).rTransferAmount (#913) is too similar to Cryptogram._transferToExcluded(address,address,uint256).tTransferAmount (#1164)
Variable Cryptogram._transferBothExcluded(address,address,uint256).rTransferAmount (#1204) is too similar to Cryptogram._transferToExcluded(address,address,uint256).tTransferAmount (#1164)
Variable Cryptogram._transferFromExcluded(address,address,uint256).rTransferAmount (#1183) is too similar to Cryptogram._transferStandard(address,address,uint256).tTransferAmount (#1144)
Variable Cryptogram.reflectionFromToken(uint256,bool).rTransferAmount (#913) is too similar to Cryptogram._transferStandard(address,address,uint256).tTransferAmount (#1144)
Variable Cryptogram._getValues(uint256).rTransferAmount (#1241) is too similar to Cryptogram._transferToExcluded(address,address,uint256).tTransferAmount (#1164)
Variable Cryptogram._transferToExcluded(address,address,uint256).rTransferAmount (#1162) is too similar to Cryptogram._transferStandard(address,address,uint256).tTransferAmount (#1144)
Variable Cryptogram._getRValues(uint256,uint256,uint256,uint256).rTransferAmount (#1289) is too similar to Cryptogram._transferStandard(address,address,uint256).tTransferAmount (#1144)
Variable Cryptogram._transferBothExcluded(address,address,uint256).rTransferAmount (#1204) is too similar to Cryptogram._transferStandard(address,address,uint256).tTransferAmount (#1144)
Variable Cryptogram._transferBothExcluded(address,address,uint256).rTransferAmount (#1204) is too similar to Cryptogram._getValues(uint256).tTransferAmount (#1237)
Variable Cryptogram._getValues(uint256).rTransferAmount (#1241) is too similar to Cryptogram._transferStandard(address,address,uint256).tTransferAmount (#1144)
Variable Cryptogram._transferStandard(address,address,uint256).rTransferAmount (#1142) is too similar to Cryptogram._transferStandard(address,address,uint256).tTransferAmount (#1144)
Variable Cryptogram._transferFromExcluded(address,address,uint256).rTransferAmount (#1183) is too similar to Cryptogram._transferFromExcluded(address,address,uint256).tTransferAmount (#1185)
Variable Cryptogram._transferFromExcluded(address,address,uint256).rTransferAmount (#1183) is too similar to Cryptogram._getValues(uint256).tTransferAmount (#1237)
Variable Cryptogram._transferToExcluded(address,address,uint256).rTransferAmount (#1162) is too similar to Cryptogram._getTValues(uint256).tTransferAmount (#1268)
Variable Cryptogram.reflectionFromToken(uint256,bool).rTransferAmount (#913) is too similar to Cryptogram._getTValues(uint256).tTransferAmount (#1268)
Variable Cryptogram._getValues(uint256).rTransferAmount (#1241) is too similar to Cryptogram._getValues(uint256).tTransferAmount (#1237)
Variable Cryptogram._getRValues(uint256,uint256,uint256,uint256).rTransferAmount (#1289) is too similar to Cryptogram._getValues(uint256).tTransferAmount (#1237)
Variable Cryptogram._transferStandard(address,address,uint256).rTransferAmount (#1142) is too similar to Cryptogram._getTValues(uint256).tTransferAmount (#1268)
Variable Cryptogram._transferToExcluded(address,address,uint256).rTransferAmount (#1162) is too similar to Cryptogram._getValues(uint256).tTransferAmount (#1237)
Variable Cryptogram._transferFromExcluded(address,address,uint256).rTransferAmount (#1183) is too similar to Cryptogram._transferBothExcluded(address,address,uint256).tTransferAmount (#1206)
Variable Cryptogram.reflectionFromToken(uint256,bool).rTransferAmount (#913) is too similar to Cryptogram._getValues(uint256).tTransferAmount (#1237)
Variable Cryptogram._getRValues(uint256,uint256,uint256,uint256).rTransferAmount (#1289) is too similar to Cryptogram._transferBothExcluded(address,address,uint256).tTransferAmount (#1206)
Variable Cryptogram._getValues(uint256).rTransferAmount (#1241) is too similar to Cryptogram._transferBothExcluded(address,address,uint256).tTransferAmount (#1206)
Variable Cryptogram._transferStandard(address,address,uint256).rTransferAmount (#1142) is too similar to Cryptogram._getValues(uint256).tTransferAmount (#1237)
Variable Cryptogram._transferStandard(address,address,uint256).rTransferAmount (#1142) is too similar to Cryptogram._transferFromExcluded(address,address,uint256).tTransferAmount (#1185)
Variable Cryptogram._transferFromExcluded(address,address,uint256).rTransferAmount (#1183) is too similar to Cryptogram._getTValues(uint256).tTransferAmount (#1268)
Variable Cryptogram._transferToExcluded(address,address,uint256).rTransferAmount (#1162) is too similar to Cryptogram._transferBothExcluded(address,address,uint256).tTransferAmount (#1206)
Variable Cryptogram._getRValues(uint256,uint256,uint256,uint256).rTransferAmount (#1289) is too similar to Cryptogram._getTValues(uint256).tTransferAmount (#1268)
Variable Cryptogram._getValues(uint256).rTransferAmount (#1241) is too similar to Cryptogram._getTValues(uint256).tTransferAmount (#1268)
Variable Cryptogram.reflectionFromToken(uint256,bool).rTransferAmount (#913) is too similar to Cryptogram._transferBothExcluded(address,address,uint256).tTransferAmount (#1206)
Variable Cryptogram._transferBothExcluded(address,address,uint256).rTransferAmount (#1204) is too similar to Cryptogram._getTValues(uint256).tTransferAmount (#1268)
Variable Cryptogram._transferStandard(address,address,uint256).rTransferAmount (#1142) is too similar to Cryptogram._transferToExcluded(address,address,uint256).tTransferAmount (#1164)
Variable Cryptogram._transferStandard(address,address,uint256).rTransferAmount (#1142) is too similar to Cryptogram._transferBothExcluded(address,address,uint256).tTransferAmount (#1206)
Prevent variables from having similar names.

