FCF [French connection finance] Token

FCF.addLiquidity(uint256,uint256) (#2174-2186) sends eth to arbitrary user
Dangerous calls:
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#2177-2184)
Ensure that an arbitrary user cannot withdraw unauthorized funds.

Additional information: link

Reentrancy in DividendPayingToken._withdrawDividendOfUser(address) (#1413-1429):
External calls:
- (success) = user.call{gas: 3000,value: _withdrawableDividend}() (#1418)
State variables written after the call(s):
- withdrawnDividends[user] = withdrawnDividends[user].sub(_withdrawableDividend) (#1421)
Reentrancy in FCF._transfer(address,address,uint256) (#2046-2108):
External calls:
- swapAndLiquify(contractTokenBalance) (#2073)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#2177-2184)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,_to,block.timestamp) (#2160-2166)
- (success) = address(dividendTracker).call{value: dividends}() (#2138)
- swapAndSendBNBToMarketing(extraFee) (#2089)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,_to,block.timestamp) (#2160-2166)
External calls sending eth:
- swapAndLiquify(contractTokenBalance) (#2073)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#2177-2184)
- marketingWallet.transfer(marketingAmount) (#2135)
- (success) = address(dividendTracker).call{value: dividends}() (#2138)
State variables written after the call(s):
- swapAndSendBNBToMarketing(extraFee) (#2089)
- _allowances[owner][spender] = amount (#1103)
- super._transfer(from,to,amount) (#2093)
- _balances[sender] = senderBalance - amount (#1023)
- _balances[recipient] += amount (#1025)
Reentrancy in FCF._transfer(address,address,uint256) (#2046-2108):
External calls:
- swapAndLiquify(contractTokenBalance) (#2073)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#2177-2184)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,_to,block.timestamp) (#2160-2166)
- (success) = address(dividendTracker).call{value: dividends}() (#2138)
External calls sending eth:
- swapAndLiquify(contractTokenBalance) (#2073)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#2177-2184)
- marketingWallet.transfer(marketingAmount) (#2135)
- (success) = address(dividendTracker).call{value: dividends}() (#2138)
State variables written after the call(s):
- super._transfer(from,address(this),fees) (#2086)
- _balances[sender] = senderBalance - amount (#1023)
- _balances[recipient] += amount (#1025)
Apply the check-effects-interactions pattern.

Additional information: link

SafeToken.withdraw(address,uint256) (#1731-1734) ignores return value by IERC20(_token).transfer(safeManager,_amount) (#1733)
Use SafeERC20, or ensure that the transfer/transferFrom return value is checked.

Additional information: link

Combination 2: Unchecked transfer + Functions that send Ether to arbitraty destination. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.

Combination 3: Reentrancy vulnerabilities + Unchecked transfer vulnerability. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.

Contract ownership is not renounced (belongs to a wallet)

Combination 1: Reentrancy vulnerabilities + Functions that send Ether to arbitraty destination. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.

DividendPayingToken._withdrawDividendOfUser(address) (#1413-1429) has external calls inside a loop: (success) = user.call{gas: 3000,value: _withdrawableDividend}() (#1418)
Favor pull over push strategy for external calls.

Additional information: link

FCF.swapAndLiquify(uint256) (#2110-2145) performs a multiplication on the result of a division:
-tokensToAddLiquidityWith = contractTokenBalance.div(totalFees.mul(2)).mul(liquidityFee) (#2113)
FCF.swapAndLiquify(uint256) (#2110-2145) performs a multiplication on the result of a division:
-marketingAmount = deltaBalance.sub(bnbToAddLiquidityWith).div(totalFees.sub(liquidityFee)).mul(marketingFee) (#2134)
Consider ordering multiplication before division.

Additional information: link

FCF._transfer(address,address,uint256).extraFee (#2079) is a local variable never initialized
FCF._transfer(address,address,uint256).lastProcessedIndex (#2101) is a local variable never initialized
FCF._transfer(address,address,uint256).iterations (#2101) is a local variable never initialized
FCF._transfer(address,address,uint256).claims (#2101) is a local variable never initialized
Initialize all the variables. If a variable is meant to be initialized to zero, explicitly set it to zero to improve code readability.

