Unable to find manual contract audit (e.g. Certik, PeckShield, Solidity...)
TheGreenest.swapBack() (#400-441) sends eth to arbitrary user
Dangerous calls:
- (CoinSuccess) = address(coinFeeReceiver).call{gas: 30000,value: amountBNBCoin}() (#425)
- (BuyBackSuccess) = address(buybackFeeReceiver).call{gas: 30000,value: amountBNBbuyback}() (#427)
Ensure that an arbitrary user cannot withdraw unauthorized funds.
Additional information: link
Reentrancy in TheGreenest._transferFrom(address,address,uint256) (#300-329):
External calls:
- swapBack() (#318)
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(amountToSwap,0,path,address(this),block.timestamp) (#411-417)
- (CoinSuccess) = address(coinFeeReceiver).call{gas: 30000,value: amountBNBCoin}() (#425)
- (BuyBackSuccess) = address(buybackFeeReceiver).call{gas: 30000,value: amountBNBbuyback}() (#427)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,coinFeeReceiver,block.timestamp) (#431-438)
External calls sending eth:
- swapBack() (#318)
- (CoinSuccess) = address(coinFeeReceiver).call{gas: 30000,value: amountBNBCoin}() (#425)
- (BuyBackSuccess) = address(buybackFeeReceiver).call{gas: 30000,value: amountBNBbuyback}() (#427)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,coinFeeReceiver,block.timestamp) (#431-438)
State variables written after the call(s):
- _balances[sender] = _balances[sender].sub(amount,Insufficient Balance) (#322)
- _balances[recipient] = _balances[recipient].add(amountReceived) (#325)
- amountReceived = takeFee(sender,recipient,amount) (#324)
- _balances[address(this)] = _balances[address(this)].add(feeAmount) (#379)
Apply the check-effects-interactions pattern.
Additional information: link
Combination 1: Reentrancy vulnerabilities + Functions that send Ether to arbitraty destination. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.
TheGreenest.DEAD (#195) should be constant
TheGreenest.WBNB (#194) should be constant
TheGreenest.ZERO (#196) should be constant
TheGreenest._totalSupply (#203) should be constant
TheGreenest.routerAddress (#197) should be constant
Add the constant attributes to state variables that never change.
Additional information: link
Variable Auth._intAddr (#77) is not in mixedCase
Function IDEXRouter.WETH() (#145) is not in mixedCase
Parameter TheGreenest.tradingStatus(bool)._status (#386) is not in mixedCase
Parameter TheGreenest.setFees(uint256,uint256,uint256,uint256,uint256)._liquidityFee (#470) is not in mixedCase
Parameter TheGreenest.setFees(uint256,uint256,uint256,uint256,uint256)._coinFee (#470) is not in mixedCase
Parameter TheGreenest.setFees(uint256,uint256,uint256,uint256,uint256)._buybackFee (#470) is not in mixedCase
Parameter TheGreenest.setFees(uint256,uint256,uint256,uint256,uint256)._feeDenominator (#470) is not in mixedCase
Parameter TheGreenest.cooldownEnabled(bool,uint8)._status (#480) is not in mixedCase
Parameter TheGreenest.cooldownEnabled(bool,uint8)._interval (#480) is not in mixedCase
Parameter TheGreenest.setFeeReceiver(address,address)._coinFeeReceiver (#494) is not in mixedCase
Parameter TheGreenest.setFeeReceiver(address,address)._buybackFeeReceiver (#494) is not in mixedCase
Parameter TheGreenest.setSwapBackSettings(bool,uint256)._enabled (#511) is not in mixedCase
Parameter TheGreenest.setSwapBackSettings(bool,uint256)._amount (#511) is not in mixedCase
Parameter TheGreenest.blacklistAddress(address,bool)._address (#516) is not in mixedCase
Parameter TheGreenest.blacklistAddress(address,bool)._value (#516) is not in mixedCase
Parameter TheGreenest.transferForeignToken(address)._token (#524) is not in mixedCase
Variable TheGreenest.WBNB (#194) is not in mixedCase
Variable TheGreenest.DEAD (#195) is not in mixedCase
Variable TheGreenest.ZERO (#196) is not in mixedCase
Constant TheGreenest._name (#199) is not in UPPER_CASE_WITH_UNDERSCORES
Constant TheGreenest._symbol (#200) is not in UPPER_CASE_WITH_UNDERSCORES
Constant TheGreenest._decimals (#201) is not in UPPER_CASE_WITH_UNDERSCORES
Variable TheGreenest._totalSupply (#203) is not in mixedCase
Variable TheGreenest._maxTxAmount (#204) is not in mixedCase
Variable TheGreenest._maxWalletSize (#205) is not in mixedCase
Variable TheGreenest._coolDown (#207) is not in mixedCase
Variable TheGreenest._balances (#209) is not in mixedCase
Variable TheGreenest._allowances (#210) is not in mixedCase
Variable TheGreenest._lastSell (#216) is not in mixedCase
Variable TheGreenest._sellMultiplier (#223) is not in mixedCase
Follow the Solidity naming convention.
