Reentrancy in HashishCoin._transfer(address,address,uint256) (#489-547):
External calls:
- Liquify(feeswap,currentTaxes) (#535)
- router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,deadWallet,block.timestamp) (#611-618)
- (success) = recipient.call{value: amount}() (#313)
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#597-603)
- address(marketingWallet).sendValue(marketingAmt) (#582)
External calls sending eth:
- Liquify(feeswap,currentTaxes) (#535)
- router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,deadWallet,block.timestamp) (#611-618)
- (success) = recipient.call{value: amount}() (#313)
State variables written after the call(s):
- super._transfer(sender,recipient,amount - fee) (#538)
- _balances[sender] = senderBalance - amount (#266)
- _balances[recipient] += amount (#267)
- super._transfer(sender,address(this),feeAmount) (#543)
- _balances[sender] = senderBalance - amount (#266)
- _balances[recipient] += amount (#267)
Apply the check-effects-interactions pattern.
Additional information: link
HashishCoin.rescueBSC20(address,uint256) (#664-667) ignores return value by IBEP20(tokenAdd).transfer(owner(),amount) (#666)
Use SafeERC20, or ensure that the transfer/transferFrom return value is checked.
Additional information: link
Unable to find manual contract audit (e.g. Certik, PeckShield, Solidity...)
HashishCoin._transfer(address,address,uint256).fee (#502) is written in both
fee = 0 (#511)
fee = (amount * feesum) / 100 (#531)
Fix or remove the writes.
Additional information: link
Combination 3: Reentrancy vulnerabilities + Unchecked transfer vulnerability. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.
Contract ownership is not renounced (belongs to a wallet)
HashishCoin.Liquify(uint256,HashishCoin.Taxes) (#549-586) performs a multiplication on the result of a division:
-unitBalance = deltaBalance / (denominator - swapTaxes.liquidity) (#572)
-ethToAddLiquidityWith = unitBalance * swapTaxes.liquidity (#573)
HashishCoin.Liquify(uint256,HashishCoin.Taxes) (#549-586) performs a multiplication on the result of a division:
-unitBalance = deltaBalance / (denominator - swapTaxes.liquidity) (#572)
-marketingAmt = unitBalance * 2 * swapTaxes.marketing (#580)
Consider ordering multiplication before division.
Additional information: link
HashishCoin._transfer(address,address,uint256).feesum (#501) is a local variable never initialized
HashishCoin._transfer(address,address,uint256).currentTaxes (#503) is a local variable never initialized
HashishCoin._transfer(address,address,uint256).feeswap (#500) is a local variable never initialized
Initialize all the variables. If a variable is meant to be initialized to zero, explicitly set it to zero to improve code readability.
Additional information: link
HashishCoin.addLiquidity(uint256,uint256) (#606-619) ignores return value by router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,deadWallet,block.timestamp) (#611-618)
Ensure that all the return values of the function calls are used.
Additional information: link
HashishCoin.updateLiquidityTreshhold(uint256) (#626-630) should emit an event for:
- tokenLiquidityThreshold = new_amount * 10 ** decimals() (#629)
HashishCoin.updatedeadline(uint256) (#639-643) should emit an event for:
- deadline = _deadline (#642)
Emit an event for critical parameter changes.
Additional information: link
Modifier HashishCoin.lockTheSwap() (#418-424) does not always execute _; or revert
All the paths in a modifier must execute _ or revert.
Additional information: link
Reentrancy in HashishCoin.transferFrom(address,address,uint256) (#449-461):
External calls:
- _transfer(sender,recipient,amount) (#454)
- router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,deadWallet,block.timestamp) (#611-618)
- (success) = recipient.call{value: amount}() (#313)
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#597-603)
- address(marketingWallet).sendValue(marketingAmt) (#582)
External calls sending eth:
- _transfer(sender,recipient,amount) (#454)
- router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,deadWallet,block.timestamp) (#611-618)
- (success) = recipient.call{value: amount}() (#313)
State variables written after the call(s):
- _approve(sender,_msgSender(),currentAllowance - amount) (#458)
- _allowances[owner][spender] = amount (#304)
Reentrancy in HashishCoin.Liquify(uint256,HashishCoin.Taxes) (#549-586):
External calls:
- swapTokensForETH(toSwap) (#569)
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#597-603)
- addLiquidity(tokensToAddLiquidityWith,ethToAddLiquidityWith) (#577)
- router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,deadWallet,block.timestamp) (#611-618)
External calls sending eth:
- addLiquidity(tokensToAddLiquidityWith,ethToAddLiquidityWith) (#577)
- router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,deadWallet,block.timestamp) (#611-618)
State variables written after the call(s):
- addLiquidity(tokensToAddLiquidityWith,ethToAddLiquidityWith) (#577)
- _allowances[owner][spender] = amount (#304)
Apply the check-effects-interactions pattern.
