Unable to find manual contract audit (e.g. Certik, PeckShield, Solidity...)
Cheddar.swapETHForRewards(address,address,uint256) (#1771-1787) sends eth to arbitrary user
Dangerous calls:
- uniswapV2Router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: amount}(0,path,recipient,block.timestamp.add(300)) (#1781-1786)
Cheddar.addLiquidity(uint256,uint256) (#1789-1803) sends eth to arbitrary user
Dangerous calls:
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(this),block.timestamp) (#1795-1802)
Ensure that an arbitrary user cannot withdraw unauthorized funds.
Additional information: link
Reentrancy in Cheddar._transfer(address,address,uint256) (#1606-1750):
External calls:
- swapTokensForEth(swapTokens) (#1651)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1762-1768)
- swapTokensForEth(swapTokens) (#1656)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1762-1768)
- (success) = marketingWallet.call{value: marketingAmount}() (#1661)
- (success) = devWallet1.call{value: devAmount}() (#1670)
- (success_scope_0,None) = devWallet2.call{value: devSplit}() (#1671)
- addLiquidity(half,newBalance) (#1680)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(this),block.timestamp) (#1795-1802)
- swapAndSendDividends(sellTokens,DividendsToken,address(dividendTracker)) (#1688)
- success = IERC20(rewardToken).transfer(address(DividendTrackerAddress),dividends) (#1808)
- uniswapV2Router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: amount}(0,path,recipient,block.timestamp.add(300)) (#1781-1786)
External calls sending eth:
- (success) = marketingWallet.call{value: marketingAmount}() (#1661)
- (success) = devWallet1.call{value: devAmount}() (#1670)
- (success_scope_0,None) = devWallet2.call{value: devSplit}() (#1671)
- addLiquidity(half,newBalance) (#1680)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(this),block.timestamp) (#1795-1802)
- swapAndSendDividends(sellTokens,DividendsToken,address(dividendTracker)) (#1688)
- uniswapV2Router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: amount}(0,path,recipient,block.timestamp.add(300)) (#1781-1786)
State variables written after the call(s):
- super._transfer(from,to,amount) (#1699)
- _balances[sender] = senderBalance - amount (#250)
- _balances[recipient] += amount (#252)
- super._transfer(from,to,amount) (#1705)
- _balances[sender] = senderBalance - amount (#250)
- _balances[recipient] += amount (#252)
- super._transfer(from,address(this),ElonRent) (#1715)
- _balances[sender] = senderBalance - amount (#250)
- _balances[recipient] += amount (#252)
- super._transfer(from,to,amount) (#1716)
- _balances[sender] = senderBalance - amount (#250)
- _balances[recipient] += amount (#252)
- super._transfer(from,address(this),SellFees) (#1722)
- _balances[sender] = senderBalance - amount (#250)
- _balances[recipient] += amount (#252)
- super._transfer(from,to,amount) (#1723)
- _balances[sender] = senderBalance - amount (#250)
- _balances[recipient] += amount (#252)
- super._transfer(from,address(this),BuyFees) (#1729)
- _balances[sender] = senderBalance - amount (#250)
- _balances[recipient] += amount (#252)
- super._transfer(from,to,amount) (#1730)
- _balances[sender] = senderBalance - amount (#250)
- _balances[recipient] += amount (#252)
- swapping = false (#1691)
Apply the check-effects-interactions pattern.
Additional information: link
Cheddar.TeamReleaseLiquidity() (#1513-1532) ignores return value by liquidityToken.transfer(liquidityWallet,amount) (#1524)
Cheddar.TeamReleaseLiquidity() (#1513-1532) ignores return value by liquidityToken.transfer(liquidityWallet,amount) (#1530)
Cheddar.withdrawRemainingBEP20Token(address,address) (#1893-1897) ignores return value by BEP20.transfer(account,balance) (#1896)
DividendTracker.withdrawRemainingBEP20Token(address,address) (#2150-2153) ignores return value by IERC20(token).transfer(address(account),IERC20(token).balanceOf(address(this))) (#2152)
Use SafeERC20, or ensure that the transfer/transferFrom return value is checked.
Additional information: link
Contract locking ether found:
Contract DividendTracker (#1909-2155) has payable functions:
- DividendPayingToken.receive() (#1148-1149)
- DividendPayingToken.distributeDividends() (#1155-1166)
- IDividendPayingToken.distributeDividends() (#995)
But does not have a function to withdraw the ether
Remove the payable attribute or add a withdraw function.
Additional information: link
DividendTracker.updateClaimWait(uint256) (#1968-1973) contains a tautology or contradiction:
- require(bool,string)(newClaimWait >= 0 && newClaimWait <= 86400,Dividend_Tracker: claimWait must be updated to between 1 and 24 hours) (#1969)
Fix the incorrect comparison by changing the value type or the comparison.
Additional information: link
Combination 1: Reentrancy vulnerabilities + Functions that send Ether to arbitraty destination. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.
Combination 2: Unchecked transfer + Functions that send Ether to arbitraty destination. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.
Combination 3: Reentrancy vulnerabilities + Unchecked transfer vulnerability. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.
Cheddar.withdrawRemainingETH(address,uint256) (#1881-1886) performs a multiplication on the result of a division:
-percentage = percent.div(100) (#1883)
-balance = address(this).balance.mul(percentage) (#1884)
Consider ordering multiplication before division.
