FlokiKing is the new king of Meme, will set off a new craze in meme coin, join the army of FlokiKing, stand on the strongest stage of BSC! 👑
OfficialTg:https://t.me/BSCFlokiKing
Unable to find manual contract audit (e.g. Certik, PeckShield, Solidity...)
FlokiKing.addLiquidity(uint256,uint256) (#766-779) sends eth to arbitrary user
Dangerous calls:
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#771-778)
Ensure that an arbitrary user cannot withdraw unauthorized funds.
Additional information: link
Reentrancy in FlokiKing._transfer(address,address,uint256) (#675-713):
External calls:
- swapAndLiquify(contractTokenBalance) (#697)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#771-778)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#755-761)
External calls sending eth:
- swapAndLiquify(contractTokenBalance) (#697)
- recipient.transfer(amount) (#639)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#771-778)
State variables written after the call(s):
- _balances[sender] = _balances[sender].sub(amount,Insufficient Balance) (#700)
- _balances[recipient] = _balances[recipient].add(finalAmount) (#708)
- finalAmount = takeFee(sender,recipient,amount) (#702-703)
- _balances[address(this)] = _balances[address(this)].add(feeAmount) (#793)
Apply the check-effects-interactions pattern.
Additional information: link
Combination 1: Reentrancy vulnerabilities + Functions that send Ether to arbitraty destination. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.
FlokiKing.addLiquidity(uint256,uint256) (#766-779) ignores return value by uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#771-778)
Ensure that all the return values of the function calls are used.
Additional information: link
FlokiKing.allowance(address,address).owner (#530) shadows:
- Ownable.owner() (#164-166) (function)
FlokiKing._approve(address,address,uint256).owner (#553) shadows:
- Ownable.owner() (#164-166) (function)
Rename the local variables that shadow another component.
Additional information: link
FlokiKing.setBuyTaxes(uint256,uint256,uint256) (#573-579) should emit an event for:
- _totalTaxIfBuying = _buyLiquidityFee.add(_buyMarketingFee).add(_buyTeamFee) (#578)
FlokiKing.setSellTaxes(uint256,uint256,uint256) (#581-587) should emit an event for:
- _totalTaxIfSelling = _sellLiquidityFee.add(_sellMarketingFee).add(_sellTeamFee) (#586)
FlokiKing.setDistributionSettings(uint256,uint256,uint256) (#589-595) should emit an event for:
- _liquidityShare = newLiquidityShare (#590)
- _teamShare = newTeamShare (#592)
- _totalDistributionShares = _liquidityShare.add(_marketingShare).add(_teamShare) (#594)
FlokiKing.setMaxTxAmount(uint256) (#597-599) should emit an event for:
- _maxTxAmount = maxTxAmount (#598)
FlokiKing.setWalletLimit(uint256) (#609-611) should emit an event for:
- _walletMax = newLimit (#610)
FlokiKing.setNumTokensBeforeSwap(uint256) (#613-615) should emit an event for:
- minimumTokensBeforeSwap = newLimit (#614)
Emit an event for critical parameter changes.
Additional information: link
FlokiKing.setMarketingWalletAddress(address).newAddress (#617) lacks a zero-check on :
- marketingWalletAddress = address(newAddress) (#618)
FlokiKing.setTeamWalletAddress(address).newAddress (#621) lacks a zero-check on :
- teamWalletAddress = address(newAddress) (#622)
Check that the address is not zero.