Additional information: link

FCF._transfer(address,address,uint256) (#2046-2108) ignores return value by dividendTracker.process(gas) (#2101-2106)
FCF.claim() (#2020-2022) ignores return value by dividendTracker.processAccount(address(msg.sender),false) (#2021)
FCF.addLiquidity(uint256,uint256) (#2174-2186) ignores return value by uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#2177-2184)
Ensure that all the return values of the function calls are used.

Additional information: link

DividendPayingToken.constructor(string,string)._name (#1370) shadows:
- ERC20._name (#831) (state variable)
DividendPayingToken.constructor(string,string)._symbol (#1370) shadows:
- ERC20._symbol (#832) (state variable)
Rename the local variables that shadow another component.

Additional information: link

FCF.setMaxtx(uint256) (#1852-1854) should emit an event for:
- maxSellTransactionAmount = _maxSellTxAmount (#1853)
FCF.setExtraFeeOnSell(uint256) (#1844-1846) should emit an event for:
- extraFeeOnSell = _extraFeeOnSell (#1845)
FCF.setFee(uint256,uint256,uint256) (#1836-1842) should emit an event for:
- liquidityFee = _liquidityFee (#1838)
- marketingFee = _marketingFee (#1839)
- totalFees = BNBRewardsFee.add(liquidityFee).add(marketingFee) (#1841)
FCF.setSwapAmont(uint256) (#1848-1850) should emit an event for:
- swapTokensAtAmount = _swapTokensAtAmount (#1849)
Emit an event for critical parameter changes.

Additional information: link

SafeToken.setSafeManager(address)._safeManager (#1727) lacks a zero-check on :
- safeManager = _safeManager (#1728)
Check that the address is not zero.

Additional information: link

Variable 'FCF._transfer(address,address,uint256).lastProcessedIndex (#2101)' in FCF._transfer(address,address,uint256) (#2046-2108) potentially used before declaration: ProcessedDividendTracker(iterations,claims,lastProcessedIndex,true,gas,tx.origin) (#2102)
Variable 'FCF._transfer(address,address,uint256).iterations (#2101)' in FCF._transfer(address,address,uint256) (#2046-2108) potentially used before declaration: ProcessedDividendTracker(iterations,claims,lastProcessedIndex,true,gas,tx.origin) (#2102)
Variable 'FCF._transfer(address,address,uint256).claims (#2101)' in FCF._transfer(address,address,uint256) (#2046-2108) potentially used before declaration: ProcessedDividendTracker(iterations,claims,lastProcessedIndex,true,gas,tx.origin) (#2102)
Move all variable declarations prior to any usage of the variable, and ensure that reaching a variable declaration does not depend on some conditional if it is used unconditionally.

Additional information: link

Reentrancy in FCFDividendTracker.processAccount(address,bool) (#1707-1717):
External calls:
- amount = _withdrawDividendOfUser(account) (#1708)
- (success) = user.call{gas: 3000,value: _withdrawableDividend}() (#1418)
State variables written after the call(s):
- lastClaimTimes[account] = block.timestamp (#1711)
Apply the check-effects-interactions pattern.