Additional information: link
Reentrancy in DividendPayingToken._withdrawDividendOfUser(address) (#1185-1201):
External calls:
- success = IERC20(dividendToken).transfer(user,_withdrawableDividend) (#1190)
State variables written after the call(s):
- withdrawnDividends[user] = withdrawnDividends[user].sub(_withdrawableDividend) (#1193)
Reentrancy in Cheddar.updatedividendTracker(address) (#1431-1445):
External calls:
- newdividendTracker.excludeFromDividends(address(newdividendTracker)) (#1438)
- newdividendTracker.excludeFromDividends(address(this)) (#1439)
- newdividendTracker.excludeFromDividends(address(uniswapV2Router)) (#1440)
State variables written after the call(s):
- dividendTracker = newdividendTracker (#1444)
Apply the check-effects-interactions pattern.
Additional information: link
Cheddar._transfer(address,address,uint256).iterations (#1745) is a local variable never initialized
Cheddar._transfer(address,address,uint256).claims (#1745) is a local variable never initialized
Cheddar._transfer(address,address,uint256).lastProcessedIndex (#1745) is a local variable never initialized
Initialize all the variables. If a variable is meant to be initialized to zero, explicitly set it to zero to improve code readability.
Additional information: link
Cheddar._transfer(address,address,uint256) (#1606-1750) ignores return value by dividendTracker.process(gas) (#1745-1748)
Cheddar.addLiquidity(uint256,uint256) (#1789-1803) ignores return value by uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(this),block.timestamp) (#1795-1802)
Ensure that all the return values of the function calls are used.
Additional information: link
DividendPayingToken.constructor(string,string,address)._name (#1144) shadows:
- ERC20._name (#58) (state variable)
DividendPayingToken.constructor(string,string,address)._symbol (#1144) shadows:
- ERC20._symbol (#59) (state variable)
DividendPayingToken.dividendOf(address)._owner (#1203) shadows:
- Ownable._owner (#668) (state variable)
DividendPayingToken.withdrawableDividendOf(address)._owner (#1207) shadows:
- Ownable._owner (#668) (state variable)
DividendPayingToken.withdrawnDividendOf(address)._owner (#1211) shadows:
- Ownable._owner (#668) (state variable)
DividendPayingToken.accumulativeDividendOf(address)._owner (#1215) shadows:
- Ownable._owner (#668) (state variable)
Rename the local variables that shadow another component.
Additional information: link
Cheddar.updateSwapAmount(uint256) (#1426-1429) should emit an event for:
- contractTokenBalanceAmount = amount * (10 ** 18) (#1427)
- swapTokensAtAmount = amount * (10 ** 18) (#1428)
Cheddar.updateBuyFees(uint8,uint8,uint8,uint8) (#1849-1856) should emit an event for:
- _buyLiquidityFee = newBuyLiquidityFee (#1850)
- _buyMarketingFee = newBuyMarketingFee (#1851)
- _buyRewardsFee = newBuyRewardsFee (#1852)
- _buyDevFee = newBuyDevFee (#1853)
Cheddar.updateSellFees(uint8,uint8,uint8,uint8) (#1858-1865) should emit an event for:
- _sellLiquidityFee = newSellLiquidityFee (#1859)
- _sellMarketingFee = newSellMarketingFee (#1860)
- _sellRewardsFee = newSellRewardsFee (#1861)
- _sellDevFee = newSellDevFee (#1862)
Cheddar.updateMaxWallet(uint256) (#1867-1869) should emit an event for:
- _maxWallet = newMaxWallet * (10 ** 18) (#1868)
Cheddar.updateMaxBuySell(uint256,uint256) (#1871-1874) should emit an event for:
- _maxBuy = newMaxBuy * (10 ** 18) (#1872)
- _maxSell = newMaxSell * (10 ** 18) (#1873)
Emit an event for critical parameter changes.
Additional information: link
Cheddar.SetupLiquidityTokenAddress(address).liquidityTokenAddress (#1485) lacks a zero-check on :
- _liquidityTokenAddress = liquidityTokenAddress (#1486)
DividendPayingToken.constructor(string,string,address)._token (#1144) lacks a zero-check on :
- dividendToken = _token (#1145)
DividendPayingToken.updateDividendToken(address)._dividendToken (#1151) lacks a zero-check on :
- dividendToken = _dividendToken (#1152)
Check that the address is not zero.
Additional information: link
DividendPayingToken._withdrawDividendOfUser(address) (#1185-1201) has external calls inside a loop: success = IERC20(dividendToken).transfer(user,_withdrawableDividend) (#1190)
Favor pull over push strategy for external calls.
Additional information: link
Variable 'Cheddar._transfer(address,address,uint256).claims (#1745)' in Cheddar._transfer(address,address,uint256) (#1606-1750) potentially used before declaration: ProcessedDividendTracker(iterations,claims,lastProcessedIndex,true,gas,tx.origin) (#1746)
Variable 'Cheddar._transfer(address,address,uint256).iterations (#1745)' in Cheddar._transfer(address,address,uint256) (#1606-1750) potentially used before declaration: ProcessedDividendTracker(iterations,claims,lastProcessedIndex,true,gas,tx.origin) (#1746)
Variable 'Cheddar._transfer(address,address,uint256).lastProcessedIndex (#1745)' in Cheddar._transfer(address,address,uint256) (#1606-1750) potentially used before declaration: ProcessedDividendTracker(iterations,claims,lastProcessedIndex,true,gas,tx.origin) (#1746)
Variable 'Cheddar._transfer(address,address,uint256).success (#1661)' in Cheddar._transfer(address,address,uint256) (#1606-1750) potentially used before declaration: (success) = devWallet1.call{value: devAmount}() (#1670)
Move all variable declarations prior to any usage of the variable, and ensure that reaching a variable declaration does not depend on some conditional if it is used unconditionally.
