$FARMZ aims to be the largest physical asset backed token in history🔥 $FARMZ ecosystem will be a real world land backed CRYPTO powered by DEFI, Hold $FARMZ receive BUSD reflections in your wallet 💰 Come see our website 👀 Find the hidden page for a special video /TEAM KYC from the DEVS 🚀 Don't miss this revolutionary new wave in CRYPTO /Mid West DEV Team/70% Liquidity Locked 1 Yr./ Team Tokens Locked/ Join Us!!
BuybackBabyToken.swapBack() (#1265-1320) sends eth to arbitrary user
Dangerous calls:
- distributor.deposit{value: amountBNBReflection}() (#1306)
- address(marketingFeeReceiver).transfer(amountBNBMarketing) (#1307)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,autoLiquidityReceiver,block.timestamp) (#1310-1317)
BuybackBabyToken.buyTokens(uint256,address) (#1355-1363) sends eth to arbitrary user
Dangerous calls:
- router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: amount}(0,path,to,block.timestamp) (#1360-1362)
Ensure that an arbitrary user cannot withdraw unauthorized funds.
Additional information: link
Reentrancy in BuybackBabyToken._transferFrom(address,address,uint256) (#1155-1195):
External calls:
- swapBack() (#1165)
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(amountToSwap,0,path,address(this),block.timestamp) (#1283-1289)
- distributor.deposit{value: amountBNBReflection}() (#1306)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,autoLiquidityReceiver,block.timestamp) (#1310-1317)
- triggerAutoBuyback() (#1168)
- router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: amount}(0,path,to,block.timestamp) (#1360-1362)
External calls sending eth:
- swapBack() (#1165)
- distributor.deposit{value: amountBNBReflection}() (#1306)
- address(marketingFeeReceiver).transfer(amountBNBMarketing) (#1307)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,autoLiquidityReceiver,block.timestamp) (#1310-1317)
- triggerAutoBuyback() (#1168)
- router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: amount}(0,path,to,block.timestamp) (#1360-1362)
State variables written after the call(s):
- _balances[sender] = _balances[sender].sub(amount,Insufficient Balance) (#1171-1174)
- _balances[recipient] = _balances[recipient].add(amountReceived) (#1180)
- amountReceived = takeFee(sender,recipient,amount) (#1176-1178)
- _balances[address(this)] = _balances[address(this)].add(feeAmount) (#1251)
- triggerAutoBuyback() (#1168)
- inSwap = true (#1006)
- inSwap = false (#1008)
Apply the check-effects-interactions pattern.
Additional information: link
DividendDistributor.distributeDividend(address) (#837-854) ignores return value by rewardToken.transfer(shareholder,amount) (#845)
Use SafeERC20, or ensure that the transfer/transferFrom return value is checked.
Additional information: link
Unable to find manual contract audit (e.g. Certik, PeckShield, Solidity...)
Combination 1: Reentrancy vulnerabilities + Functions that send Ether to arbitraty destination. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.
Combination 2: Unchecked transfer + Functions that send Ether to arbitraty destination. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.
Combination 3: Reentrancy vulnerabilities + Unchecked transfer vulnerability. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.
Reentrancy in DividendDistributor.distributeDividend(address) (#837-854):
External calls:
- rewardToken.transfer(shareholder,amount) (#845)
State variables written after the call(s):
- shares[shareholder].totalRealised = shares[shareholder].totalRealised.add(amount) (#847-849)
- shares[shareholder].totalExcluded = getCumulativeDividends(shares[shareholder].amount) (#850-852)
Reentrancy in DividendDistributor.process(uint256) (#799-825):
External calls:
- distributeDividend(shareholders[currentIndex]) (#817)
- rewardToken.transfer(shareholder,amount) (#845)
State variables written after the call(s):
- currentIndex ++ (#822)
Reentrancy in DividendDistributor.setShare(address,uint256) (#756-776):
External calls:
- distributeDividend(shareholder) (#762)
- rewardToken.transfer(shareholder,amount) (#845)
State variables written after the call(s):
- shares[shareholder].amount = amount (#772)
- shares[shareholder].totalExcluded = getCumulativeDividends(shares[shareholder].amount) (#773-775)
Apply the check-effects-interactions pattern.