Additional information: link
Reentrancy in FlokiKing.changeRouterVersion(address) (#642-659):
External calls:
- newPairAddress = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#650-651)
State variables written after the call(s):
- isMarketPair[address(uniswapPair)] = true (#658)
- isWalletLimitExempt[address(uniswapPair)] = true (#657)
- uniswapPair = newPairAddress (#654)
- uniswapV2Router = _uniswapV2Router (#655)
Reentrancy in FlokiKing.constructor() (#480-508):
External calls:
- uniswapPair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#484-485)
State variables written after the call(s):
- _allowances[address(this)][address(uniswapV2Router)] = _totalSupply (#488)
- _balances[_msgSender()] = _totalSupply (#506)
- _totalDistributionShares = _liquidityShare.add(_marketingShare).add(_teamShare) (#495)
- _totalTaxIfBuying = _buyLiquidityFee.add(_buyMarketingFee).add(_buyTeamFee) (#493)
- _totalTaxIfSelling = _sellLiquidityFee.add(_sellMarketingFee).add(_sellTeamFee) (#494)
- isExcludedFromFee[owner()] = true (#490)
- isExcludedFromFee[address(this)] = true (#491)
- isMarketPair[address(uniswapPair)] = true (#504)
- isTxLimitExempt[owner()] = true (#501)
- isTxLimitExempt[address(this)] = true (#502)
- isWalletLimitExempt[owner()] = true (#497)
- isWalletLimitExempt[address(uniswapPair)] = true (#498)
- isWalletLimitExempt[address(this)] = true (#499)
- uniswapV2Router = _uniswapV2Router (#487)
Reentrancy in FlokiKing.swapAndLiquify(uint256) (#722-744):
External calls:
- swapTokensForEth(tokensForSwap) (#727)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#755-761)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#743)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#771-778)
External calls sending eth:
- transferToAddressETH(marketingWalletAddress,amountBNBMarketing) (#737)
- recipient.transfer(amount) (#639)
- transferToAddressETH(teamWalletAddress,amountBNBTeam) (#740)
- recipient.transfer(amount) (#639)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#743)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#771-778)
State variables written after the call(s):
- addLiquidity(tokensForLP,amountBNBLiquidity) (#743)
- _allowances[owner][spender] = amount (#557)
Reentrancy in FlokiKing.transferFrom(address,address,uint256) (#669-673):
External calls:
- _transfer(sender,recipient,amount) (#670)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#771-778)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#755-761)
External calls sending eth:
- _transfer(sender,recipient,amount) (#670)
- recipient.transfer(amount) (#639)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#771-778)
State variables written after the call(s):
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#671)
- _allowances[owner][spender] = amount (#557)
Apply the check-effects-interactions pattern.
Additional information: link
Reentrancy in FlokiKing._transfer(address,address,uint256) (#675-713):
External calls:
- swapAndLiquify(contractTokenBalance) (#697)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#771-778)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#755-761)
External calls sending eth:
- swapAndLiquify(contractTokenBalance) (#697)
- recipient.transfer(amount) (#639)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#771-778)
Event emitted after the call(s):
- Transfer(sender,address(this),feeAmount) (#794)
- finalAmount = takeFee(sender,recipient,amount) (#702-703)
- Transfer(sender,recipient,finalAmount) (#710)
Reentrancy in FlokiKing.constructor() (#480-508):
External calls:
- uniswapPair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#484-485)
Event emitted after the call(s):
- Transfer(address(0),_msgSender(),_totalSupply) (#507)
Reentrancy in FlokiKing.swapAndLiquify(uint256) (#722-744):
External calls:
- swapTokensForEth(tokensForSwap) (#727)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#755-761)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#743)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#771-778)
External calls sending eth:
- transferToAddressETH(marketingWalletAddress,amountBNBMarketing) (#737)
- recipient.transfer(amount) (#639)
- transferToAddressETH(teamWalletAddress,amountBNBTeam) (#740)
- recipient.transfer(amount) (#639)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#743)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#771-778)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#558)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#743)
Reentrancy in FlokiKing.swapTokensForEth(uint256) (#746-764):
External calls:
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#755-761)
Event emitted after the call(s):
- SwapTokensForETH(tokenAmount,path) (#763)
Reentrancy in FlokiKing.transferFrom(address,address,uint256) (#669-673):
External calls:
- _transfer(sender,recipient,amount) (#670)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#771-778)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#755-761)
External calls sending eth:
- _transfer(sender,recipient,amount) (#670)
- recipient.transfer(amount) (#639)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#771-778)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#558)
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#671)
Apply the check-effects-interactions pattern.
Additional information: link
Ownable.unlock() (#199-204) uses timestamp for comparisons
Dangerous comparisons:
- require(bool,string)(block.timestamp > _lockTime,Contract is locked until 7 days) (#201)
Avoid relying on block.timestamp.
Additional information: link
Address.isContract(address) (#95-104) uses assembly
- INLINE ASM (#102)
Address._functionCallWithValue(address,bytes,uint256,string) (#131-148) uses assembly
- INLINE ASM (#140-143)
Do not use evm assembly.
Additional information: link
Address._functionCallWithValue(address,bytes,uint256,string) (#131-148) is never used and should be removed
Address.functionCall(address,bytes) (#114-116) is never used and should be removed
Address.functionCall(address,bytes,string) (#118-120) is never used and should be removed
Address.functionCallWithValue(address,bytes,uint256) (#122-124) is never used and should be removed
Address.functionCallWithValue(address,bytes,uint256,string) (#126-129) is never used and should be removed
Address.isContract(address) (#95-104) is never used and should be removed
Address.sendValue(address,uint256) (#106-112) is never used and should be removed
Context._msgData() (#22-25) is never used and should be removed
SafeMath.mod(uint256,uint256) (#83-85) is never used and should be removed
SafeMath.mod(uint256,uint256,string) (#87-90) is never used and should be removed
Remove unused functions.
