Unable to find manual contract audit (e.g. Certik, PeckShield, Solidity...)
FetusShiba.addLiquidity(uint256,uint256) (#754-767) sends eth to arbitrary user
Dangerous calls:
- V2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#759-766)
Ensure that an arbitrary user cannot withdraw unauthorized funds.
Additional information: link
FetusShiba._transfer(address,address,uint256) (#666-701) uses a dangerous strict equality:
- CoolDown[to] == 0 (#677)
FetusShiba._transfer(address,address,uint256) (#666-701) uses a dangerous strict equality:
- (block.number.sub(CoolDown[from]) < 2) || (block.number.sub(CoolDown[from]) == 100) (#684)
Don't use strict equality to determine if an account has enough Ether or tokens.
Additional information: link
FetusShiba.addLiquidity(uint256,uint256) (#754-767) ignores return value by V2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#759-766)
Ensure that all the return values of the function calls are used.
Additional information: link
FetusShiba.allowance(address,address).owner (#517) shadows:
- Ownable.owner() (#152-154) (function)
FetusShiba._approve(address,address,uint256).owner (#544) shadows:
- Ownable.owner() (#152-154) (function)
Rename the local variables that shadow another component.
Additional information: link
FetusShiba.setBuyTaxes(uint256,uint256,uint256) (#564-570) should emit an event for:
- _buyLiquidityFee = newLiquidityTax (#565)
- _buyMarketingFee = newMarketingTax (#566)
- _buyBurnedFee = newBurnedTax (#567)
- _totalTaxIfBuying = _buyLiquidityFee.add(_buyMarketingFee).add(_buyBurnedFee) (#569)
FetusShiba.setSellTaxes(uint256,uint256,uint256) (#572-578) should emit an event for:
- _sellLiquidityFee = newLiquidityTax (#573)
- _sellMarketingFee = newMarketingTax (#574)
- _sellBurnedFee = newBurnedTax (#575)
- _totalTaxIfSelling = _sellLiquidityFee.add(_sellMarketingFee).add(_sellBurnedFee) (#577)
FetusShiba.setDistributionSettings(uint256,uint256,uint256) (#580-586) should emit an event for:
- _liquidityShare = newLiquidityShare (#581)
- _BurnedShare = newBurnedShare (#583)
- _totalDistributionShares = _liquidityShare.add(_marketingShare).add(_BurnedShare) (#585)
FetusShiba.setNumTokensBeforeSwap(uint256) (#604-606) should emit an event for:
- minimumTokensBeforeSwap = newLimit (#605)
Emit an event for critical parameter changes.
Additional information: link
FetusShiba.setMarketingWalletAddress(address).newAddress (#608) lacks a zero-check on :
- marketingWalletAddress = address(newAddress) (#609)
FetusShiba.setBurnedWalletAddress(address).newAddress (#612) lacks a zero-check on :
- BurnedWalletAddress = address(newAddress) (#613)
Check that the address is not zero.
Additional information: link
Reentrancy in FetusShiba.changeRouterVersion(address) (#633-650):
External calls:
- newPairAddress = IUniswapV2Factory(_V2Router.factory()).createPair(address(this),_V2Router.WETH()) (#641-642)
State variables written after the call(s):
- V2Router = _V2Router (#646)
- isMarketPair[address(uniswapPair)] = true (#649)
- isWalletLimitExempt[address(uniswapPair)] = true (#648)
- uniswapPair = newPairAddress (#645)
Reentrancy in FetusShiba.constructor() (#468-495):
External calls:
- uniswapPair = IUniswapV2Factory(_V2Router.factory()).createPair(address(this),_V2Router.WETH()) (#471-472)
State variables written after the call(s):
- V2Router = _V2Router (#474)
- _allowances[address(this)][address(V2Router)] = _totalSupply (#475)
- _balances[_msgSender()] = _totalSupply (#493)
- _totalDistributionShares = _liquidityShare.add(_marketingShare).add(_BurnedShare) (#482)
- _totalTaxIfBuying = _buyLiquidityFee.add(_buyMarketingFee).add(_buyBurnedFee) (#480)
- _totalTaxIfSelling = _sellLiquidityFee.add(_sellMarketingFee).add(_sellBurnedFee) (#481)
- isExcludedFromFee[owner()] = true (#477)
- isExcludedFromFee[address(this)] = true (#478)
- isMarketPair[address(uniswapPair)] = true (#491)
- isTxLimitExempt[owner()] = true (#488)
- isTxLimitExempt[address(this)] = true (#489)
- isWalletLimitExempt[owner()] = true (#484)
- isWalletLimitExempt[address(uniswapPair)] = true (#485)
- isWalletLimitExempt[address(this)] = true (#486)
Reentrancy in FetusShiba.swapAndLiquify(uint256) (#710-732):
External calls:
- swapTokensForEth(tokensForSwap) (#715)
- V2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#743-749)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#731)
- V2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#759-766)
External calls sending eth:
- transferToAddressETH(marketingWalletAddress,amountBNBMarketing) (#725)
- recipient.transfer(amount) (#630)
- transferToAddressETH(BurnedWalletAddress,amountBNBBurned) (#728)
- recipient.transfer(amount) (#630)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#731)
- V2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#759-766)
State variables written after the call(s):
- addLiquidity(tokensForLP,amountBNBLiquidity) (#731)
- _allowances[owner][spender] = amount (#548)
Apply the check-effects-interactions pattern.
