Unable to find manual contract audit (e.g. Certik, PeckShield, Solidity...)
DogeKingDwenDwen.swapBack() (#348-389) sends eth to arbitrary user
Dangerous calls:
- (MarketingSuccess) = address(marketingFeeReceiver).call{gas: 30000,value: amountBNBMarketing}() (#373)
- (lotterySuccess) = address(lotteryFeeReceiver).call{gas: 30000,value: amountBNBlottery}() (#375)
Ensure that an arbitrary user cannot withdraw unauthorized funds.
Additional information: link
Reentrancy in DogeKingDwenDwen._transferFrom(address,address,uint256) (#289-309):
External calls:
- swapBack() (#298)
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(amountToSwap,0,path,address(this),block.timestamp) (#359-365)
- (MarketingSuccess) = address(marketingFeeReceiver).call{gas: 30000,value: amountBNBMarketing}() (#373)
- (lotterySuccess) = address(lotteryFeeReceiver).call{gas: 30000,value: amountBNBlottery}() (#375)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,marketingFeeReceiver,block.timestamp) (#379-386)
External calls sending eth:
- swapBack() (#298)
- (MarketingSuccess) = address(marketingFeeReceiver).call{gas: 30000,value: amountBNBMarketing}() (#373)
- (lotterySuccess) = address(lotteryFeeReceiver).call{gas: 30000,value: amountBNBlottery}() (#375)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,marketingFeeReceiver,block.timestamp) (#379-386)
State variables written after the call(s):
- _balances[sender] = _balances[sender].sub(amount,Insufficient Balance) (#302)
- _balances[recipient] = _balances[recipient].add(amountReceived) (#305)
- amountReceived = takeFee(sender,recipient,amount) (#304)
- _balances[address(this)] = _balances[address(this)].add(feeAmount) (#335)
Apply the check-effects-interactions pattern.
Additional information: link
Combination 1: Reentrancy vulnerabilities + Functions that send Ether to arbitraty destination. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.
Contract ticker (DogeKingDwenDwen) has length of 16 chars.
Not a direct threat, but may indicate unreliable intentions of developer.
Not a direct threat, but may indicate unreliable intentions of developer. Widespread names (e.g. Elon, King, Moon, Doge) are common among meme-tokens and scams. The allow to gain free hype and attract unexperienced investors.
DogeKingDwenDwen.slitherConstructorVariables() (#204-472) uses literals with too many digits:
- DEAD = 0x000000000000000000000000000000000000dEaD (#208)
DogeKingDwenDwen.slitherConstructorVariables() (#204-472) uses literals with too many digits:
- ZERO = 0x0000000000000000000000000000000000000000 (#209)
DogeKingDwenDwen.slitherConstructorVariables() (#204-472) uses literals with too many digits:
- _totalSupply = 1000000000 * (10 ** _decimals) (#215)
Use: Ether suffix, Time suffix, or The scientific notation
Additional information: link
DogeKingDwenDwen.DEAD (#208) should be constant
DogeKingDwenDwen.WBNB (#207) should be constant
DogeKingDwenDwen.ZERO (#209) should be constant
DogeKingDwenDwen._totalSupply (#215) should be constant
Add the constant attributes to state variables that never change.
Additional information: link
authorize(address) should be declared external:
- Auth.authorize(address) (#97-99)
unauthorize(address) should be declared external:
- Auth.unauthorize(address) (#104-106)
transferOwnership(address) should be declared external:
- Auth.transferOwnership(address) (#125-129)
transferForeignToken(address) should be declared external:
- DogeKingDwenDwen.transferForeignToken(address) (#453-457)
isOverLiquified(uint256,uint256) should be declared external:
- DogeKingDwenDwen.isOverLiquified(uint256,uint256) (#467-469)
Use the external attribute for functions never called from the contract.
Additional information: link
Variable IDEXRouter.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountADesired (#163) is too similar to IDEXRouter.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountBDesired (#164)
Prevent variables from having similar names.
Additional information: link
DogeKingDwenDwen.slitherConstructorVariables() (#204-472) performs a multiplication on the result of a division:
-swapThreshold = _totalSupply / 1000 * 3 (#240)
Consider ordering multiplication before division.
Additional information: link
DogeKingDwenDwen.swapBack() (#348-389) ignores return value by router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,marketingFeeReceiver,block.timestamp) (#379-386)
Ensure that all the return values of the function calls are used.