Additional information: link
DividendDistributor.process(uint256) (#799-825) has costly operations inside a loop:
- currentIndex = 0 (#813)
DividendDistributor.distributeDividend(address) (#837-854) has costly operations inside a loop:
- totalDistributed = totalDistributed.add(amount) (#844)
DividendDistributor.process(uint256) (#799-825) has costly operations inside a loop:
- currentIndex ++ (#822)
Use a local variable to hold the loop computation result.
Additional information: link
BuybackBabyToken.swapBack() (#1265-1320) ignores return value by router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,autoLiquidityReceiver,block.timestamp) (#1310-1317)
Ensure that all the return values of the function calls are used.
Additional information: link
DividendDistributor.setDistributionCriteria(uint256,uint256) (#748-754) should emit an event for:
- minPeriod = _minPeriod (#752)
- minDistribution = _minDistribution (#753)
BuybackBabyToken.setAutoBuybackSettings(bool,uint256,uint256,uint256) (#1365-1377) should emit an event for:
- autoBuybackCap = _cap (#1372)
- autoBuybackAmount = _amount (#1374)
BuybackBabyToken.setBuybackMultiplierSettings(uint256,uint256,uint256) (#1379-1388) should emit an event for:
- buybackMultiplierNumerator = numerator (#1385)
- buybackMultiplierDenominator = denominator (#1386)
- buybackMultiplierLength = length (#1387)
BuybackBabyToken.setSwapBackSettings(bool,uint256) (#1456-1462) should emit an event for:
- swapThreshold = _amount (#1461)
BuybackBabyToken.setTargetLiquidity(uint256,uint256) (#1464-1470) should emit an event for:
- targetLiquidity = _target (#1468)
- targetLiquidityDenominator = _denominator (#1469)
Emit an event for critical parameter changes.
Additional information: link
Auth.transferOwnership(address).adr (#664) lacks a zero-check on :
- owner = adr (#665)
BuybackBabyToken.constructor(string,string,uint256,address,address,uint256[5],address,uint256).rewardToken_ (#1020) lacks a zero-check on :
- rewardToken = rewardToken_ (#1030)
BuybackBabyToken.constructor(string,string,uint256,address,address,uint256[5],address,uint256).serviceFeeReceiver_ (#1023) lacks a zero-check on :
- address(serviceFeeReceiver_).transfer(serviceFee_) (#1067)
BuybackBabyToken.setFeeReceivers(address,address)._autoLiquidityReceiver (#1449) lacks a zero-check on :
- autoLiquidityReceiver = _autoLiquidityReceiver (#1452)
BuybackBabyToken.setFeeReceivers(address,address)._marketingFeeReceiver (#1450) lacks a zero-check on :
- marketingFeeReceiver = _marketingFeeReceiver (#1453)
Check that the address is not zero.
Additional information: link
DividendDistributor.distributeDividend(address) (#837-854) has external calls inside a loop: rewardToken.transfer(shareholder,amount) (#845)
Favor pull over push strategy for external calls.
