Unable to find manual contract audit (e.g. Certik, PeckShield, Solidity...)
DOGE.swapBack() (#361-402) sends eth to arbitrary user
Dangerous calls:
- (MarketingSuccess) = address(marketingFeeReceiver).call{gas: 30000,value: amountBNBMarketing}() (#386)
- (devSuccess) = address(devFeeReceiver).call{gas: 30000,value: amountBNBdev}() (#388)
Ensure that an arbitrary user cannot withdraw unauthorized funds.
Additional information: link
Reentrancy in DOGE._transferFrom(address,address,uint256) (#285-314):
External calls:
- swapBack() (#303)
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(amountToSwap,0,path,address(this),block.timestamp) (#372-378)
- (MarketingSuccess) = address(marketingFeeReceiver).call{gas: 30000,value: amountBNBMarketing}() (#386)
- (devSuccess) = address(devFeeReceiver).call{gas: 30000,value: amountBNBdev}() (#388)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,marketingFeeReceiver,block.timestamp) (#392-399)
External calls sending eth:
- swapBack() (#303)
- (MarketingSuccess) = address(marketingFeeReceiver).call{gas: 30000,value: amountBNBMarketing}() (#386)
- (devSuccess) = address(devFeeReceiver).call{gas: 30000,value: amountBNBdev}() (#388)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,marketingFeeReceiver,block.timestamp) (#392-399)
State variables written after the call(s):
- _balances[sender] = _balances[sender].sub(amount,Insufficient Balance) (#307)
- _balances[recipient] = _balances[recipient].add(amountReceived) (#310)
- amountReceived = takeFee(sender,recipient,amount) (#309)
- _balances[address(this)] = _balances[address(this)].add(feeAmount) (#340)
Apply the check-effects-interactions pattern.
Additional information: link
Combination 1: Reentrancy vulnerabilities + Functions that send Ether to arbitraty destination. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.
Contract name (Ðoge Inu) contains non-alphanumeric characters.
Not a direct threat, but may indicate unreliable intentions of developer. Non-alphanumeric chars (,.;!#*&") are extremely rare among low risk tokens.
DOGE.slitherConstructorVariables() (#181-498) performs a multiplication on the result of a division:
-swapThreshold = _totalSupply / 1000 * 3 (#222)
Consider ordering multiplication before division.
Additional information: link
DOGE.swapBack() (#361-402) ignores return value by router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,marketingFeeReceiver,block.timestamp) (#392-399)
Ensure that all the return values of the function calls are used.
Additional information: link
DOGE.setFees(uint256,uint256,uint256,uint256) (#431-438) should emit an event for:
- liquidityFee = _liquidityFee (#432)
- marketingFee = _marketingFee (#433)
- devFee = _devFee (#434)
- totalFee = _liquidityFee.add(_marketingFee).add(_devFee) (#435)
- feeDenominator = _feeDenominator (#436)
DOGE.setSellMultiplier(uint256) (#453-455) should emit an event for:
- _sellMultiplier = multiplier (#454)
DOGE.setTxLimit(uint256) (#461-464) should emit an event for:
- _maxTxAmount = amountBuy (#462)
Emit an event for critical parameter changes.
Additional information: link
Auth.transferOwnership(address).adr (#120) lacks a zero-check on :
- owner = adr (#121)
DOGE.setFeeReceiver(address,address)._marketingFeeReceiver (#456) lacks a zero-check on :
- marketingFeeReceiver = _marketingFeeReceiver (#457)
DOGE.setFeeReceiver(address,address)._devFeeReceiver (#456) lacks a zero-check on :
- devFeeReceiver = _devFeeReceiver (#458)
Check that the address is not zero.
Additional information: link
Reentrancy in DOGE._transferFrom(address,address,uint256) (#285-314):
External calls:
- swapBack() (#303)
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(amountToSwap,0,path,address(this),block.timestamp) (#372-378)
- (MarketingSuccess) = address(marketingFeeReceiver).call{gas: 30000,value: amountBNBMarketing}() (#386)
- (devSuccess) = address(devFeeReceiver).call{gas: 30000,value: amountBNBdev}() (#388)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,marketingFeeReceiver,block.timestamp) (#392-399)
External calls sending eth:
- swapBack() (#303)
- (MarketingSuccess) = address(marketingFeeReceiver).call{gas: 30000,value: amountBNBMarketing}() (#386)
- (devSuccess) = address(devFeeReceiver).call{gas: 30000,value: amountBNBdev}() (#388)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,marketingFeeReceiver,block.timestamp) (#392-399)
State variables written after the call(s):
- launch() (#305)
- launchedAt = block.number (#422)
Reentrancy in DOGE.constructor() (#231-251):
External calls:
- pair = IDEXFactory(router.factory()).createPair(WBNB,address(this)) (#233)
State variables written after the call(s):
- _allowances[address(this)][address(router)] = type()(uint256).max (#234)
- _balances[_owner] = _totalSupply (#249)
- isFeeExempt[msg.sender] = true (#237)
- isTimelockExempt[msg.sender] = true (#244)
- isTimelockExempt[DEAD] = true (#245)
- isTimelockExempt[address(this)] = true (#246)
- isTxLimitExempt[msg.sender] = true (#239)
- isTxLimitExempt[address(this)] = true (#240)
- isTxLimitExempt[routerAddress] = true (#241)
Apply the check-effects-interactions pattern.