Additional information: link
Reentrancy in Cheddar._transfer(address,address,uint256) (#1606-1750):
External calls:
- swapTokensForEth(swapTokens) (#1651)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1762-1768)
- swapTokensForEth(swapTokens) (#1656)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1762-1768)
- (success) = marketingWallet.call{value: marketingAmount}() (#1661)
- (success) = devWallet1.call{value: devAmount}() (#1670)
- (success_scope_0,None) = devWallet2.call{value: devSplit}() (#1671)
- addLiquidity(half,newBalance) (#1680)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(this),block.timestamp) (#1795-1802)
External calls sending eth:
- (success) = marketingWallet.call{value: marketingAmount}() (#1661)
- (success) = devWallet1.call{value: devAmount}() (#1670)
- (success_scope_0,None) = devWallet2.call{value: devSplit}() (#1671)
- addLiquidity(half,newBalance) (#1680)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(this),block.timestamp) (#1795-1802)
State variables written after the call(s):
- addLiquidity(half,newBalance) (#1680)
- _allowances[owner][spender] = amount (#329)
Reentrancy in Cheddar._transfer(address,address,uint256) (#1606-1750):
External calls:
- swapTokensForEth(swapTokens) (#1651)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1762-1768)
- swapTokensForEth(swapTokens) (#1656)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1762-1768)
- (success) = marketingWallet.call{value: marketingAmount}() (#1661)
- (success) = devWallet1.call{value: devAmount}() (#1670)
- (success_scope_0,None) = devWallet2.call{value: devSplit}() (#1671)
- addLiquidity(half,newBalance) (#1680)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(this),block.timestamp) (#1795-1802)
- swapAndSendDividends(sellTokens,DividendsToken,address(dividendTracker)) (#1688)
- success = IERC20(rewardToken).transfer(address(DividendTrackerAddress),dividends) (#1808)
- uniswapV2Router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: amount}(0,path,recipient,block.timestamp.add(300)) (#1781-1786)
External calls sending eth:
- (success) = marketingWallet.call{value: marketingAmount}() (#1661)
- (success) = devWallet1.call{value: devAmount}() (#1670)
- (success_scope_0,None) = devWallet2.call{value: devSplit}() (#1671)
- addLiquidity(half,newBalance) (#1680)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(this),block.timestamp) (#1795-1802)
- swapAndSendDividends(sellTokens,DividendsToken,address(dividendTracker)) (#1688)
- uniswapV2Router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: amount}(0,path,recipient,block.timestamp.add(300)) (#1781-1786)
State variables written after the call(s):
- swapAndSendDividends(sellTokens,DividendsToken,address(dividendTracker)) (#1688)
- _allowances[owner][spender] = amount (#329)
- _isElon[to] = true (#1733)
Reentrancy in Cheddar.constructor() (#1352-1414):
External calls:
- _uniswapV2Pair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#1389-1390)
State variables written after the call(s):
- uniswapV2Pair = _uniswapV2Pair (#1393)
- uniswapV2Router = _uniswapV2Router (#1392)
Reentrancy in Cheddar.constructor() (#1352-1414):
External calls:
- _uniswapV2Pair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#1389-1390)
- _setAutomatedMarketMakerPair(_uniswapV2Pair,true) (#1395)
- dividendTracker.excludeFromDividends(pair) (#1478)
- dividendTracker.excludeFromDividends(address(dividendTracker)) (#1398)
- dividendTracker.excludeFromDividends(address(this)) (#1399)
- dividendTracker.excludeFromDividends(address(_uniswapV2Router)) (#1400)
- dividendTracker.excludeFromDividends(address(deadAddress)) (#1401)
State variables written after the call(s):
- _mint(owner(),100000000 * (10 ** 18)) (#1412)
- _balances[account] += amount (#274)
- excludeFromFees(liquidityWallet,true) (#1404)
- _isExcludedFromFees[account] = excluded (#1462)
- excludeFromFees(marketingWallet,true) (#1405)
- _isExcludedFromFees[account] = excluded (#1462)
- excludeFromFees(address(this),true) (#1406)
- _isExcludedFromFees[account] = excluded (#1462)
- _mint(owner(),100000000 * (10 ** 18)) (#1412)
- _totalSupply += amount (#273)
Reentrancy in DividendTracker.processAccount(address,bool) (#2138-2148):
External calls:
- amount = _withdrawDividendOfUser(account) (#2139)
- success = IERC20(dividendToken).transfer(user,_withdrawableDividend) (#1190)
State variables written after the call(s):
- lastClaimTimes[account] = block.timestamp (#2142)
Apply the check-effects-interactions pattern.
