EXOS Token

ExosToken.rescueBEP20(IERC20,address,uint256) (#2312-2314) ignores return value by token.transfer(recipient,amount) (#2313)
MetronDistributor.transferExos(address,uint256) (#2511-2515) ignores return value by IERC20(EXOS).transfer(recipient,amount) (#2513)
MetronDistributor.transferBusd(address) (#2517-2522) ignores return value by IERC20(BUSD).transfer(recipient,busdBalance) (#2520)
MetronDistributor.rescueBEP20(IERC20,address,uint256) (#2524-2526) ignores return value by token.transfer(recipient,amount) (#2525)
Use SafeERC20, or ensure that the transfer/transferFrom return value is checked.

Additional information: link

ERC20Votes._writeCheckpoint(ERC20Votes.Checkpoint[],function(uint256,uint256) returns(uint256),uint256) (#2049-2063) uses a dangerous strict equality:
- pos > 0 && ckpts[pos - 1].fromBlock == block.number (#2058)
Don't use strict equality to determine if an account has enough Ether or tokens.

Additional information: link

Contract ownership is semi-renounced (passed to a contract)

Function IUniswapV2Router01.WETH() (#336) is not in mixedCase
Function IERC20Permit.DOMAIN_SEPARATOR() (#997) is not in mixedCase
Variable EIP712._CACHED_DOMAIN_SEPARATOR (#1310) is not in mixedCase
Variable EIP712._CACHED_CHAIN_ID (#1311) is not in mixedCase
Variable EIP712._CACHED_THIS (#1312) is not in mixedCase
Variable EIP712._HASHED_NAME (#1314) is not in mixedCase
Variable EIP712._HASHED_VERSION (#1315) is not in mixedCase
Variable EIP712._TYPE_HASH (#1316) is not in mixedCase
Function ERC20Permit.DOMAIN_SEPARATOR() (#1485-1487) is not in mixedCase
Variable ERC20Permit._PERMIT_TYPEHASH (#1440-1441) is not in mixedCase
Variable MetronDistributor.BUSD (#2455) is not in mixedCase
Variable MetronDistributor.EXOS (#2456) is not in mixedCase
Follow the Solidity naming convention.

Additional information: link

Variable IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountADesired (#341) is too similar to IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountBDesired (#342)
Prevent variables from having similar names.

Additional information: link

ExosToken.metronDistributeOnDemand(bool,bool,bool) (#2268-2310) performs a multiplication on the result of a division:
-half = liquidityTokens.div(2) (#2299)
-busdAmount = busdReceived.mul(half).div(tokensToSwap) (#2300)
ExosToken._metronDistribute(uint256) (#2396-2420) performs a multiplication on the result of a division:
-liquidityTokensHalf = liquidityTokens.div(2) (#2401)
-busdForLiquidity = busdReceived.mul(liquidityTokensHalf).div(tokensToSwap) (#2408)
Consider ordering multiplication before division.

Additional information: link

Reentrancy in ExosToken._transfer(address,address,uint256) (#2343-2394):
External calls:
- _metronDistribute(distributorTokenBalance) (#2371)
- busdReceived = distributor.swapTokensForBusd(sellingUniswapV2Router,tokensToSwap) (#2405)
- distributor.addLiquidity(liquidityUniswapV2Router,liquidityTokensHalf,busdForLiquidity,address(this)) (#2409)
- distributor.transferExos(nativeTreasuryAddress,nativeTokens) (#2412)
- distributor.transferBusd(treasuryAddress) (#2415)
State variables written after the call(s):
- super._transfer(from,address(distributor),fees) (#2389)
- _balances[from] = fromBalance - amount (#798)
- _balances[to] += amount (#800)
- super._transfer(from,to,amount) (#2393)
- _balances[from] = fromBalance - amount (#798)
- _balances[to] += amount (#800)
Reentrancy in ExosToken.updateDistributor(address) (#2139-2152):
External calls:
- metronDistributeOnDemand(true,true,true) (#2146)
- distributor.transferExos(nativeTreasuryAddress,nativeTokens) (#2292)
- busdReceived = distributor.swapTokensForBusd(sellingUniswapV2Router,tokensToSwap) (#2296)
- distributor.addLiquidity(liquidityUniswapV2Router,half,busdAmount,address(this)) (#2301)
- distributor.transferBusd(treasuryAddress) (#2305)
State variables written after the call(s):
- distributor = newDistributor (#2151)
Apply the check-effects-interactions pattern.

