FLOVM [FLOV MARKET] Token

FLOVM.addLiquidity(uint256,uint256) (#1639-1654) sends eth to arbitrary user
Dangerous calls:
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1645-1652)
Ensure that an arbitrary user cannot withdraw unauthorized funds.

Additional information: link

Reentrancy in FLOVM._transfer(address,address,uint256) (#1491-1572):
External calls:
- swapTokensForEth(walletTokens) (#1523)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1610-1616)
- swapAndLiquify(swapTokens) (#1531)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1645-1652)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1610-1616)
- swapAndSendDividends(sellTokens) (#1534)
- success = IERC20(BUSD).transfer(address(dividendTracker),dividends) (#1659)
- dividendTracker.distributeBUSDDividends(dividends) (#1662)
- uniswapV2Router.swapExactTokensForTokensSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1630-1636)
External calls sending eth:
- address(_marketingWalletAddress).transfer(marketingShare) (#1527)
- address(_devWalletAddress).transfer(devShare) (#1528)
- swapAndLiquify(swapTokens) (#1531)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1645-1652)
State variables written after the call(s):
- super._transfer(from,address(this),fees) (#1554)
- _balances[sender] = _balances[sender].sub(amount,ERC20: transfer amount exceeds balance) (#481)
- _balances[recipient] = _balances[recipient].add(amount) (#482)
- super._transfer(from,to,amount) (#1557)
- _balances[sender] = _balances[sender].sub(amount,ERC20: transfer amount exceeds balance) (#481)
- _balances[recipient] = _balances[recipient].add(amount) (#482)
- swapping = false (#1536)
Apply the check-effects-interactions pattern.

Additional information: link

SafeToken.withdraw(address,uint256) (#1198-1201) ignores return value by IERC20(_token).transfer(safeManager,_amount) (#1200)
Use SafeERC20, or ensure that the transfer/transferFrom return value is checked.

Additional information: link

Combination 1: Reentrancy vulnerabilities + Functions that send Ether to arbitraty destination. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.

Combination 2: Unchecked transfer + Functions that send Ether to arbitraty destination. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.

Combination 3: Reentrancy vulnerabilities + Unchecked transfer vulnerability. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.

Unable to verify that contract auditor is trusted: Certik, Quantstamp, Hacken, Solidity, Paladinsec, Openzeppelin, Verichains

Contract ownership is not renounced (belongs to a wallet)

FLOVM.claim() (#1478-1480) ignores return value by dividendTracker.processAccount(msg.sender,false) (#1479)
FLOVM._transfer(address,address,uint256) (#1491-1572) ignores return value by dividendTracker.process(gas) (#1565-1570)
FLOVM.addLiquidity(uint256,uint256) (#1639-1654) ignores return value by uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1645-1652)
Ensure that all the return values of the function calls are used.

Additional information: link

Reentrancy in DividendPayingToken._withdrawDividendOfUser(address) (#817-833):
External calls:
- success = IERC20(BUSD).transfer(user,_withdrawableDividend) (#822)
State variables written after the call(s):
- withdrawnDividends[user] = withdrawnDividends[user].sub(_withdrawableDividend) (#825)
Reentrancy in FLOVM.updateDividendTracker(address) (#1325-1340):
External calls:
- newDividendTracker.excludeFromDividends(address(newDividendTracker)) (#1332)
- newDividendTracker.excludeFromDividends(address(this)) (#1333)
- newDividendTracker.excludeFromDividends(owner()) (#1334)
- newDividendTracker.excludeFromDividends(address(uniswapV2Router)) (#1335)
State variables written after the call(s):
- dividendTracker = newDividendTracker (#1339)
Apply the check-effects-interactions pattern.

Additional information: link

FLOVM._transfer(address,address,uint256).iterations (#1565) is a local variable never initialized
FLOVM._transfer(address,address,uint256).claims (#1565) is a local variable never initialized
FLOVM._transfer(address,address,uint256).lastProcessedIndex (#1565) is a local variable never initialized
Initialize all the variables. If a variable is meant to be initialized to zero, explicitly set it to zero to improve code readability.

