FM [Feminist Metaverse] Token

Unable to find manual contract audit (e.g. Certik, PeckShield, Solidity...)

FmToken._transferLocked(address,address,uint256) (#973-1007) uses a dangerous strict equality:
- lockBalanceOfEndTime[recipient] == 0 (#987)
Don't use strict equality to determine if an account has enough Ether or tokens.

Additional information: link

Contract locking ether found:
Contract FmToken (#716-1009) has payable functions:
- FmToken.receive() (#880)
But does not have a function to withdraw the ether
Remove the payable attribute or add a withdraw function.

Additional information: link

Contract ownership is not renounced (belongs to a wallet)

FmToken._transferStandard(address,address,uint256) (#933-971) performs a multiplication on the result of a division:
-liquidityAmount = amount.mul(liquidityFee).div(10000) (#945)
-amount = amount.mul(10015).div(10000) (#948)
Consider ordering multiplication before division.

Additional information: link

FmToken.allowance(address,address).owner (#849) shadows:
- Ownable.owner() (#447-449) (function)
FmToken._approve(address,address,uint256).owner (#882) shadows:
- Ownable.owner() (#447-449) (function)
Rename the local variables that shadow another component.

Additional information: link

Reentrancy in FmToken.constructor() (#768-809):
External calls:
- uniswapV2Pair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),USDT) (#799-800)
State variables written after the call(s):
- uniswapV2Router = _uniswapV2Router (#803)
Apply the check-effects-interactions pattern.

Additional information: link

Reentrancy in FmToken.constructor() (#768-809):
External calls:
- uniswapV2Pair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),USDT) (#799-800)
Event emitted after the call(s):
- Transfer(address(0),teamer,50000 * 10 ** 8 * 10 ** 18) (#805)
- Transfer(address(0),investor,160000 * 10 ** 8 * 10 ** 18) (#806)
- Transfer(address(0),feministAgency,220000 * 10 ** 8 * 10 ** 18) (#807)
- Transfer(address(0),dao,620000 * 10 ** 8 * 10 ** 18) (#808)
Apply the check-effects-interactions pattern.

Additional information: link

Ownable.unlock() (#494-499) uses timestamp for comparisons
Dangerous comparisons:
- require(bool,string)(now > _lockTime,Contract is locked until 7 days) (#496)
FmToken.availableBalanceOf(address) (#835-842) uses timestamp for comparisons
Dangerous comparisons:
- _lockBalanceOfEndTime > 0 && block.timestamp >= _lockBalanceOfEndTime (#838)
FmToken._transferStandard(address,address,uint256) (#933-971) uses timestamp for comparisons
Dangerous comparisons:
- _lockBalanceOfEndTime > 0 && block.timestamp >= _lockBalanceOfEndTime (#937)
- _lockBalanceOfEndTime > 0 && block.timestamp >= _lockBalanceOfEndTime (#955)
FmToken._transferLocked(address,address,uint256) (#973-1007) uses timestamp for comparisons
Dangerous comparisons:
- lockBalanceOfEndTime[recipient] == 0 (#987)
Avoid relying on block.timestamp.

Additional information: link

Address._functionCallWithValue(address,bytes,uint256,string) (#392-413) is never used and should be removed
Address.functionCall(address,bytes) (#352-354) is never used and should be removed
Address.functionCall(address,bytes,string) (#362-364) is never used and should be removed
Address.functionCallWithValue(address,bytes,uint256) (#377-379) is never used and should be removed
Address.functionCallWithValue(address,bytes,uint256,string) (#387-390) is never used and should be removed
Address.isContract(address) (#299-308) is never used and should be removed
Address.sendValue(address,uint256) (#326-332) is never used and should be removed
Context._msgData() (#271-274) is never used and should be removed
SafeMath.mod(uint256,uint256) (#244-246) is never used and should be removed
SafeMath.mod(uint256,uint256,string) (#260-263) is never used and should be removed
Remove unused functions.