Additional information: link
Variable IDEXRouter.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountADesired (#150) is too similar to IDEXRouter.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountBDesired (#151)
Prevent variables from having similar names.
Additional information: link
TheGreenest.slitherConstructorVariables() (#191-544) performs a multiplication on the result of a division:
-swapThreshold = _totalSupply / 1000 * 3 (#235)
Consider ordering multiplication before division.
Additional information: link
TheGreenest.swapBack() (#400-441) ignores return value by router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,coinFeeReceiver,block.timestamp) (#431-438)
Ensure that all the return values of the function calls are used.
Additional information: link
TheGreenest.setMaxWallet(uint256) (#464-467) should emit an event for:
- _maxWalletSize = amount (#466)
TheGreenest.setFees(uint256,uint256,uint256,uint256,uint256) (#470-478) should emit an event for:
- liquidityFee = _liquidityFee (#471)
- coinFee = _coinFee (#472)
- buybackFee = _buybackFee (#473)
- totalFee = _liquidityFee.add(_coinFee).add(_buybackFee) (#474)
- feeDenominator = _feeDenominator (#475)
- _sellMultiplier = multiplier (#476)
TheGreenest.setTxLimit(uint256) (#499-502) should emit an event for:
- _maxTxAmount = amountBuy (#500)
TheGreenest.maxTxAmountSell(uint256) (#503-506) should emit an event for:
- _maxTxAmountSell = amountSell (#504)
TheGreenest.cooldown(uint256) (#507-510) should emit an event for:
- _coolDown = cooldownsec (#508)
Emit an event for critical parameter changes.
Additional information: link
Auth.transferOwnership(address).adr (#130) lacks a zero-check on :
- owner = adr (#131)
TheGreenest.setFeeReceiver(address,address)._coinFeeReceiver (#494) lacks a zero-check on :
- coinFeeReceiver = _coinFeeReceiver (#495)
TheGreenest.setFeeReceiver(address,address)._buybackFeeReceiver (#494) lacks a zero-check on :
- buybackFeeReceiver = _buybackFeeReceiver (#496)
Check that the address is not zero.
Additional information: link
Reentrancy in TheGreenest._transferFrom(address,address,uint256) (#300-329):
External calls:
- swapBack() (#318)
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(amountToSwap,0,path,address(this),block.timestamp) (#411-417)
- (CoinSuccess) = address(coinFeeReceiver).call{gas: 30000,value: amountBNBCoin}() (#425)
- (BuyBackSuccess) = address(buybackFeeReceiver).call{gas: 30000,value: amountBNBbuyback}() (#427)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,coinFeeReceiver,block.timestamp) (#431-438)
External calls sending eth:
- swapBack() (#318)
- (CoinSuccess) = address(coinFeeReceiver).call{gas: 30000,value: amountBNBCoin}() (#425)
- (BuyBackSuccess) = address(buybackFeeReceiver).call{gas: 30000,value: amountBNBbuyback}() (#427)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,coinFeeReceiver,block.timestamp) (#431-438)
State variables written after the call(s):
- launch() (#320)
- launchedAt = block.number (#461)
Reentrancy in TheGreenest.constructor() (#244-265):
External calls:
- pair = IDEXFactory(router.factory()).createPair(WBNB,address(this)) (#246)
State variables written after the call(s):
- _allowances[address(this)][address(router)] = type()(uint256).max (#247)
- _balances[_owner] = _totalSupply (#263)
- isFeeExempt[msg.sender] = true (#250)
- isTimelockExempt[msg.sender] = true (#258)
- isTimelockExempt[DEAD] = true (#259)
- isTimelockExempt[address(this)] = true (#260)
- isTxLimitExempt[owner] = true (#252)
- isTxLimitExempt[msg.sender] = true (#253)
- isTxLimitExempt[address(this)] = true (#254)
- isTxLimitExempt[routerAddress] = true (#255)
Apply the check-effects-interactions pattern.