Additional information: link

Pragma version^0.6.2 (#1048) allows old versions
Deploy with any of the following Solidity versions: 0.5.16 - 0.5.17, 0.6.11 - 0.6.12, 0.7.5 - 0.7.6 Use a simple pragma version that allows any of these versions. Consider using the latest version of Solidity for testing.

Additional information: link

FLOVM.constructor() (#1287-1319) uses literals with too many digits:
- _mint(owner(),1000000000 * (10 ** 18)) (#1318)
FLOVM.setMaxTxPercent(uint256) (#1388-1391) uses literals with too many digits:
- require(bool,string)(_maxTxAmount >= 10000000,maxTxAmount should be 1% of total supply or more) (#1390)
FLOVM.updateGasForProcessing(uint256) (#1412-1417) uses literals with too many digits:
- require(bool,string)(newValue >= 200000 && newValue <= 800000,FLOVM: gasForProcessing must be between 200,000 and 500,000) (#1413)
FLOVM.slitherConstructorVariables() (#1211-1666) uses literals with too many digits:
- deadWallet = 0x000000000000000000000000000000000000dEaD (#1221)
FLOVM.slitherConstructorVariables() (#1211-1666) uses literals with too many digits:
- swapTokensAtAmount = 1000000 * (10 ** 18) (#1225)
FLOVM.slitherConstructorVariables() (#1211-1666) uses literals with too many digits:
- _maxTxAmount = 10000000 * (10 ** 18) (#1226)
FLOVM.slitherConstructorVariables() (#1211-1666) uses literals with too many digits:
- gasForProcessing = 300000 (#1239)
FLOVMDividendTracker.constructor() (#1688-1691) uses literals with too many digits:
- minimumTokenBalanceForDividends = 200000 * (10 ** 18) (#1690)
FLOVMDividendTracker.getAccountAtIndex(uint256) (#1773-1790) uses literals with too many digits:
- (0x0000000000000000000000000000000000000000,- 1,- 1,0,0,0,0,0) (#1784)
Use: Ether suffix, Time suffix, or The scientific notation

Additional information: link

SafeMathInt.MAX_INT256 (#590) is never used in SafeMathInt (#588-646)
Remove unused state variables.

Additional information: link

FLOVM.deadWallet (#1221) should be constant
FLOVM.swapTokensAtAmount (#1225) should be constant
Add the constant attributes to state variables that never change.

Additional information: link

DividendPayingToken._withdrawDividendOfUser(address) (#817-833) has external calls inside a loop: success = IERC20(BUSD).transfer(user,_withdrawableDividend) (#822)
Favor pull over push strategy for external calls.

Additional information: link

FLOVMDividendTracker.getAccount(address) (#1728-1771) uses timestamp for comparisons
Dangerous comparisons:
- nextClaimTime > block.timestamp (#1768-1770)
FLOVMDividendTracker.canAutoClaim(uint256) (#1792-1798) uses timestamp for comparisons
Dangerous comparisons:
- lastClaimTime > block.timestamp (#1793)
- block.timestamp.sub(lastClaimTime) >= claimWait (#1797)
Avoid relying on block.timestamp.

Additional information: link

Redundant expression "this (#121)" inContext (#115-124)
Remove redundant statements if they congest code but offer no value.

