DOGEkiller Token

Unable to find manual contract audit (e.g. Certik, PeckShield, Solidity...)

DOGEkiller.addLiquidity(uint256,uint256) (#758-771) sends eth to arbitrary user
Dangerous calls:
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#763-770)
Ensure that an arbitrary user cannot withdraw unauthorized funds.

Additional information: link

Reentrancy in DOGEkiller._transfer(address,address,uint256) (#667-705):
External calls:
- swapAndLiquify(contractTokenBalance) (#689)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#763-770)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#747-753)
External calls sending eth:
- swapAndLiquify(contractTokenBalance) (#689)
- recipient.transfer(amount) (#631)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#763-770)
State variables written after the call(s):
- _balances[sender] = _balances[sender].sub(amount,Insufficient Balance) (#692)
- _balances[recipient] = _balances[recipient].add(finalAmount) (#700)
- finalAmount = takeFee(sender,recipient,amount) (#694-695)
- _balances[address(this)] = _balances[address(this)].add(feeAmount) (#785)
Apply the check-effects-interactions pattern.

Additional information: link

Combination 1: Reentrancy vulnerabilities + Functions that send Ether to arbitraty destination. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.

DOGEkiller.addLiquidity(uint256,uint256) (#758-771) ignores return value by uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#763-770)
Ensure that all the return values of the function calls are used.

Additional information: link

DOGEkiller.allowance(address,address).owner (#522) shadows:
- Ownable.owner() (#156-158) (function)
DOGEkiller._approve(address,address,uint256).owner (#545) shadows:
- Ownable.owner() (#156-158) (function)
Rename the local variables that shadow another component.

Additional information: link

DOGEkiller.setBuyTaxes(uint256,uint256,uint256) (#565-571) should emit an event for:
- _totalTaxIfBuying = _buyLiquidityFee.add(_buyMarketingFee).add(_buyTeamFee) (#570)
DOGEkiller.setSellTaxes(uint256,uint256,uint256) (#573-579) should emit an event for:
- _totalTaxIfSelling = _sellLiquidityFee.add(_sellMarketingFee).add(_sellTeamFee) (#578)
DOGEkiller.setDistributionSettings(uint256,uint256,uint256) (#581-587) should emit an event for:
- _liquidityShare = newLiquidityShare (#582)
- _teamShare = newTeamShare (#584)
- _totalDistributionShares = _liquidityShare.add(_marketingShare).add(_teamShare) (#586)
DOGEkiller.setMaxTxAmount(uint256) (#589-591) should emit an event for:
- _maxTxAmount = maxTxAmount (#590)
DOGEkiller.setWalletLimit(uint256) (#601-603) should emit an event for:
- _walletMax = newLimit (#602)
DOGEkiller.setNumTokensBeforeSwap(uint256) (#605-607) should emit an event for:
- minimumTokensBeforeSwap = newLimit (#606)
Emit an event for critical parameter changes.

Additional information: link

DOGEkiller.setMarketingWalletAddress(address).newAddress (#609) lacks a zero-check on :
- marketingWalletAddress = address(newAddress) (#610)
DOGEkiller.setTeamWalletAddress(address).newAddress (#613) lacks a zero-check on :
- teamWalletAddress = address(newAddress) (#614)
Check that the address is not zero.

Additional information: link

DOGEkiller.slitherConstructorVariables() (#399-793) uses literals with too many digits:
- deadAddress = 0x000000000000000000000000000000000000dEaD (#410)
DOGEkiller.slitherConstructorVariables() (#399-793) uses literals with too many digits:
- _totalSupply = 10000000000000 * 10 ** 6 * 10 ** 6 * 10 ** _decimals (#436)
DOGEkiller.slitherConstructorVariables() (#399-793) uses literals with too many digits:
- _maxTxAmount = 10000000000000 * 10 ** 6 * 10 ** 6 * 10 ** _decimals (#437)
DOGEkiller.slitherConstructorVariables() (#399-793) uses literals with too many digits:
- _walletMax = 10000000000000 * 10 ** 6 * 10 ** 6 * 10 ** _decimals (#438)
DOGEkiller.slitherConstructorVariables() (#399-793) uses literals with too many digits:
- minimumTokensBeforeSwap = 10000000000000 * 10 ** 6 * 10 ** _decimals (#439)
Use: Ether suffix, Time suffix, or The scientific notation

