CSCT [Corsac] Token

Corsac.swapBack() (#600-642) sends eth to arbitrary user
Dangerous calls:
- address(marketingFeeReceiver).transfer(amountBNBMarketing) (#627)
Ensure that an arbitrary user cannot withdraw unauthorized funds.

Additional information: link

Reentrancy in Corsac._transferFrom(address,address,uint256) (#527-550):
External calls:
- swapBack() (#532)
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(amountToSwap,0,path,address(this),block.timestamp) (#610-616)
- distributor.deposit{value: amountBNBReflection}() (#626)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,autoLiquidityReceiver,block.timestamp) (#632-639)
- triggerAutoBuyback() (#533)
- router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: amount}(0,path,to,block.timestamp) (#676-681)
External calls sending eth:
- swapBack() (#532)
- distributor.deposit{value: amountBNBReflection}() (#626)
- address(marketingFeeReceiver).transfer(amountBNBMarketing) (#627)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,autoLiquidityReceiver,block.timestamp) (#632-639)
- triggerAutoBuyback() (#533)
- router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: amount}(0,path,to,block.timestamp) (#676-681)
State variables written after the call(s):
- _balances[sender] = _balances[sender].sub(amount,Insufficient Balance) (#537)
- _balances[recipient] = _balances[recipient].add(amountReceived) (#541)
- amountReceived = takeFee(sender,recipient,amount) (#539)
- _balances[address(this)] = _balances[address(this)].add(feeAmount) (#587)
- triggerAutoBuyback() (#533)
- inSwap = true (#468)
- inSwap = false (#468)
Apply the check-effects-interactions pattern.

Additional information: link

DividendDistributor.distributeDividend(address) (#360-371) ignores return value by BUSD.transfer(shareholder,amount) (#366)
Use SafeERC20, or ensure that the transfer/transferFrom return value is checked.

Additional information: link

Combination 2: Unchecked transfer + Functions that send Ether to arbitraty destination. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.

Combination 1: Reentrancy vulnerabilities + Functions that send Ether to arbitraty destination. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.

Combination 3: Reentrancy vulnerabilities + Unchecked transfer vulnerability. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.

Contract ownership is not renounced (belongs to a wallet)

Corsac.BUSD (#408) is never used in Corsac (#404-782)
Corsac.DEAD_NON_CHECKSUM (#412) is never used in Corsac (#404-782)
Remove unused state variables.

Additional information: link

DividendDistributor.distributeDividend(address) (#360-371) has external calls inside a loop: BUSD.transfer(shareholder,amount) (#366)
Favor pull over push strategy for external calls.

Additional information: link

Reentrancy in Corsac.constructor() (#470-492):
External calls:
- pair = IDEXFactory(router.factory()).createPair(WBNB,address(this)) (#472)
State variables written after the call(s):
- WBNB = router.WETH() (#474)
Reentrancy in DividendDistributor.distributeDividend(address) (#360-371):
External calls:
- BUSD.transfer(shareholder,amount) (#366)
State variables written after the call(s):
- shares[shareholder].totalRealised = shares[shareholder].totalRealised.add(amount) (#368)
- shares[shareholder].totalExcluded = getCumulativeDividends(shares[shareholder].amount) (#369)
Reentrancy in DividendDistributor.process(uint256) (#329-353):
External calls:
- distributeDividend(shareholders[currentIndex]) (#345)
- BUSD.transfer(shareholder,amount) (#366)
State variables written after the call(s):
- currentIndex ++ (#350)
Reentrancy in DividendDistributor.setShare(address,uint256) (#293-307):
External calls:
- distributeDividend(shareholder) (#295)
- BUSD.transfer(shareholder,amount) (#366)
State variables written after the call(s):
- shares[shareholder].amount = amount (#305)
- shares[shareholder].totalExcluded = getCumulativeDividends(shares[shareholder].amount) (#306)
Apply the check-effects-interactions pattern.

Additional information: link

Corsac.swapBack() (#600-642) ignores return value by router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,autoLiquidityReceiver,block.timestamp) (#632-639)
Ensure that all the return values of the function calls are used.