Additional information: link
FlokiKing._totalSupply (#444) is set pre-construction with a non-constant function or state variable:
- 10000000000 * 10 ** _decimals
FlokiKing._maxTxAmount (#445) is set pre-construction with a non-constant function or state variable:
- 10000000000 * 10 ** _decimals
FlokiKing._walletMax (#446) is set pre-construction with a non-constant function or state variable:
- 10000000000 * 10 ** _decimals
FlokiKing.minimumTokensBeforeSwap (#447) is set pre-construction with a non-constant function or state variable:
- 100 * 10 ** _decimals
Remove any initialization of state variables via non-constant state variables or function calls. If variables must be set upon contract deployment, locate initialization in the constructor instead.
Additional information: link
Low level call in Address.sendValue(address,uint256) (#106-112):
- (success) = recipient.call{value: amount}() (#110)
Low level call in Address._functionCallWithValue(address,bytes,uint256,string) (#131-148):
- (success,returndata) = target.call{value: weiValue}(data) (#134)
Avoid low-level calls. Check the call success. If the call is meant for a contract, check for code existence
Additional information: link
Function IUniswapV2Pair.DOMAIN_SEPARATOR() (#238) is not in mixedCase
Function IUniswapV2Pair.PERMIT_TYPEHASH() (#239) is not in mixedCase
Function IUniswapV2Pair.MINIMUM_LIQUIDITY() (#255) is not in mixedCase
Function IUniswapV2Router01.WETH() (#274) is not in mixedCase
Parameter FlokiKing.setSwapAndLiquifyEnabled(bool)._enabled (#625) is not in mixedCase
Variable FlokiKing._balances (#420) is not in mixedCase
Variable FlokiKing._buyLiquidityFee (#428) is not in mixedCase
Variable FlokiKing._buyMarketingFee (#429) is not in mixedCase
Variable FlokiKing._buyTeamFee (#430) is not in mixedCase
Variable FlokiKing._sellLiquidityFee (#432) is not in mixedCase
Variable FlokiKing._sellMarketingFee (#433) is not in mixedCase
Variable FlokiKing._sellTeamFee (#434) is not in mixedCase
Variable FlokiKing._liquidityShare (#436) is not in mixedCase
Variable FlokiKing._marketingShare (#437) is not in mixedCase
Variable FlokiKing._teamShare (#438) is not in mixedCase
Variable FlokiKing._totalTaxIfBuying (#440) is not in mixedCase
Variable FlokiKing._totalTaxIfSelling (#441) is not in mixedCase
Variable FlokiKing._totalDistributionShares (#442) is not in mixedCase
Variable FlokiKing._maxTxAmount (#445) is not in mixedCase
Variable FlokiKing._walletMax (#446) is not in mixedCase
Follow the Solidity naming convention.
Additional information: link
Redundant expression "this (#23)" inContext (#16-26)
Remove redundant statements if they congest code but offer no value.
Additional information: link
Reentrancy in FlokiKing._transfer(address,address,uint256) (#675-713):
External calls:
- swapAndLiquify(contractTokenBalance) (#697)
- recipient.transfer(amount) (#639)
External calls sending eth:
- swapAndLiquify(contractTokenBalance) (#697)
- recipient.transfer(amount) (#639)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#771-778)
State variables written after the call(s):
- _balances[sender] = _balances[sender].sub(amount,Insufficient Balance) (#700)
- _balances[recipient] = _balances[recipient].add(finalAmount) (#708)
- finalAmount = takeFee(sender,recipient,amount) (#702-703)
- _balances[address(this)] = _balances[address(this)].add(feeAmount) (#793)
Event emitted after the call(s):
- Transfer(sender,address(this),feeAmount) (#794)
- finalAmount = takeFee(sender,recipient,amount) (#702-703)
- Transfer(sender,recipient,finalAmount) (#710)
Reentrancy in FlokiKing.swapAndLiquify(uint256) (#722-744):
External calls:
- transferToAddressETH(marketingWalletAddress,amountBNBMarketing) (#737)
- recipient.transfer(amount) (#639)
- transferToAddressETH(teamWalletAddress,amountBNBTeam) (#740)
- recipient.transfer(amount) (#639)
External calls sending eth:
- transferToAddressETH(marketingWalletAddress,amountBNBMarketing) (#737)
- recipient.transfer(amount) (#639)
- transferToAddressETH(teamWalletAddress,amountBNBTeam) (#740)
- recipient.transfer(amount) (#639)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#743)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#771-778)
State variables written after the call(s):
- addLiquidity(tokensForLP,amountBNBLiquidity) (#743)
- _allowances[owner][spender] = amount (#557)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#558)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#743)
Reentrancy in FlokiKing.transferFrom(address,address,uint256) (#669-673):
External calls:
- _transfer(sender,recipient,amount) (#670)
- recipient.transfer(amount) (#639)
External calls sending eth:
- _transfer(sender,recipient,amount) (#670)
- recipient.transfer(amount) (#639)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#771-778)
State variables written after the call(s):
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#671)
- _allowances[owner][spender] = amount (#557)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#558)
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#671)
Apply the check-effects-interactions pattern.