Additional information: link

Reentrancy in DOGEkiller.changeRouterVersion(address) (#634-651):
External calls:
- newPairAddress = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#642-643)
State variables written after the call(s):
- isMarketPair[address(uniswapPair)] = true (#650)
- isWalletLimitExempt[address(uniswapPair)] = true (#649)
- uniswapPair = newPairAddress (#646)
- uniswapV2Router = _uniswapV2Router (#647)
Reentrancy in DOGEkiller.constructor() (#472-500):
External calls:
- uniswapPair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#476-477)
State variables written after the call(s):
- _allowances[address(this)][address(uniswapV2Router)] = _totalSupply (#480)
- _balances[_msgSender()] = _totalSupply (#498)
- _totalDistributionShares = _liquidityShare.add(_marketingShare).add(_teamShare) (#487)
- _totalTaxIfBuying = _buyLiquidityFee.add(_buyMarketingFee).add(_buyTeamFee) (#485)
- _totalTaxIfSelling = _sellLiquidityFee.add(_sellMarketingFee).add(_sellTeamFee) (#486)
- isExcludedFromFee[owner()] = true (#482)
- isExcludedFromFee[address(this)] = true (#483)
- isMarketPair[address(uniswapPair)] = true (#496)
- isTxLimitExempt[owner()] = true (#493)
- isTxLimitExempt[address(this)] = true (#494)
- isWalletLimitExempt[owner()] = true (#489)
- isWalletLimitExempt[address(uniswapPair)] = true (#490)
- isWalletLimitExempt[address(this)] = true (#491)
- uniswapV2Router = _uniswapV2Router (#479)
Reentrancy in DOGEkiller.swapAndLiquify(uint256) (#714-736):
External calls:
- swapTokensForEth(tokensForSwap) (#719)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#747-753)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#735)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#763-770)
External calls sending eth:
- transferToAddressETH(marketingWalletAddress,amountBNBMarketing) (#729)
- recipient.transfer(amount) (#631)
- transferToAddressETH(teamWalletAddress,amountBNBTeam) (#732)
- recipient.transfer(amount) (#631)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#735)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#763-770)
State variables written after the call(s):
- addLiquidity(tokensForLP,amountBNBLiquidity) (#735)
- _allowances[owner][spender] = amount (#549)
Reentrancy in DOGEkiller.transferFrom(address,address,uint256) (#661-665):
External calls:
- _transfer(sender,recipient,amount) (#662)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#763-770)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#747-753)
External calls sending eth:
- _transfer(sender,recipient,amount) (#662)
- recipient.transfer(amount) (#631)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#763-770)
State variables written after the call(s):
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#663)
- _allowances[owner][spender] = amount (#549)
Apply the check-effects-interactions pattern.

Additional information: link

Reentrancy in DOGEkiller._transfer(address,address,uint256) (#667-705):
External calls:
- swapAndLiquify(contractTokenBalance) (#689)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#763-770)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#747-753)
External calls sending eth:
- swapAndLiquify(contractTokenBalance) (#689)
- recipient.transfer(amount) (#631)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#763-770)
Event emitted after the call(s):
- Transfer(sender,address(this),feeAmount) (#786)
- finalAmount = takeFee(sender,recipient,amount) (#694-695)
- Transfer(sender,recipient,finalAmount) (#702)
Reentrancy in DOGEkiller.constructor() (#472-500):
External calls:
- uniswapPair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#476-477)
Event emitted after the call(s):
- Transfer(address(0),_msgSender(),_totalSupply) (#499)
Reentrancy in DOGEkiller.swapAndLiquify(uint256) (#714-736):
External calls:
- swapTokensForEth(tokensForSwap) (#719)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#747-753)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#735)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#763-770)
External calls sending eth:
- transferToAddressETH(marketingWalletAddress,amountBNBMarketing) (#729)
- recipient.transfer(amount) (#631)
- transferToAddressETH(teamWalletAddress,amountBNBTeam) (#732)
- recipient.transfer(amount) (#631)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#735)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#763-770)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#550)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#735)
Reentrancy in DOGEkiller.swapTokensForEth(uint256) (#738-756):
External calls:
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#747-753)
Event emitted after the call(s):
- SwapTokensForETH(tokenAmount,path) (#755)
Reentrancy in DOGEkiller.transferFrom(address,address,uint256) (#661-665):
External calls:
- _transfer(sender,recipient,amount) (#662)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#763-770)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#747-753)
External calls sending eth:
- _transfer(sender,recipient,amount) (#662)
- recipient.transfer(amount) (#631)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#763-770)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#550)
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#663)
Apply the check-effects-interactions pattern.

Additional information: link

Ownable.unlock() (#191-196) uses timestamp for comparisons
Dangerous comparisons:
- require(bool,string)(block.timestamp > _lockTime,Contract is locked until 7 days) (#193)
Avoid relying on block.timestamp.

Additional information: link

Address.isContract(address) (#87-96) uses assembly
- INLINE ASM (#94)
Address._functionCallWithValue(address,bytes,uint256,string) (#123-140) uses assembly
- INLINE ASM (#132-135)
Do not use evm assembly.