Additional information: link

DividendDistributor.setDistributionCriteria(uint256,uint256) (#288-291) should emit an event for:
- minPeriod = _minPeriod (#289)
- minDistribution = _minDistribution (#290)
Corsac.setAutoBuybackSettings(bool,uint256,uint256,uint256) (#684-691) should emit an event for:
- autoBuybackCap = _cap (#686)
- autoBuybackAmount = _amount (#688)
Corsac.setBuybackMultiplierSettings(uint256,uint256,uint256) (#693-698) should emit an event for:
- buybackMultiplierNumerator = numerator (#695)
- buybackMultiplierDenominator = denominator (#696)
- buybackMultiplierLength = length (#697)
Corsac.setTxLimit(uint256) (#710-713) should emit an event for:
- _maxTxAmount = amount (#712)
Corsac.setFees(uint256,uint256,uint256,uint256,uint256) (#733-741) should emit an event for:
- liquidityFee = _liquidityFee (#734)
- buybackFee = _buybackFee (#735)
- reflectionFee = _reflectionFee (#736)
- marketingFee = _marketingFee (#737)
- totalFee = _liquidityFee.add(_buybackFee).add(_reflectionFee).add(_marketingFee) (#738)
- feeDenominator = _feeDenominator (#739)
Corsac.setSwapBackSettings(bool,uint256) (#748-751) should emit an event for:
- swapThreshold = _amount (#750)
Corsac.setTargetLiquidity(uint256,uint256) (#753-756) should emit an event for:
- targetLiquidity = _target (#754)
- targetLiquidityDenominator = _denominator (#755)
Emit an event for critical parameter changes.

Additional information: link

Auth.transferOwnership(address).adr (#170) lacks a zero-check on :
- owner = adr (#171)
Corsac.setFeeReceivers(address,address)._autoLiquidityReceiver (#743) lacks a zero-check on :
- autoLiquidityReceiver = _autoLiquidityReceiver (#744)
Corsac.setFeeReceivers(address,address)._marketingFeeReceiver (#743) lacks a zero-check on :
- marketingFeeReceiver = _marketingFeeReceiver (#745)
Check that the address is not zero.

Additional information: link

Reentrancy in Corsac.constructor() (#470-492):
External calls:
- pair = IDEXFactory(router.factory()).createPair(WBNB,address(this)) (#472)
State variables written after the call(s):
- _allowances[address(this)][address(router)] = _totalSupply (#473)
- approve(0x10ED43C718714eb63d5aA57B78B54704E256024E,_totalSupply) (#488)
- _allowances[msg.sender][spender] = amount (#506)
- approve(address(pair),_totalSupply) (#489)
- _allowances[msg.sender][spender] = amount (#506)
- _balances[msg.sender] = _totalSupply (#490)
- autoLiquidityReceiver = msg.sender (#485)
- buyBacker[msg.sender] = true (#483)
- distributor = new DividendDistributor(0x10ED43C718714eb63d5aA57B78B54704E256024E) (#475)
- distributorAddress = address(distributor) (#476)
- isDividendExempt[pair] = true (#480)
- isDividendExempt[address(this)] = true (#481)
- isDividendExempt[DEAD] = true (#482)
- isFeeExempt[msg.sender] = true (#478)
- isTxLimitExempt[msg.sender] = true (#479)
- marketingFeeReceiver = msg.sender (#486)
Reentrancy in DividendDistributor.deposit() (#309-327):
External calls:
- router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: msg.value}(0,path,address(this),block.timestamp) (#316-321)
State variables written after the call(s):
- dividendsPerShare = dividendsPerShare.add(dividendsPerShareAccuracyFactor.mul(amount).div(totalShares)) (#326)
- totalDividends = totalDividends.add(amount) (#325)
Reentrancy in DividendDistributor.distributeDividend(address) (#360-371):
External calls:
- BUSD.transfer(shareholder,amount) (#366)
State variables written after the call(s):
- shareholderClaims[shareholder] = block.timestamp (#367)
Reentrancy in DividendDistributor.setShare(address,uint256) (#293-307):
External calls:
- distributeDividend(shareholder) (#295)
- BUSD.transfer(shareholder,amount) (#366)
State variables written after the call(s):
- addShareholder(shareholder) (#299)
- shareholderIndexes[shareholder] = shareholders.length (#393)
- removeShareholder(shareholder) (#301)
- shareholderIndexes[shareholders[shareholders.length - 1]] = shareholderIndexes[shareholder] (#399)
- addShareholder(shareholder) (#299)
- shareholders.push(shareholder) (#394)
- removeShareholder(shareholder) (#301)
- shareholders[shareholderIndexes[shareholder]] = shareholders[shareholders.length - 1] (#398)
- shareholders.pop() (#400)
- totalShares = totalShares.sub(shares[shareholder].amount).add(amount) (#304)
Reentrancy in Corsac.triggerAutoBuyback() (#664-669):
External calls:
- buyTokens(autoBuybackAmount,DEAD) (#665)
- router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: amount}(0,path,to,block.timestamp) (#676-681)
State variables written after the call(s):
- autoBuybackAccumulator = autoBuybackAccumulator.add(autoBuybackAmount) (#667)
- autoBuybackBlockLast = block.number (#666)
- autoBuybackEnabled = false (#668)
Reentrancy in Corsac.triggerZeusBuyback(uint256,bool) (#652-658):
External calls:
- buyTokens(amount,DEAD) (#653)
- router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: amount}(0,path,to,block.timestamp) (#676-681)
State variables written after the call(s):
- buybackMultiplierTriggeredAt = block.timestamp (#655)
Apply the check-effects-interactions pattern.