Additional information: link
Reentrancy in FetusShiba.constructor() (#468-495):
External calls:
- uniswapPair = IUniswapV2Factory(_V2Router.factory()).createPair(address(this),_V2Router.WETH()) (#471-472)
Event emitted after the call(s):
- Transfer(address(0),_msgSender(),_totalSupply) (#494)
Reentrancy in FetusShiba.swapAndLiquify(uint256) (#710-732):
External calls:
- swapTokensForEth(tokensForSwap) (#715)
- V2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#743-749)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#731)
- V2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#759-766)
External calls sending eth:
- transferToAddressETH(marketingWalletAddress,amountBNBMarketing) (#725)
- recipient.transfer(amount) (#630)
- transferToAddressETH(BurnedWalletAddress,amountBNBBurned) (#728)
- recipient.transfer(amount) (#630)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#731)
- V2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#759-766)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#549)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#731)
Reentrancy in FetusShiba.swapTokensForEth(uint256) (#734-752):
External calls:
- V2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#743-749)
Event emitted after the call(s):
- SwapTokensForETH(tokenAmount,path) (#751)
Apply the check-effects-interactions pattern.
Additional information: link
Ownable.unlock() (#187-192) uses timestamp for comparisons
Dangerous comparisons:
- require(bool,string)(block.timestamp > _lockTime,Contract is locked until 7 days) (#189)
Avoid relying on block.timestamp.
Additional information: link
Address.isContract(address) (#83-92) uses assembly
- INLINE ASM (#90)
Address._functionCallWithValue(address,bytes,uint256,string) (#119-136) uses assembly
- INLINE ASM (#128-131)
Do not use evm assembly.
Additional information: link
Address._functionCallWithValue(address,bytes,uint256,string) (#119-136) is never used and should be removed
Address.functionCall(address,bytes) (#102-104) is never used and should be removed
Address.functionCall(address,bytes,string) (#106-108) is never used and should be removed
Address.functionCallWithValue(address,bytes,uint256) (#110-112) is never used and should be removed
Address.functionCallWithValue(address,bytes,uint256,string) (#114-117) is never used and should be removed
Address.isContract(address) (#83-92) is never used and should be removed
Address.sendValue(address,uint256) (#94-100) is never used and should be removed
Context._msgData() (#10-13) is never used and should be removed
FetusShiba.addLiquidity(uint256,uint256) (#754-767) is never used and should be removed
FetusShiba.swapAndLiquify(uint256) (#710-732) is never used and should be removed
FetusShiba.swapTokensForEth(uint256) (#734-752) is never used and should be removed
FetusShiba.takeFee(address,address,uint256) (#769-786) is never used and should be removed
FetusShiba.transferToAddressETH(address,uint256) (#629-631) is never used and should be removed
SafeMath.mod(uint256,uint256) (#71-73) is never used and should be removed
SafeMath.mod(uint256,uint256,string) (#75-78) is never used and should be removed
Remove unused functions.
