GFT [GalaxyFinance] Token

GalaxyFinanceToken.recoverLostTokensExceptOurTokens(address,uint256) (GFT.sol#433-438) ignores return value by BEP20(_token).transfer(msg.sender,amount) (GFT.sol#437)
Use SafeERC20, or ensure that the transfer/transferFrom return value is checked.

Additional information: link

Contract ownership is not renounced (belongs to a wallet)

GalaxyFinanceToken._writeCheckpoint(address,uint32,uint256,uint256) (GFT.sol#612-630) uses a dangerous strict equality:
- nCheckpoints > 0 && checkpoints[delegatee][nCheckpoints - 1].fromBlock == blockNumber (GFT.sol#622)
Don't use strict equality to determine if an account has enough Ether or tokens.

Additional information: link

Address._verifyCallResult(bool,bytes,string) (Ownable.sol#592-609) is never used and should be removed
Address.functionCall(address,bytes) (Ownable.sol#500-502) is never used and should be removed
Address.functionCall(address,bytes,string) (Ownable.sol#510-512) is never used and should be removed
Address.functionCallWithValue(address,bytes,uint256) (Ownable.sol#525-527) is never used and should be removed
Address.functionCallWithValue(address,bytes,uint256,string) (Ownable.sol#535-542) is never used and should be removed
Address.functionDelegateCall(address,bytes) (Ownable.sol#574-576) is never used and should be removed
Address.functionDelegateCall(address,bytes,string) (Ownable.sol#584-590) is never used and should be removed
Address.functionStaticCall(address,bytes) (Ownable.sol#550-552) is never used and should be removed
Address.functionStaticCall(address,bytes,string) (Ownable.sol#560-566) is never used and should be removed
Address.isContract(address) (Ownable.sol#447-456) is never used and should be removed
Address.sendValue(address,uint256) (Ownable.sol#474-480) is never used and should be removed
BEP20._burn(address,uint256) (GFT.sol#266-272) is never used and should be removed
BEP20._burnFrom(address,uint256) (GFT.sol#305-312) is never used and should be removed
Context._msgData() (Ownable.sol#117-120) is never used and should be removed
SafeBEP20._callOptionalReturn(IBEP20,bytes) (Ownable.sol#700-711) is never used and should be removed
SafeBEP20.safeApprove(IBEP20,address,uint256) (Ownable.sol#658-672) is never used and should be removed
SafeBEP20.safeDecreaseAllowance(IBEP20,address,uint256) (Ownable.sol#682-692) is never used and should be removed
SafeBEP20.safeIncreaseAllowance(IBEP20,address,uint256) (Ownable.sol#674-681) is never used and should be removed
SafeBEP20.safeTransfer(IBEP20,address,uint256) (Ownable.sol#634-640) is never used and should be removed
SafeBEP20.safeTransferFrom(IBEP20,address,address,uint256) (Ownable.sol#642-649) is never used and should be removed
SafeMath.div(uint256,uint256) (Ownable.sol#339-342) is never used and should be removed
SafeMath.div(uint256,uint256,string) (Ownable.sol#394-397) is never used and should be removed
SafeMath.mod(uint256,uint256) (Ownable.sol#356-359) is never used and should be removed
SafeMath.mod(uint256,uint256,string) (Ownable.sol#414-417) is never used and should be removed
SafeMath.mul(uint256,uint256) (Ownable.sol#320-325) is never used and should be removed
SafeMath.sqrt(uint256) (Ownable.sol#214-222) is never used and should be removed
SafeMath.tryAdd(uint256,uint256) (Ownable.sol#228-232) is never used and should be removed
SafeMath.tryDiv(uint256,uint256) (Ownable.sol#264-267) is never used and should be removed
SafeMath.tryMod(uint256,uint256) (Ownable.sol#274-277) is never used and should be removed
SafeMath.tryMul(uint256,uint256) (Ownable.sol#249-257) is never used and should be removed
SafeMath.trySub(uint256,uint256) (Ownable.sol#239-242) is never used and should be removed
Remove unused functions.

Additional information: link

BEP20.constructor(string,string).name (GFT.sol#53) shadows:
- BEP20.name() (GFT.sol#68-70) (function)
- IBEP20.name() (Ownable.sol#24) (function)
BEP20.constructor(string,string).symbol (GFT.sol#53) shadows:
- BEP20.symbol() (GFT.sol#82-84) (function)
- IBEP20.symbol() (Ownable.sol#19) (function)
BEP20.allowance(address,address).owner (GFT.sol#116) shadows:
- Ownable.owner() (Ownable.sol#159-161) (function)
BEP20._approve(address,address,uint256).owner (GFT.sol#288) shadows:
- Ownable.owner() (Ownable.sol#159-161) (function)
GalaxyFinanceToken.recoverLostBNB()._owner (GFT.sol#429) shadows:
- Ownable._owner (Ownable.sol#143) (state variable)
Rename the local variables that shadow another component.