Additional information: link
Reentrancy in Cheddar._setAutomatedMarketMakerPair(address,bool) (#1473-1482):
External calls:
- dividendTracker.excludeFromDividends(pair) (#1478)
Event emitted after the call(s):
- SetAutomatedMarketMakerPair(pair,value) (#1481)
Reentrancy in Cheddar._transfer(address,address,uint256) (#1606-1750):
External calls:
- swapTokensForEth(swapTokens) (#1651)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1762-1768)
- swapTokensForEth(swapTokens) (#1656)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1762-1768)
- (success) = marketingWallet.call{value: marketingAmount}() (#1661)
- (success) = devWallet1.call{value: devAmount}() (#1670)
- (success_scope_0,None) = devWallet2.call{value: devSplit}() (#1671)
- addLiquidity(half,newBalance) (#1680)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(this),block.timestamp) (#1795-1802)
External calls sending eth:
- (success) = marketingWallet.call{value: marketingAmount}() (#1661)
- (success) = devWallet1.call{value: devAmount}() (#1670)
- (success_scope_0,None) = devWallet2.call{value: devSplit}() (#1671)
- addLiquidity(half,newBalance) (#1680)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(this),block.timestamp) (#1795-1802)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#330)
- addLiquidity(half,newBalance) (#1680)
- SwapAndLiquify(otherHalf,newBalance,half) (#1682)
Reentrancy in Cheddar._transfer(address,address,uint256) (#1606-1750):
External calls:
- swapTokensForEth(swapTokens) (#1651)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1762-1768)
- swapTokensForEth(swapTokens) (#1656)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1762-1768)
- (success) = marketingWallet.call{value: marketingAmount}() (#1661)
- (success) = devWallet1.call{value: devAmount}() (#1670)
- (success_scope_0,None) = devWallet2.call{value: devSplit}() (#1671)
- addLiquidity(half,newBalance) (#1680)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(this),block.timestamp) (#1795-1802)
- swapAndSendDividends(sellTokens,DividendsToken,address(dividendTracker)) (#1688)
- success = IERC20(rewardToken).transfer(address(DividendTrackerAddress),dividends) (#1808)
- uniswapV2Router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: amount}(0,path,recipient,block.timestamp.add(300)) (#1781-1786)
External calls sending eth:
- (success) = marketingWallet.call{value: marketingAmount}() (#1661)
- (success) = devWallet1.call{value: devAmount}() (#1670)
- (success_scope_0,None) = devWallet2.call{value: devSplit}() (#1671)
- addLiquidity(half,newBalance) (#1680)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(this),block.timestamp) (#1795-1802)
- swapAndSendDividends(sellTokens,DividendsToken,address(dividendTracker)) (#1688)
- uniswapV2Router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: amount}(0,path,recipient,block.timestamp.add(300)) (#1781-1786)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#330)
- swapAndSendDividends(sellTokens,DividendsToken,address(dividendTracker)) (#1688)
- SendDividends(tokens,dividends) (#1811)
- swapAndSendDividends(sellTokens,DividendsToken,address(dividendTracker)) (#1688)
- Transfer(sender,recipient,amount) (#254)
- super._transfer(from,address(this),ElonRent) (#1715)
- Transfer(sender,recipient,amount) (#254)
- super._transfer(from,to,amount) (#1699)
- Transfer(sender,recipient,amount) (#254)
- super._transfer(from,address(this),SellFees) (#1722)
- Transfer(sender,recipient,amount) (#254)
- super._transfer(from,to,amount) (#1705)
- Transfer(sender,recipient,amount) (#254)
- super._transfer(from,to,amount) (#1723)
- Transfer(sender,recipient,amount) (#254)
- super._transfer(from,to,amount) (#1716)
- Transfer(sender,recipient,amount) (#254)
- super._transfer(from,to,amount) (#1730)
- Transfer(sender,recipient,amount) (#254)
- super._transfer(from,address(this),BuyFees) (#1729)
Reentrancy in Cheddar._transfer(address,address,uint256) (#1606-1750):
External calls:
- swapTokensForEth(swapTokens) (#1651)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1762-1768)
- swapTokensForEth(swapTokens) (#1656)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1762-1768)
- (success) = marketingWallet.call{value: marketingAmount}() (#1661)
- (success) = devWallet1.call{value: devAmount}() (#1670)
- (success_scope_0,None) = devWallet2.call{value: devSplit}() (#1671)
- addLiquidity(half,newBalance) (#1680)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(this),block.timestamp) (#1795-1802)
- swapAndSendDividends(sellTokens,DividendsToken,address(dividendTracker)) (#1688)
- success = IERC20(rewardToken).transfer(address(DividendTrackerAddress),dividends) (#1808)
- uniswapV2Router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: amount}(0,path,recipient,block.timestamp.add(300)) (#1781-1786)
- dividendTracker.excludeFromDividends(to) (#1734)
- dividendTracker.setBalance(address(from),balanceOf(from)) (#1739)
- dividendTracker.setBalance(address(to),balanceOf(to)) (#1740)
- dividendTracker.process(gas) (#1745-1748)
External calls sending eth:
- (success) = marketingWallet.call{value: marketingAmount}() (#1661)
- (success) = devWallet1.call{value: devAmount}() (#1670)
- (success_scope_0,None) = devWallet2.call{value: devSplit}() (#1671)
