Reentrancy in HUNTER._transfer(address,address,uint256) (#571-611):
External calls:
- swapAndSendToFee(sellTokens) (#597)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#645-651)
External calls sending eth:
- swapAndSendToFee(sellTokens) (#597)
- address(_marketingWallet).transfer(ethToSend) (#618)
State variables written after the call(s):
- _tOwned[from] -= amount (#601)
- transferAmount = _getValues(amount,from) (#606)
- _tOwned[address(this)] += marketingFee + liquidityFee (#553)
- _tOwned[to] += transferAmount (#609)
- swapping = false (#598)
Apply the check-effects-interactions pattern.
Additional information: link
Unable to find manual contract audit (e.g. Certik, PeckShield, Solidity...)
Contract ownership is not renounced (belongs to a wallet)
HUNTER.allowance(address,address).owner (#513) shadows:
- Ownable.owner() (#188-190) (function)
HUNTER._approve(address,address,uint256).owner (#563) shadows:
- Ownable.owner() (#188-190) (function)
Rename the local variables that shadow another component.
Additional information: link
Reentrancy in HUNTER.constructor() (#460-486):
External calls:
- _uniswapV2Pair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#465)
State variables written after the call(s):
- _isExcludedFromFee[owner()] = true (#471)
- _isExcludedFromFee[address(this)] = true (#472)
- _isExcludedFromFee[_marketingWallet] = true (#473)
- isTxLimitExempt[owner()] = true (#480)
- isTxLimitExempt[address(this)] = true (#481)
- isTxLimitExempt[_marketingWallet] = true (#482)
- isWalletLimitExempt[owner()] = true (#475)
- isWalletLimitExempt[address(uniswapV2Pair)] = true (#476)
- isWalletLimitExempt[address(this)] = true (#477)
- isWalletLimitExempt[_marketingWallet] = true (#478)
- uniswapV2Pair = _uniswapV2Pair (#468)
- uniswapV2Router = _uniswapV2Router (#467)
Reentrancy in HUNTER.swapAndLiquify() (#621-633):
External calls:
- newBalance = swapTokensForEth(half) (#626)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#645-651)
- addLiquidity(otherHalf,newBalance) (#630)
- (ethFromLiquidity) = uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#660-667)
- (success) = recipient.call{value: amount}() (#131)
- address(_marketingWallet).sendValue(ethAmount - ethFromLiquidity) (#670)
External calls sending eth:
- addLiquidity(otherHalf,newBalance) (#630)
- (ethFromLiquidity) = uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#660-667)
- (success) = recipient.call{value: amount}() (#131)
State variables written after the call(s):
- addLiquidity(otherHalf,newBalance) (#630)
- _allowances[owner][spender] = amount (#567)
Reentrancy in HUNTER.transferFrom(address,address,uint256) (#522-526):
External calls:
- _transfer(sender,recipient,amount) (#523)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#645-651)
External calls sending eth:
- _transfer(sender,recipient,amount) (#523)
- address(_marketingWallet).transfer(ethToSend) (#618)
State variables written after the call(s):
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()] - amount) (#524)
- _allowances[owner][spender] = amount (#567)
Apply the check-effects-interactions pattern.
Additional information: link
Reentrancy in HUNTER._transfer(address,address,uint256) (#571-611):
External calls:
- swapAndSendToFee(sellTokens) (#597)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#645-651)
External calls sending eth:
- swapAndSendToFee(sellTokens) (#597)
- address(_marketingWallet).transfer(ethToSend) (#618)
Event emitted after the call(s):
- Transfer(from,address(this),marketingFee + liquidityFee) (#554)
- transferAmount = _getValues(amount,from) (#606)
- Transfer(from,to,transferAmount) (#610)
Reentrancy in HUNTER.constructor() (#460-486):
External calls:
- _uniswapV2Pair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#465)
Event emitted after the call(s):
- Transfer(address(0),_msgSender(),_tTotal) (#485)
Reentrancy in HUNTER.swapAndLiquify() (#621-633):
External calls:
- newBalance = swapTokensForEth(half) (#626)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#645-651)
- addLiquidity(otherHalf,newBalance) (#630)
- (ethFromLiquidity) = uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#660-667)
- (success) = recipient.call{value: amount}() (#131)
- address(_marketingWallet).sendValue(ethAmount - ethFromLiquidity) (#670)
External calls sending eth:
- addLiquidity(otherHalf,newBalance) (#630)
- (ethFromLiquidity) = uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#660-667)
- (success) = recipient.call{value: amount}() (#131)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#568)
- addLiquidity(otherHalf,newBalance) (#630)
- SwapAndLiquify(half,newBalance,otherHalf) (#631)
Reentrancy in HUNTER.transferFrom(address,address,uint256) (#522-526):
External calls:
- _transfer(sender,recipient,amount) (#523)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#645-651)
External calls sending eth:
- _transfer(sender,recipient,amount) (#523)
- address(_marketingWallet).transfer(ethToSend) (#618)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#568)
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()] - amount) (#524)
Apply the check-effects-interactions pattern.