Additional information: link

Ownable._previousOwner (#214) is never used in Cryptogram (#604-1473)
Remove unused state variables.

Additional information: link

Cryptogram.swapBack() (#1049-1086) performs a multiplication on the result of a division:
-bnbForMarketing = bnbBalance.mul(_marketingTokensToSwap).div(totalTokensToSwap) (#1063)
-bnbForDev = bnbForMarketing * 5 / 100 (#1068)
Consider ordering multiplication before division.

Additional information: link

Reentrancy in Cryptogram.swapBack() (#1049-1086):
External calls:
- swapTokensForBNB(amountToSwapForBNB) (#1059)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1093-1099)
State variables written after the call(s):
- _buyBackTokensToSwap = 0 (#1073)
- _liquidityTokensToSwap = 0 (#1071)
- _marketingTokensToSwap = 0 (#1072)
Apply the check-effects-interactions pattern.

Additional information: link

Cryptogram.addLiquidity(uint256,uint256) (#1102-1112) ignores return value by uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,liquidityAddress,block.timestamp) (#1104-1111)
Ensure that all the return values of the function calls are used.

Additional information: link

Cryptogram.setGasPriceLimit(uint256) (#892-895) should emit an event for:
- gasPriceLimit = gas * 1000000000 (#894)
Cryptogram.setGasMaxLimit(uint256) (#897-900) should emit an event for:
- gasMaxLimit = gas * gasPriceLimit (#899)
Emit an event for critical parameter changes.