Additional information: link
Reentrancy in HashishCoin.transferFrom(address,address,uint256) (#449-461):
External calls:
- _transfer(sender,recipient,amount) (#454)
- router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,deadWallet,block.timestamp) (#611-618)
- (success) = recipient.call{value: amount}() (#313)
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#597-603)
- address(marketingWallet).sendValue(marketingAmt) (#582)
External calls sending eth:
- _transfer(sender,recipient,amount) (#454)
- router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,deadWallet,block.timestamp) (#611-618)
- (success) = recipient.call{value: amount}() (#313)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#305)
- _approve(sender,_msgSender(),currentAllowance - amount) (#458)
Reentrancy in HashishCoin.Liquify(uint256,HashishCoin.Taxes) (#549-586):
External calls:
- swapTokensForETH(toSwap) (#569)
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#597-603)
- addLiquidity(tokensToAddLiquidityWith,ethToAddLiquidityWith) (#577)
- router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,deadWallet,block.timestamp) (#611-618)
External calls sending eth:
- addLiquidity(tokensToAddLiquidityWith,ethToAddLiquidityWith) (#577)
- router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,deadWallet,block.timestamp) (#611-618)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#305)
- addLiquidity(tokensToAddLiquidityWith,ethToAddLiquidityWith) (#577)
Reentrancy in HashishCoin._transfer(address,address,uint256) (#489-547):
External calls:
- Liquify(feeswap,currentTaxes) (#535)
- router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,deadWallet,block.timestamp) (#611-618)
- (success) = recipient.call{value: amount}() (#313)
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#597-603)
- address(marketingWallet).sendValue(marketingAmt) (#582)
External calls sending eth:
- Liquify(feeswap,currentTaxes) (#535)
- router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,deadWallet,block.timestamp) (#611-618)
- (success) = recipient.call{value: amount}() (#313)
Event emitted after the call(s):
- Transfer(sender,recipient,amount) (#269)
- super._transfer(sender,address(this),feeAmount) (#543)
- Transfer(sender,recipient,amount) (#269)
- super._transfer(sender,recipient,amount - fee) (#538)
Apply the check-effects-interactions pattern.
Additional information: link
Context._msgData() (#10-13) is never used and should be removed
Remove unused functions.
Additional information: link
solc-0.8.17 is not recommended for deployment
Pragma version^0.8.8 (#3) is known to contain severe issues (https://solidity.readthedocs.io/en/latest/bugs.html)
Deploy with any of the following Solidity versions: 0.5.16 - 0.5.17, 0.6.11 - 0.6.12, 0.7.5 - 0.7.6 Use a simple pragma version that allows any of these versions. Consider using the latest version of Solidity for testing.
Additional information: link
Low level call in Address.sendValue(address,uint256) (#310-315):
- (success) = recipient.call{value: amount}() (#313)
Avoid low-level calls. Check the call success. If the call is meant for a contract, check for code existence
Additional information: link
Parameter HashishCoin.updatedeadline(uint256)._deadline (#639) is not in mixedCase
Function HashishCoin.EnableTrading() (#632-637) is not in mixedCase
Function HashishCoin.Liquify(uint256,HashishCoin.Taxes) (#549-586) is not in mixedCase
Parameter HashishCoin.updateExemptFee(address,bool)._address (#650) is not in mixedCase
Parameter HashishCoin.updateLiquidityTreshhold(uint256).new_amount (#626) is not in mixedCase
Function IRouter.WETH() (#359) is not in mixedCase
Variable BEP20._balances (#56) is not in mixedCase
Constant HashishCoin.deadWallet (#403) is not in UPPER_CASE_WITH_UNDERSCORES
Variable BEP20._allowances (#58) is not in mixedCase
Variable HashishCoin.genesis_block (#398) is not in mixedCase
Follow the Solidity naming convention.
Additional information: link
Redundant expression "this (#11)" inContext (#5-14)
Remove redundant statements if they congest code but offer no value.
Additional information: link
HashishCoin.slitherConstructorConstantVariables() (#386-672) uses literals with too many digits:
- deadWallet = 0x000000000000000000000000000000000000dEaD (#403)
Use: Ether suffix, Time suffix, or The scientific notation
Additional information: link
HashishCoin._lastSell (#416) is never used in HashishCoin (#386-672)
Remove unused state variables.
Additional information: link
HashishCoin.launchtax (#400) should be constant
Add the constant attributes to state variables that never change.
Additional information: link
transfer(address,uint256) should be declared external:
- BEP20.transfer(address,uint256) (#133-141)
- HashishCoin.transfer(address,uint256) (#484-487)
symbol() should be declared external:
- BEP20.symbol() (#90-92)
renounceOwnership() should be declared external:
- Ownable.renounceOwnership() (#336-338)
approve(address,uint256) should be declared external:
- BEP20.approve(address,uint256) (#163-166)
- HashishCoin.approve(address,uint256) (#444-447)
decreaseAllowance(address,uint256) should be declared external:
- BEP20.decreaseAllowance(address,uint256) (#230-240)
- HashishCoin.decreaseAllowance(address,uint256) (#472-482)
name() should be declared external:
- BEP20.name() (#82-84)
transferFrom(address,address,uint256) should be declared external:
- BEP20.transferFrom(address,address,uint256) (#181-193)
- HashishCoin.transferFrom(address,address,uint256) (#449-461)
increaseAllowance(address,uint256) should be declared external:
- BEP20.increaseAllowance(address,uint256) (#207-214)
- HashishCoin.increaseAllowance(address,uint256) (#463-470)
transferOwnership(address) should be declared external:
- Ownable.transferOwnership(address) (#340-343)
allowance(address,address) should be declared external:
- BEP20.allowance(address,address) (#146-154)
totalSupply() should be declared external:
- BEP20.totalSupply() (#114-116)
Use the external attribute for functions never called from the contract.
Additional information: link
Contract ticker (HA$H) contains non-alphanumeric characters.
Not a direct threat, but may indicate unreliable intentions of developer. Non-alphanumeric chars (,.;!#*&") are extremely rare among low risk tokens.
Unable to find website, listings and other project-related information
Young tokens have high risks of scam / price dump / death
Token has no active CoinGecko listing / rank
Token has no active CoinMarketCap listing / rank
Unable to find Telegram and Twitter accounts