Additional information: link

Reentrancy in FCF._transfer(address,address,uint256) (#2046-2108):
External calls:
- swapAndLiquify(contractTokenBalance) (#2073)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#2177-2184)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,_to,block.timestamp) (#2160-2166)
- (success) = address(dividendTracker).call{value: dividends}() (#2138)
- swapAndSendBNBToMarketing(extraFee) (#2089)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,_to,block.timestamp) (#2160-2166)
External calls sending eth:
- swapAndLiquify(contractTokenBalance) (#2073)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#2177-2184)
- marketingWallet.transfer(marketingAmount) (#2135)
- (success) = address(dividendTracker).call{value: dividends}() (#2138)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#1104)
- swapAndSendBNBToMarketing(extraFee) (#2089)
- Transfer(sender,recipient,amount) (#1027)
- super._transfer(from,to,amount) (#2093)
Reentrancy in FCF._setAutomatedMarketMakerPair(address,bool) (#1943-1952):
External calls:
- dividendTracker.excludeFromDividends(pair) (#1948)
Event emitted after the call(s):
- SetAutomatedMarketMakerPair(pair,value) (#1951)
Reentrancy in FCF._transfer(address,address,uint256) (#2046-2108):
External calls:
- swapAndLiquify(contractTokenBalance) (#2073)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#2177-2184)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,_to,block.timestamp) (#2160-2166)
- (success) = address(dividendTracker).call{value: dividends}() (#2138)
- swapAndSendBNBToMarketing(extraFee) (#2089)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,_to,block.timestamp) (#2160-2166)
- dividendTracker.setBalance(address(from),balanceOf(from)) (#2095)
- dividendTracker.setBalance(address(to),balanceOf(to)) (#2096)
- dividendTracker.process(gas) (#2101-2106)
External calls sending eth:
- swapAndLiquify(contractTokenBalance) (#2073)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#2177-2184)
- marketingWallet.transfer(marketingAmount) (#2135)
- (success) = address(dividendTracker).call{value: dividends}() (#2138)
Event emitted after the call(s):
- ProcessedDividendTracker(iterations,claims,lastProcessedIndex,true,gas,tx.origin) (#2102)
Reentrancy in FCF._transfer(address,address,uint256) (#2046-2108):
External calls:
- swapAndLiquify(contractTokenBalance) (#2073)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#2177-2184)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,_to,block.timestamp) (#2160-2166)
- (success) = address(dividendTracker).call{value: dividends}() (#2138)
External calls sending eth:
- swapAndLiquify(contractTokenBalance) (#2073)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#2177-2184)
- marketingWallet.transfer(marketingAmount) (#2135)
- (success) = address(dividendTracker).call{value: dividends}() (#2138)
Event emitted after the call(s):
- Transfer(sender,recipient,amount) (#1027)
- super._transfer(from,address(this),fees) (#2086)
Reentrancy in FCF.swapAndLiquify(uint256) (#2110-2145):
External calls:
- swapTokensForBnb(toSwap,address(this)) (#2123)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,_to,block.timestamp) (#2160-2166)
- addLiquidity(tokensToAddLiquidityWith,bnbToAddLiquidityWith) (#2132)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#2177-2184)
- (success) = address(dividendTracker).call{value: dividends}() (#2138)
External calls sending eth:
- addLiquidity(tokensToAddLiquidityWith,bnbToAddLiquidityWith) (#2132)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#2177-2184)
- marketingWallet.transfer(marketingAmount) (#2135)
- (success) = address(dividendTracker).call{value: dividends}() (#2138)
Event emitted after the call(s):
- SendDividends(toSwap - tokensToAddLiquidityWith,dividends) (#2141)
- SwapAndLiquify(tokensToAddLiquidityWith,deltaBalance) (#2144)
Reentrancy in FCF.processDividendTracker(uint256) (#2015-2018):
External calls:
- (iterations,claims,lastProcessedIndex) = dividendTracker.process(gas) (#2016)
Event emitted after the call(s):
- ProcessedDividendTracker(iterations,claims,lastProcessedIndex,false,gas,tx.origin) (#2017)
Reentrancy in FCFDividendTracker.processAccount(address,bool) (#1707-1717):
External calls:
- amount = _withdrawDividendOfUser(account) (#1708)
- (success) = user.call{gas: 3000,value: _withdrawableDividend}() (#1418)
Event emitted after the call(s):
- Claim(account,amount,automatic) (#1712)
Apply the check-effects-interactions pattern.

Additional information: link

FCFDividendTracker.getAccount(address) (#1571-1614) uses timestamp for comparisons
Dangerous comparisons:
- nextClaimTime > block.timestamp (#1611-1613)
FCFDividendTracker.canAutoClaim(uint256) (#1635-1641) uses timestamp for comparisons
Dangerous comparisons:
- lastClaimTime > block.timestamp (#1636)
- block.timestamp.sub(lastClaimTime) >= claimWait (#1640)
Avoid relying on block.timestamp.

