HPAD [HarmonyPad] Token

Unable to find manual contract audit (e.g. Certik, PeckShield, Solidity...)

Contract creator or owner is blacklisted for past scams

HarmonyPad.setFeePercentage(uint8) (#293-298) contains a tautology or contradiction:
- require(bool,string)(feePercentage_ >= 0,HarmonyPad: transaction fee percentage equals 0) (#295)
Fix the incorrect comparison by changing the value type or the comparison.

Additional information: link

Contract ownership is not renounced (belongs to a wallet)

HarmonyPad.constructor(address).beneficiaryAddress_ (#213) lacks a zero-check on :
- beneficiaryAddress = beneficiaryAddress_ (#214)
HarmonyPad.setBeneficiaryAddress(address).beneficiaryAddress_ (#300) lacks a zero-check on :
- beneficiaryAddress = beneficiaryAddress_ (#301)
Check that the address is not zero.

Additional information: link

Reentrancy in HarmonyPad._transfer(address,address,uint256) (#321-357):
External calls:
- BP.protect(sender,recipient,amount) (#330)
State variables written after the call(s):
- _balances[sender] = senderBalance - amount (#336)
- _balances[recipient] += receiveAmount (#346)
- _balances[beneficiaryAddress] += feeAmount (#350)
- _balances[recipient] += receiveAmount (#351)
Reentrancy in HarmonyPad.transferFrom(address,address,uint256) (#248-262):
External calls:
- _transfer(sender,recipient,amount) (#253)
- BP.protect(sender,recipient,amount) (#330)
State variables written after the call(s):
- _approve(sender,_msgSender(),currentAllowance - amount) (#258)
- _allowances[owner][spender] = amount (#380)
Apply the check-effects-interactions pattern.

Additional information: link

Reentrancy in HarmonyPad._transfer(address,address,uint256) (#321-357):
External calls:
- BP.protect(sender,recipient,amount) (#330)
Event emitted after the call(s):
- Transfer(sender,beneficiaryAddress,feeAmount) (#353)
- Transfer(sender,recipient,receiveAmount) (#356)
- TransferFee(sender,beneficiaryAddress,feeAmount) (#352)
Reentrancy in HarmonyPad.transferFrom(address,address,uint256) (#248-262):
External calls:
- _transfer(sender,recipient,amount) (#253)
- BP.protect(sender,recipient,amount) (#330)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#381)
- _approve(sender,_msgSender(),currentAllowance - amount) (#258)
Apply the check-effects-interactions pattern.

Additional information: link

Context._msgData() (#102-105) is never used and should be removed
Remove unused functions.

Additional information: link

Redundant expression "this (#103)" inContext (#97-106)
Remove redundant statements if they congest code but offer no value.

Additional information: link

Pragma version^0.8.0 (#3) allows old versions
Pragma version^0.8.0 (#85) allows old versions
Pragma version^0.8.0 (#110) allows old versions
Pragma version^0.8.0 (#178) allows old versions
solc-0.8.10 is not recommended for deployment
Deploy with any of the following Solidity versions: 0.5.16 - 0.5.17, 0.6.11 - 0.6.12, 0.7.5 - 0.7.6 Use a simple pragma version that allows any of these versions. Consider using the latest version of Solidity for testing.

Additional information: link

Parameter HarmonyPad.setTradingEnabled(bool)._tradingEnabled (#220) is not in mixedCase
Parameter HarmonyPad.setBPAddrss(address)._bp (#279) is not in mixedCase
Parameter HarmonyPad.setBpEnabled(bool)._enabled (#284) is not in mixedCase
Variable HarmonyPad.BP (#205) is not in mixedCase
Variable HarmonyPad.BPDisabledForever (#207) is not in mixedCase
Follow the Solidity naming convention.

Additional information: link

renounceOwnership() should be declared external:
- Ownable.renounceOwnership() (#160-163)
transferOwnership(address) should be declared external:
- Ownable.transferOwnership(address) (#169-173)
Use the external attribute for functions never called from the contract.

Additional information: link

HarmonyPad.allowance(address,address).owner (#317) shadows:
- Ownable.owner() (#141-143) (function)
HarmonyPad._approve(address,address,uint256).owner (#373) shadows:
- Ownable.owner() (#141-143) (function)
Rename the local variables that shadow another component.

Additional information: link

HarmonyPad.setBotProtectionDisableForever() (#288-291) compares to a boolean constant:
-require(bool)(BPDisabledForever == false) (#289)
Remove the equality to the boolean constant.

Additional information: link

Average 30d PancakeSwap liquidity is less than $100. Token is either dead or inactive.

Average 30d number of PancakeSwap swaps is less than 1. Token is either dead or inactive.

Average 30d PancakeSwap volume is less than $100. Token is either dead or inactive.

Average PancakeSwap trading volume, liqudity, number of swaps are extremely low. Token seems to be dead.

Contract has 3% buy tax and 0% sell tax.
Taxes are low but contract ownership is not renounced. Token has a high risk of becoming a honeypot.

Token is deployed only at one blockchain

Token was delisted from CoinGecko

Additional information: link

Token was delisted (assigned to inactive / untracked listing) from CoinMarketCap

Additional information: link

BscScan page for the token does not contain additional info: website, socials, description, etc.

Additional information: link

Unable to find token contract audit

Token is not listed at Mobula.Finance

Additional information: link

Unable to find audit link on the website

Unable to find token on CoinHunt

Additional information: link

Unable to find code repository for the project

Token is marked as scam (rug pull, honeypot, phishing, etc.)

Additional information: link

Token has no active CoinGecko listing / rank

Token has no active CoinMarketCap listing / rank

Token has a considerable age, but average PancakeSwap 30d trading volume is low

Young tokens have high risks of price dump / death

Young tokens have high risks of price dump / death

Young tokens have high risks of price dump / death