FWAR [Farm War] Token

Unable to find manual contract audit (e.g. Certik, PeckShield, Solidity...)

FarmWar.clear1() (#606-608) sends eth to arbitrary user
Dangerous calls:
- address(msg.sender).transfer(address(this).balance) (#607)
Ensure that an arbitrary user cannot withdraw unauthorized funds.

Additional information: link

Contract ownership is not renounced (belongs to a wallet)

FarmWar.constructor(address,address).public_sale (#311) lacks a zero-check on :
- _public_sale = public_sale (#318)
FarmWar.constructor(address,address).fee_addr (#311) lacks a zero-check on :
- _fee_addr = fee_addr (#319)
FarmWar.setAddresses(uint8,address)._addr (#657) lacks a zero-check on :
- _fee_addr = _addr (#659)
Check that the address is not zero.

Additional information: link

SafeMath.sub(uint256,uint256) (#44-47) is never used and should be removed
FarmWar._beforeTokenTransfer(address,address,uint256) (#363-367) is never used and should be removed
FarmWar._afterTokenTransfer(address,address,uint256) (#383-387) is never used and should be removed
SafeMath.div(uint256,uint256,string) (#116-119) is never used and should be removed
Remove unused functions.

Additional information: link

FarmWar (#226-713) should inherit from IERC20 (#127-200)
Inherit from the missing interface or contract.

Additional information: link

Redundant expression "_saleMaxBlock (#329)" inFarmWar (#226-713)
Remove redundant statements if they congest code but offer no value.

Additional information: link

Reentrancy in FarmWar.buy(address) (#680-710):
External calls:
- address(_fee_addr).transfer(_fee) (#695)
- address(_refer).transfer(_value.mul(10).div(100)) (#703)
- address(_public_sale).transfer(_value.mul(90).div(100)) (#704)
- address(_public_sale).transfer(_value) (#706)
Event emitted after the call(s):
- Buy(_msgSender(),_token) (#709)
Reentrancy in FarmWar.buy(address) (#680-710):
External calls:
- address(_fee_addr).transfer(_fee) (#695)
State variables written after the call(s):
- _directs[_refer].push(_msgSender()) (#701)
- users[_msgSender()].upline = _refer (#699)
- users[_refer].direct_referrals ++ (#700)
Apply the check-effects-interactions pattern.

Additional information: link

FarmWar.constructor(address,address) (#311-340) uses literals with too many digits:
- _ico_max_cap = 15000000 * 10 ** 18 (#322)
FarmWar.constructor(address,address) (#311-340) uses literals with too many digits:
- _totalSupply = 750000000 * 10 ** 18 (#312)
FarmWar.constructor(address,address) (#311-340) uses literals with too many digits:
- _fee = 330000000000000 (#331)
FarmWar.constructor(address,address) (#311-340) uses literals with too many digits:
- _minimumBuy = 100000000000000000 (#328)
Use: Ether suffix, Time suffix, or The scientific notation

Additional information: link

Variable FarmWar._paused (#264) is not in mixedCase
Variable FarmWar._symbol (#236) is not in mixedCase
Parameter FarmWar.setAddresses(address,bool)._addr (#663) is not in mixedCase
Parameter FarmWar.set(uint8,uint256)._value (#637) is not in mixedCase
Variable FarmWar._saleStatus (#248) is not in mixedCase
Variable FarmWar._totalSupply (#234) is not in mixedCase
Variable FarmWar._fee (#253) is not in mixedCase
Parameter FarmWar.setAddresses(uint8,address)._addr (#657) is not in mixedCase
Variable FarmWar._ico_max_cap (#244) is not in mixedCase
Variable FarmWar._owner (#239) is not in mixedCase
Variable FarmWar._allowed (#258) is not in mixedCase
Parameter FarmWar.setStatus(uint8,bool)._tag (#651) is not in mixedCase
Variable FarmWar._name (#235) is not in mixedCase
Variable FarmWar._fee_addr (#241) is not in mixedCase
Variable FarmWar._minimumBuy (#250) is not in mixedCase
Variable FarmWar._airdropStatus (#247) is not in mixedCase
Parameter FarmWar.buy(address)._refer (#680) is not in mixedCase
Variable FarmWar._cap (#245) is not in mixedCase
Variable FarmWar._salePrice (#252) is not in mixedCase
Variable FarmWar._decimals (#237) is not in mixedCase
Variable FarmWar._isExcluded (#257) is not in mixedCase
Variable FarmWar._directs (#255) is not in mixedCase
Parameter FarmWar.setStatus(uint8,bool)._status (#651) is not in mixedCase
Variable FarmWar._saleMaxBlock (#251) is not in mixedCase
Parameter FarmWar.set(uint8,uint256)._tag (#637) is not in mixedCase
Parameter FarmWar.setAddresses(address,bool)._status (#663) is not in mixedCase
Parameter FarmWar.setAddresses(uint8,address)._tag (#657) is not in mixedCase
Variable FarmWar._public_sale (#240) is not in mixedCase
Parameter FarmWar.clear2(IERC20)._token (#610) is not in mixedCase
Variable FarmWar._total_sold (#243) is not in mixedCase
Follow the Solidity naming convention.

Additional information: link

setStatus(uint8,bool) should be declared external:
- FarmWar.setStatus(uint8,bool) (#651-655)
transferFrom(address,address,uint256) should be declared external:
- FarmWar.transferFrom(address,address,uint256) (#588-592)
clear2(IERC20) should be declared external:
- FarmWar.clear2(IERC20) (#610-612)
pause() should be declared external:
- FarmWar.pause() (#427-430)
symbol() should be declared external:
- FarmWar.symbol() (#467-469)
setAddresses(address,bool) should be declared external:
- FarmWar.setAddresses(address,bool) (#663-665)
setAddresses(uint8,address) should be declared external:
- FarmWar.setAddresses(uint8,address) (#657-661)
decimals() should be declared external:
- FarmWar.decimals() (#487-489)
transfer(address,uint256) should be declared external:
- FarmWar.transfer(address,uint256) (#675-678)
buy(address) should be declared external:
- FarmWar.buy(address) (#680-710)
approve(address,uint256) should be declared external:
- FarmWar.approve(address,uint256) (#601-604)
cap() should be declared external:
- FarmWar.cap() (#494-496)
transferOwnership(address) should be declared external:
- FarmWar.transferOwnership(address) (#523-526)
allowance(address,address) should be declared external:
- FarmWar.allowance(address,address) (#515-517)
unpause() should be declared external:
- FarmWar.unpause() (#439-442)
set(uint8,uint256) should be declared external:
- FarmWar.set(uint8,uint256) (#637-649)
name() should be declared external:
- FarmWar.name() (#452-454)
balanceOf(address) should be declared external:
- FarmWar.balanceOf(address) (#508-510)
renounceOwnership() should be declared external:
- FarmWar.renounceOwnership() (#535-537)
totalSupply() should be declared external:
- FarmWar.totalSupply() (#501-503)
clear1() should be declared external:
- FarmWar.clear1() (#606-608)
Use the external attribute for functions never called from the contract.

Additional information: link

Token is deployed only at one blockchain

Token has only one trading pair

Unable to find website, listings and other project-related information

Token has a considerable age, but we're still unable to find its website

Token has no active CoinGecko listing / rank

Token has no active CoinMarketCap listing / rank

Token has a considerable age, but social accounts / website are missing or have few users

Young tokens have high risks of price dump / death