Additional information: link
DogeKingDwenDwen.setTxLimit(uint256) (#412-415) should emit an event for:
- _maxTxAmount = amount (#414)
DogeKingDwenDwen.setFees(uint256,uint256,uint256,uint256) (#430-436) should emit an event for:
- liquidityFee = _liquidityFee (#431)
- lotteryFee = _lotteryFee (#432)
- marketingFee = _marketingFee (#433)
- totalFee = _liquidityFee.add(_lotteryFee).add(_marketingFee) (#434)
- feeDenominator = _feeDenominator (#435)
Emit an event for critical parameter changes.
Additional information: link
Auth.transferOwnership(address).adr (#125) lacks a zero-check on :
- owner = adr (#126)
DogeKingDwenDwen.setFeeReceiver(address,address)._marketingFeeReceiver (#438) lacks a zero-check on :
- marketingFeeReceiver = _marketingFeeReceiver (#439)
DogeKingDwenDwen.setFeeReceiver(address,address)._lotteryFeeReceiver (#438) lacks a zero-check on :
- lotteryFeeReceiver = _lotteryFeeReceiver (#440)
Check that the address is not zero.
Additional information: link
Reentrancy in DogeKingDwenDwen._transferFrom(address,address,uint256) (#289-309):
External calls:
- swapBack() (#298)
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(amountToSwap,0,path,address(this),block.timestamp) (#359-365)
- (MarketingSuccess) = address(marketingFeeReceiver).call{gas: 30000,value: amountBNBMarketing}() (#373)
- (lotterySuccess) = address(lotteryFeeReceiver).call{gas: 30000,value: amountBNBlottery}() (#375)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,marketingFeeReceiver,block.timestamp) (#379-386)
External calls sending eth:
- swapBack() (#298)
- (MarketingSuccess) = address(marketingFeeReceiver).call{gas: 30000,value: amountBNBMarketing}() (#373)
- (lotterySuccess) = address(lotteryFeeReceiver).call{gas: 30000,value: amountBNBlottery}() (#375)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,marketingFeeReceiver,block.timestamp) (#379-386)
State variables written after the call(s):
- launch() (#300)
- launchedAt = block.number (#409)
Reentrancy in DogeKingDwenDwen.constructor() (#244-255):
External calls:
- pair = IDEXFactory(router.factory()).createPair(WBNB,address(this)) (#246)
State variables written after the call(s):
- _allowances[address(this)][address(router)] = type()(uint256).max (#247)
- _balances[_owner] = _totalSupply (#253)
- isFeeExempt[_owner] = true (#250)
- isTxLimitExempt[_owner] = true (#251)
Apply the check-effects-interactions pattern.
Additional information: link
Reentrancy in DogeKingDwenDwen._transferFrom(address,address,uint256) (#289-309):
External calls:
- swapBack() (#298)
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(amountToSwap,0,path,address(this),block.timestamp) (#359-365)
- (MarketingSuccess) = address(marketingFeeReceiver).call{gas: 30000,value: amountBNBMarketing}() (#373)
- (lotterySuccess) = address(lotteryFeeReceiver).call{gas: 30000,value: amountBNBlottery}() (#375)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,marketingFeeReceiver,block.timestamp) (#379-386)
External calls sending eth:
- swapBack() (#298)
- (MarketingSuccess) = address(marketingFeeReceiver).call{gas: 30000,value: amountBNBMarketing}() (#373)
- (lotterySuccess) = address(lotteryFeeReceiver).call{gas: 30000,value: amountBNBlottery}() (#375)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,marketingFeeReceiver,block.timestamp) (#379-386)
Event emitted after the call(s):
- Transfer(sender,address(this),feeAmount) (#336)
- amountReceived = takeFee(sender,recipient,amount) (#304)
- Transfer(sender,recipient,amountReceived) (#307)
Reentrancy in DogeKingDwenDwen.constructor() (#244-255):
External calls:
- pair = IDEXFactory(router.factory()).createPair(WBNB,address(this)) (#246)
Event emitted after the call(s):
- Transfer(address(0),_owner,_totalSupply) (#254)
Reentrancy in DogeKingDwenDwen.swapBack() (#348-389):
External calls:
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(amountToSwap,0,path,address(this),block.timestamp) (#359-365)
- (MarketingSuccess) = address(marketingFeeReceiver).call{gas: 30000,value: amountBNBMarketing}() (#373)
- (lotterySuccess) = address(lotteryFeeReceiver).call{gas: 30000,value: amountBNBlottery}() (#375)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,marketingFeeReceiver,block.timestamp) (#379-386)
External calls sending eth:
- (MarketingSuccess) = address(marketingFeeReceiver).call{gas: 30000,value: amountBNBMarketing}() (#373)
- (lotterySuccess) = address(lotteryFeeReceiver).call{gas: 30000,value: amountBNBlottery}() (#375)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,marketingFeeReceiver,block.timestamp) (#379-386)
Event emitted after the call(s):
- AutoLiquify(amountBNBLiquidity,amountToLiquify) (#387)
Apply the check-effects-interactions pattern.