Additional information: link

Reentrancy in FLOVM._transfer(address,address,uint256) (#1491-1572):
External calls:
- address(_marketingWalletAddress).transfer(marketingShare) (#1527)
- address(_devWalletAddress).transfer(devShare) (#1528)
External calls sending eth:
- address(_marketingWalletAddress).transfer(marketingShare) (#1527)
- address(_devWalletAddress).transfer(devShare) (#1528)
- swapAndLiquify(swapTokens) (#1531)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1645-1652)
State variables written after the call(s):
- swapAndLiquify(swapTokens) (#1531)
- _allowances[owner][spender] = amount (#547)
- swapAndSendDividends(sellTokens) (#1534)
- _allowances[owner][spender] = amount (#547)
- super._transfer(from,address(this),fees) (#1554)
- _balances[sender] = _balances[sender].sub(amount,ERC20: transfer amount exceeds balance) (#481)
- _balances[recipient] = _balances[recipient].add(amount) (#482)
- super._transfer(from,to,amount) (#1557)
- _balances[sender] = _balances[sender].sub(amount,ERC20: transfer amount exceeds balance) (#481)
- _balances[recipient] = _balances[recipient].add(amount) (#482)
- swapping = false (#1536)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#548)
- swapAndSendDividends(sellTokens) (#1534)
- Approval(owner,spender,amount) (#548)
- swapAndLiquify(swapTokens) (#1531)
- ProcessedDividendTracker(iterations,claims,lastProcessedIndex,true,gas,tx.origin) (#1566)
- SendDividends(tokens,dividends) (#1663)
- swapAndSendDividends(sellTokens) (#1534)
- SwapAndLiquify(half,newBalance,otherHalf) (#1595)
- swapAndLiquify(swapTokens) (#1531)
- Transfer(sender,recipient,amount) (#483)
- super._transfer(from,to,amount) (#1557)
- Transfer(sender,recipient,amount) (#483)
- super._transfer(from,address(this),fees) (#1554)
Apply the check-effects-interactions pattern.

Additional information: link

DividendPayingToken.constructor(string,string)._name (#791) shadows:
- ERC20._name (#303) (state variable)
DividendPayingToken.constructor(string,string)._symbol (#791) shadows:
- ERC20._symbol (#304) (state variable)
DividendPayingToken.dividendOf(address)._owner (#839) shadows:
- Ownable._owner (#702) (state variable)
DividendPayingToken.withdrawableDividendOf(address)._owner (#846) shadows:
- Ownable._owner (#702) (state variable)
DividendPayingToken.withdrawnDividendOf(address)._owner (#853) shadows:
- Ownable._owner (#702) (state variable)
DividendPayingToken.accumulativeDividendOf(address)._owner (#863) shadows:
- Ownable._owner (#702) (state variable)
Rename the local variables that shadow another component.

Additional information: link

FLOVM.setFee(uint256,uint256,uint256,uint256) (#1379-1386) should emit an event for:
- BUSDRewardsFee = _rewardFee (#1380)
- liquidityFee = _liquidityFee (#1381)
- marketingFee = _marketingFee (#1382)
- devFee = _devFee (#1383)
- totalFees = BUSDRewardsFee.add(liquidityFee).add(marketingFee).add(devFee) (#1384)
FLOVM.setMaxTxPercent(uint256) (#1388-1391) should emit an event for:
- _maxTxAmount = maxTxAmount * 10 ** 18 (#1389)
Emit an event for critical parameter changes.

Additional information: link

SafeToken.setSafeManager(address)._safeManager (#1194) lacks a zero-check on :
- safeManager = _safeManager (#1195)
FLOVM.updateUniswapV2Router(address)._uniswapV2Pair (#1346-1347) lacks a zero-check on :
- uniswapV2Pair = _uniswapV2Pair (#1348)
FLOVM.setMarketingWallet(address).wallet (#1371) lacks a zero-check on :
- _marketingWalletAddress = wallet (#1372)
FLOVM.setDevWallet(address).wallet (#1375) lacks a zero-check on :
- _devWalletAddress = wallet (#1376)
Check that the address is not zero.

Additional information: link

Variable 'FLOVM._transfer(address,address,uint256).iterations (#1565)' in FLOVM._transfer(address,address,uint256) (#1491-1572) potentially used before declaration: ProcessedDividendTracker(iterations,claims,lastProcessedIndex,true,gas,tx.origin) (#1566)
Variable 'FLOVM._transfer(address,address,uint256).lastProcessedIndex (#1565)' in FLOVM._transfer(address,address,uint256) (#1491-1572) potentially used before declaration: ProcessedDividendTracker(iterations,claims,lastProcessedIndex,true,gas,tx.origin) (#1566)
Variable 'FLOVM._transfer(address,address,uint256).claims (#1565)' in FLOVM._transfer(address,address,uint256) (#1491-1572) potentially used before declaration: ProcessedDividendTracker(iterations,claims,lastProcessedIndex,true,gas,tx.origin) (#1566)
Move all variable declarations prior to any usage of the variable, and ensure that reaching a variable declaration does not depend on some conditional if it is used unconditionally.