Additional information: link

get(IterableMapping.Map,address) should be declared external:
- IterableMapping.get(IterableMapping.Map,address) (#1223-1225)
updateUniswapV2Router(address) should be declared external:
- FCF.updateUniswapV2Router(address) (#1906-1910)
setFee(uint256,uint256,uint256) should be declared external:
- FCF.setFee(uint256,uint256,uint256) (#1836-1842)
transferFrom(address,address,uint256) should be declared external:
- ERC20.transferFrom(address,address,uint256) (#939-953)
setSafeManager(address) should be declared external:
- SafeToken.setSafeManager(address) (#1727-1729)
setMaxtx(uint256) should be declared external:
- FCF.setMaxtx(uint256) (#1852-1854)
getKeyAtIndex(IterableMapping.Map,uint256) should be declared external:
- IterableMapping.getKeyAtIndex(IterableMapping.Map,uint256) (#1234-1236)
renounceOwnership() should be declared external:
- Ownable.renounceOwnership() (#1194-1196)
isExcludedFromFees(address) should be declared external:
- FCF.isExcludedFromFees(address) (#1973-1975)
setExcludeFromMaxTx(address,bool) should be declared external:
- FCF.setExcludeFromMaxTx(address,bool) (#1919-1921)
decimals() should be declared external:
- ERC20.decimals() (#876-878)
getAccountAtIndex(uint256) should be declared external:
- FCFDividendTracker.getAccountAtIndex(uint256) (#1616-1633)
dividendOf(address) should be declared external:
- DividendPayingToken.dividendOf(address) (#1435-1437)
getIndexOfKey(IterableMapping.Map,address) should be declared external:
- IterableMapping.getIndexOfKey(IterableMapping.Map,address) (#1227-1232)
decreaseAllowance(address,uint256) should be declared external:
- ERC20.decreaseAllowance(address,uint256) (#986-994)
symbol() should be declared external:
- ERC20.symbol() (#859-861)
transfer(address,uint256) should be declared external:
- ERC20.transfer(address,uint256) (#902-905)
setSwapAmont(uint256) should be declared external:
- FCF.setSwapAmont(uint256) (#1848-1850)
increaseAllowance(address,uint256) should be declared external:
- ERC20.increaseAllowance(address,uint256) (#967-970)
updateGasForProcessing(uint256) should be declared external:
- FCF.updateGasForProcessing(uint256) (#1954-1959)
burn(uint256) should be declared external:
- FCF.burn(uint256) (#2042-2044)
withdrawDividend() should be declared external:
- DividendPayingToken.withdrawDividend() (#1407-1409)
- FCFDividendTracker.withdrawDividend() (#1540-1542)
size(IterableMapping.Map) should be declared external:
- IterableMapping.size(IterableMapping.Map) (#1240-1242)
transferOwnership(address) should be declared external:
- Ownable.transferOwnership(address) (#1202-1205)
name() should be declared external:
- ERC20.name() (#851-853)
setAutomatedMarketMakerPair(address,bool) should be declared external:
- FCF.setAutomatedMarketMakerPair(address,bool) (#1937-1941)
setExtraFeeOnSell(uint256) should be declared external:
- FCF.setExtraFeeOnSell(uint256) (#1844-1846)
withdrawableDividendOf(address) should be declared external:
- FCF.withdrawableDividendOf(address) (#1981-1983)
isExcludedFromMaxTx(address) should be declared external:
- FCF.isExcludedFromMaxTx(address) (#1977-1979)
approve(address,uint256) should be declared external:
- ERC20.approve(address,uint256) (#921-924)
setExcludeFromAll(address) should be declared external:
- FCF.setExcludeFromAll(address) (#1923-1927)
process(uint256) should be declared external:
- FCFDividendTracker.process(uint256) (#1660-1705)
withdrawnDividendOf(address) should be declared external:
- DividendPayingToken.withdrawnDividendOf(address) (#1449-1451)
excludeMultipleAccountsFromFees(address[],bool) should be declared external:
- FCF.excludeMultipleAccountsFromFees(address[],bool) (#1929-1935)
dividendTokenBalanceOf(address) should be declared external:
- FCF.dividendTokenBalanceOf(address) (#1985-1987)
setSwapAndLiquifyEnabled(bool) should be declared external:
- FCF.setSwapAndLiquifyEnabled(bool) (#2037-2040)
Use the external attribute for functions never called from the contract.