Additional information: link
Reentrancy in BuybackBabyToken.constructor(string,string,uint256,address,address,uint256[5],address,uint256) (#1016-1068):
External calls:
- pair = IUniswapV2Factory(router.factory()).createPair(address(this),router.WETH()) (#1032-1035)
State variables written after the call(s):
- _allowances[address(this)][address(router)] = _totalSupply (#1054)
- _allowances[address(this)][address(pair)] = _totalSupply (#1055)
- _balances[msg.sender] = _totalSupply (#1057)
- autoLiquidityReceiver = msg.sender (#1051)
- buyBacker[msg.sender] = true (#1049)
- _initializeFees(feeSettings_) (#1038)
- buybackFee = _buybackFee (#1435)
- _initializeLiquidityBuyBack() (#1039)
- buybackMultiplierDenominator = 100 (#1085)
- _initializeLiquidityBuyBack() (#1039)
- buybackMultiplierLength = 1800 (#1086)
- _initializeLiquidityBuyBack() (#1039)
- buybackMultiplierNumerator = 200 (#1084)
- distributor = new DividendDistributor(rewardToken_,router_) (#1036)
- distributorGas = 500000 (#1041)
- _initializeFees(feeSettings_) (#1038)
- feeDenominator = _feeDenominator (#1441)
- isDividendExempt[pair] = true (#1046)
- isDividendExempt[address(this)] = true (#1047)
- isDividendExempt[DEAD] = true (#1048)
- isFeeExempt[msg.sender] = true (#1045)
- _initializeFees(feeSettings_) (#1038)
- liquidityFee = _liquidityFee (#1434)
- _initializeFees(feeSettings_) (#1038)
- marketingFee = _marketingFee (#1437)
- marketingFeeReceiver = msg.sender (#1052)
- _initializeFees(feeSettings_) (#1038)
- reflectionFee = _reflectionFee (#1436)
- swapEnabled = true (#1042)
- swapThreshold = _totalSupply / 20000 (#1043)
- _initializeLiquidityBuyBack() (#1039)
- targetLiquidity = 25 (#1081)
- _initializeLiquidityBuyBack() (#1039)
- targetLiquidityDenominator = 100 (#1082)
- _initializeFees(feeSettings_) (#1038)
- totalFee = _liquidityFee.add(_buybackFee).add(_reflectionFee).add(_marketingFee) (#1438-1440)
Reentrancy in DividendDistributor.deposit() (#778-797):
External calls:
- router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: msg.value}(0,path,address(this),block.timestamp) (#785-787)
State variables written after the call(s):
- dividendsPerShare = dividendsPerShare.add(dividendsPerShareAccuracyFactor.mul(amount).div(totalShares)) (#794-796)
- totalDividends = totalDividends.add(amount) (#793)
Reentrancy in DividendDistributor.distributeDividend(address) (#837-854):
External calls:
- rewardToken.transfer(shareholder,amount) (#845)
State variables written after the call(s):
- shareholderClaims[shareholder] = block.timestamp (#846)
Reentrancy in DividendDistributor.setShare(address,uint256) (#756-776):
External calls:
- distributeDividend(shareholder) (#762)
- rewardToken.transfer(shareholder,amount) (#845)
State variables written after the call(s):
- addShareholder(shareholder) (#766)
- shareholderIndexes[shareholder] = shareholders.length (#891)
- removeShareholder(shareholder) (#768)
- shareholderIndexes[shareholders[shareholders.length - 1]] = shareholderIndexes[shareholder] (#899-901)
- addShareholder(shareholder) (#766)
- shareholders.push(shareholder) (#892)
- removeShareholder(shareholder) (#768)
- shareholders[shareholderIndexes[shareholder]] = shareholders[shareholders.length - 1] (#896-898)
- shareholders.pop() (#902)
- totalShares = totalShares.sub(shares[shareholder].amount).add(amount) (#771)
Reentrancy in BuybackBabyToken.triggerAutoBuyback() (#1346-1353):
External calls:
- buyTokens(autoBuybackAmount,DEAD) (#1347)
- router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: amount}(0,path,to,block.timestamp) (#1360-1362)
State variables written after the call(s):
- autoBuybackAccumulator = autoBuybackAccumulator.add(autoBuybackAmount) (#1349)
- autoBuybackBlockLast = block.number (#1348)
- autoBuybackEnabled = false (#1351)
Reentrancy in BuybackBabyToken.triggerZeusBuyback(uint256,bool) (#1331-1340):
External calls:
- buyTokens(amount,DEAD) (#1335)
- router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: amount}(0,path,to,block.timestamp) (#1360-1362)
State variables written after the call(s):
- buybackMultiplierTriggeredAt = block.timestamp (#1337)
Apply the check-effects-interactions pattern.