Additional information: link

Low level call in Address.sendValue(address,uint256) (#326-332):
- (success) = recipient.call{value: amount}() (#330)
Low level call in Address._functionCallWithValue(address,bytes,uint256,string) (#392-413):
- (success,returndata) = target.call{value: weiValue}(data) (#396)
Avoid low-level calls. Check the call success. If the call is meant for a contract, check for code existence

Additional information: link

Function IUniswapV2Pair.DOMAIN_SEPARATOR() (#538) is not in mixedCase
Function IUniswapV2Pair.PERMIT_TYPEHASH() (#539) is not in mixedCase
Function IUniswapV2Pair.MINIMUM_LIQUIDITY() (#556) is not in mixedCase
Function IUniswapV2Router01.WETH() (#578) is not in mixedCase
Parameter FmToken.setSwapAndLiquifyEnabled(bool)._enabled (#874) is not in mixedCase
Variable FmToken._LockBalanceOf (#721) is not in mixedCase
Variable FmToken._isExcludedLock (#725) is not in mixedCase
Constant FmToken.numTokensSellToAddToLiquidity (#741) is not in UPPER_CASE_WITH_UNDERSCORES
Constant FmToken.teamer (#749) is not in UPPER_CASE_WITH_UNDERSCORES
Constant FmToken.investor (#750) is not in UPPER_CASE_WITH_UNDERSCORES
Constant FmToken.feministAgency (#751) is not in UPPER_CASE_WITH_UNDERSCORES
Constant FmToken.dao (#752) is not in UPPER_CASE_WITH_UNDERSCORES
Constant FmToken.balanceLockTime_three_half (#753) is not in UPPER_CASE_WITH_UNDERSCORES
Constant FmToken.balanceLockTime_two_half (#754) is not in UPPER_CASE_WITH_UNDERSCORES
Constant FmToken.balanceLockTime_one_half (#755) is not in UPPER_CASE_WITH_UNDERSCORES
Constant FmToken.balanceLockTime_half (#756) is not in UPPER_CASE_WITH_UNDERSCORES
Follow the Solidity naming convention.

Additional information: link

Variable IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountADesired (#583) is too similar to IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountBDesired (#584)
Variable FmToken.balanceLockTime_one_half (#755) is too similar to FmToken.balanceLockTime_two_half (#754)
Prevent variables from having similar names.

Additional information: link

FmToken._decimals (#731) should be constant
FmToken._name (#729) should be constant
FmToken._symbol (#730) should be constant
FmToken._totalSupply (#727) should be constant
FmToken.liquidityFee (#733) should be constant
Add the constant attributes to state variables that never change.

Additional information: link

Address.isContract(address) (#299-308) uses assembly
- INLINE ASM (#306)
Address._functionCallWithValue(address,bytes,uint256,string) (#392-413) uses assembly
- INLINE ASM (#405-408)
Do not use evm assembly.

Additional information: link

Redundant expression "this (#272)" inContext (#266-275)
Remove redundant statements if they congest code but offer no value.

Additional information: link

owner() should be declared external:
- Ownable.owner() (#447-449)
renounceOwnership() should be declared external:
- Ownable.renounceOwnership() (#466-469)
transferOwnership(address) should be declared external:
- Ownable.transferOwnership(address) (#475-479)
geUnlockTime() should be declared external:
- Ownable.geUnlockTime() (#481-483)
lock(uint256) should be declared external:
- Ownable.lock(uint256) (#486-491)
unlock() should be declared external:
- Ownable.unlock() (#494-499)
name() should be declared external:
- FmToken.name() (#811-813)
symbol() should be declared external:
- FmToken.symbol() (#815-817)
decimals() should be declared external:
- FmToken.decimals() (#819-821)
totalSupply() should be declared external:
- FmToken.totalSupply() (#823-825)
balanceOf(address) should be declared external:
- FmToken.balanceOf(address) (#827-829)
lockBalanceOf(address) should be declared external:
- FmToken.lockBalanceOf(address) (#831-833)
availableBalanceOf(address) should be declared external:
- FmToken.availableBalanceOf(address) (#835-842)
transfer(address,uint256) should be declared external:
- FmToken.transfer(address,uint256) (#844-847)
allowance(address,address) should be declared external:
- FmToken.allowance(address,address) (#849-851)
approve(address,uint256) should be declared external:
- FmToken.approve(address,uint256) (#853-856)
transferFrom(address,address,uint256) should be declared external:
- FmToken.transferFrom(address,address,uint256) (#858-862)
Use the external attribute for functions never called from the contract.

Additional information: link

Token is deployed only at one blockchain

Unable to find website, listings and other project-related information

Young tokens have high risks of scam / price dump / death

Token has no active CoinGecko listing / rank

Token has no active CoinMarketCap listing / rank