Additional information: link

SafeMath.tryDiv(uint256,uint256) (#278-283) is never used and should be removed
SignedSafeMath.div(int256,int256) (#187-189) is never used and should be removed
SafeCast.toUint64(uint256) (#514-517) is never used and should be removed
SafeMath.tryMod(uint256,uint256) (#290-295) is never used and should be removed
SafeMath.sub(uint256,uint256,string) (#382-391) is never used and should be removed
SafeCast.toUint128(uint256) (#484-487) is never used and should be removed
SafeCast.toUint8(uint256) (#559-562) is never used and should be removed
SafeMath.tryAdd(uint256,uint256) (#236-242) is never used and should be removed
SafeMath.mod(uint256,uint256,string) (#431-440) is never used and should be removed
SafeCast.toInt128(int256) (#589-592) is never used and should be removed
SafeCast.toInt32(int256) (#625-628) is never used and should be removed
SafeMath.div(uint256,uint256,string) (#405-414) is never used and should be removed
SafeCast.toInt64(int256) (#607-610) is never used and should be removed
Context._msgData() (#695-697) is never used and should be removed
SafeCast.toUint224(uint256) (#469-472) is never used and should be removed
SafeCast.toInt8(int256) (#661-664) is never used and should be removed
SafeMath.mod(uint256,uint256) (#365-367) is never used and should be removed
SignedSafeMath.mul(int256,int256) (#173-175) is never used and should be removed
SafeCast.toUint96(uint256) (#499-502) is never used and should be removed
SafeMath.tryMul(uint256,uint256) (#261-271) is never used and should be removed
SafeCast.toUint16(uint256) (#544-547) is never used and should be removed
SafeCast.toInt16(int256) (#643-646) is never used and should be removed
SafeMath.trySub(uint256,uint256) (#249-254) is never used and should be removed
DividendPayingToken._transfer(address,address,uint256) (#1469-1475) is never used and should be removed
SafeCast.toUint32(uint256) (#529-532) is never used and should be removed
Remove unused functions.

Additional information: link

Pragma version^0.8.0 (#3) allows old versions
Deploy with any of the following Solidity versions: 0.5.16 - 0.5.17, 0.6.11 - 0.6.12, 0.7.5 - 0.7.6 Use a simple pragma version that allows any of these versions. Consider using the latest version of Solidity for testing.

Additional information: link

Low level call in DividendPayingToken._withdrawDividendOfUser(address) (#1413-1429):
- (success) = user.call{gas: 3000,value: _withdrawableDividend}() (#1418)
Low level call in FCF.swapAndLiquify(uint256) (#2110-2145):
- (success) = address(dividendTracker).call{value: dividends}() (#2138)
Avoid low-level calls. Check the call success. If the call is meant for a contract, check for code existence

Additional information: link

Parameter SafeToken.withdraw(address,uint256)._token (#1731) is not in mixedCase
Parameter FCF.setSwapAmont(uint256)._swapTokensAtAmount (#1848) is not in mixedCase
Parameter SafeToken.setSafeManager(address)._safeManager (#1727) is not in mixedCase
Parameter SafeToken.withdraw(address,uint256)._amount (#1731) is not in mixedCase
Parameter FCFDividendTracker.getAccount(address)._account (#1571) is not in mixedCase
Parameter LockToken.includeToWhiteList(address[])._users (#1759) is not in mixedCase
Constant DividendPayingToken.magnitude (#1350) is not in UPPER_CASE_WITH_UNDERSCORES
Parameter FCF.setMaxtx(uint256)._maxSellTxAmount (#1852) is not in mixedCase
Parameter FCF.setExtraFeeOnSell(uint256)._extraFeeOnSell (#1844) is not in mixedCase
Parameter FCF.setExcludeFromAll(address)._address (#1923) is not in mixedCase
Variable FCF.BNBRewardsFee (#1781) is not in mixedCase
Parameter DividendPayingToken.dividendOf(address)._owner (#1435) is not in mixedCase
Parameter FCF.setSwapAndLiquifyEnabled(bool)._enabled (#2037) is not in mixedCase
Parameter FCF.setExcludeFromMaxTx(address,bool)._address (#1919) is not in mixedCase
Parameter DividendPayingToken.withdrawnDividendOf(address)._owner (#1449) is not in mixedCase
Parameter DividendPayingToken.withdrawableDividendOf(address)._owner (#1442) is not in mixedCase
Parameter FCF.swapTokensForBnb(uint256,address)._to (#2147) is not in mixedCase
Function IUniswapV2Router01.WETH() (#7) is not in mixedCase
Parameter DividendPayingToken.accumulativeDividendOf(address)._owner (#1459) is not in mixedCase
Parameter SafeToken.withdrawBNB(uint256)._amount (#1736) is not in mixedCase
Parameter FCF.setFee(uint256,uint256,uint256)._liquidityFee (#1836) is not in mixedCase
Parameter FCF.setFee(uint256,uint256,uint256)._bnbRewardFee (#1836) is not in mixedCase
Parameter FCF.setFee(uint256,uint256,uint256)._marketingFee (#1836) is not in mixedCase
Follow the Solidity naming convention.