Additional information: link
Reentrancy in BuybackBabyToken._transferFrom(address,address,uint256) (#1155-1195):
External calls:
- swapBack() (#1165)
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(amountToSwap,0,path,address(this),block.timestamp) (#1283-1289)
- distributor.deposit{value: amountBNBReflection}() (#1306)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,autoLiquidityReceiver,block.timestamp) (#1310-1317)
- triggerAutoBuyback() (#1168)
- router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: amount}(0,path,to,block.timestamp) (#1360-1362)
- distributor.setShare(sender,_balances[sender]) (#1183)
- distributor.setShare(recipient,_balances[recipient]) (#1186-1188)
- distributor.process(distributorGas) (#1191)
External calls sending eth:
- swapBack() (#1165)
- distributor.deposit{value: amountBNBReflection}() (#1306)
- address(marketingFeeReceiver).transfer(amountBNBMarketing) (#1307)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,autoLiquidityReceiver,block.timestamp) (#1310-1317)
- triggerAutoBuyback() (#1168)
- router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: amount}(0,path,to,block.timestamp) (#1360-1362)
Event emitted after the call(s):
- Transfer(sender,recipient,amountReceived) (#1193)
Reentrancy in BuybackBabyToken._transferFrom(address,address,uint256) (#1155-1195):
External calls:
- swapBack() (#1165)
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(amountToSwap,0,path,address(this),block.timestamp) (#1283-1289)
- distributor.deposit{value: amountBNBReflection}() (#1306)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,autoLiquidityReceiver,block.timestamp) (#1310-1317)
- triggerAutoBuyback() (#1168)
- router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: amount}(0,path,to,block.timestamp) (#1360-1362)
External calls sending eth:
- swapBack() (#1165)
- distributor.deposit{value: amountBNBReflection}() (#1306)
- address(marketingFeeReceiver).transfer(amountBNBMarketing) (#1307)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,autoLiquidityReceiver,block.timestamp) (#1310-1317)
- triggerAutoBuyback() (#1168)
- router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: amount}(0,path,to,block.timestamp) (#1360-1362)
Event emitted after the call(s):
- Transfer(sender,address(this),feeAmount) (#1252)
- amountReceived = takeFee(sender,recipient,amount) (#1176-1178)
Reentrancy in BuybackBabyToken.constructor(string,string,uint256,address,address,uint256[5],address,uint256) (#1016-1068):
External calls:
- pair = IUniswapV2Factory(router.factory()).createPair(address(this),router.WETH()) (#1032-1035)
Event emitted after the call(s):
- TokenCreated(msg.sender,address(this),TokenType.buybackBaby,VERSION) (#1060-1065)
- Transfer(address(0),msg.sender,_totalSupply) (#1058)
Reentrancy in BuybackBabyToken.swapBack() (#1265-1320):
External calls:
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(amountToSwap,0,path,address(this),block.timestamp) (#1283-1289)
- distributor.deposit{value: amountBNBReflection}() (#1306)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,autoLiquidityReceiver,block.timestamp) (#1310-1317)
External calls sending eth:
- distributor.deposit{value: amountBNBReflection}() (#1306)
- address(marketingFeeReceiver).transfer(amountBNBMarketing) (#1307)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,autoLiquidityReceiver,block.timestamp) (#1310-1317)
Event emitted after the call(s):
- AutoLiquify(amountBNBLiquidity,amountToLiquify) (#1318)
Reentrancy in BuybackBabyToken.triggerZeusBuyback(uint256,bool) (#1331-1340):
External calls:
- buyTokens(amount,DEAD) (#1335)
- router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: amount}(0,path,to,block.timestamp) (#1360-1362)
Event emitted after the call(s):
- BuybackMultiplierActive(buybackMultiplierLength) (#1338)
Apply the check-effects-interactions pattern.