Additional information: link
HUNTER._transfer(address,address,uint256) (#571-611) uses timestamp for comparisons
Dangerous comparisons:
- require(bool,string)(_lastBuy[to] + _buyCooldown < block.timestamp,Must wait til after coooldown to buy) (#589)
HUNTER.addLiquidity(uint256,uint256) (#655-671) uses timestamp for comparisons
Dangerous comparisons:
- ethAmount - ethFromLiquidity > 0 (#669)
Avoid relying on block.timestamp.
Additional information: link
Address.isContract(address) (#115-124) uses assembly
- INLINE ASM (#122)
Address._functionCallWithValue(address,bytes,uint256,string) (#154-173) uses assembly
- INLINE ASM (#165-168)
Do not use evm assembly.
Additional information: link
Address._functionCallWithValue(address,bytes,uint256,string) (#154-173) is never used and should be removed
Address.functionCall(address,bytes) (#136-138) is never used and should be removed
Address.functionCall(address,bytes,string) (#141-143) is never used and should be removed
Address.functionCallWithValue(address,bytes,uint256) (#145-147) is never used and should be removed
Address.functionCallWithValue(address,bytes,uint256,string) (#149-152) is never used and should be removed
Address.isContract(address) (#115-124) is never used and should be removed
Address.sendValue(address,uint256) (#127-133) is never used and should be removed
Context._msgData() (#105-108) is never used and should be removed
HUNTER.addLiquidity(uint256,uint256) (#655-671) is never used and should be removed
HUNTER.swapAndLiquify() (#621-633) is never used and should be removed
SafeMath.add(uint256,uint256) (#41-46) is never used and should be removed
SafeMath.div(uint256,uint256) (#75-77) is never used and should be removed
SafeMath.div(uint256,uint256,string) (#80-86) is never used and should be removed
SafeMath.mod(uint256,uint256) (#89-91) is never used and should be removed
SafeMath.mod(uint256,uint256,string) (#94-97) is never used and should be removed
SafeMath.mul(uint256,uint256) (#62-72) is never used and should be removed
SafeMath.sub(uint256,uint256) (#49-51) is never used and should be removed
SafeMath.sub(uint256,uint256,string) (#54-59) is never used and should be removed
Remove unused functions.
Additional information: link
Low level call in Address.sendValue(address,uint256) (#127-133):
- (success) = recipient.call{value: amount}() (#131)
Low level call in Address._functionCallWithValue(address,bytes,uint256,string) (#154-173):
- (success,returndata) = target.call{value: weiValue}(data) (#158)
Avoid low-level calls. Check the call success. If the call is meant for a contract, check for code existence
Additional information: link
Function IUniswapV2Pair.DOMAIN_SEPARATOR() (#245) is not in mixedCase
Function IUniswapV2Pair.PERMIT_TYPEHASH() (#246) is not in mixedCase
Function IUniswapV2Pair.MINIMUM_LIQUIDITY() (#263) is not in mixedCase
Function IUniswapV2Router01.WETH() (#285) is not in mixedCase
Variable HUNTER.SwapAndLiquifyEnabled (#430) is not in mixedCase
Variable HUNTER._maxTxAmount (#438) is not in mixedCase
Constant HUNTER._name (#440) is not in UPPER_CASE_WITH_UNDERSCORES
Constant HUNTER._symbol (#441) is not in UPPER_CASE_WITH_UNDERSCORES
Constant HUNTER._decimals (#442) is not in UPPER_CASE_WITH_UNDERSCORES
Variable HUNTER._marketingFee (#444) is not in mixedCase
Variable HUNTER._liquidityFee (#445) is not in mixedCase
Variable HUNTER._marketingWallet (#446) is not in mixedCase
Variable HUNTER._buyCooldown (#448) is not in mixedCase
Follow the Solidity naming convention.
Additional information: link
Redundant expression "this (#106)" inContext (#100-109)
Remove redundant statements if they congest code but offer no value.