Additional information: link

Reentrancy in FLOVM._transfer(address,address,uint256) (#1491-1572):
External calls:
- swapTokensForEth(walletTokens) (#1523)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1610-1616)
- swapAndLiquify(swapTokens) (#1531)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1645-1652)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1610-1616)
External calls sending eth:
- address(_marketingWalletAddress).transfer(marketingShare) (#1527)
- address(_devWalletAddress).transfer(devShare) (#1528)
- swapAndLiquify(swapTokens) (#1531)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1645-1652)
State variables written after the call(s):
- swapAndLiquify(swapTokens) (#1531)
- _allowances[owner][spender] = amount (#547)
Reentrancy in FLOVM._transfer(address,address,uint256) (#1491-1572):
External calls:
- swapTokensForEth(walletTokens) (#1523)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1610-1616)
- swapAndLiquify(swapTokens) (#1531)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1645-1652)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1610-1616)
- swapAndSendDividends(sellTokens) (#1534)
- success = IERC20(BUSD).transfer(address(dividendTracker),dividends) (#1659)
- dividendTracker.distributeBUSDDividends(dividends) (#1662)
- uniswapV2Router.swapExactTokensForTokensSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1630-1636)
External calls sending eth:
- address(_marketingWalletAddress).transfer(marketingShare) (#1527)
- address(_devWalletAddress).transfer(devShare) (#1528)
- swapAndLiquify(swapTokens) (#1531)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1645-1652)
State variables written after the call(s):
- swapAndSendDividends(sellTokens) (#1534)
- _allowances[owner][spender] = amount (#547)
Reentrancy in FLOVM.constructor() (#1287-1319):
External calls:
- _uniswapV2Pair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#1294-1295)
State variables written after the call(s):
- uniswapV2Pair = _uniswapV2Pair (#1298)
- uniswapV2Router = _uniswapV2Router (#1297)
Reentrancy in FLOVM.constructor() (#1287-1319):
External calls:
- _uniswapV2Pair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#1294-1295)
- _setAutomatedMarketMakerPair(_uniswapV2Pair,true) (#1300)
- dividendTracker.excludeFromDividends(pair) (#1405)
- dividendTracker.excludeFromDividends(address(dividendTracker)) (#1303)
- dividendTracker.excludeFromDividends(address(this)) (#1304)
- dividendTracker.excludeFromDividends(owner()) (#1305)
- dividendTracker.excludeFromDividends(deadWallet) (#1306)
- dividendTracker.excludeFromDividends(address(_uniswapV2Router)) (#1307)
State variables written after the call(s):
- _mint(owner(),1000000000 * (10 ** 18)) (#1318)
- _balances[account] = _balances[account].add(amount) (#501)
- excludeFromFees(owner(),true) (#1310)
- _isExcludedFromFees[account] = excluded (#1358)
- excludeFromFees(_marketingWalletAddress,true) (#1311)
- _isExcludedFromFees[account] = excluded (#1358)
- excludeFromFees(address(this),true) (#1312)
- _isExcludedFromFees[account] = excluded (#1358)
- _mint(owner(),1000000000 * (10 ** 18)) (#1318)
- _totalSupply = _totalSupply.add(amount) (#500)
Reentrancy in FLOVMDividendTracker.processAccount(address,bool) (#1864-1874):
External calls:
- amount = _withdrawDividendOfUser(account) (#1865)
- success = IERC20(BUSD).transfer(user,_withdrawableDividend) (#822)
State variables written after the call(s):
- lastClaimTimes[account] = block.timestamp (#1868)
Reentrancy in FLOVM.swapAndLiquify(uint256) (#1575-1596):
External calls:
- swapTokensForEth(half) (#1587)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1610-1616)
- addLiquidity(otherHalf,newBalance) (#1593)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1645-1652)
External calls sending eth:
- addLiquidity(otherHalf,newBalance) (#1593)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1645-1652)
State variables written after the call(s):
- addLiquidity(otherHalf,newBalance) (#1593)
- _allowances[owner][spender] = amount (#547)
Reentrancy in FLOVM.updateUniswapV2Router(address) (#1342-1349):
External calls:
- _uniswapV2Pair = IUniswapV2Factory(uniswapV2Router.factory()).createPair(address(this),uniswapV2Router.WETH()) (#1346-1347)
State variables written after the call(s):
- uniswapV2Pair = _uniswapV2Pair (#1348)
Apply the check-effects-interactions pattern.