Additional information: link
DividendDistributor.shouldDistribute(address) (#827-835) uses timestamp for comparisons
Dangerous comparisons:
- shareholderClaims[shareholder] + minPeriod < block.timestamp && getUnpaidEarnings(shareholder) > minDistribution (#832-834)
BuybackBabyToken.getMultipliedFee() (#1222-1240) uses timestamp for comparisons
Dangerous comparisons:
- buybackMultiplierTriggeredAt.add(buybackMultiplierLength) > block.timestamp (#1224-1225)
BuybackBabyToken.shouldSwapBack() (#1257-1263) uses timestamp for comparisons
Dangerous comparisons:
- msg.sender != pair && ! inSwap && swapEnabled && _balances[address(this)] >= swapThreshold (#1258-1262)
BuybackBabyToken.isOverLiquified(uint256,uint256) (#1496-1502) uses timestamp for comparisons
Dangerous comparisons:
- getLiquidityBacking(accuracy) > target (#1501)
Avoid relying on block.timestamp.
Additional information: link
Clones.clone(address) (#255-264) uses assembly
- INLINE ASM (#256-262)
Clones.cloneDeterministic(address,bytes32) (#273-282) uses assembly
- INLINE ASM (#274-280)
Clones.predictDeterministicAddress(address,bytes32,address) (#287-302) uses assembly
- INLINE ASM (#292-301)
Do not use evm assembly.
Additional information: link
BuybackBabyToken.onlyBuybacker() (#1011-1014) compares to a boolean constant:
-require(bool,string)(buyBacker[msg.sender] == true,Not a buybacker) (#1012)
Remove the equality to the boolean constant.
Additional information: link
Clones.clone(address) (#255-264) is never used and should be removed
Clones.cloneDeterministic(address,bytes32) (#273-282) is never used and should be removed
Clones.predictDeterministicAddress(address,bytes32) (#307-313) is never used and should be removed
Clones.predictDeterministicAddress(address,bytes32,address) (#287-302) is never used and should be removed
SafeMath.div(uint256,uint256,string) (#192-201) is never used and should be removed
SafeMath.mod(uint256,uint256) (#152-154) is never used and should be removed
SafeMath.mod(uint256,uint256,string) (#218-227) is never used and should be removed
SafeMath.tryAdd(uint256,uint256) (#23-29) is never used and should be removed
SafeMath.tryDiv(uint256,uint256) (#65-70) is never used and should be removed
SafeMath.tryMod(uint256,uint256) (#77-82) is never used and should be removed
SafeMath.tryMul(uint256,uint256) (#48-58) is never used and should be removed
SafeMath.trySub(uint256,uint256) (#36-41) is never used and should be removed
Remove unused functions.