- addLiquidity(half,newBalance) (#1680)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(this),block.timestamp) (#1795-1802)
- swapAndSendDividends(sellTokens,DividendsToken,address(dividendTracker)) (#1688)
- uniswapV2Router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: amount}(0,path,recipient,block.timestamp.add(300)) (#1781-1786)
Event emitted after the call(s):
- ProcessedDividendTracker(iterations,claims,lastProcessedIndex,true,gas,tx.origin) (#1746)
Reentrancy in Cheddar.constructor() (#1352-1414):
External calls:
- _uniswapV2Pair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#1389-1390)
- _setAutomatedMarketMakerPair(_uniswapV2Pair,true) (#1395)
- dividendTracker.excludeFromDividends(pair) (#1478)
Event emitted after the call(s):
- SetAutomatedMarketMakerPair(pair,value) (#1481)
- _setAutomatedMarketMakerPair(_uniswapV2Pair,true) (#1395)
Reentrancy in Cheddar.constructor() (#1352-1414):
External calls:
- _uniswapV2Pair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#1389-1390)
- _setAutomatedMarketMakerPair(_uniswapV2Pair,true) (#1395)
- dividendTracker.excludeFromDividends(pair) (#1478)
- dividendTracker.excludeFromDividends(address(dividendTracker)) (#1398)
- dividendTracker.excludeFromDividends(address(this)) (#1399)
- dividendTracker.excludeFromDividends(address(_uniswapV2Router)) (#1400)
- dividendTracker.excludeFromDividends(address(deadAddress)) (#1401)
Event emitted after the call(s):
- ExcludeFromFees(account,excluded) (#1464)
- excludeFromFees(address(this),true) (#1406)
- ExcludeFromFees(account,excluded) (#1464)
- excludeFromFees(liquidityWallet,true) (#1404)
- ExcludeFromFees(account,excluded) (#1464)
- excludeFromFees(marketingWallet,true) (#1405)
- Transfer(address(0),account,amount) (#275)
- _mint(owner(),100000000 * (10 ** 18)) (#1412)
Reentrancy in DividendTracker.processAccount(address,bool) (#2138-2148):
External calls:
- amount = _withdrawDividendOfUser(account) (#2139)
- success = IERC20(dividendToken).transfer(user,_withdrawableDividend) (#1190)
Event emitted after the call(s):
- Claim(account,amount,automatic) (#2143)
Reentrancy in Cheddar.processDividendTracker(uint256) (#1574-1577):
External calls:
- (iterationsFirst,claimsFirst,lastProcessedIndexFirst) = dividendTracker.process(gas) (#1575)
Event emitted after the call(s):
- ProcessedDividendTracker(iterationsFirst,claimsFirst,lastProcessedIndexFirst,false,gas,tx.origin) (#1576)
Reentrancy in Cheddar.swapAndSendDividends(uint256,address,address) (#1805-1813):
External calls:
- swapETHForRewards(address(DividendTrackerAddress),address(rewardToken),tokens) (#1806)
- uniswapV2Router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: amount}(0,path,recipient,block.timestamp.add(300)) (#1781-1786)
- success = IERC20(rewardToken).transfer(address(DividendTrackerAddress),dividends) (#1808)
External calls sending eth:
- swapETHForRewards(address(DividendTrackerAddress),address(rewardToken),tokens) (#1806)
- uniswapV2Router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: amount}(0,path,recipient,block.timestamp.add(300)) (#1781-1786)
Event emitted after the call(s):
- SendDividends(tokens,dividends) (#1811)
Reentrancy in Cheddar.updatedividendTracker(address) (#1431-1445):
External calls:
- newdividendTracker.excludeFromDividends(address(newdividendTracker)) (#1438)
- newdividendTracker.excludeFromDividends(address(this)) (#1439)
- newdividendTracker.excludeFromDividends(address(uniswapV2Router)) (#1440)
Event emitted after the call(s):
- UpdateDividendTracker(newAddress,address(dividendTracker)) (#1442)
Apply the check-effects-interactions pattern.
Additional information: link
Cheddar._prolongLiquidityLock(uint256) (#1506-1510) uses timestamp for comparisons
Dangerous comparisons:
- require(bool)(newUnlockTime > _liquidityUnlockTime) (#1508)
Cheddar.TeamReleaseLiquidity() (#1513-1532) uses timestamp for comparisons
Dangerous comparisons:
- require(bool,string)(block.timestamp >= _liquidityUnlockTime,Not yet unlocked) (#1515)
Cheddar.getLiquidityReleaseTimeInSeconds() (#1548-1553) uses timestamp for comparisons
Dangerous comparisons:
- block.timestamp < _liquidityUnlockTime (#1549)
DividendTracker.getAccount(address) (#1992-2035) uses timestamp for comparisons
Dangerous comparisons:
- nextClaimTime > block.timestamp (#2032-2034)
DividendTracker.canAutoClaim(uint256) (#2056-2062) uses timestamp for comparisons
Dangerous comparisons:
- lastClaimTime > block.timestamp (#2057)
- block.timestamp.sub(lastClaimTime) >= claimWait (#2061)
Avoid relying on block.timestamp.
Additional information: link
Address.isContract(address) (#392-402) uses assembly
- INLINE ASM (#398-400)
Address.verifyCallResult(bool,bytes,string) (#561-581) uses assembly
- INLINE ASM (#573-576)
Do not use evm assembly.
Additional information: link
Cheddar._transfer(address,address,uint256) (#1606-1750) compares to a boolean constant:
-require(bool)(trading == true) (#1629)
Cheddar._transfer(address,address,uint256) (#1606-1750) compares to a boolean constant:
-require(bool)(trading == true) (#1616)
DividendTracker.addToAuth(address) (#1940-1945) compares to a boolean constant:
-require(bool)(isAuth[newAuth] != true) (#1942)
Remove the equality to the boolean constant.