Additional information: link

Address._functionCallWithValue(address,bytes,uint256,string) (#123-140) is never used and should be removed
Address.functionCall(address,bytes) (#106-108) is never used and should be removed
Address.functionCall(address,bytes,string) (#110-112) is never used and should be removed
Address.functionCallWithValue(address,bytes,uint256) (#114-116) is never used and should be removed
Address.functionCallWithValue(address,bytes,uint256,string) (#118-121) is never used and should be removed
Address.isContract(address) (#87-96) is never used and should be removed
Address.sendValue(address,uint256) (#98-104) is never used and should be removed
Context._msgData() (#14-17) is never used and should be removed
SafeMath.mod(uint256,uint256) (#75-77) is never used and should be removed
SafeMath.mod(uint256,uint256,string) (#79-82) is never used and should be removed
Remove unused functions.

Additional information: link

DOGEkiller._totalSupply (#436) is set pre-construction with a non-constant function or state variable:
- 10000000000000 * 10 ** 6 * 10 ** 6 * 10 ** _decimals
DOGEkiller._maxTxAmount (#437) is set pre-construction with a non-constant function or state variable:
- 10000000000000 * 10 ** 6 * 10 ** 6 * 10 ** _decimals
DOGEkiller._walletMax (#438) is set pre-construction with a non-constant function or state variable:
- 10000000000000 * 10 ** 6 * 10 ** 6 * 10 ** _decimals
DOGEkiller.minimumTokensBeforeSwap (#439) is set pre-construction with a non-constant function or state variable:
- 10000000000000 * 10 ** 6 * 10 ** _decimals
Remove any initialization of state variables via non-constant state variables or function calls. If variables must be set upon contract deployment, locate initialization in the constructor instead.

Additional information: link

Low level call in Address.sendValue(address,uint256) (#98-104):
- (success) = recipient.call{value: amount}() (#102)
Low level call in Address._functionCallWithValue(address,bytes,uint256,string) (#123-140):
- (success,returndata) = target.call{value: weiValue}(data) (#126)
Avoid low-level calls. Check the call success. If the call is meant for a contract, check for code existence

Additional information: link

Function IUniswapV2Pair.DOMAIN_SEPARATOR() (#230) is not in mixedCase
Function IUniswapV2Pair.PERMIT_TYPEHASH() (#231) is not in mixedCase
Function IUniswapV2Pair.MINIMUM_LIQUIDITY() (#247) is not in mixedCase
Function IUniswapV2Router01.WETH() (#266) is not in mixedCase
Parameter DOGEkiller.setSwapAndLiquifyEnabled(bool)._enabled (#617) is not in mixedCase
Variable DOGEkiller._balances (#412) is not in mixedCase
Variable DOGEkiller._buyLiquidityFee (#420) is not in mixedCase
Variable DOGEkiller._buyMarketingFee (#421) is not in mixedCase
Variable DOGEkiller._buyTeamFee (#422) is not in mixedCase
Variable DOGEkiller._sellLiquidityFee (#424) is not in mixedCase
Variable DOGEkiller._sellMarketingFee (#425) is not in mixedCase
Variable DOGEkiller._sellTeamFee (#426) is not in mixedCase
Variable DOGEkiller._liquidityShare (#428) is not in mixedCase
Variable DOGEkiller._marketingShare (#429) is not in mixedCase
Variable DOGEkiller._teamShare (#430) is not in mixedCase
Variable DOGEkiller._totalTaxIfBuying (#432) is not in mixedCase
Variable DOGEkiller._totalTaxIfSelling (#433) is not in mixedCase
Variable DOGEkiller._totalDistributionShares (#434) is not in mixedCase
Variable DOGEkiller._maxTxAmount (#437) is not in mixedCase
Variable DOGEkiller._walletMax (#438) is not in mixedCase
Follow the Solidity naming convention.

Additional information: link

Redundant expression "this (#15)" inContext (#8-18)
Remove redundant statements if they congest code but offer no value.