Additional information: link
Function IUniswapV2Router01.WETH() (#359) is not in mixedCase
Parameter DividendDistributor.setDistributionCriteria(uint256,uint256)._minPeriod (#749) is not in mixedCase
Parameter DividendDistributor.setDistributionCriteria(uint256,uint256)._minDistribution (#750) is not in mixedCase
Variable DividendDistributor._token (#698) is not in mixedCase
Parameter BuybackBabyToken.setAutoBuybackSettings(bool,uint256,uint256,uint256)._enabled (#1366) is not in mixedCase
Parameter BuybackBabyToken.setAutoBuybackSettings(bool,uint256,uint256,uint256)._cap (#1367) is not in mixedCase
Parameter BuybackBabyToken.setAutoBuybackSettings(bool,uint256,uint256,uint256)._amount (#1368) is not in mixedCase
Parameter BuybackBabyToken.setAutoBuybackSettings(bool,uint256,uint256,uint256)._period (#1369) is not in mixedCase
Parameter BuybackBabyToken.setFees(uint256,uint256,uint256,uint256,uint256)._liquidityFee (#1412) is not in mixedCase
Parameter BuybackBabyToken.setFees(uint256,uint256,uint256,uint256,uint256)._buybackFee (#1413) is not in mixedCase
Parameter BuybackBabyToken.setFees(uint256,uint256,uint256,uint256,uint256)._reflectionFee (#1414) is not in mixedCase
Parameter BuybackBabyToken.setFees(uint256,uint256,uint256,uint256,uint256)._marketingFee (#1415) is not in mixedCase
Parameter BuybackBabyToken.setFees(uint256,uint256,uint256,uint256,uint256)._feeDenominator (#1416) is not in mixedCase
Parameter BuybackBabyToken.setFeeReceivers(address,address)._autoLiquidityReceiver (#1449) is not in mixedCase
Parameter BuybackBabyToken.setFeeReceivers(address,address)._marketingFeeReceiver (#1450) is not in mixedCase
Parameter BuybackBabyToken.setSwapBackSettings(bool,uint256)._enabled (#1456) is not in mixedCase
Parameter BuybackBabyToken.setSwapBackSettings(bool,uint256)._amount (#1456) is not in mixedCase
Parameter BuybackBabyToken.setTargetLiquidity(uint256,uint256)._target (#1464) is not in mixedCase
Parameter BuybackBabyToken.setTargetLiquidity(uint256,uint256)._denominator (#1464) is not in mixedCase
Parameter BuybackBabyToken.setDistributionCriteria(uint256,uint256)._minPeriod (#1473) is not in mixedCase
Parameter BuybackBabyToken.setDistributionCriteria(uint256,uint256)._minDistribution (#1474) is not in mixedCase
Constant BuybackBabyToken._decimals (#952) is not in UPPER_CASE_WITH_UNDERSCORES
Follow the Solidity naming convention.
Additional information: link
Reentrancy in BuybackBabyToken._transferFrom(address,address,uint256) (#1155-1195):
External calls:
- swapBack() (#1165)
- address(marketingFeeReceiver).transfer(amountBNBMarketing) (#1307)
External calls sending eth:
- swapBack() (#1165)
- distributor.deposit{value: amountBNBReflection}() (#1306)
- address(marketingFeeReceiver).transfer(amountBNBMarketing) (#1307)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,autoLiquidityReceiver,block.timestamp) (#1310-1317)
- triggerAutoBuyback() (#1168)
- router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: amount}(0,path,to,block.timestamp) (#1360-1362)
State variables written after the call(s):
- _balances[sender] = _balances[sender].sub(amount,Insufficient Balance) (#1171-1174)
- _balances[recipient] = _balances[recipient].add(amountReceived) (#1180)
- amountReceived = takeFee(sender,recipient,amount) (#1176-1178)
- _balances[address(this)] = _balances[address(this)].add(feeAmount) (#1251)
- triggerAutoBuyback() (#1168)
- autoBuybackAccumulator = autoBuybackAccumulator.add(autoBuybackAmount) (#1349)
- triggerAutoBuyback() (#1168)
- autoBuybackBlockLast = block.number (#1348)
- triggerAutoBuyback() (#1168)
- autoBuybackEnabled = false (#1351)
- triggerAutoBuyback() (#1168)
- inSwap = true (#1006)
- inSwap = false (#1008)
Event emitted after the call(s):
- Transfer(sender,address(this),feeAmount) (#1252)
- amountReceived = takeFee(sender,recipient,amount) (#1176-1178)
- Transfer(sender,recipient,amountReceived) (#1193)
Reentrancy in BuybackBabyToken.swapBack() (#1265-1320):
External calls:
- address(marketingFeeReceiver).transfer(amountBNBMarketing) (#1307)
External calls sending eth:
- distributor.deposit{value: amountBNBReflection}() (#1306)
- address(marketingFeeReceiver).transfer(amountBNBMarketing) (#1307)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,autoLiquidityReceiver,block.timestamp) (#1310-1317)
Event emitted after the call(s):
- AutoLiquify(amountBNBLiquidity,amountToLiquify) (#1318)
Apply the check-effects-interactions pattern.