Additional information: link
Address.functionCall(address,bytes) (#445-447) is never used and should be removed
Address.functionCall(address,bytes,string) (#455-461) is never used and should be removed
Address.functionCallWithValue(address,bytes,uint256) (#474-480) is never used and should be removed
Address.functionCallWithValue(address,bytes,uint256,string) (#488-499) is never used and should be removed
Address.functionDelegateCall(address,bytes) (#534-536) is never used and should be removed
Address.functionDelegateCall(address,bytes,string) (#544-553) is never used and should be removed
Address.functionStaticCall(address,bytes) (#507-509) is never used and should be removed
Address.functionStaticCall(address,bytes,string) (#517-526) is never used and should be removed
Address.isContract(address) (#392-402) is never used and should be removed
Address.sendValue(address,uint256) (#420-425) is never used and should be removed
Address.verifyCallResult(bool,bytes,string) (#561-581) is never used and should be removed
Cheddar.transferToWallet(address,uint256) (#1904-1906) is never used and should be removed
Context._msgData() (#45-48) is never used and should be removed
DividendPayingToken.setBalanceAirdrop(address,uint256) (#1254-1256) is never used and should be removed
SafeERC20._callOptionalReturn(IERC20,bytes) (#654-664) is never used and should be removed
SafeERC20.safeApprove(IERC20,address,uint256) (#611-624) is never used and should be removed
SafeERC20.safeDecreaseAllowance(IERC20,address,uint256) (#635-646) is never used and should be removed
SafeERC20.safeIncreaseAllowance(IERC20,address,uint256) (#626-633) is never used and should be removed
SafeERC20.safeTransfer(IERC20,address,uint256) (#587-593) is never used and should be removed
SafeERC20.safeTransferFrom(IERC20,address,address,uint256) (#595-602) is never used and should be removed
SafeMath.div(uint256,uint256,string) (#1116-1119) is never used and should be removed
SafeMath.mod(uint256,uint256) (#1106-1109) is never used and should be removed
SafeMath.mod(uint256,uint256,string) (#1121-1124) is never used and should be removed
SafeMath.sub(uint256,uint256,string) (#1111-1114) is never used and should be removed
SafeMath.tryAdd(uint256,uint256) (#1055-1059) is never used and should be removed
SafeMath.tryDiv(uint256,uint256) (#1073-1076) is never used and should be removed
SafeMath.tryMod(uint256,uint256) (#1078-1081) is never used and should be removed
SafeMath.tryMul(uint256,uint256) (#1066-1071) is never used and should be removed
SafeMath.trySub(uint256,uint256) (#1061-1064) is never used and should be removed
SafeMathInt.div(int256,int256) (#1020-1025) is never used and should be removed
SafeMathInt.mul(int256,int256) (#1011-1018) is never used and should be removed
Remove unused functions.
Additional information: link
Pragma version0.8.11 (#1) necessitates a version too recent to be trusted. Consider deploying with 0.6.12/0.7.6/0.8.7
solc-0.8.11 is not recommended for deployment
Deploy with any of the following Solidity versions: 0.5.16 - 0.5.17, 0.6.11 - 0.6.12, 0.7.5 - 0.7.6 Use a simple pragma version that allows any of these versions. Consider using the latest version of Solidity for testing.
Additional information: link
Low level call in Address.sendValue(address,uint256) (#420-425):
- (success) = recipient.call{value: amount}() (#423)
Low level call in Address.functionCallWithValue(address,bytes,uint256,string) (#488-499):
- (success,returndata) = target.call{value: value}(data) (#497)
Low level call in Address.functionStaticCall(address,bytes,string) (#517-526):
- (success,returndata) = target.staticcall(data) (#524)
Low level call in Address.functionDelegateCall(address,bytes,string) (#544-553):
- (success,returndata) = target.delegatecall(data) (#551)
Low level call in Cheddar._transfer(address,address,uint256) (#1606-1750):
- (success) = marketingWallet.call{value: marketingAmount}() (#1661)
- (success) = devWallet1.call{value: devAmount}() (#1670)
- (success_scope_0,None) = devWallet2.call{value: devSplit}() (#1671)
Avoid low-level calls. Check the call success. If the call is meant for a contract, check for code existence
Additional information: link
Function IUniswapV2Router01.WETH() (#723) is not in mixedCase
Function IUniswapV2Pair.DOMAIN_SEPARATOR() (#887) is not in mixedCase
Function IUniswapV2Pair.PERMIT_TYPEHASH() (#888) is not in mixedCase
Function IUniswapV2Pair.MINIMUM_LIQUIDITY() (#905) is not in mixedCase
Parameter DividendPayingToken.updateDividendToken(address)._dividendToken (#1151) is not in mixedCase
Parameter DividendPayingToken.dividendOf(address)._owner (#1203) is not in mixedCase
Parameter DividendPayingToken.withdrawableDividendOf(address)._owner (#1207) is not in mixedCase
Parameter DividendPayingToken.withdrawnDividendOf(address)._owner (#1211) is not in mixedCase
Parameter DividendPayingToken.accumulativeDividendOf(address)._owner (#1215) is not in mixedCase
Constant DividendPayingToken.magnitude (#1132) is not in UPPER_CASE_WITH_UNDERSCORES
Event CheddarisElon(address,bool) (#1321) is not in CapWords
Event Cheddarblacklist(address,bool) (#1323) is not in CapWords
Event CheddartradingUpdated(bool) (#1326) is not in CapWords
Event CheddarburningUpdated(bool) (#1327) is not in CapWords
Parameter Cheddar.excludeFromDividends(address)._toExclude (#1420) is not in mixedCase
Function Cheddar.SetupLiquidityTokenAddress(address) (#1485-1488) is not in mixedCase
Function Cheddar.TeamlimitLiquidityReleaseTo20Percent() (#1499-1501) is not in mixedCase
Function Cheddar.TeamUnlockLiquidityInSeconds(uint256) (#1503-1505) is not in mixedCase
Function Cheddar.TeamReleaseLiquidity() (#1513-1532) is not in mixedCase
Parameter Cheddar.tradingEnabled(bool)._enabled (#1587) is not in mixedCase
Parameter Cheddar.burningEnabled(bool)._enabled (#1593) is not in mixedCase
Parameter Cheddar.swapAndSendDividends(uint256,address,address).DividendTrackerAddress (#1805) is not in mixedCase
Variable Cheddar.DividendsToken (#1267) is not in mixedCase
Variable Cheddar._maxWallet (#1297) is not in mixedCase
Variable Cheddar._maxBuy (#1298) is not in mixedCase
Variable Cheddar._maxSell (#1299) is not in mixedCase
Constant Cheddar.DefaultTime (#1312) is not in UPPER_CASE_WITH_UNDERSCORES
Variable Cheddar._isElon (#1316) is not in mixedCase
Function DividendTracker.IsExcludedFromDividends(address) (#1984-1986) is not in mixedCase
Parameter DividendTracker.getAccount(address)._account (#1992) is not in mixedCase
Variable DividendTracker.DividendToken (#1925) is not in mixedCase
Follow the Solidity naming convention.