Additional information: link

Reentrancy in Corsac._transferFrom(address,address,uint256) (#527-550):
External calls:
- swapBack() (#532)
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(amountToSwap,0,path,address(this),block.timestamp) (#610-616)
- distributor.deposit{value: amountBNBReflection}() (#626)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,autoLiquidityReceiver,block.timestamp) (#632-639)
- triggerAutoBuyback() (#533)
- router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: amount}(0,path,to,block.timestamp) (#676-681)
- distributor.setShare(sender,_balances[sender]) (#543)
- distributor.setShare(recipient,_balances[recipient]) (#544)
- distributor.process(distributorGas) (#546)
External calls sending eth:
- swapBack() (#532)
- distributor.deposit{value: amountBNBReflection}() (#626)
- address(marketingFeeReceiver).transfer(amountBNBMarketing) (#627)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,autoLiquidityReceiver,block.timestamp) (#632-639)
- triggerAutoBuyback() (#533)
- router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: amount}(0,path,to,block.timestamp) (#676-681)
Event emitted after the call(s):
- Transfer(sender,recipient,amountReceived) (#548)
Reentrancy in Corsac._transferFrom(address,address,uint256) (#527-550):
External calls:
- swapBack() (#532)
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(amountToSwap,0,path,address(this),block.timestamp) (#610-616)
- distributor.deposit{value: amountBNBReflection}() (#626)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,autoLiquidityReceiver,block.timestamp) (#632-639)
- triggerAutoBuyback() (#533)
- router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: amount}(0,path,to,block.timestamp) (#676-681)
External calls sending eth:
- swapBack() (#532)
- distributor.deposit{value: amountBNBReflection}() (#626)
- address(marketingFeeReceiver).transfer(amountBNBMarketing) (#627)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,autoLiquidityReceiver,block.timestamp) (#632-639)
- triggerAutoBuyback() (#533)
- router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: amount}(0,path,to,block.timestamp) (#676-681)
Event emitted after the call(s):
- Transfer(sender,address(this),feeAmount) (#588)
- amountReceived = takeFee(sender,recipient,amount) (#539)
Reentrancy in Corsac.constructor() (#470-492):
External calls:
- pair = IDEXFactory(router.factory()).createPair(WBNB,address(this)) (#472)
Event emitted after the call(s):
- Approval(msg.sender,spender,amount) (#507)
- approve(address(pair),_totalSupply) (#489)
- Approval(msg.sender,spender,amount) (#507)
- approve(0x10ED43C718714eb63d5aA57B78B54704E256024E,_totalSupply) (#488)
- Transfer(address(0),msg.sender,_totalSupply) (#491)
Reentrancy in Corsac.swapBack() (#600-642):
External calls:
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(amountToSwap,0,path,address(this),block.timestamp) (#610-616)
- distributor.deposit{value: amountBNBReflection}() (#626)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,autoLiquidityReceiver,block.timestamp) (#632-639)
External calls sending eth:
- distributor.deposit{value: amountBNBReflection}() (#626)
- address(marketingFeeReceiver).transfer(amountBNBMarketing) (#627)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,autoLiquidityReceiver,block.timestamp) (#632-639)
Event emitted after the call(s):
- AutoLiquify(amountBNBLiquidity,amountToLiquify) (#640)
Reentrancy in Corsac.triggerZeusBuyback(uint256,bool) (#652-658):
External calls:
- buyTokens(amount,DEAD) (#653)
- router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: amount}(0,path,to,block.timestamp) (#676-681)
Event emitted after the call(s):
- BuybackMultiplierActive(buybackMultiplierLength) (#656)
Apply the check-effects-interactions pattern.