Additional information: link

Reentrancy in FCF.swapAndLiquify(uint256) (#2110-2145):
External calls:
- marketingWallet.transfer(marketingAmount) (#2135)
External calls sending eth:
- addLiquidity(tokensToAddLiquidityWith,bnbToAddLiquidityWith) (#2132)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#2177-2184)
- marketingWallet.transfer(marketingAmount) (#2135)
- (success) = address(dividendTracker).call{value: dividends}() (#2138)
Event emitted after the call(s):
- SendDividends(toSwap - tokensToAddLiquidityWith,dividends) (#2141)
- SwapAndLiquify(tokensToAddLiquidityWith,deltaBalance) (#2144)
Reentrancy in FCF._transfer(address,address,uint256) (#2046-2108):
External calls:
- swapAndLiquify(contractTokenBalance) (#2073)
- marketingWallet.transfer(marketingAmount) (#2135)
External calls sending eth:
- swapAndLiquify(contractTokenBalance) (#2073)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#2177-2184)
- marketingWallet.transfer(marketingAmount) (#2135)
- (success) = address(dividendTracker).call{value: dividends}() (#2138)
State variables written after the call(s):
- swapAndSendBNBToMarketing(extraFee) (#2089)
- _allowances[owner][spender] = amount (#1103)
- super._transfer(from,address(this),fees) (#2086)
- _balances[sender] = senderBalance - amount (#1023)
- _balances[recipient] += amount (#1025)
- super._transfer(from,to,amount) (#2093)
- _balances[sender] = senderBalance - amount (#1023)
- _balances[recipient] += amount (#1025)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#1104)
- swapAndSendBNBToMarketing(extraFee) (#2089)
- ProcessedDividendTracker(iterations,claims,lastProcessedIndex,true,gas,tx.origin) (#2102)
- Transfer(sender,recipient,amount) (#1027)
- super._transfer(from,to,amount) (#2093)
- Transfer(sender,recipient,amount) (#1027)
- super._transfer(from,address(this),fees) (#2086)
Apply the check-effects-interactions pattern.

Additional information: link

Variable IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountADesired (#12) is too similar to IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountBDesired (#13)
Variable DividendPayingToken._withdrawDividendOfUser(address)._withdrawableDividend (#1414) is too similar to FCFDividendTracker.getAccount(address).withdrawableDividends (#1576)
Variable FCF.BNBRewardsFee (#1781) is too similar to FCF.setFee(uint256,uint256,uint256)._bnbRewardFee (#1836)
Prevent variables from having similar names.

Additional information: link

FCF.slitherConstructorVariables() (#1766-2189) uses literals with too many digits:
- swapTokensAtAmount = 2000000 * (10 ** 18) (#1779)
FCF.updateGasForProcessing(uint256) (#1954-1959) uses literals with too many digits:
- require(bool,string)(newValue >= 200000 && newValue <= 500000,FCF: gasForProcessing must be between 200,000 and 500,000) (#1955)
FCFDividendTracker.getAccountAtIndex(uint256) (#1616-1633) uses literals with too many digits:
- (0x0000000000000000000000000000000000000000,- 1,- 1,0,0,0,0,0) (#1627)
FCF.slitherConstructorVariables() (#1766-2189) uses literals with too many digits:
- maxSellTransactionAmount = 1000000 * (10 ** 18) (#1778)
FCF.slitherConstructorVariables() (#1766-2189) uses literals with too many digits:
- gasForProcessing = 300000 (#1789)
FCF.constructor() (#1856-1900) uses literals with too many digits:
- dividendTracker.excludeFromDividends(0x000000000000000000000000000000000000dEaD) (#1882)
FCF.constructor() (#1856-1900) uses literals with too many digits:
- _mint(owner(),100000000000 * (10 ** 18)) (#1899)
Use: Ether suffix, Time suffix, or The scientific notation

Additional information: link

Average 30d PancakeSwap liquidity is less than $100. Token is either dead or inactive.

Average 30d number of PancakeSwap swaps is less than 1. Token is either dead or inactive.

Contract has 10% buy tax and 10% sell tax.
Taxes are low but contract ownership is not renounced. Token has a high risk of becoming a honeypot.

Token is deployed only at one blockchain

Token has relatively low CoinGecko rank