Additional information: link
Redundant expression "this (#46)" inContext (#40-49)
Remove redundant statements if they congest code but offer no value.
Additional information: link
Variable IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountADesired (#728) is too similar to IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountBDesired (#729)
Variable DividendPayingToken._withdrawDividendOfUser(address)._withdrawableDividend (#1186) is too similar to DividendTracker.getAccount(address).withdrawableDividends (#1997)
Prevent variables from having similar names.
Additional information: link
Cheddar.constructor() (#1352-1414) uses literals with too many digits:
- _maxWallet = 2500000 * (10 ** 18) (#1368)
Cheddar.constructor() (#1352-1414) uses literals with too many digits:
- _maxBuy = 2500000 * (10 ** 18) (#1369)
Cheddar.constructor() (#1352-1414) uses literals with too many digits:
- _maxSell = 2500000 * (10 ** 18) (#1370)
Cheddar.constructor() (#1352-1414) uses literals with too many digits:
- deadAddress = address(0x000000000000000000000000000000000000dEaD) (#1381)
Cheddar.constructor() (#1352-1414) uses literals with too many digits:
- _mint(owner(),100000000 * (10 ** 18)) (#1412)
Cheddar.updateGasForProcessing(uint256) (#1555-1560) uses literals with too many digits:
- require(bool,string)(newValue >= 200000 && newValue <= 500000,Cheddar: gasForProcessing must be between 200,000 and 500,000) (#1556)
Cheddar.addLP() (#1815-1823) uses literals with too many digits:
- updateMaxWallet(100000000) (#1821)
Cheddar.addLP() (#1815-1823) uses literals with too many digits:
- updateMaxBuySell((100000000),(100000000)) (#1822)
Cheddar.letsGoLive() (#1825-1835) uses literals with too many digits:
- updateMaxWallet(2000000) (#1829)
Cheddar.letsGoLive() (#1825-1835) uses literals with too many digits:
- updateMaxBuySell(2000000,2000000) (#1830)
Cheddar.letsGetStarted() (#1837-1847) uses literals with too many digits:
- updateMaxWallet(2000000) (#1841)
Cheddar.letsGetStarted() (#1837-1847) uses literals with too many digits:
- updateMaxBuySell(2000000,2000000) (#1842)
Cheddar.slitherConstructorVariables() (#1259-1907) uses literals with too many digits:
- gasForProcessing = 200000 (#1310)
DividendTracker.getAccountAtIndex(uint256) (#2037-2054) uses literals with too many digits:
- (0x0000000000000000000000000000000000000000,- 1,- 1,0,0,0,0,0) (#2048)
Use: Ether suffix, Time suffix, or The scientific notation
Additional information: link
Cheddar.buyBackTimes (#1283) is never used in Cheddar (#1259-1907)
Cheddar._previousMaxWallet (#1300) is never used in Cheddar (#1259-1907)
Cheddar._previousMaxSell (#1301) is never used in Cheddar (#1259-1907)
Cheddar._previousMaxBuy (#1302) is never used in Cheddar (#1259-1907)
Cheddar.previousDevFee (#1303) is never used in Cheddar (#1259-1907)
DividendPayingToken.lastAmount (#1135) is never used in DividendTracker (#1909-2155)
Remove unused state variables.
Additional information: link
Cheddar._previousMaxBuy (#1302) should be constant
Cheddar._previousMaxSell (#1301) should be constant
Cheddar._previousMaxWallet (#1300) should be constant
Cheddar.buyBackTimes (#1283) should be constant
Cheddar.previousDevFee (#1303) should be constant
DividendPayingToken.lastAmount (#1135) should be constant
DividendTracker.DividendToken (#1925) should be constant
Add the constant attributes to state variables that never change.