Additional information: link

GalaxyFinanceToken.recoverLostBNB()._owner (GFT.sol#429) lacks a zero-check on :
- _owner.transfer(address(this).balance) (GFT.sol#430)
Check that the address is not zero.

Additional information: link

GalaxyFinanceToken.delegateBySig(address,uint256,uint256,uint8,bytes32,bytes32) (GFT.sol#478-519) uses timestamp for comparisons
Dangerous comparisons:
- require(bool,string)(now <= expiry,GLF::delegateBySig: signature expired) (GFT.sol#517)
Avoid relying on block.timestamp.

Additional information: link

Low level call in Address.sendValue(address,uint256) (Ownable.sol#474-480):
- (success) = recipient.call{value: amount}() (Ownable.sol#478)
Low level call in Address.functionCallWithValue(address,bytes,uint256,string) (Ownable.sol#535-542):
- (success,returndata) = target.call{value: value}(data) (Ownable.sol#540)
Low level call in Address.functionStaticCall(address,bytes,string) (Ownable.sol#560-566):
- (success,returndata) = target.staticcall(data) (Ownable.sol#564)
Low level call in Address.functionDelegateCall(address,bytes,string) (Ownable.sol#584-590):
- (success,returndata) = target.delegatecall(data) (Ownable.sol#588)
Avoid low-level calls. Check the call success. If the call is meant for a contract, check for code existence

Additional information: link

Parameter GalaxyFinanceToken.mint(address,uint256)._to (GFT.sol#328) is not in mixedCase
Parameter GalaxyFinanceToken.mint(address,uint256)._amount (GFT.sol#328) is not in mixedCase
Parameter GalaxyFinanceToken.setMinter(address,bool)._minter (GFT.sol#404) is not in mixedCase
Parameter GalaxyFinanceToken.setMinter(address,bool)._isMinter (GFT.sol#404) is not in mixedCase
Parameter GalaxyFinanceToken.setTokenLockedSender(address,bool)._address (GFT.sol#408) is not in mixedCase
Parameter GalaxyFinanceToken.setTokenLockedSender(address,bool)._isTrue (GFT.sol#408) is not in mixedCase
Parameter GalaxyFinanceToken.setTokenUnlockManager(address,bool)._address (GFT.sol#412) is not in mixedCase
Parameter GalaxyFinanceToken.setTokenUnlockManager(address,bool)._isTrue (GFT.sol#412) is not in mixedCase
Parameter GalaxyFinanceToken.unlockBalance(address,uint256)._to (GFT.sol#416) is not in mixedCase
Parameter GalaxyFinanceToken.unlockBalance(address,uint256)._amount (GFT.sol#416) is not in mixedCase
Parameter GalaxyFinanceToken.setWhitelistAddress(address,bool)._address (GFT.sol#424) is not in mixedCase
Parameter GalaxyFinanceToken.setWhitelistAddress(address,bool)._whiteList (GFT.sol#424) is not in mixedCase
Parameter GalaxyFinanceToken.recoverLostTokensExceptOurTokens(address,uint256)._token (GFT.sol#433) is not in mixedCase
Variable GalaxyFinanceToken._delegates (GFT.sol#340) is not in mixedCase
Follow the Solidity naming convention.

Additional information: link

Redundant expression "this (Ownable.sol#118)" inContext (Ownable.sol#112-121)
Remove redundant statements if they congest code but offer no value.