Additional information: link
FetusShiba._liquidityShare (#422) is set pre-construction with a non-constant function or state variable:
- _buyLiquidityFee.add(_sellLiquidityFee)
FetusShiba._marketingShare (#423) is set pre-construction with a non-constant function or state variable:
- _buyMarketingFee.add(_sellMarketingFee)
FetusShiba._BurnedShare (#424) is set pre-construction with a non-constant function or state variable:
- _buyBurnedFee.add(_sellBurnedFee)
FetusShiba._totalSupply (#430) is set pre-construction with a non-constant function or state variable:
- 1000000000000000 * 10 ** _decimals
FetusShiba._maxTxAmount (#431) is set pre-construction with a non-constant function or state variable:
- _totalSupply.div(1)
FetusShiba._walletMax (#432) is set pre-construction with a non-constant function or state variable:
- _totalSupply.div(1)
FetusShiba.minimumTokensBeforeSwap (#433) is set pre-construction with a non-constant function or state variable:
- 100 * 10 ** 2 * 10 ** _decimals
Remove any initialization of state variables via non-constant state variables or function calls. If variables must be set upon contract deployment, locate initialization in the constructor instead.
Additional information: link
Pragma version0.8.8 (#2) is known to contain severe issues (https://solidity.readthedocs.io/en/latest/bugs.html)
solc-0.8.8 is known to contain severe issues (https://solidity.readthedocs.io/en/latest/bugs.html)
Deploy with any of the following Solidity versions: 0.5.16 - 0.5.17, 0.6.11 - 0.6.12, 0.7.5 - 0.7.6 Use a simple pragma version that allows any of these versions. Consider using the latest version of Solidity for testing.
Additional information: link
Low level call in Address.sendValue(address,uint256) (#94-100):
- (success) = recipient.call{value: amount}() (#98)
Low level call in Address._functionCallWithValue(address,bytes,uint256,string) (#119-136):
- (success,returndata) = target.call{value: weiValue}(data) (#122)
Avoid low-level calls. Check the call success. If the call is meant for a contract, check for code existence
Additional information: link
Function IUniswapV2Pair.DOMAIN_SEPARATOR() (#226) is not in mixedCase
Function IUniswapV2Pair.PERMIT_TYPEHASH() (#227) is not in mixedCase
Function IUniswapV2Pair.MINIMUM_LIQUIDITY() (#243) is not in mixedCase
Function IUniswapV2Router01.WETH() (#262) is not in mixedCase
Parameter FetusShiba.setSwapAndLiquifyEnabled(bool)._enabled (#616) is not in mixedCase
Variable FetusShiba.BurnedWalletAddress (#404) is not in mixedCase
Variable FetusShiba._balances (#407) is not in mixedCase
Variable FetusShiba._buyLiquidityFee (#415) is not in mixedCase
Variable FetusShiba._buyMarketingFee (#416) is not in mixedCase
Variable FetusShiba._buyBurnedFee (#417) is not in mixedCase
Variable FetusShiba._sellLiquidityFee (#418) is not in mixedCase
Variable FetusShiba._sellMarketingFee (#419) is not in mixedCase
Variable FetusShiba._sellBurnedFee (#420) is not in mixedCase
Variable FetusShiba._liquidityShare (#422) is not in mixedCase
Variable FetusShiba._marketingShare (#423) is not in mixedCase
Variable FetusShiba._BurnedShare (#424) is not in mixedCase
Variable FetusShiba._totalTaxIfBuying (#426) is not in mixedCase
Variable FetusShiba._totalTaxIfSelling (#427) is not in mixedCase
Variable FetusShiba._totalDistributionShares (#428) is not in mixedCase
Variable FetusShiba._maxTxAmount (#431) is not in mixedCase
Variable FetusShiba._walletMax (#432) is not in mixedCase
Variable FetusShiba.V2Router (#435) is not in mixedCase
Variable FetusShiba.CoolDown (#443) is not in mixedCase
Follow the Solidity naming convention.
Additional information: link
Redundant expression "this (#11)" inContext (#4-14)
Remove redundant statements if they congest code but offer no value.