Additional information: link
Variable IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountADesired (#279) is too similar to IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountBDesired (#280)
Prevent variables from having similar names.
Additional information: link
FlokiKing.slitherConstructorVariables() (#407-801) uses literals with too many digits:
- deadAddress = 0x000000000000000000000000000000000000dEaD (#418)
FlokiKing.slitherConstructorVariables() (#407-801) uses literals with too many digits:
- _totalSupply = 10000000000 * 10 ** _decimals (#444)
FlokiKing.slitherConstructorVariables() (#407-801) uses literals with too many digits:
- _maxTxAmount = 10000000000 * 10 ** _decimals (#445)
FlokiKing.slitherConstructorVariables() (#407-801) uses literals with too many digits:
- _walletMax = 10000000000 * 10 ** _decimals (#446)
Use: Ether suffix, Time suffix, or The scientific notation
Additional information: link
FlokiKing._decimals (#414) should be constant
FlokiKing._name (#412) should be constant
FlokiKing._symbol (#413) should be constant
Add the constant attributes to state variables that never change.
Additional information: link
waiveOwnership() should be declared external:
- Ownable.waiveOwnership() (#173-176)
transferOwnership(address) should be declared external:
- Ownable.transferOwnership(address) (#178-182)
getUnlockTime() should be declared external:
- Ownable.getUnlockTime() (#184-186)
getTime() should be declared external:
- Ownable.getTime() (#188-190)
lock(uint256) should be declared external:
- Ownable.lock(uint256) (#192-197)
unlock() should be declared external:
- Ownable.unlock() (#199-204)
name() should be declared external:
- FlokiKing.name() (#510-512)
symbol() should be declared external:
- FlokiKing.symbol() (#514-516)
decimals() should be declared external:
- FlokiKing.decimals() (#518-520)
totalSupply() should be declared external:
- FlokiKing.totalSupply() (#522-524)
allowance(address,address) should be declared external:
- FlokiKing.allowance(address,address) (#530-532)
increaseAllowance(address,uint256) should be declared external:
- FlokiKing.increaseAllowance(address,uint256) (#534-537)
decreaseAllowance(address,uint256) should be declared external:
- FlokiKing.decreaseAllowance(address,uint256) (#539-542)
minimumTokensBeforeSwapAmount() should be declared external:
- FlokiKing.minimumTokensBeforeSwapAmount() (#544-546)
approve(address,uint256) should be declared external:
- FlokiKing.approve(address,uint256) (#548-551)
setMarketPairStatus(address,bool) should be declared external:
- FlokiKing.setMarketPairStatus(address,bool) (#561-563)
setIsExcludedFromFee(address,bool) should be declared external:
- FlokiKing.setIsExcludedFromFee(address,bool) (#569-571)
setSwapAndLiquifyEnabled(bool) should be declared external:
- FlokiKing.setSwapAndLiquifyEnabled(bool) (#625-628)
setSwapAndLiquifyByLimitOnly(bool) should be declared external:
- FlokiKing.setSwapAndLiquifyByLimitOnly(bool) (#630-632)
getCirculatingSupply() should be declared external:
- FlokiKing.getCirculatingSupply() (#634-636)
changeRouterVersion(address) should be declared external:
- FlokiKing.changeRouterVersion(address) (#642-659)
transfer(address,uint256) should be declared external:
- FlokiKing.transfer(address,uint256) (#664-667)
transferFrom(address,address,uint256) should be declared external:
- FlokiKing.transferFrom(address,address,uint256) (#669-673)
Use the external attribute for functions never called from the contract.
Additional information: link
Unable to find website, listings and other project-related information
Young tokens have high risks of scam / price dump / death
Token has no active CoinGecko listing / rank
Token has no active CoinMarketCap listing / rank
Unable to find Twitter account
Telegram account has relatively few subscribers
Unable to find Blog account (Reddit or Medium)
Unable to find Youtube account
Unable to find Discord account