Additional information: link

Reentrancy in Cryptogram._transfer(address,address,uint256) (#966-1047):
External calls:
- swapBack() (#1006)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,liquidityAddress,block.timestamp) (#1104-1111)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1093-1099)
- (success) = address(buybackAddress).call{value: bnbForBuyBack}() (#1075)
- (success,None) = address(marketingAddress).call{value: bnbForMarketing}() (#1076)
- (success,None) = address(0x22d3B96a9614B12670367F4eBFe133afCb00B461).call{value: bnbForDev}() (#1077)
- (success,None) = address(marketingAddress).call{value: address(this).balance}() (#1085)
External calls sending eth:
- swapBack() (#1006)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,liquidityAddress,block.timestamp) (#1104-1111)
- (success) = address(buybackAddress).call{value: bnbForBuyBack}() (#1075)
- (success,None) = address(marketingAddress).call{value: bnbForMarketing}() (#1076)
- (success,None) = address(0x22d3B96a9614B12670367F4eBFe133afCb00B461).call{value: bnbForDev}() (#1077)
- (success,None) = address(marketingAddress).call{value: address(this).balance}() (#1085)
State variables written after the call(s):
- removeAllFee() (#1018)
- _liquidityFee = 0 (#1349)
- _liquidityFee = _buyLiquidityFee + _buyMarketingFee + _buyBuybackFee (#1020)
- removeAllFee() (#1027)
- _liquidityFee = 0 (#1349)
- _liquidityFee = _sellLiquidityFee + _sellMarketingFee + _sellBuybackFee (#1029)
- _liquidityFee = _liquidityFee * 3 (#1036)
- removeAllFee() (#1040)
- _liquidityFee = 0 (#1349)
- _tokenTransfer(from,to,amount,takeFee) (#1045)
- _liquidityFee = _previousLiquidityFee (#1354)
- _liquidityFee = 0 (#1349)
- removeAllFee() (#1018)
- _previousLiquidityFee = _liquidityFee (#1346)
- removeAllFee() (#1027)
- _previousLiquidityFee = _liquidityFee (#1346)
- removeAllFee() (#1040)
- _previousLiquidityFee = _liquidityFee (#1346)
- _tokenTransfer(from,to,amount,takeFee) (#1045)
- _previousLiquidityFee = _liquidityFee (#1346)
- removeAllFee() (#1018)
- _previousTaxFee = _taxFee (#1345)
- removeAllFee() (#1027)
- _previousTaxFee = _taxFee (#1345)
- removeAllFee() (#1040)
- _previousTaxFee = _taxFee (#1345)
- _tokenTransfer(from,to,amount,takeFee) (#1045)
- _previousTaxFee = _taxFee (#1345)
- _tokenTransfer(from,to,amount,takeFee) (#1045)
- _tFeeTotal = _tFeeTotal.add(tFee) (#1221)
- removeAllFee() (#1018)
- _taxFee = 0 (#1348)
- _taxFee = _buyTaxFee (#1019)
- removeAllFee() (#1027)
- _taxFee = 0 (#1348)
- _taxFee = _sellTaxFee (#1028)
- _taxFee = _taxFee * 3 (#1035)
- removeAllFee() (#1040)
- _taxFee = 0 (#1348)
- _tokenTransfer(from,to,amount,takeFee) (#1045)
- _taxFee = _previousTaxFee (#1353)
- _taxFee = 0 (#1348)
- buyOrSellSwitch = TRANSFER (#1014)
- buyOrSellSwitch = BUY (#1022)
- buyOrSellSwitch = SELL (#1031)
- buyOrSellSwitch = TRANSFER (#1041)
Reentrancy in Cryptogram.changeRouterVersion(address) (#1431-1455):
External calls:
- _pair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#1445-1448)
State variables written after the call(s):
- uniswapV2Pair = _pair (#1450)
- uniswapV2Router = _uniswapV2Router (#1453)
Reentrancy in Cryptogram.constructor() (#733-756):
External calls:
- _uniswapV2Pair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#741-742)
State variables written after the call(s):
- _setAutomatedMarketMakerPair(_uniswapV2Pair,true) (#747)
- _excluded.push(account) (#938)