Additional information: link
DogeKingDwenDwen.buyTokens(uint256,address) (#391-402) is never used and should be removed
Remove unused functions.
Additional information: link
DogeKingDwenDwen._maxTxAmount (#216) is set pre-construction with a non-constant function or state variable:
- (_totalSupply * 1) / 100
DogeKingDwenDwen._maxWalletSize (#217) is set pre-construction with a non-constant function or state variable:
- (_totalSupply * 2) / 100
DogeKingDwenDwen.swapThreshold (#240) is set pre-construction with a non-constant function or state variable:
- _totalSupply / 1000 * 3
Remove any initialization of state variables via non-constant state variables or function calls. If variables must be set upon contract deployment, locate initialization in the constructor instead.
Additional information: link
Low level call in DogeKingDwenDwen.swapBack() (#348-389):
- (MarketingSuccess) = address(marketingFeeReceiver).call{gas: 30000,value: amountBNBMarketing}() (#373)
- (lotterySuccess) = address(lotteryFeeReceiver).call{gas: 30000,value: amountBNBlottery}() (#375)
Avoid low-level calls. Check the call success. If the call is meant for a contract, check for code existence
Additional information: link
Function IDEXRouter.WETH() (#158) is not in mixedCase
Parameter DogeKingDwenDwen.setFees(uint256,uint256,uint256,uint256)._liquidityFee (#430) is not in mixedCase
Parameter DogeKingDwenDwen.setFees(uint256,uint256,uint256,uint256)._lotteryFee (#430) is not in mixedCase
Parameter DogeKingDwenDwen.setFees(uint256,uint256,uint256,uint256)._marketingFee (#430) is not in mixedCase
Parameter DogeKingDwenDwen.setFees(uint256,uint256,uint256,uint256)._feeDenominator (#430) is not in mixedCase
Parameter DogeKingDwenDwen.setFeeReceiver(address,address)._marketingFeeReceiver (#438) is not in mixedCase
Parameter DogeKingDwenDwen.setFeeReceiver(address,address)._lotteryFeeReceiver (#438) is not in mixedCase
Parameter DogeKingDwenDwen.setSwapBackSettings(bool,uint256)._enabled (#443) is not in mixedCase
Parameter DogeKingDwenDwen.setSwapBackSettings(bool,uint256)._amount (#443) is not in mixedCase
Parameter DogeKingDwenDwen.transferForeignToken(address)._token (#453) is not in mixedCase
Variable DogeKingDwenDwen.WBNB (#207) is not in mixedCase
Variable DogeKingDwenDwen.DEAD (#208) is not in mixedCase
Variable DogeKingDwenDwen.ZERO (#209) is not in mixedCase
Constant DogeKingDwenDwen._name (#211) is not in UPPER_CASE_WITH_UNDERSCORES
Constant DogeKingDwenDwen._symbol (#212) is not in UPPER_CASE_WITH_UNDERSCORES
Constant DogeKingDwenDwen._decimals (#213) is not in UPPER_CASE_WITH_UNDERSCORES
Variable DogeKingDwenDwen._totalSupply (#215) is not in mixedCase
Variable DogeKingDwenDwen._maxTxAmount (#216) is not in mixedCase
Variable DogeKingDwenDwen._maxWalletSize (#217) is not in mixedCase
Variable DogeKingDwenDwen._balances (#219) is not in mixedCase
Variable DogeKingDwenDwen._allowances (#220) is not in mixedCase
Follow the Solidity naming convention.
Additional information: link
Unable to find website, listings and other project-related information
Young tokens have high risks of scam / price dump / death
Token has no active CoinGecko listing / rank
Token has no active CoinMarketCap listing / rank
Unable to find Telegram and Twitter accounts