Additional information: link

DividendDistributor.shouldDistribute(address) (#355-358) uses timestamp for comparisons
Dangerous comparisons:
- shareholderClaims[shareholder] + minPeriod < block.timestamp && getUnpaidEarnings(shareholder) > minDistribution (#356-357)
Corsac.getMultipliedFee() (#573-582) uses timestamp for comparisons
Dangerous comparisons:
- launchedAtTimestamp + 86400 > block.timestamp (#574)
- buybackMultiplierTriggeredAt.add(buybackMultiplierLength) > block.timestamp (#576)
Corsac.shouldSwapBack() (#593-598) uses timestamp for comparisons
Dangerous comparisons:
- msg.sender != pair && ! inSwap && swapEnabled && _balances[address(this)] >= swapThreshold (#594-597)
Corsac.isOverLiquified(uint256,uint256) (#775-777) uses timestamp for comparisons
Dangerous comparisons:
- getLiquidityBacking(accuracy) > target (#776)
Avoid relying on block.timestamp.

Additional information: link

Corsac.onlyBuybacker() (#501) compares to a boolean constant:
-require(bool,string)(buyBacker[msg.sender] == true,) (#501)
Remove the equality to the boolean constant.

Additional information: link

DividendDistributor.process(uint256) (#329-353) has costly operations inside a loop:
- currentIndex = 0 (#341)
DividendDistributor.distributeDividend(address) (#360-371) has costly operations inside a loop:
- totalDistributed = totalDistributed.add(amount) (#365)
DividendDistributor.process(uint256) (#329-353) has costly operations inside a loop:
- currentIndex ++ (#350)
Use a local variable to hold the loop computation result.

Additional information: link

Corsac.launched() (#700-702) is never used and should be removed
SafeMath.div(uint256,uint256,string) (#86-91) is never used and should be removed
SafeMath.mod(uint256,uint256) (#75-77) is never used and should be removed
SafeMath.mod(uint256,uint256,string) (#93-98) is never used and should be removed
SafeMath.tryAdd(uint256,uint256) (#18-24) is never used and should be removed
SafeMath.tryDiv(uint256,uint256) (#45-50) is never used and should be removed
SafeMath.tryMod(uint256,uint256) (#52-57) is never used and should be removed
SafeMath.tryMul(uint256,uint256) (#33-43) is never used and should be removed
SafeMath.trySub(uint256,uint256) (#26-31) is never used and should be removed
Remove unused functions.

Additional information: link

Corsac._maxTxAmount (#419) is set pre-construction with a non-constant function or state variable:
- _totalSupply.div(100)
Corsac.totalFee (#432) is set pre-construction with a non-constant function or state variable:
- liquidityFee + buybackFee + reflectionFee + marketingFee
Corsac.swapThreshold (#466) is set pre-construction with a non-constant function or state variable:
- _totalSupply / 2000
Remove any initialization of state variables via non-constant state variables or function calls. If variables must be set upon contract deployment, locate initialization in the constructor instead.