Additional information: link

ERC20Votes._moveVotingPower(address,address,uint256).oldWeight_scope_0 (#2043) is a local variable never initialized
ERC20Votes._moveVotingPower(address,address,uint256).newWeight_scope_1 (#2043) is a local variable never initialized
Initialize all the variables. If a variable is meant to be initialized to zero, explicitly set it to zero to improve code readability.

Additional information: link

MetronDistributor.swapTokensForBusd(IUniswapV2Router02,uint256) (#2466-2488) ignores return value by IERC20(EXOS).approve(address(sellingUniswapV2Router),tokenAmount) (#2475)
MetronDistributor.addLiquidity(IUniswapV2Router02,uint256,uint256,address) (#2490-2509) ignores return value by IERC20(EXOS).approve(address(liquidityUniswapV2Router),tokenAmount) (#2494)
MetronDistributor.addLiquidity(IUniswapV2Router02,uint256,uint256,address) (#2490-2509) ignores return value by IERC20(BUSD).approve(address(liquidityUniswapV2Router),busdAmount) (#2495)
MetronDistributor.addLiquidity(IUniswapV2Router02,uint256,uint256,address) (#2490-2509) ignores return value by liquidityUniswapV2Router.addLiquidity(EXOS,BUSD,tokenAmount,busdAmount,0,0,to,block.timestamp) (#2498-2507)
Ensure that all the return values of the function calls are used.

Additional information: link

ERC20Permit.constructor(string).name (#1448) shadows:
- ERC20.name() (#621-623) (function)
- IERC20Metadata.name() (#556) (function)
Rename the local variables that shadow another component.

Additional information: link

ExosToken.setSellExtraFee(uint256) (#2158-2162) should emit an event for:
- sellExtraFee = value (#2161)
ExosToken.setDenominatorFee(uint256) (#2164-2166) should emit an event for:
- denominatorFee = value (#2165)
ExosToken.setTreasuryFee(uint256) (#2168-2173) should emit an event for:
- treasuryFee = value (#2171)
ExosToken.setLiquiditFee(uint256) (#2175-2180) should emit an event for:
- liquidityFee = value (#2178)
ExosToken.setNativeFee(uint256) (#2182-2187) should emit an event for:
- nativeFee = value (#2185)
ExosToken.setSwapTokensAtAmount(uint256) (#2189-2193) should emit an event for:
- swapTokensAtAmount = amount (#2192)
ExosToken.setMaxTokensToSwap(uint256) (#2195-2199) should emit an event for:
- maxTokensToSwap = amount (#2198)
Emit an event for critical parameter changes.

Additional information: link

ExosToken.setAirdropAddress(address).wallet (#2217) lacks a zero-check on :
- airdropAddress = wallet (#2218)
Check that the address is not zero.

Additional information: link

Variable 'ECDSA.tryRecover(bytes32,bytes).r (#1117)' in ECDSA.tryRecover(bytes32,bytes) (#1112-1141) potentially used before declaration: r = mload(uint256)(signature + 0x20) (#1134)
Variable 'ERC20Votes._moveVotingPower(address,address,uint256).newWeight (#2038)' in ERC20Votes._moveVotingPower(address,address,uint256) (#2031-2047) potentially used before declaration: (oldWeight,newWeight) = _writeCheckpoint(_checkpoints[dst],_add,amount) (#2043)
Variable 'ERC20Votes._moveVotingPower(address,address,uint256).oldWeight (#2038)' in ERC20Votes._moveVotingPower(address,address,uint256) (#2031-2047) potentially used before declaration: (oldWeight,newWeight) = _writeCheckpoint(_checkpoints[dst],_add,amount) (#2043)
Move all variable declarations prior to any usage of the variable, and ensure that reaching a variable declaration does not depend on some conditional if it is used unconditionally.