Additional information: link

decimals() should be declared external:
- BEP20.decimals() (GFT.sol#75-77)
symbol() should be declared external:
- BEP20.symbol() (GFT.sol#82-84)
totalSupply() should be declared external:
- BEP20.totalSupply() (GFT.sol#89-91)
transfer(address,uint256) should be declared external:
- BEP20.transfer(address,uint256) (GFT.sol#108-111)
allowance(address,address) should be declared external:
- BEP20.allowance(address,address) (GFT.sol#116-118)
approve(address,uint256) should be declared external:
- BEP20.approve(address,uint256) (GFT.sol#127-130)
transferFrom(address,address,uint256) should be declared external:
- BEP20.transferFrom(address,address,uint256) (GFT.sol#144-156)
increaseAllowance(address,uint256) should be declared external:
- BEP20.increaseAllowance(address,uint256) (GFT.sol#170-173)
decreaseAllowance(address,uint256) should be declared external:
- BEP20.decreaseAllowance(address,uint256) (GFT.sol#189-196)
mint(uint256) should be declared external:
- BEP20.mint(uint256) (GFT.sol#206-209)
mint(address,uint256) should be declared external:
- GalaxyFinanceToken.mint(address,uint256) (GFT.sol#328-331)
setMinter(address,bool) should be declared external:
- GalaxyFinanceToken.setMinter(address,bool) (GFT.sol#404-407)
setTokenLockedSender(address,bool) should be declared external:
- GalaxyFinanceToken.setTokenLockedSender(address,bool) (GFT.sol#408-411)
setTokenUnlockManager(address,bool) should be declared external:
- GalaxyFinanceToken.setTokenUnlockManager(address,bool) (GFT.sol#412-415)
unlockBalance(address,uint256) should be declared external:
- GalaxyFinanceToken.unlockBalance(address,uint256) (GFT.sol#416-420)
enableTrading() should be declared external:
- GalaxyFinanceToken.enableTrading() (GFT.sol#421-423)
setWhitelistAddress(address,bool) should be declared external:
- GalaxyFinanceToken.setWhitelistAddress(address,bool) (GFT.sol#424-426)
recoverLostBNB() should be declared external:
- GalaxyFinanceToken.recoverLostBNB() (GFT.sol#428-431)
recoverLostTokensExceptOurTokens(address,uint256) should be declared external:
- GalaxyFinanceToken.recoverLostTokensExceptOurTokens(address,uint256) (GFT.sol#433-438)
renounceOwnership() should be declared external:
- Ownable.renounceOwnership() (Ownable.sol#178-181)
transferOwnership(address) should be declared external:
- Ownable.transferOwnership(address) (Ownable.sol#187-191)
Use the external attribute for functions never called from the contract.

Additional information: link

GalaxyFinanceToken.getChainId() (GFT.sol#637-641) uses assembly
- INLINE ASM (GFT.sol#639)
Address.isContract(address) (Ownable.sol#447-456) uses assembly
- INLINE ASM (Ownable.sol#454)
Address._verifyCallResult(bool,bytes,string) (Ownable.sol#592-609) uses assembly
- INLINE ASM (Ownable.sol#601-604)
Do not use evm assembly.

Additional information: link

Different versions of Solidity is used:
- Version used: ['0.6.12', '>=0.4.0', '>=0.6.0<0.8.0', '>=0.6.2<0.8.0', '^0.6.0']
- 0.6.12 (GFT.sol#3)
- 0.6.12 (GFT.sol#317)
- >=0.4.0 (Ownable.sol#3)
- >=0.6.0<0.8.0 (Ownable.sol#100)
- >=0.6.0<0.8.0 (Ownable.sol#128)
- >=0.6.0<0.8.0 (Ownable.sol#197)
- >=0.6.2<0.8.0 (Ownable.sol#424)
- ^0.6.0 (Ownable.sol#616)
Use one Solidity version.

Additional information: link

Pragma version>=0.4.0 (Ownable.sol#3) allows old versions
Pragma version>=0.6.0<0.8.0 (Ownable.sol#100) is too complex
Pragma version>=0.6.0<0.8.0 (Ownable.sol#128) is too complex
Pragma version>=0.6.0<0.8.0 (Ownable.sol#197) is too complex
Pragma version>=0.6.2<0.8.0 (Ownable.sol#424) is too complex
Pragma version^0.6.0 (Ownable.sol#616) allows old versions
Deploy with any of the following Solidity versions: 0.5.16 - 0.5.17, 0.6.11 - 0.6.12, 0.7.5 - 0.7.6 Use a simple pragma version that allows any of these versions. Consider using the latest version of Solidity for testing.

Additional information: link

Token is deployed only at one blockchain

Token has only one trading pair

Unable to find token on CoinMarketCap

Additional information: link

Token is not listed at Mobula.Finance

Additional information: link

Unable to find code repository for the project

Young tokens have high risks of scam / price dump / death

Young tokens have high risks of scam / price dump / death

Young tokens have high risks of scam / price dump / death

Young tokens have high risks of scam / price dump / death

Token has no active CoinMarketCap listing / rank

Token has relatively low CoinGecko rank