Additional information: link

Reentrancy in FLOVM._setAutomatedMarketMakerPair(address,bool) (#1400-1409):
External calls:
- dividendTracker.excludeFromDividends(pair) (#1405)
Event emitted after the call(s):
- SetAutomatedMarketMakerPair(pair,value) (#1408)
Reentrancy in FLOVM._transfer(address,address,uint256) (#1491-1572):
External calls:
- swapTokensForEth(walletTokens) (#1523)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1610-1616)
- swapAndLiquify(swapTokens) (#1531)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1645-1652)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1610-1616)
External calls sending eth:
- address(_marketingWalletAddress).transfer(marketingShare) (#1527)
- address(_devWalletAddress).transfer(devShare) (#1528)
- swapAndLiquify(swapTokens) (#1531)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1645-1652)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#548)
- swapAndLiquify(swapTokens) (#1531)
- SwapAndLiquify(half,newBalance,otherHalf) (#1595)
- swapAndLiquify(swapTokens) (#1531)
Reentrancy in FLOVM._transfer(address,address,uint256) (#1491-1572):
External calls:
- swapTokensForEth(walletTokens) (#1523)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1610-1616)
- swapAndLiquify(swapTokens) (#1531)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1645-1652)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1610-1616)
- swapAndSendDividends(sellTokens) (#1534)
- success = IERC20(BUSD).transfer(address(dividendTracker),dividends) (#1659)
- dividendTracker.distributeBUSDDividends(dividends) (#1662)
- uniswapV2Router.swapExactTokensForTokensSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1630-1636)
External calls sending eth:
- address(_marketingWalletAddress).transfer(marketingShare) (#1527)
- address(_devWalletAddress).transfer(devShare) (#1528)
- swapAndLiquify(swapTokens) (#1531)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1645-1652)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#548)
- swapAndSendDividends(sellTokens) (#1534)
- SendDividends(tokens,dividends) (#1663)
- swapAndSendDividends(sellTokens) (#1534)
- Transfer(sender,recipient,amount) (#483)
- super._transfer(from,to,amount) (#1557)
- Transfer(sender,recipient,amount) (#483)
- super._transfer(from,address(this),fees) (#1554)
Reentrancy in FLOVM._transfer(address,address,uint256) (#1491-1572):
External calls:
- swapTokensForEth(walletTokens) (#1523)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1610-1616)
- swapAndLiquify(swapTokens) (#1531)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1645-1652)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1610-1616)
- swapAndSendDividends(sellTokens) (#1534)
- success = IERC20(BUSD).transfer(address(dividendTracker),dividends) (#1659)
- dividendTracker.distributeBUSDDividends(dividends) (#1662)
- uniswapV2Router.swapExactTokensForTokensSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1630-1636)
- dividendTracker.setBalance(address(from),balanceOf(from)) (#1559)
- dividendTracker.setBalance(address(to),balanceOf(to)) (#1560)
- dividendTracker.process(gas) (#1565-1570)
External calls sending eth:
- address(_marketingWalletAddress).transfer(marketingShare) (#1527)
- address(_devWalletAddress).transfer(devShare) (#1528)
- swapAndLiquify(swapTokens) (#1531)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1645-1652)
Event emitted after the call(s):
- ProcessedDividendTracker(iterations,claims,lastProcessedIndex,true,gas,tx.origin) (#1566)
Reentrancy in FLOVM.constructor() (#1287-1319):
External calls:
- _uniswapV2Pair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#1294-1295)
- _setAutomatedMarketMakerPair(_uniswapV2Pair,true) (#1300)
- dividendTracker.excludeFromDividends(pair) (#1405)
Event emitted after the call(s):
- SetAutomatedMarketMakerPair(pair,value) (#1408)
- _setAutomatedMarketMakerPair(_uniswapV2Pair,true) (#1300)
Reentrancy in FLOVM.constructor() (#1287-1319):
External calls:
- _uniswapV2Pair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#1294-1295)
- _setAutomatedMarketMakerPair(_uniswapV2Pair,true) (#1300)
- dividendTracker.excludeFromDividends(pair) (#1405)
- dividendTracker.excludeFromDividends(address(dividendTracker)) (#1303)
- dividendTracker.excludeFromDividends(address(this)) (#1304)
- dividendTracker.excludeFromDividends(owner()) (#1305)
- dividendTracker.excludeFromDividends(deadWallet) (#1306)
- dividendTracker.excludeFromDividends(address(_uniswapV2Router)) (#1307)
Event emitted after the call(s):
- ExcludeFromFees(account,excluded) (#1360)
- excludeFromFees(_marketingWalletAddress,true) (#1311)
- ExcludeFromFees(account,excluded) (#1360)
- excludeFromFees(address(this),true) (#1312)
- ExcludeFromFees(account,excluded) (#1360)
- excludeFromFees(owner(),true) (#1310)
- Transfer(address(0),account,amount) (#502)
- _mint(owner(),1000000000 * (10 ** 18)) (#1318)
Reentrancy in FLOVMDividendTracker.processAccount(address,bool) (#1864-1874):
External calls:
- amount = _withdrawDividendOfUser(account) (#1865)
- success = IERC20(BUSD).transfer(user,_withdrawableDividend) (#822)
Event emitted after the call(s):
- Claim(account,amount,automatic) (#1869)
Reentrancy in FLOVM.processDividendTracker(uint256) (#1473-1476):
External calls:
- (iterations,claims,lastProcessedIndex) = dividendTracker.process(gas) (#1474)
Event emitted after the call(s):
- ProcessedDividendTracker(iterations,claims,lastProcessedIndex,false,gas,tx.origin) (#1475)
Reentrancy in FLOVM.swapAndLiquify(uint256) (#1575-1596):
External calls:
- swapTokensForEth(half) (#1587)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1610-1616)
- addLiquidity(otherHalf,newBalance) (#1593)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1645-1652)
External calls sending eth:
- addLiquidity(otherHalf,newBalance) (#1593)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1645-1652)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#548)
- addLiquidity(otherHalf,newBalance) (#1593)
- SwapAndLiquify(half,newBalance,otherHalf) (#1595)
Reentrancy in FLOVM.swapAndSendDividends(uint256) (#1656-1665):
External calls:
- swapTokensForBUSD(tokens) (#1657)
- uniswapV2Router.swapExactTokensForTokensSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1630-1636)
- success = IERC20(BUSD).transfer(address(dividendTracker),dividends) (#1659)
- dividendTracker.distributeBUSDDividends(dividends) (#1662)
Event emitted after the call(s):
- SendDividends(tokens,dividends) (#1663)
Reentrancy in FLOVM.updateDividendTracker(address) (#1325-1340):
External calls:
- newDividendTracker.excludeFromDividends(address(newDividendTracker)) (#1332)
- newDividendTracker.excludeFromDividends(address(this)) (#1333)
- newDividendTracker.excludeFromDividends(owner()) (#1334)
- newDividendTracker.excludeFromDividends(address(uniswapV2Router)) (#1335)
Event emitted after the call(s):
- UpdateDividendTracker(newAddress,address(dividendTracker)) (#1337)
Apply the check-effects-interactions pattern.

Additional information: link

Different versions of Solidity is used:
- Version used: ['^0.6.12', '^0.6.2']
- ^0.6.12 (#3)
- ^0.6.2 (#1048)
Use one Solidity version.