Additional information: link

Reentrancy in ExosToken._metronDistribute(uint256) (#2396-2420):
External calls:
- busdReceived = distributor.swapTokensForBusd(sellingUniswapV2Router,tokensToSwap) (#2405)
- distributor.addLiquidity(liquidityUniswapV2Router,liquidityTokensHalf,busdForLiquidity,address(this)) (#2409)
- distributor.transferExos(nativeTreasuryAddress,nativeTokens) (#2412)
- distributor.transferBusd(treasuryAddress) (#2415)
State variables written after the call(s):
- swapping = false (#2419)
Reentrancy in ExosToken.constructor() (#2112-2132):
External calls:
- _uniswapV2Pair = IUniswapV2Factory(sellingUniswapV2Router.factory()).createPair(address(this),BUSD) (#2121-2122)
State variables written after the call(s):
- automatedMarketMakerPairs[_uniswapV2Pair] = true (#2123)
- isExcludedFromFees[owner()] = true (#2127)
- isExcludedFromFees[treasuryAddress] = true (#2128)
- isExcludedFromFees[nativeTreasuryAddress] = true (#2129)
- isExcludedFromFees[address(this)] = true (#2130)
- isExcludedFromFees[address(distributor)] = true (#2131)
- isMinter[owner()] = true (#2125)
Reentrancy in ExosToken.metronDistributeOnDemand(bool,bool,bool) (#2268-2310):
External calls:
- distributor.transferExos(nativeTreasuryAddress,nativeTokens) (#2292)
- busdReceived = distributor.swapTokensForBusd(sellingUniswapV2Router,tokensToSwap) (#2296)
- distributor.addLiquidity(liquidityUniswapV2Router,half,busdAmount,address(this)) (#2301)
- distributor.transferBusd(treasuryAddress) (#2305)
State variables written after the call(s):
- swapping = false (#2309)
Reentrancy in ExosToken.updateDistributor(address) (#2139-2152):
External calls:
- metronDistributeOnDemand(true,true,true) (#2146)
- distributor.transferExos(nativeTreasuryAddress,nativeTokens) (#2292)
- busdReceived = distributor.swapTokensForBusd(sellingUniswapV2Router,tokensToSwap) (#2296)
- distributor.addLiquidity(liquidityUniswapV2Router,half,busdAmount,address(this)) (#2301)
- distributor.transferBusd(treasuryAddress) (#2305)
State variables written after the call(s):
- isExcludedFromFees[address(distributor)] = false (#2148)
- isExcludedFromFees[address(newDistributor)] = true (#2149)
Apply the check-effects-interactions pattern.

Additional information: link

Reentrancy in ExosToken._metronDistribute(uint256) (#2396-2420):
External calls:
- busdReceived = distributor.swapTokensForBusd(sellingUniswapV2Router,tokensToSwap) (#2405)
- distributor.addLiquidity(liquidityUniswapV2Router,liquidityTokensHalf,busdForLiquidity,address(this)) (#2409)
- distributor.transferExos(nativeTreasuryAddress,nativeTokens) (#2412)
- distributor.transferBusd(treasuryAddress) (#2415)
Event emitted after the call(s):
- MetronDistributed(tokens) (#2417)
Reentrancy in ExosToken._transfer(address,address,uint256) (#2343-2394):
External calls:
- _metronDistribute(distributorTokenBalance) (#2371)
- busdReceived = distributor.swapTokensForBusd(sellingUniswapV2Router,tokensToSwap) (#2405)
- distributor.addLiquidity(liquidityUniswapV2Router,liquidityTokensHalf,busdForLiquidity,address(this)) (#2409)
- distributor.transferExos(nativeTreasuryAddress,nativeTokens) (#2412)
- distributor.transferBusd(treasuryAddress) (#2415)
Event emitted after the call(s):
- DelegateVotesChanged(src,oldWeight,newWeight) (#2039)
- super._transfer(from,to,amount) (#2393)
- DelegateVotesChanged(src,oldWeight,newWeight) (#2039)
- super._transfer(from,address(distributor),fees) (#2389)
- DelegateVotesChanged(dst,oldWeight_scope_0,newWeight_scope_1) (#2044)
- super._transfer(from,to,amount) (#2393)
- DelegateVotesChanged(dst,oldWeight_scope_0,newWeight_scope_1) (#2044)
- super._transfer(from,address(distributor),fees) (#2389)
- Transfer(from,to,amount) (#802)
- super._transfer(from,to,amount) (#2393)
- Transfer(from,to,amount) (#802)
- super._transfer(from,address(distributor),fees) (#2389)
Apply the check-effects-interactions pattern.

Additional information: link

ERC20Permit.permit(address,address,uint256,uint256,uint8,bytes32,bytes32) (#1453-1472) uses timestamp for comparisons
Dangerous comparisons:
- require(bool,string)(block.timestamp <= deadline,ERC20Permit: expired deadline) (#1462)
ERC20Votes.delegateBySig(address,uint256,uint256,uint8,bytes32,bytes32) (#1956-1973) uses timestamp for comparisons
Dangerous comparisons:
- require(bool,string)(block.timestamp <= expiry,ERC20Votes: signature expired) (#1964)
Avoid relying on block.timestamp.

Additional information: link

ECDSA.tryRecover(bytes32,bytes) (#1112-1141) uses assembly
- INLINE ASM (#1122-1126)
- INLINE ASM (#1133-1136)
Do not use evm assembly.