Additional information: link
Variable IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountADesired (#364) is too similar to IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountBDesired (#365)
Variable BuybackBabyToken._totalSupply (#956) is too similar to BuybackBabyToken.constructor(string,string,uint256,address,address,uint256[5],address,uint256).totalSupply_ (#1019)
Prevent variables from having similar names.
Additional information: link
Clones.clone(address) (#255-264) uses literals with too many digits:
- mstore(uint256,uint256)(ptr_clone_asm_0,0x3d602d80600a3d3981f3363d3d373d3d3d363d73000000000000000000000000) (#258)
Clones.clone(address) (#255-264) uses literals with too many digits:
- mstore(uint256,uint256)(ptr_clone_asm_0 + 0x28,0x5af43d82803e903d91602b57fd5bf30000000000000000000000000000000000) (#260)
Clones.cloneDeterministic(address,bytes32) (#273-282) uses literals with too many digits:
- mstore(uint256,uint256)(ptr_cloneDeterministic_asm_0,0x3d602d80600a3d3981f3363d3d373d3d3d363d73000000000000000000000000) (#276)
Clones.cloneDeterministic(address,bytes32) (#273-282) uses literals with too many digits:
- mstore(uint256,uint256)(ptr_cloneDeterministic_asm_0 + 0x28,0x5af43d82803e903d91602b57fd5bf30000000000000000000000000000000000) (#278)
Clones.predictDeterministicAddress(address,bytes32,address) (#287-302) uses literals with too many digits:
- mstore(uint256,uint256)(ptr_predictDeterministicAddress_asm_0,0x3d602d80600a3d3981f3363d3d373d3d3d363d73000000000000000000000000) (#294)
Clones.predictDeterministicAddress(address,bytes32,address) (#287-302) uses literals with too many digits:
- mstore(uint256,uint256)(ptr_predictDeterministicAddress_asm_0 + 0x28,0x5af43d82803e903d91602b57fd5bf3ff00000000000000000000000000000000) (#296)
BuybackBabyToken.constructor(string,string,uint256,address,address,uint256[5],address,uint256) (#1016-1068) uses literals with too many digits:
- distributorGas = 500000 (#1041)
Use: Ether suffix, Time suffix, or The scientific notation
Additional information: link
authorize(address) should be declared external:
- Auth.authorize(address) (#636-638)
unauthorize(address) should be declared external:
- Auth.unauthorize(address) (#643-645)
transferOwnership(address) should be declared external:
- Auth.transferOwnership(address) (#664-668)
setFees(uint256,uint256,uint256,uint256,uint256) should be declared external:
- BuybackBabyToken.setFees(uint256,uint256,uint256,uint256,uint256) (#1411-1425)
Use the external attribute for functions never called from the contract.
Additional information: link
BscScan page for the token does not contain additional info: website, socials, description, etc.
Additional information: link
Unable to find token contract audit
Unable to find KYC or doxxing proof
Unable to find audit link on the website
Unable to find token on CoinGecko
Additional information: link
Unable to find token on CoinMarketCap
Additional information: link
Token is not listed at Mobula.Finance
Additional information: link
Unable to find token on CoinHunt
Additional information: link
Unable to find code repository for the project
Young tokens have high risks of scam / price dump / death
Young tokens have high risks of scam / price dump / death
Token has no active CoinGecko listing / rank
Token has no active CoinMarketCap listing / rank
Young tokens have high risks of price dump / death
Telegram account has less than 100 subscribers
Twitter account has less than 100 followers
Unable to find Blog account (Reddit or Medium)
Unable to find Discord account