Additional information: link
Reentrancy in HUNTER._transfer(address,address,uint256) (#571-611):
External calls:
- swapAndSendToFee(sellTokens) (#597)
- address(_marketingWallet).transfer(ethToSend) (#618)
State variables written after the call(s):
- _tOwned[from] -= amount (#601)
- transferAmount = _getValues(amount,from) (#606)
- _tOwned[address(this)] += marketingFee + liquidityFee (#553)
- _tOwned[to] += transferAmount (#609)
- swapping = false (#598)
Event emitted after the call(s):
- Transfer(from,address(this),marketingFee + liquidityFee) (#554)
- transferAmount = _getValues(amount,from) (#606)
- Transfer(from,to,transferAmount) (#610)
Reentrancy in HUNTER.transferFrom(address,address,uint256) (#522-526):
External calls:
- _transfer(sender,recipient,amount) (#523)
- address(_marketingWallet).transfer(ethToSend) (#618)
State variables written after the call(s):
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()] - amount) (#524)
- _allowances[owner][spender] = amount (#567)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#568)
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()] - amount) (#524)
Apply the check-effects-interactions pattern.
Additional information: link
Variable IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountADesired (#290) is too similar to IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountBDesired (#291)
Prevent variables from having similar names.
Additional information: link
Address.sendValue(address,uint256) (#127-133) uses literals with too many digits:
- recipient = address(0x000000000000000000000000000000000000dEaD) (#129)
HUNTER.slitherConstructorVariables() (#422-673) uses literals with too many digits:
- _tTotal = 1000000000 * 10 ** 9 (#437)
HUNTER.slitherConstructorVariables() (#422-673) uses literals with too many digits:
- _maxTxAmount = 20000000 * 10 ** 9 (#438)
HUNTER.slitherConstructorConstantVariables() (#422-673) uses literals with too many digits:
- SWAP_TOKENS_AT_AMOUNT = 2000000 * 10 ** 9 (#439)
Use: Ether suffix, Time suffix, or The scientific notation
Additional information: link
Ownable._previousOwner (#178) is never used in HUNTER (#422-673)
Ownable._lockTime (#179) is never used in HUNTER (#422-673)
Remove unused state variables.
Additional information: link
HUNTER.SwapAndLiquifyEnabled (#430) should be constant
HUNTER._buyCooldown (#448) should be constant
HUNTER._liquidityFee (#445) should be constant
HUNTER._marketingFee (#444) should be constant
HUNTER._marketingWallet (#446) should be constant
HUNTER._maxTxAmount (#438) should be constant
HUNTER._tTotal (#437) should be constant
Ownable._lockTime (#179) should be constant
Ownable._previousOwner (#178) should be constant
Add the constant attributes to state variables that never change.
Additional information: link
renounceOwnership() should be declared external:
- Ownable.renounceOwnership() (#198-201)
transferOwnership(address) should be declared external:
- Ownable.transferOwnership(address) (#204-208)
name() should be declared external:
- HUNTER.name() (#488-490)
symbol() should be declared external:
- HUNTER.symbol() (#492-494)
decimals() should be declared external:
- HUNTER.decimals() (#496-498)
totalSupply() should be declared external:
- HUNTER.totalSupply() (#500-502)
transfer(address,uint256) should be declared external:
- HUNTER.transfer(address,uint256) (#508-511)
allowance(address,address) should be declared external:
- HUNTER.allowance(address,address) (#513-515)
approve(address,uint256) should be declared external:
- HUNTER.approve(address,uint256) (#517-520)
transferFrom(address,address,uint256) should be declared external:
- HUNTER.transferFrom(address,address,uint256) (#522-526)
increaseAllowance(address,uint256) should be declared external:
- HUNTER.increaseAllowance(address,uint256) (#528-531)
decreaseAllowance(address,uint256) should be declared external:
- HUNTER.decreaseAllowance(address,uint256) (#533-536)
excludeFromFee(address) should be declared external:
- HUNTER.excludeFromFee(address) (#537-539)
includeInFee(address) should be declared external:
- HUNTER.includeInFee(address) (#541-543)
isExcludedFromFee(address) should be declared external:
- HUNTER.isExcludedFromFee(address) (#559-561)
Use the external attribute for functions never called from the contract.
Additional information: link
Contract ticker ($HUNTER) contains non-alphanumeric characters.
Not a direct threat, but may indicate unreliable intentions of developer. Non-alphanumeric chars (,.;!#*&") are extremely rare among low risk tokens.
Average 30d PancakeSwap liquidity is less than $100. Token is either dead or inactive.
Average 30d PancakeSwap volume is less than $100. Token is either dead or inactive.
Number of Binance Smart Chain (BSC) token holders is less than 100. Token is either dead or inactive. Ignore for presale.
Contract has 8% buy tax and 9% sell tax.
Taxes are low but contract ownership is not renounced. Token has a high risk of becoming a honeypot.
Average 30d number of PancakeSwap swaps is low.
Token is deployed only at one blockchain
Token has only one trading pair
Unable to find website, listings and other project-related information
Young tokens have high risks of scam / price dump / death
Token has no active CoinGecko listing / rank
Token has no active CoinMarketCap listing / rank
Unable to find Telegram and Twitter accounts