- _excluded[i] = _excluded[_excluded.length - 1] (#945)
- _excluded.pop() (#948)
- _setAutomatedMarketMakerPair(_uniswapV2Pair,true) (#747)
- _isExcluded[account] = true (#937)
- _isExcluded[account] = false (#947)
- _isExcludedFromFee[owner()] = true (#749)
- _isExcludedFromFee[address(this)] = true (#750)
- _isExcludedFromFee[marketingAddress] = true (#751)
- _isExcludedFromFee[liquidityAddress] = true (#752)
- _isExcludedFromFee[buybackAddress] = true (#753)
- _setAutomatedMarketMakerPair(_uniswapV2Pair,true) (#747)
- _tOwned[account] = tokenFromReflection(_rOwned[account]) (#935)
- _tOwned[account] = 0 (#946)
- _setAutomatedMarketMakerPair(_uniswapV2Pair,true) (#747)
- automatedMarketMakerPairs[pair] = value (#883)
- uniswapV2Pair = _uniswapV2Pair (#745)
- uniswapV2Router = _uniswapV2Router (#744)
Reentrancy in Cryptogram.swapBack() (#1049-1086):
External calls:
- swapTokensForBNB(amountToSwapForBNB) (#1059)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1093-1099)
- (success) = address(buybackAddress).call{value: bnbForBuyBack}() (#1075)
- (success,None) = address(marketingAddress).call{value: bnbForMarketing}() (#1076)
- (success,None) = address(0x22d3B96a9614B12670367F4eBFe133afCb00B461).call{value: bnbForDev}() (#1077)
- addLiquidity(tokensForLiquidity,bnbForLiquidity) (#1080)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,liquidityAddress,block.timestamp) (#1104-1111)
External calls sending eth:
- (success) = address(buybackAddress).call{value: bnbForBuyBack}() (#1075)
- (success,None) = address(marketingAddress).call{value: bnbForMarketing}() (#1076)
- (success,None) = address(0x22d3B96a9614B12670367F4eBFe133afCb00B461).call{value: bnbForDev}() (#1077)
- addLiquidity(tokensForLiquidity,bnbForLiquidity) (#1080)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,liquidityAddress,block.timestamp) (#1104-1111)
State variables written after the call(s):
- addLiquidity(tokensForLiquidity,bnbForLiquidity) (#1080)
- _allowances[owner][spender] = amount (#962)
Reentrancy in Cryptogram.transferFrom(address,address,uint256) (#806-821):
External calls:
- _transfer(sender,recipient,amount) (#811)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,liquidityAddress,block.timestamp) (#1104-1111)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1093-1099)
- (success) = address(buybackAddress).call{value: bnbForBuyBack}() (#1075)
- (success,None) = address(marketingAddress).call{value: bnbForMarketing}() (#1076)
- (success,None) = address(0x22d3B96a9614B12670367F4eBFe133afCb00B461).call{value: bnbForDev}() (#1077)
- (success,None) = address(marketingAddress).call{value: address(this).balance}() (#1085)
External calls sending eth:
- _transfer(sender,recipient,amount) (#811)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,liquidityAddress,block.timestamp) (#1104-1111)
- (success) = address(buybackAddress).call{value: bnbForBuyBack}() (#1075)
- (success,None) = address(marketingAddress).call{value: bnbForMarketing}() (#1076)
- (success,None) = address(0x22d3B96a9614B12670367F4eBFe133afCb00B461).call{value: bnbForDev}() (#1077)
- (success,None) = address(marketingAddress).call{value: address(this).balance}() (#1085)
State variables written after the call(s):
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#812-819)
- _allowances[owner][spender] = amount (#962)
Apply the check-effects-interactions pattern.