Additional information: link

Context._msgData() (#120-123) is never used and should be removed
DividendPayingToken._transfer(address,address,uint256) (#873-879) is never used and should be removed
SafeMath.mod(uint256,uint256) (#247-249) is never used and should be removed
SafeMath.mod(uint256,uint256,string) (#263-266) is never used and should be removed
SafeMathInt.abs(int256) (#636-639) is never used and should be removed
SafeMathInt.div(int256,int256) (#607-613) is never used and should be removed
SafeMathInt.mul(int256,int256) (#595-602) is never used and should be removed
Remove unused functions.

Additional information: link

FLOVM.totalFees (#1232) is set pre-construction with a non-constant function or state variable:
- BUSDRewardsFee.add(liquidityFee).add(marketingFee).add(devFee)
Remove any initialization of state variables via non-constant state variables or function calls. If variables must be set upon contract deployment, locate initialization in the constructor instead.

Additional information: link

Parameter DividendPayingToken.dividendOf(address)._owner (#839) is not in mixedCase
Parameter DividendPayingToken.withdrawableDividendOf(address)._owner (#846) is not in mixedCase
Parameter DividendPayingToken.withdrawnDividendOf(address)._owner (#853) is not in mixedCase
Parameter DividendPayingToken.accumulativeDividendOf(address)._owner (#863) is not in mixedCase
Variable DividendPayingToken.BUSD (#765) is not in mixedCase
Constant DividendPayingToken.magnitude (#771) is not in UPPER_CASE_WITH_UNDERSCORES
Function IUniswapV2Pair.DOMAIN_SEPARATOR() (#994) is not in mixedCase
Function IUniswapV2Pair.PERMIT_TYPEHASH() (#995) is not in mixedCase
Function IUniswapV2Pair.MINIMUM_LIQUIDITY() (#1012) is not in mixedCase
Function IUniswapV2Router01.WETH() (#1052) is not in mixedCase
Parameter SafeToken.setSafeManager(address)._safeManager (#1194) is not in mixedCase
Parameter SafeToken.withdraw(address,uint256)._token (#1198) is not in mixedCase
Parameter SafeToken.withdraw(address,uint256)._amount (#1198) is not in mixedCase
Parameter SafeToken.withdrawBNB(uint256)._amount (#1203) is not in mixedCase
Parameter FLOVM.setExcludeFromAll(address)._address (#1351) is not in mixedCase
Parameter FLOVM.setFee(uint256,uint256,uint256,uint256)._rewardFee (#1379) is not in mixedCase
Parameter FLOVM.setFee(uint256,uint256,uint256,uint256)._liquidityFee (#1379) is not in mixedCase
Parameter FLOVM.setFee(uint256,uint256,uint256,uint256)._marketingFee (#1379) is not in mixedCase
Parameter FLOVM.setFee(uint256,uint256,uint256,uint256)._devFee (#1379) is not in mixedCase
Variable FLOVM.BUSD (#1223) is not in mixedCase
Variable FLOVM._maxTxAmount (#1226) is not in mixedCase
Variable FLOVM.BUSDRewardsFee (#1228) is not in mixedCase
Variable FLOVM._marketingWalletAddress (#1234) is not in mixedCase
Variable FLOVM._devWalletAddress (#1235) is not in mixedCase
Parameter FLOVMDividendTracker.getAccount(address)._account (#1728) is not in mixedCase
Follow the Solidity naming convention.

Additional information: link

Variable IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountADesired (#1057) is too similar to IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountBDesired (#1058)
Variable DividendPayingToken._withdrawDividendOfUser(address)._withdrawableDividend (#818) is too similar to FLOVMDividendTracker.getAccount(address).withdrawableDividends (#1733)
Prevent variables from having similar names.