Additional information: link
Reentrancy in DOGE._transferFrom(address,address,uint256) (#285-314):
External calls:
- swapBack() (#303)
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(amountToSwap,0,path,address(this),block.timestamp) (#372-378)
- (MarketingSuccess) = address(marketingFeeReceiver).call{gas: 30000,value: amountBNBMarketing}() (#386)
- (devSuccess) = address(devFeeReceiver).call{gas: 30000,value: amountBNBdev}() (#388)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,marketingFeeReceiver,block.timestamp) (#392-399)
External calls sending eth:
- swapBack() (#303)
- (MarketingSuccess) = address(marketingFeeReceiver).call{gas: 30000,value: amountBNBMarketing}() (#386)
- (devSuccess) = address(devFeeReceiver).call{gas: 30000,value: amountBNBdev}() (#388)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,marketingFeeReceiver,block.timestamp) (#392-399)
Event emitted after the call(s):
- Transfer(sender,address(this),feeAmount) (#341)
- amountReceived = takeFee(sender,recipient,amount) (#309)
- Transfer(sender,recipient,amountReceived) (#312)
Reentrancy in DOGE.constructor() (#231-251):
External calls:
- pair = IDEXFactory(router.factory()).createPair(WBNB,address(this)) (#233)
Event emitted after the call(s):
- Transfer(address(0),_owner,_totalSupply) (#250)
Reentrancy in DOGE.swapBack() (#361-402):
External calls:
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(amountToSwap,0,path,address(this),block.timestamp) (#372-378)
- (MarketingSuccess) = address(marketingFeeReceiver).call{gas: 30000,value: amountBNBMarketing}() (#386)
- (devSuccess) = address(devFeeReceiver).call{gas: 30000,value: amountBNBdev}() (#388)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,marketingFeeReceiver,block.timestamp) (#392-399)
External calls sending eth:
- (MarketingSuccess) = address(marketingFeeReceiver).call{gas: 30000,value: amountBNBMarketing}() (#386)
- (devSuccess) = address(devFeeReceiver).call{gas: 30000,value: amountBNBdev}() (#388)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,marketingFeeReceiver,block.timestamp) (#392-399)
Event emitted after the call(s):
- AutoLiquify(amountBNBLiquidity,amountToLiquify) (#400)
Apply the check-effects-interactions pattern.
Additional information: link
DOGE._transferFrom(address,address,uint256) (#285-314) uses timestamp for comparisons
Dangerous comparisons:
- require(bool,string)(cooldownTimer[recipient] < block.timestamp,Please wait for 1min between two operations) (#300)
Avoid relying on block.timestamp.
Additional information: link
DOGE.buyTokens(uint256,address) (#404-415) is never used and should be removed
Remove unused functions.
Additional information: link
DOGE._maxTxAmount (#194) is set pre-construction with a non-constant function or state variable:
- (_totalSupply * 1) / 100
DOGE._maxWalletSize (#195) is set pre-construction with a non-constant function or state variable:
- (_totalSupply * 2) / 100
DOGE.swapThreshold (#222) is set pre-construction with a non-constant function or state variable:
- _totalSupply / 1000 * 3
Remove any initialization of state variables via non-constant state variables or function calls. If variables must be set upon contract deployment, locate initialization in the constructor instead.
Additional information: link
Pragma version^0.8.11 (#2) necessitates a version too recent to be trusted. Consider deploying with 0.6.12/0.7.6/0.8.7
solc-0.8.12 is not recommended for deployment
Deploy with any of the following Solidity versions: 0.5.16 - 0.5.17, 0.6.11 - 0.6.12, 0.7.5 - 0.7.6 Use a simple pragma version that allows any of these versions. Consider using the latest version of Solidity for testing.