Additional information: link

Pragma version^0.8.0 (#9) allows old versions
solc-0.8.11 is not recommended for deployment
Deploy with any of the following Solidity versions: 0.5.16 - 0.5.17, 0.6.11 - 0.6.12, 0.7.5 - 0.7.6 Use a simple pragma version that allows any of these versions. Consider using the latest version of Solidity for testing.

Additional information: link

Function IDEXRouter.WETH() (#185) is not in mixedCase
Parameter DividendDistributor.setDistributionCriteria(uint256,uint256)._minPeriod (#288) is not in mixedCase
Parameter DividendDistributor.setDistributionCriteria(uint256,uint256)._minDistribution (#288) is not in mixedCase
Variable DividendDistributor._token (#241) is not in mixedCase
Variable DividendDistributor.BUSD (#249) is not in mixedCase
Variable DividendDistributor.WBNB (#250) is not in mixedCase
Parameter Corsac.setAutoBuybackSettings(bool,uint256,uint256,uint256)._enabled (#684) is not in mixedCase
Parameter Corsac.setAutoBuybackSettings(bool,uint256,uint256,uint256)._cap (#684) is not in mixedCase
Parameter Corsac.setAutoBuybackSettings(bool,uint256,uint256,uint256)._amount (#684) is not in mixedCase
Parameter Corsac.setAutoBuybackSettings(bool,uint256,uint256,uint256)._period (#684) is not in mixedCase
Parameter Corsac.setFees(uint256,uint256,uint256,uint256,uint256)._liquidityFee (#733) is not in mixedCase
Parameter Corsac.setFees(uint256,uint256,uint256,uint256,uint256)._buybackFee (#733) is not in mixedCase
Parameter Corsac.setFees(uint256,uint256,uint256,uint256,uint256)._reflectionFee (#733) is not in mixedCase
Parameter Corsac.setFees(uint256,uint256,uint256,uint256,uint256)._marketingFee (#733) is not in mixedCase
Parameter Corsac.setFees(uint256,uint256,uint256,uint256,uint256)._feeDenominator (#733) is not in mixedCase
Parameter Corsac.setFeeReceivers(address,address)._autoLiquidityReceiver (#743) is not in mixedCase
Parameter Corsac.setFeeReceivers(address,address)._marketingFeeReceiver (#743) is not in mixedCase
Parameter Corsac.setSwapBackSettings(bool,uint256)._enabled (#748) is not in mixedCase
Parameter Corsac.setSwapBackSettings(bool,uint256)._amount (#748) is not in mixedCase
Parameter Corsac.setTargetLiquidity(uint256,uint256)._target (#753) is not in mixedCase
Parameter Corsac.setTargetLiquidity(uint256,uint256)._denominator (#753) is not in mixedCase
Parameter Corsac.setDistributionCriteria(uint256,uint256)._minPeriod (#758) is not in mixedCase
Parameter Corsac.setDistributionCriteria(uint256,uint256)._minDistribution (#758) is not in mixedCase
Variable Corsac.BUSD (#408) is not in mixedCase
Variable Corsac.WBNB (#409) is not in mixedCase
Variable Corsac.DEAD (#410) is not in mixedCase
Variable Corsac.ZERO (#411) is not in mixedCase
Variable Corsac.DEAD_NON_CHECKSUM (#412) is not in mixedCase
Constant Corsac._name (#414) is not in UPPER_CASE_WITH_UNDERSCORES
Constant Corsac._symbol (#415) is not in UPPER_CASE_WITH_UNDERSCORES
Constant Corsac._decimals (#416) is not in UPPER_CASE_WITH_UNDERSCORES
Variable Corsac._totalSupply (#418) is not in mixedCase
Variable Corsac._maxTxAmount (#419) is not in mixedCase
Variable Corsac._balances (#421) is not in mixedCase
Variable Corsac._allowances (#422) is not in mixedCase
Follow the Solidity naming convention.