Additional information: link

name() should be declared external:
- ERC20.name() (#323-325)
symbol() should be declared external:
- ERC20.symbol() (#331-333)
decimals() should be declared external:
- ERC20.decimals() (#348-350)
transfer(address,uint256) should be declared external:
- ERC20.transfer(address,uint256) (#374-377)
allowance(address,address) should be declared external:
- ERC20.allowance(address,address) (#382-384)
approve(address,uint256) should be declared external:
- ERC20.approve(address,uint256) (#393-396)
transferFrom(address,address,uint256) should be declared external:
- ERC20.transferFrom(address,address,uint256) (#411-419)
increaseAllowance(address,uint256) should be declared external:
- ERC20.increaseAllowance(address,uint256) (#433-436)
decreaseAllowance(address,uint256) should be declared external:
- ERC20.decreaseAllowance(address,uint256) (#452-455)
renounceOwnership() should be declared external:
- Ownable.renounceOwnership() (#737-740)
transferOwnership(address) should be declared external:
- Ownable.transferOwnership(address) (#746-750)
distributeBUSDDividends(uint256) should be declared external:
- DividendPayingToken.distributeBUSDDividends(uint256) (#796-807)
withdrawDividend() should be declared external:
- DividendPayingToken.withdrawDividend() (#811-813)
- FLOVMDividendTracker.withdrawDividend() (#1697-1699)
dividendOf(address) should be declared external:
- DividendPayingToken.dividendOf(address) (#839-841)
withdrawnDividendOf(address) should be declared external:
- DividendPayingToken.withdrawnDividendOf(address) (#853-855)
get(IterableMapping.Map,address) should be declared external:
- IterableMapping.get(IterableMapping.Map,address) (#926-928)
getIndexOfKey(IterableMapping.Map,address) should be declared external:
- IterableMapping.getIndexOfKey(IterableMapping.Map,address) (#930-935)
getKeyAtIndex(IterableMapping.Map,uint256) should be declared external:
- IterableMapping.getKeyAtIndex(IterableMapping.Map,uint256) (#937-939)
size(IterableMapping.Map) should be declared external:
- IterableMapping.size(IterableMapping.Map) (#943-945)
setSafeManager(address) should be declared external:
- SafeToken.setSafeManager(address) (#1194-1196)
updateDividendTracker(address) should be declared external:
- FLOVM.updateDividendTracker(address) (#1325-1340)
updateUniswapV2Router(address) should be declared external:
- FLOVM.updateUniswapV2Router(address) (#1342-1349)
setExcludeFromAll(address) should be declared external:
- FLOVM.setExcludeFromAll(address) (#1351-1354)
excludeMultipleAccountsFromFees(address[],bool) should be declared external:
- FLOVM.excludeMultipleAccountsFromFees(address[],bool) (#1363-1369)
setAutomatedMarketMakerPair(address,bool) should be declared external:
- FLOVM.setAutomatedMarketMakerPair(address,bool) (#1393-1397)
updateGasForProcessing(uint256) should be declared external:
- FLOVM.updateGasForProcessing(uint256) (#1412-1417)
isExcludedFromFees(address) should be declared external:
- FLOVM.isExcludedFromFees(address) (#1431-1433)
withdrawableDividendOf(address) should be declared external:
- FLOVM.withdrawableDividendOf(address) (#1435-1437)
dividendTokenBalanceOf(address) should be declared external:
- FLOVM.dividendTokenBalanceOf(address) (#1439-1441)
getAccountAtIndex(uint256) should be declared external:
- FLOVMDividendTracker.getAccountAtIndex(uint256) (#1773-1790)
process(uint256) should be declared external:
- FLOVMDividendTracker.process(uint256) (#1817-1862)
Use the external attribute for functions never called from the contract.

Additional information: link

Contract has 9% buy tax and 10% sell tax.
Taxes are low but contract ownership is not renounced. Token has a high risk of becoming a honeypot.

Token is deployed only at one blockchain

Token has only one trading pair

BscScan page for the token does not contain additional info: website, socials, description, etc.

Additional information: link

Unable to find token on CoinGecko

Additional information: link

Token is not listed at Mobula.Finance

Additional information: link

Unable to find audit link on the website

Unable to find token on CoinHunt

Additional information: link

Unable to find code repository for the project

Young tokens have high risks of scam / price dump / death

Young tokens have high risks of scam / price dump / death

Young tokens have high risks of scam / price dump / death

Young tokens have high risks of scam / price dump / death

Token has no active CoinGecko listing / rank

Token has relatively low CoinMarketCap rank