Additional information: link
Reentrancy in FetusShiba.swapAndLiquify(uint256) (#710-732):
External calls:
- transferToAddressETH(marketingWalletAddress,amountBNBMarketing) (#725)
- recipient.transfer(amount) (#630)
- transferToAddressETH(BurnedWalletAddress,amountBNBBurned) (#728)
- recipient.transfer(amount) (#630)
External calls sending eth:
- transferToAddressETH(marketingWalletAddress,amountBNBMarketing) (#725)
- recipient.transfer(amount) (#630)
- transferToAddressETH(BurnedWalletAddress,amountBNBBurned) (#728)
- recipient.transfer(amount) (#630)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#731)
- V2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#759-766)
State variables written after the call(s):
- addLiquidity(tokensForLP,amountBNBLiquidity) (#731)
- _allowances[owner][spender] = amount (#548)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#549)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#731)
Apply the check-effects-interactions pattern.
Additional information: link
Variable IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountADesired (#267) is too similar to IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountBDesired (#268)
Prevent variables from having similar names.
Additional information: link
FetusShiba.slitherConstructorVariables() (#395-789) uses literals with too many digits:
- deadAddress = 0x000000000000000000000000000000000000dEaD (#405)
FetusShiba.slitherConstructorVariables() (#395-789) uses literals with too many digits:
- _totalSupply = 1000000000000000 * 10 ** _decimals (#430)
Use: Ether suffix, Time suffix, or The scientific notation
Additional information: link
FetusShiba._decimals (#401) should be constant
FetusShiba._name (#399) should be constant
FetusShiba._symbol (#400) should be constant
Add the constant attributes to state variables that never change.
Additional information: link
waiveOwnership() should be declared external:
- Ownable.waiveOwnership() (#161-164)
transferOwnership(address) should be declared external:
- Ownable.transferOwnership(address) (#166-170)
getUnlockTime() should be declared external:
- Ownable.getUnlockTime() (#172-174)
getTime() should be declared external:
- Ownable.getTime() (#176-178)
lock(uint256) should be declared external:
- Ownable.lock(uint256) (#180-185)
unlock() should be declared external:
- Ownable.unlock() (#187-192)
name() should be declared external:
- FetusShiba.name() (#497-499)
symbol() should be declared external:
- FetusShiba.symbol() (#501-503)
decimals() should be declared external:
- FetusShiba.decimals() (#505-507)
totalSupply() should be declared external:
- FetusShiba.totalSupply() (#509-511)
allowance(address,address) should be declared external:
- FetusShiba.allowance(address,address) (#517-519)
increaseAllowance(address,uint256) should be declared external:
- FetusShiba.increaseAllowance(address,uint256) (#525-528)
decreaseAllowance(address,uint256) should be declared external:
- FetusShiba.decreaseAllowance(address,uint256) (#530-533)
minimumTokensBeforeSwapAmount() should be declared external:
- FetusShiba.minimumTokensBeforeSwapAmount() (#535-537)
approve(address,uint256) should be declared external:
- FetusShiba.approve(address,uint256) (#539-542)
setMarketPairStatus(address,bool) should be declared external:
- FetusShiba.setMarketPairStatus(address,bool) (#552-554)
setIsExcludedFromFee(address,bool) should be declared external:
- FetusShiba.setIsExcludedFromFee(address,bool) (#560-562)
setSwapAndLiquifyEnabled(bool) should be declared external:
- FetusShiba.setSwapAndLiquifyEnabled(bool) (#616-619)
setSwapAndLiquifyByLimitOnly(bool) should be declared external:
- FetusShiba.setSwapAndLiquifyByLimitOnly(bool) (#621-623)
getCirculatingSupply() should be declared external:
- FetusShiba.getCirculatingSupply() (#625-627)
changeRouterVersion(address) should be declared external:
- FetusShiba.changeRouterVersion(address) (#633-650)
transfer(address,uint256) should be declared external:
- FetusShiba.transfer(address,uint256) (#655-658)
transferFrom(address,address,uint256) should be declared external:
- FetusShiba.transferFrom(address,address,uint256) (#660-664)
Use the external attribute for functions never called from the contract.
Additional information: link
Unable to find website, listings and other project-related information
Young tokens have high risks of scam / price dump / death
Token has no active CoinGecko listing / rank
Token has no active CoinMarketCap listing / rank
Unable to find Telegram and Twitter accounts