Additional information: link
name() should be declared external:
- ERC20.name() (#78-80)
symbol() should be declared external:
- ERC20.symbol() (#86-88)
decimals() should be declared external:
- ERC20.decimals() (#103-105)
transfer(address,uint256) should be declared external:
- DividendTracker.transfer(address,uint256) (#1947-1952)
- ERC20.transfer(address,uint256) (#129-132)
allowance(address,address) should be declared external:
- ERC20.allowance(address,address) (#137-139)
approve(address,uint256) should be declared external:
- ERC20.approve(address,uint256) (#148-151)
transferFrom(address,address,uint256) should be declared external:
- ERC20.transferFrom(address,address,uint256) (#166-180)
increaseAllowance(address,uint256) should be declared external:
- ERC20.increaseAllowance(address,uint256) (#194-197)
decreaseAllowance(address,uint256) should be declared external:
- ERC20.decreaseAllowance(address,uint256) (#213-221)
renounceOwnership() should be declared external:
- Ownable.renounceOwnership() (#701-703)
transferOwnership(address) should be declared external:
- Ownable.transferOwnership(address) (#709-712)
get(IterableMapping.Map,address) should be declared external:
- IterableMapping.get(IterableMapping.Map,address) (#932-934)
getIndexOfKey(IterableMapping.Map,address) should be declared external:
- IterableMapping.getIndexOfKey(IterableMapping.Map,address) (#936-941)
getKeyAtIndex(IterableMapping.Map,uint256) should be declared external:
- IterableMapping.getKeyAtIndex(IterableMapping.Map,uint256) (#943-945)
size(IterableMapping.Map) should be declared external:
- IterableMapping.size(IterableMapping.Map) (#947-949)
updateDividendToken(address) should be declared external:
- DividendPayingToken.updateDividendToken(address) (#1151-1153)
distributeDividends() should be declared external:
- DividendPayingToken.distributeDividends() (#1155-1166)
withdrawDividend() should be declared external:
- DividendPayingToken.withdrawDividend() (#1181-1183)
- DividendTracker.withdrawDividend() (#1954-1956)
dividendOf(address) should be declared external:
- DividendPayingToken.dividendOf(address) (#1203-1205)
withdrawnDividendOf(address) should be declared external:
- DividendPayingToken.withdrawnDividendOf(address) (#1211-1213)
excludeFromDividends(address) should be declared external:
- Cheddar.excludeFromDividends(address) (#1420-1424)
updateSwapAmount(uint256) should be declared external:
- Cheddar.updateSwapAmount(uint256) (#1426-1429)
updatedividendTracker(address) should be declared external:
- Cheddar.updatedividendTracker(address) (#1431-1445)
updateDividendToken(address) should be declared external:
- Cheddar.updateDividendToken(address) (#1447-1452)
updateUniswapV2Router(address) should be declared external:
- Cheddar.updateUniswapV2Router(address) (#1454-1458)
setAutomatedMarketMakerPair(address,bool) should be declared external:
- Cheddar.setAutomatedMarketMakerPair(address,bool) (#1467-1471)
SetupLiquidityTokenAddress(address) should be declared external:
- Cheddar.SetupLiquidityTokenAddress(address) (#1485-1488)
TeamlimitLiquidityReleaseTo20Percent() should be declared external:
- Cheddar.TeamlimitLiquidityReleaseTo20Percent() (#1499-1501)
TeamUnlockLiquidityInSeconds(uint256) should be declared external:
- Cheddar.TeamUnlockLiquidityInSeconds(uint256) (#1503-1505)
TeamReleaseLiquidity() should be declared external:
- Cheddar.TeamReleaseLiquidity() (#1513-1532)
updateLiquidityWallet(address) should be declared external:
- Cheddar.updateLiquidityWallet(address) (#1534-1539)
updateMarketingWallet(address) should be declared external:
- Cheddar.updateMarketingWallet(address) (#1541-1546)
getLiquidityReleaseTimeInSeconds() should be declared external:
- Cheddar.getLiquidityReleaseTimeInSeconds() (#1548-1553)
updateGasForProcessing(uint256) should be declared external:
- Cheddar.updateGasForProcessing(uint256) (#1555-1560)
isExcludedFromFees(address) should be declared external:
- Cheddar.isExcludedFromFees(address) (#1570-1572)
tradingEnabled(bool) should be declared external:
- Cheddar.tradingEnabled(bool) (#1587-1591)
burningEnabled(bool) should be declared external:
- Cheddar.burningEnabled(bool) (#1593-1597)
updateIsElon(address,bool) should be declared external:
- Cheddar.updateIsElon(address,bool) (#1599-1604)
withdrawRemainingETH(address,uint256) should be declared external:
- Cheddar.withdrawRemainingETH(address,uint256) (#1881-1886)
withdrawRemainingToken(address) should be declared external:
- Cheddar.withdrawRemainingToken(address) (#1888-1891)
withdrawRemainingBEP20Token(address,address) should be declared external:
- Cheddar.withdrawRemainingBEP20Token(address,address) (#1893-1897)
burnRemainingToken() should be declared external:
- Cheddar.burnRemainingToken() (#1899-1902)
addToAuth(address) should be declared external:
- DividendTracker.addToAuth(address) (#1940-1945)
getAccountAtIndex(uint256) should be declared external:
- DividendTracker.getAccountAtIndex(uint256) (#2037-2054)
process(uint256) should be declared external:
- DividendTracker.process(uint256) (#2081-2136)
withdrawRemainingBEP20Token(address,address) should be declared external:
- DividendTracker.withdrawRemainingBEP20Token(address,address) (#2150-2153)
Use the external attribute for functions never called from the contract.
Additional information: link
Unable to find website, listings and other project-related information
Young tokens have high risks of scam / price dump / death
Token has no active CoinGecko listing / rank
Token has no active CoinMarketCap listing / rank
Unable to find Telegram and Twitter accounts