Additional information: link

Reentrancy in Corsac._transferFrom(address,address,uint256) (#527-550):
External calls:
- swapBack() (#532)
- address(marketingFeeReceiver).transfer(amountBNBMarketing) (#627)
External calls sending eth:
- swapBack() (#532)
- distributor.deposit{value: amountBNBReflection}() (#626)
- address(marketingFeeReceiver).transfer(amountBNBMarketing) (#627)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,autoLiquidityReceiver,block.timestamp) (#632-639)
- triggerAutoBuyback() (#533)
- router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: amount}(0,path,to,block.timestamp) (#676-681)
State variables written after the call(s):
- _balances[sender] = _balances[sender].sub(amount,Insufficient Balance) (#537)
- _balances[recipient] = _balances[recipient].add(amountReceived) (#541)
- amountReceived = takeFee(sender,recipient,amount) (#539)
- _balances[address(this)] = _balances[address(this)].add(feeAmount) (#587)
- triggerAutoBuyback() (#533)
- autoBuybackAccumulator = autoBuybackAccumulator.add(autoBuybackAmount) (#667)
- triggerAutoBuyback() (#533)
- autoBuybackBlockLast = block.number (#666)
- triggerAutoBuyback() (#533)
- autoBuybackEnabled = false (#668)
- triggerAutoBuyback() (#533)
- inSwap = true (#468)
- inSwap = false (#468)
Event emitted after the call(s):
- Transfer(sender,address(this),feeAmount) (#588)
- amountReceived = takeFee(sender,recipient,amount) (#539)
- Transfer(sender,recipient,amountReceived) (#548)
Reentrancy in Corsac.swapBack() (#600-642):
External calls:
- address(marketingFeeReceiver).transfer(amountBNBMarketing) (#627)
External calls sending eth:
- distributor.deposit{value: amountBNBReflection}() (#626)
- address(marketingFeeReceiver).transfer(amountBNBMarketing) (#627)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,autoLiquidityReceiver,block.timestamp) (#632-639)
Event emitted after the call(s):
- AutoLiquify(amountBNBLiquidity,amountToLiquify) (#640)
Apply the check-effects-interactions pattern.

Additional information: link

Variable IDEXRouter.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountADesired (#190) is too similar to IDEXRouter.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountBDesired (#191)
Prevent variables from having similar names.

Additional information: link

Corsac.slitherConstructorVariables() (#404-782) uses literals with too many digits:
- DEAD = 0x000000000000000000000000000000000000dEaD (#410)
Corsac.slitherConstructorVariables() (#404-782) uses literals with too many digits:
- ZERO = 0x0000000000000000000000000000000000000000 (#411)
Corsac.slitherConstructorVariables() (#404-782) uses literals with too many digits:
- DEAD_NON_CHECKSUM = 0x000000000000000000000000000000000000dEaD (#412)
Corsac.slitherConstructorVariables() (#404-782) uses literals with too many digits:
- distributorGas = 500000 (#463)
Use: Ether suffix, Time suffix, or The scientific notation

Additional information: link

Corsac.BUSD (#408) should be constant
Corsac.DEAD (#410) should be constant
Corsac.DEAD_NON_CHECKSUM (#412) should be constant
Corsac.ZERO (#411) should be constant
Corsac._totalSupply (#418) should be constant
DividendDistributor.WBNB (#250) should be constant
DividendDistributor.dividendsPerShareAccuracyFactor (#263) should be constant
Add the constant attributes to state variables that never change.

Additional information: link

authorize(address) should be declared external:
- Auth.authorize(address) (#142-144)
unauthorize(address) should be declared external:
- Auth.unauthorize(address) (#149-151)
transferOwnership(address) should be declared external:
- Auth.transferOwnership(address) (#170-174)
launch() should be declared external:
- Corsac.launch() (#704-708)
Use the external attribute for functions never called from the contract.

Additional information: link

Contract has 15% buy tax and 15% sell tax.
Taxes are suspiciously high (over 10%) and contract ownership is not renounced. Token has a high risk of becoming a honeypot.

Number of Binance Smart Chain (BSC) token holders is low.

Token is deployed only at one blockchain

Unable to find token on CoinHunt

Additional information: link

Alexa traffic rank is very low

Additional information: link

Young tokens have high risks of price dump / death

Young tokens have high risks of scam / price dump / death

Young tokens have high risks of price dump / death

Young tokens have high risks of price dump / death

Young tokens have high risks of price dump / death

Token has relatively low CoinGecko rank

Token has relatively low CoinMarketCap rank