Additional information: link

Context._msgData() (#242-244) is never used and should be removed
Counters.decrement(Counters.Counter) (#1411-1417) is never used and should be removed
Counters.reset(Counters.Counter) (#1419-1421) is never used and should be removed
ECDSA.recover(bytes32,bytes) (#1157-1161) is never used and should be removed
ECDSA.recover(bytes32,bytes32,bytes32) (#1185-1193) is never used and should be removed
ECDSA.toEthSignedMessageHash(bytes) (#1269-1271) is never used and should be removed
ECDSA.toEthSignedMessageHash(bytes32) (#1255-1259) is never used and should be removed
ECDSA.tryRecover(bytes32,bytes) (#1112-1141) is never used and should be removed
ECDSA.tryRecover(bytes32,bytes32,bytes32) (#1170-1178) is never used and should be removed
ERC20Votes._add(uint256,uint256) (#2065-2067) is never used and should be removed
ERC20Votes._subtract(uint256,uint256) (#2069-2071) is never used and should be removed
Math.ceilDiv(uint256,uint256) (#1534-1537) is never used and should be removed
Math.max(uint256,uint256) (#1508-1510) is never used and should be removed
Math.min(uint256,uint256) (#1515-1517) is never used and should be removed
SafeCast.toInt128(int256) (#1744-1747) is never used and should be removed
SafeCast.toInt16(int256) (#1798-1801) is never used and should be removed
SafeCast.toInt256(uint256) (#1828-1832) is never used and should be removed
SafeCast.toInt32(int256) (#1780-1783) is never used and should be removed
SafeCast.toInt64(int256) (#1762-1765) is never used and should be removed
SafeCast.toInt8(int256) (#1816-1819) is never used and should be removed
SafeCast.toUint128(uint256) (#1639-1642) is never used and should be removed
SafeCast.toUint16(uint256) (#1699-1702) is never used and should be removed
SafeCast.toUint256(int256) (#1726-1729) is never used and should be removed
SafeCast.toUint64(uint256) (#1669-1672) is never used and should be removed
SafeCast.toUint8(uint256) (#1714-1717) is never used and should be removed
SafeCast.toUint96(uint256) (#1654-1657) is never used and should be removed
SafeMath.div(uint256,uint256,string) (#189-198) is never used and should be removed
SafeMath.mod(uint256,uint256) (#149-151) is never used and should be removed
SafeMath.mod(uint256,uint256,string) (#215-224) is never used and should be removed
SafeMath.sub(uint256,uint256,string) (#166-175) is never used and should be removed
SafeMath.tryAdd(uint256,uint256) (#20-26) is never used and should be removed
SafeMath.tryDiv(uint256,uint256) (#62-67) is never used and should be removed
SafeMath.tryMod(uint256,uint256) (#74-79) is never used and should be removed
SafeMath.tryMul(uint256,uint256) (#45-55) is never used and should be removed
SafeMath.trySub(uint256,uint256) (#33-38) is never used and should be removed
Strings.toHexString(uint256) (#1034-1045) is never used and should be removed
Strings.toHexString(uint256,uint256) (#1050-1060) is never used and should be removed
Strings.toString(uint256) (#1009-1029) is never used and should be removed
Remove unused functions.

Additional information: link

ExosToken.totalFees (#2096) is set pre-construction with a non-constant function or state variable:
- treasuryFee.add(liquidityFee).add(nativeFee)
Remove any initialization of state variables via non-constant state variables or function calls. If variables must be set upon contract deployment, locate initialization in the constructor instead.

Additional information: link

Pragma version^0.8.0 (#1) allows old versions
solc-0.8.13 is not recommended for deployment
Deploy with any of the following Solidity versions: 0.5.16 - 0.5.17, 0.6.11 - 0.6.12, 0.7.5 - 0.7.6 Use a simple pragma version that allows any of these versions. Consider using the latest version of Solidity for testing.

Additional information: link

Contract has 5% buy tax and 0% sell tax.
Taxes are low but contract ownership is not renounced. Token has a high risk of becoming a honeypot.

Token is deployed only at one blockchain

Unable to find whitepaper link on the website

Token is not listed at Mobula.Finance

Additional information: link

Unable to find token on CoinHunt

Additional information: link

Unable to find code repository for the project

Young tokens have high risks of scam / price dump / death

Young tokens have high risks of scam / price dump / death

Token has no active CoinGecko listing / rank

Young tokens have high risks of price dump / death

Young tokens have high risks of price dump / death

Young tokens have high risks of price dump / death