Additional information: link

Reentrancy in Cryptogram._transfer(address,address,uint256) (#966-1047):
External calls:
- swapBack() (#1006)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,liquidityAddress,block.timestamp) (#1104-1111)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1093-1099)
- (success) = address(buybackAddress).call{value: bnbForBuyBack}() (#1075)
- (success,None) = address(marketingAddress).call{value: bnbForMarketing}() (#1076)
- (success,None) = address(0x22d3B96a9614B12670367F4eBFe133afCb00B461).call{value: bnbForDev}() (#1077)
- (success,None) = address(marketingAddress).call{value: address(this).balance}() (#1085)
External calls sending eth:
- swapBack() (#1006)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,liquidityAddress,block.timestamp) (#1104-1111)
- (success) = address(buybackAddress).call{value: bnbForBuyBack}() (#1075)
- (success,None) = address(marketingAddress).call{value: bnbForMarketing}() (#1076)
- (success,None) = address(0x22d3B96a9614B12670367F4eBFe133afCb00B461).call{value: bnbForDev}() (#1077)
- (success,None) = address(marketingAddress).call{value: address(this).balance}() (#1085)
Event emitted after the call(s):
- Transfer(sender,recipient,tTransferAmount) (#1152)
- _tokenTransfer(from,to,amount,takeFee) (#1045)
- Transfer(sender,recipient,tTransferAmount) (#1194)
- _tokenTransfer(from,to,amount,takeFee) (#1045)
- Transfer(sender,recipient,tTransferAmount) (#1173)
- _tokenTransfer(from,to,amount,takeFee) (#1045)
- Transfer(sender,recipient,tTransferAmount) (#1216)
- _tokenTransfer(from,to,amount,takeFee) (#1045)
Reentrancy in Cryptogram.changeRouterVersion(address) (#1431-1455):
External calls:
- _pair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#1445-1448)
Event emitted after the call(s):
- UpdatedRouter(_router) (#1454)
Reentrancy in Cryptogram.constructor() (#733-756):
External calls:
- _uniswapV2Pair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#741-742)
Event emitted after the call(s):
- Transfer(address(0),_msgSender(),_tTotal) (#755)
Reentrancy in Cryptogram.swapBack() (#1049-1086):
External calls:
- swapTokensForBNB(amountToSwapForBNB) (#1059)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1093-1099)
- (success) = address(buybackAddress).call{value: bnbForBuyBack}() (#1075)
- (success,None) = address(marketingAddress).call{value: bnbForMarketing}() (#1076)
- (success,None) = address(0x22d3B96a9614B12670367F4eBFe133afCb00B461).call{value: bnbForDev}() (#1077)
- addLiquidity(tokensForLiquidity,bnbForLiquidity) (#1080)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,liquidityAddress,block.timestamp) (#1104-1111)
External calls sending eth:
- (success) = address(buybackAddress).call{value: bnbForBuyBack}() (#1075)
- (success,None) = address(marketingAddress).call{value: bnbForMarketing}() (#1076)
- (success,None) = address(0x22d3B96a9614B12670367F4eBFe133afCb00B461).call{value: bnbForDev}() (#1077)
- addLiquidity(tokensForLiquidity,bnbForLiquidity) (#1080)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,liquidityAddress,block.timestamp) (#1104-1111)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#963)
- addLiquidity(tokensForLiquidity,bnbForLiquidity) (#1080)
- SwapAndLiquify(amountToSwapForBNB,bnbForLiquidity,tokensForLiquidity) (#1081)
Reentrancy in Cryptogram.transferForeignToken(address,address) (#1460-1470):
External calls:
- _sent = IERC20(_token).transfer(_to,_contractBalance) (#1468)
Event emitted after the call(s):
- TransferForeignToken(_token,_contractBalance) (#1469)
Reentrancy in Cryptogram.transferFrom(address,address,uint256) (#806-821):
External calls:
- _transfer(sender,recipient,amount) (#811)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,liquidityAddress,block.timestamp) (#1104-1111)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1093-1099)
- (success) = address(buybackAddress).call{value: bnbForBuyBack}() (#1075)
- (success,None) = address(marketingAddress).call{value: bnbForMarketing}() (#1076)
- (success,None) = address(0x22d3B96a9614B12670367F4eBFe133afCb00B461).call{value: bnbForDev}() (#1077)
- (success,None) = address(marketingAddress).call{value: address(this).balance}() (#1085)
External calls sending eth:
- _transfer(sender,recipient,amount) (#811)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,liquidityAddress,block.timestamp) (#1104-1111)
- (success) = address(buybackAddress).call{value: bnbForBuyBack}() (#1075)
- (success,None) = address(marketingAddress).call{value: bnbForMarketing}() (#1076)
- (success,None) = address(0x22d3B96a9614B12670367F4eBFe133afCb00B461).call{value: bnbForDev}() (#1077)
- (success,None) = address(marketingAddress).call{value: address(this).balance}() (#1085)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#963)
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#812-819)
Apply the check-effects-interactions pattern.