Additional information: link

Reentrancy in DOGEkiller._transfer(address,address,uint256) (#667-705):
External calls:
- swapAndLiquify(contractTokenBalance) (#689)
- recipient.transfer(amount) (#631)
External calls sending eth:
- swapAndLiquify(contractTokenBalance) (#689)
- recipient.transfer(amount) (#631)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#763-770)
State variables written after the call(s):
- _balances[sender] = _balances[sender].sub(amount,Insufficient Balance) (#692)
- _balances[recipient] = _balances[recipient].add(finalAmount) (#700)
- finalAmount = takeFee(sender,recipient,amount) (#694-695)
- _balances[address(this)] = _balances[address(this)].add(feeAmount) (#785)
Event emitted after the call(s):
- Transfer(sender,address(this),feeAmount) (#786)
- finalAmount = takeFee(sender,recipient,amount) (#694-695)
- Transfer(sender,recipient,finalAmount) (#702)
Reentrancy in DOGEkiller.swapAndLiquify(uint256) (#714-736):
External calls:
- transferToAddressETH(marketingWalletAddress,amountBNBMarketing) (#729)
- recipient.transfer(amount) (#631)
- transferToAddressETH(teamWalletAddress,amountBNBTeam) (#732)
- recipient.transfer(amount) (#631)
External calls sending eth:
- transferToAddressETH(marketingWalletAddress,amountBNBMarketing) (#729)
- recipient.transfer(amount) (#631)
- transferToAddressETH(teamWalletAddress,amountBNBTeam) (#732)
- recipient.transfer(amount) (#631)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#735)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#763-770)
State variables written after the call(s):
- addLiquidity(tokensForLP,amountBNBLiquidity) (#735)
- _allowances[owner][spender] = amount (#549)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#550)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#735)
Reentrancy in DOGEkiller.transferFrom(address,address,uint256) (#661-665):
External calls:
- _transfer(sender,recipient,amount) (#662)
- recipient.transfer(amount) (#631)
External calls sending eth:
- _transfer(sender,recipient,amount) (#662)
- recipient.transfer(amount) (#631)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#763-770)
State variables written after the call(s):
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#663)
- _allowances[owner][spender] = amount (#549)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#550)
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#663)
Apply the check-effects-interactions pattern.

Additional information: link

Variable IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountADesired (#271) is too similar to IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountBDesired (#272)
Prevent variables from having similar names.

Additional information: link

DOGEkiller._decimals (#406) should be constant
DOGEkiller._name (#404) should be constant
DOGEkiller._symbol (#405) should be constant
Add the constant attributes to state variables that never change.

Additional information: link

waiveOwnership() should be declared external:
- Ownable.waiveOwnership() (#165-168)
transferOwnership(address) should be declared external:
- Ownable.transferOwnership(address) (#170-174)
getUnlockTime() should be declared external:
- Ownable.getUnlockTime() (#176-178)
getTime() should be declared external:
- Ownable.getTime() (#180-182)
lock(uint256) should be declared external:
- Ownable.lock(uint256) (#184-189)
unlock() should be declared external:
- Ownable.unlock() (#191-196)
name() should be declared external:
- DOGEkiller.name() (#502-504)
symbol() should be declared external:
- DOGEkiller.symbol() (#506-508)
decimals() should be declared external:
- DOGEkiller.decimals() (#510-512)
totalSupply() should be declared external:
- DOGEkiller.totalSupply() (#514-516)
allowance(address,address) should be declared external:
- DOGEkiller.allowance(address,address) (#522-524)
increaseAllowance(address,uint256) should be declared external:
- DOGEkiller.increaseAllowance(address,uint256) (#526-529)
decreaseAllowance(address,uint256) should be declared external:
- DOGEkiller.decreaseAllowance(address,uint256) (#531-534)
minimumTokensBeforeSwapAmount() should be declared external:
- DOGEkiller.minimumTokensBeforeSwapAmount() (#536-538)
approve(address,uint256) should be declared external:
- DOGEkiller.approve(address,uint256) (#540-543)
setMarketPairStatus(address,bool) should be declared external:
- DOGEkiller.setMarketPairStatus(address,bool) (#553-555)
setIsExcludedFromFee(address,bool) should be declared external:
- DOGEkiller.setIsExcludedFromFee(address,bool) (#561-563)
setSwapAndLiquifyEnabled(bool) should be declared external:
- DOGEkiller.setSwapAndLiquifyEnabled(bool) (#617-620)
setSwapAndLiquifyByLimitOnly(bool) should be declared external:
- DOGEkiller.setSwapAndLiquifyByLimitOnly(bool) (#622-624)
getCirculatingSupply() should be declared external:
- DOGEkiller.getCirculatingSupply() (#626-628)
changeRouterVersion(address) should be declared external:
- DOGEkiller.changeRouterVersion(address) (#634-651)
transfer(address,uint256) should be declared external:
- DOGEkiller.transfer(address,uint256) (#656-659)
transferFrom(address,address,uint256) should be declared external:
- DOGEkiller.transferFrom(address,address,uint256) (#661-665)
Use the external attribute for functions never called from the contract.

Additional information: link

Token seems to be untradeable: there is no PancakeSwap trading pair and no trading volumes. Ignore for presale.

Unable to find website, listings and other project-related information

Young tokens have high risks of price dump / death

Token has no active CoinGecko listing / rank

Token has no active CoinMarketCap listing / rank