Additional information: link
Reentrancy in TheGreenest._transferFrom(address,address,uint256) (#300-329):
External calls:
- swapBack() (#318)
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(amountToSwap,0,path,address(this),block.timestamp) (#411-417)
- (CoinSuccess) = address(coinFeeReceiver).call{gas: 30000,value: amountBNBCoin}() (#425)
- (BuyBackSuccess) = address(buybackFeeReceiver).call{gas: 30000,value: amountBNBbuyback}() (#427)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,coinFeeReceiver,block.timestamp) (#431-438)
External calls sending eth:
- swapBack() (#318)
- (CoinSuccess) = address(coinFeeReceiver).call{gas: 30000,value: amountBNBCoin}() (#425)
- (BuyBackSuccess) = address(buybackFeeReceiver).call{gas: 30000,value: amountBNBbuyback}() (#427)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,coinFeeReceiver,block.timestamp) (#431-438)
Event emitted after the call(s):
- Transfer(sender,address(this),feeAmount) (#380)
- amountReceived = takeFee(sender,recipient,amount) (#324)
- Transfer(sender,recipient,amountReceived) (#327)
Reentrancy in TheGreenest.constructor() (#244-265):
External calls:
- pair = IDEXFactory(router.factory()).createPair(WBNB,address(this)) (#246)
Event emitted after the call(s):
- Transfer(address(0),_owner,_totalSupply) (#264)
Reentrancy in TheGreenest.swapBack() (#400-441):
External calls:
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(amountToSwap,0,path,address(this),block.timestamp) (#411-417)
- (CoinSuccess) = address(coinFeeReceiver).call{gas: 30000,value: amountBNBCoin}() (#425)
- (BuyBackSuccess) = address(buybackFeeReceiver).call{gas: 30000,value: amountBNBbuyback}() (#427)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,coinFeeReceiver,block.timestamp) (#431-438)
External calls sending eth:
- (CoinSuccess) = address(coinFeeReceiver).call{gas: 30000,value: amountBNBCoin}() (#425)
- (BuyBackSuccess) = address(buybackFeeReceiver).call{gas: 30000,value: amountBNBbuyback}() (#427)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,coinFeeReceiver,block.timestamp) (#431-438)
Event emitted after the call(s):
- AutoLiquify(amountBNBLiquidity,amountToLiquify) (#439)
Apply the check-effects-interactions pattern.
Additional information: link
TheGreenest._transferFrom(address,address,uint256) (#300-329) uses timestamp for comparisons
Dangerous comparisons:
- require(bool,string)(cooldownTimer[recipient] < block.timestamp,Please wait for 1min between two operations) (#315)
TheGreenest.checkTxLimit(address,address,uint256) (#338-363) uses timestamp for comparisons
Dangerous comparisons:
- require(bool,string)(_lastSell[sender] + _coolDown < block.timestamp,Wait a bit longer) (#359)
Avoid relying on block.timestamp.
Additional information: link
TheGreenest.buyTokens(uint256,address) (#443-454) is never used and should be removed
Remove unused functions.
Additional information: link
TheGreenest._maxTxAmount (#204) is set pre-construction with a non-constant function or state variable:
- (_totalSupply * 4) / 1000
TheGreenest._maxWalletSize (#205) is set pre-construction with a non-constant function or state variable:
- (_totalSupply * 2) / 100
TheGreenest._maxTxAmountSell (#206) is set pre-construction with a non-constant function or state variable:
- _totalSupply / 500
TheGreenest.swapThreshold (#235) is set pre-construction with a non-constant function or state variable:
- _totalSupply / 1000 * 3
Remove any initialization of state variables via non-constant state variables or function calls. If variables must be set upon contract deployment, locate initialization in the constructor instead.
Additional information: link
Pragma version^0.8.11 (#12) necessitates a version too recent to be trusted. Consider deploying with 0.6.12/0.7.6/0.8.7
solc-0.8.11 is not recommended for deployment
Deploy with any of the following Solidity versions: 0.5.16 - 0.5.17, 0.6.11 - 0.6.12, 0.7.5 - 0.7.6 Use a simple pragma version that allows any of these versions. Consider using the latest version of Solidity for testing.
Additional information: link
Low level call in TheGreenest.swapBack() (#400-441):
- (CoinSuccess) = address(coinFeeReceiver).call{gas: 30000,value: amountBNBCoin}() (#425)
- (BuyBackSuccess) = address(buybackFeeReceiver).call{gas: 30000,value: amountBNBbuyback}() (#427)
Avoid low-level calls. Check the call success. If the call is meant for a contract, check for code existence
Additional information: link
TheGreenest.slitherConstructorVariables() (#191-544) uses literals with too many digits:
- DEAD = 0x000000000000000000000000000000000000dEaD (#195)
TheGreenest.slitherConstructorVariables() (#191-544) uses literals with too many digits:
- ZERO = 0x0000000000000000000000000000000000000000 (#196)
Use: Ether suffix, Time suffix, or The scientific notation
Additional information: link
authorize(address) should be declared external:
- Auth.authorize(address) (#101-103)
unauthorize(address) should be declared external:
- Auth.unauthorize(address) (#109-111)
transferOwnership(address) should be declared external:
- Auth.transferOwnership(address) (#130-134)
lastSold(address) should be declared external:
- TheGreenest.lastSold(address) (#275)
tradingStatus(bool) should be declared external:
- TheGreenest.tradingStatus(bool) (#386-391)
cooldownEnabled(bool,uint8) should be declared external:
- TheGreenest.cooldownEnabled(bool,uint8) (#480-483)
blacklistAddress(address,bool) should be declared external:
- TheGreenest.blacklistAddress(address,bool) (#516-518)
transferForeignToken(address) should be declared external:
- TheGreenest.transferForeignToken(address) (#524-528)
isOverLiquified(uint256,uint256) should be declared external:
- TheGreenest.isOverLiquified(uint256,uint256) (#538-540)
Use the external attribute for functions never called from the contract.
Additional information: link
Unable to find website, listings and other project-related information
Young tokens have high risks of scam / price dump / death
Token has no active CoinGecko listing / rank
Token has no active CoinMarketCap listing / rank
Unable to find Telegram and Twitter accounts