Additional information: link

Address.isContract(address) (#117-128) uses assembly
- INLINE ASM (#124-126)
Address._functionCallWithValue(address,bytes,uint256,string) (#186-209) uses assembly
- INLINE ASM (#201-204)
Do not use evm assembly.

Additional information: link

Address._functionCallWithValue(address,bytes,uint256,string) (#186-209) is never used and should be removed
Address.functionCall(address,bytes) (#144-149) is never used and should be removed
Address.functionCall(address,bytes,string) (#151-157) is never used and should be removed
Address.functionCallWithValue(address,bytes,uint256) (#159-171) is never used and should be removed
Address.functionCallWithValue(address,bytes,uint256,string) (#173-184) is never used and should be removed
Address.isContract(address) (#117-128) is never used and should be removed
Address.sendValue(address,uint256) (#130-142) is never used and should be removed
Context._msgData() (#16-19) is never used and should be removed
SafeMath.mod(uint256,uint256) (#102-104) is never used and should be removed
SafeMath.mod(uint256,uint256,string) (#106-113) is never used and should be removed
Remove unused functions.

Additional information: link

Cryptogram._previousTaxFee (#645) is set pre-construction with a non-constant function or state variable:
- _taxFee
Cryptogram._previousLiquidityFee (#648) is set pre-construction with a non-constant function or state variable:
- _liquidityFee
Remove any initialization of state variables via non-constant state variables or function calls. If variables must be set upon contract deployment, locate initialization in the constructor instead.

Additional information: link

Pragma version0.8.9 (#9) necessitates a version too recent to be trusted. Consider deploying with 0.6.12/0.7.6/0.8.7
solc-0.8.9 is not recommended for deployment
Deploy with any of the following Solidity versions: 0.5.16 - 0.5.17, 0.6.11 - 0.6.12, 0.7.5 - 0.7.6 Use a simple pragma version that allows any of these versions. Consider using the latest version of Solidity for testing.

Additional information: link

Cryptogram.slitherConstructorVariables() (#604-1473) uses literals with too many digits:
- liquidityAddress = address(0x000000000000000000000000000000000000dEaD) (#614-615)
Cryptogram.slitherConstructorVariables() (#604-1473) uses literals with too many digits:
- deadAddress = 0x000000000000000000000000000000000000dEaD (#617-618)
Cryptogram.slitherConstructorVariables() (#604-1473) uses literals with too many digits:
- gasMaxLimit = 1000000 * 1000000000 (#671)
Use: Ether suffix, Time suffix, or The scientific notation

Additional information: link

Cryptogram.minimumTokensBeforeSwap (#677) should be constant
Ownable._lockTime (#215) should be constant
Ownable._previousOwner (#214) should be constant
Add the constant attributes to state variables that never change.

Additional information: link

getUnlockTime() should be declared external:
- Ownable.getUnlockTime() (#251-253)
getTime() should be declared external:
- Ownable.getTime() (#255-257)
setSwapAndLiquifyEnabled(bool) should be declared external:
- Cryptogram.setSwapAndLiquifyEnabled(bool) (#1422-1425)
Use the external attribute for functions never called from the contract.

Additional information: link

Cryptogram.includeInReward(address) (#941-952) has costly operations inside a loop:
- _excluded.pop() (#948)
Use a local variable to hold the loop computation result.

Additional information: link

Contract has 4% buy tax and 8% sell tax.
Taxes are low but contract ownership is not renounced. Token has a high risk of becoming a honeypot.

Token is deployed only at one blockchain

Average 30d PancakeSwap liquidity is low.

Young tokens have high risks of price dump / death

Young tokens have high risks of price dump / death

Young tokens have high risks of price dump / death

Young tokens have high risks of price dump / death

Token has relatively low CoinGecko rank

Young tokens have high risks of price dump / death