Additional information: link
Low level call in DOGE.swapBack() (#361-402):
- (MarketingSuccess) = address(marketingFeeReceiver).call{gas: 30000,value: amountBNBMarketing}() (#386)
- (devSuccess) = address(devFeeReceiver).call{gas: 30000,value: amountBNBdev}() (#388)
Avoid low-level calls. Check the call success. If the call is meant for a contract, check for code existence
Additional information: link
Variable Auth._intAddr (#67) is not in mixedCase
Function IDEXRouter.WETH() (#135) is not in mixedCase
Parameter DOGE.tradingStatus(bool)._status (#347) is not in mixedCase
Parameter DOGE.setFees(uint256,uint256,uint256,uint256)._liquidityFee (#431) is not in mixedCase
Parameter DOGE.setFees(uint256,uint256,uint256,uint256)._marketingFee (#431) is not in mixedCase
Parameter DOGE.setFees(uint256,uint256,uint256,uint256)._devFee (#431) is not in mixedCase
Parameter DOGE.setFees(uint256,uint256,uint256,uint256)._feeDenominator (#431) is not in mixedCase
Parameter DOGE.cooldownEnabled(bool,uint8)._status (#440) is not in mixedCase
Parameter DOGE.cooldownEnabled(bool,uint8)._interval (#440) is not in mixedCase
Parameter DOGE.setFeeReceiver(address,address)._marketingFeeReceiver (#456) is not in mixedCase
Parameter DOGE.setFeeReceiver(address,address)._devFeeReceiver (#456) is not in mixedCase
Parameter DOGE.setSwapBackSettings(bool,uint256)._enabled (#465) is not in mixedCase
Parameter DOGE.setSwapBackSettings(bool,uint256)._amount (#465) is not in mixedCase
Parameter DOGE.blacklistAddress(address,bool)._address (#470) is not in mixedCase
Parameter DOGE.blacklistAddress(address,bool)._value (#470) is not in mixedCase
Parameter DOGE.transferForeignToken(address)._token (#478) is not in mixedCase
Variable DOGE.WBNB (#184) is not in mixedCase
Variable DOGE.DEAD (#185) is not in mixedCase
Variable DOGE.ZERO (#186) is not in mixedCase
Constant DOGE._name (#189) is not in UPPER_CASE_WITH_UNDERSCORES
Constant DOGE._symbol (#190) is not in UPPER_CASE_WITH_UNDERSCORES
Constant DOGE._decimals (#191) is not in UPPER_CASE_WITH_UNDERSCORES
Variable DOGE._totalSupply (#193) is not in mixedCase
Variable DOGE._maxTxAmount (#194) is not in mixedCase
Variable DOGE._maxWalletSize (#195) is not in mixedCase
Variable DOGE._balances (#197) is not in mixedCase
Variable DOGE._allowances (#198) is not in mixedCase
Variable DOGE._sellMultiplier (#210) is not in mixedCase
Follow the Solidity naming convention.
Additional information: link
Variable IDEXRouter.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountADesired (#140) is too similar to IDEXRouter.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountBDesired (#141)
Prevent variables from having similar names.
Additional information: link
DOGE.slitherConstructorVariables() (#181-498) uses literals with too many digits:
- DEAD = 0x000000000000000000000000000000000000dEaD (#185)
DOGE.slitherConstructorVariables() (#181-498) uses literals with too many digits:
- ZERO = 0x0000000000000000000000000000000000000000 (#186)
DOGE.slitherConstructorVariables() (#181-498) uses literals with too many digits:
- _totalSupply = 1000000 * (10 ** _decimals) (#193)
Use: Ether suffix, Time suffix, or The scientific notation
Additional information: link
DOGE.DEAD (#185) should be constant
DOGE.WBNB (#184) should be constant
DOGE.ZERO (#186) should be constant
DOGE._totalSupply (#193) should be constant
DOGE.routerAddress (#187) should be constant
Add the constant attributes to state variables that never change.
Additional information: link
authorize(address) should be declared external:
- Auth.authorize(address) (#91-93)
unauthorize(address) should be declared external:
- Auth.unauthorize(address) (#99-101)
transferOwnership(address) should be declared external:
- Auth.transferOwnership(address) (#120-124)
tradingStatus(bool) should be declared external:
- DOGE.tradingStatus(bool) (#347-352)
cooldownEnabled(bool,uint8) should be declared external:
- DOGE.cooldownEnabled(bool,uint8) (#440-443)
blacklistAddress(address,bool) should be declared external:
- DOGE.blacklistAddress(address,bool) (#470-472)
transferForeignToken(address) should be declared external:
- DOGE.transferForeignToken(address) (#478-482)
isOverLiquified(uint256,uint256) should be declared external:
- DOGE.isOverLiquified(uint256,uint256) (#492-494)
Use the external attribute for functions never called from the contract.
Additional information: link
Unable to find website, listings and other project-related information
Young tokens have high risks of scam / price dump / death
Token has no active CoinGecko listing / rank
Token has no active CoinMarketCap listing / rank
Unable to find Telegram and Twitter accounts