IPFSNFT Token

IPFSNFT.addLiquidity(uint256,uint256) (#1187-1196) sends eth to arbitrary user
Dangerous calls:
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,_tokenOwner,block.timestamp) (#1188-1195)
Ensure that an arbitrary user cannot withdraw unauthorized funds.

Additional information: link

Reentrancy in IPFSNFT._transfer(address,address,uint256) (#1125-1184):
External calls:
- swapAndLiquify() (#1148)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,_tokenOwner,block.timestamp) (#1188-1195)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1203-1209)
- swapAndLiquifyV3() (#1149)
- uniswapV2Router.swapExactTokensForTokensSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1246-1252)
- USDT.transfer(_fundAddress,(allUsdt.sub(haveUsdt)).div(5).mul(3)) (#1235)
External calls sending eth:
- swapAndLiquify() (#1148)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,_tokenOwner,block.timestamp) (#1188-1195)
State variables written after the call(s):
- swapping = false (#1150)
Reentrancy in IPFSNFT._transfer(address,address,uint256) (#1125-1184):
External calls:
- swapAndLiquify() (#1148)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,_tokenOwner,block.timestamp) (#1188-1195)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1203-1209)
- swapAndLiquifyV3() (#1149)
- uniswapV2Router.swapExactTokensForTokensSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1246-1252)
- USDT.transfer(_fundAddress,(allUsdt.sub(haveUsdt)).div(5).mul(3)) (#1235)
- _splitOtherToken() (#1159)
- USDT.transfer(user,thisAmount.mul(rate).div(1000000)) (#1280)
- USDT.transfer(user,thisAmount.mul(rate).div(1000000)) (#1290)
External calls sending eth:
- swapAndLiquify() (#1148)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,_tokenOwner,block.timestamp) (#1188-1195)
State variables written after the call(s):
- super._transfer(from,address(this),amount.div(100).mul(6)) (#1174)
- _balances[sender] = _balances[sender].sub(amount,ERC20: transfer amount exceeds balance) (#559-562)
- _balances[recipient] = _balances[recipient].add(amount) (#563)
- super._transfer(from,to,amount) (#1178)
- _balances[sender] = _balances[sender].sub(amount,ERC20: transfer amount exceeds balance) (#559-562)
- _balances[recipient] = _balances[recipient].add(amount) (#563)
- buyUser.push(from) (#1182)
- ldxAmount = ldxAmount.add(amount.div(100)) (#1175)
Apply the check-effects-interactions pattern.

Additional information: link

IPFSNFT.swapAndLiquifyV3() (#1226-1238) ignores return value by USDT.transfer(_fundAddress,(allUsdt.sub(haveUsdt)).div(5).mul(3)) (#1235)
IPFSNFT._splitOtherTokenSecond(uint256) (#1266-1296) ignores return value by USDT.transfer(user,thisAmount.mul(rate).div(1000000)) (#1280)
IPFSNFT._splitOtherTokenSecond(uint256) (#1266-1296) ignores return value by USDT.transfer(user,thisAmount.mul(rate).div(1000000)) (#1290)
Use SafeERC20, or ensure that the transfer/transferFrom return value is checked.

Additional information: link

Unable to find manual contract audit (e.g. Certik, PeckShield, Solidity...)

IPFSNFT._splitOtherTokenSecond(uint256) (#1266-1296) contains a tautology or contradiction:
- balanceOf(user) >= 0 (#1277)
IPFSNFT._splitOtherTokenSecond(uint256) (#1266-1296) contains a tautology or contradiction:
- balanceOf(user) >= 0 (#1287)
Fix the incorrect comparison by changing the value type or the comparison.

Additional information: link

Combination 1: Reentrancy vulnerabilities + Functions that send Ether to arbitraty destination. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.

Combination 2: Unchecked transfer + Functions that send Ether to arbitraty destination. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.

Combination 3: Reentrancy vulnerabilities + Unchecked transfer vulnerability. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.

IPFSNFT._transfer(address,address,uint256) (#1125-1184) performs a multiplication on the result of a division:
-super._transfer(from,address(this),amount.div(100).mul(6)) (#1174)
IPFSNFT._transfer(address,address,uint256) (#1125-1184) performs a multiplication on the result of a division:
-amount = amount.div(100).mul(94) (#1176)
IPFSNFT.swapAndLiquifyV3() (#1226-1238) performs a multiplication on the result of a division:
-USDT.transfer(_fundAddress,(allUsdt.sub(haveUsdt)).div(5).mul(3)) (#1235)
IPFSNFT._splitOtherTokenSecond(uint256) (#1266-1296) performs a multiplication on the result of a division:
-rate = pair.balanceOf(user).mul(1000000).div(totalAmount) (#1288)
-USDT.transfer(user,thisAmount.mul(rate).div(1000000)) (#1290)
IPFSNFT._splitOtherTokenSecond(uint256) (#1266-1296) performs a multiplication on the result of a division:
-rate = pair.balanceOf(user).mul(1000000).div(totalAmount) (#1278)
-USDT.transfer(user,thisAmount.mul(rate).div(1000000)) (#1280)
Consider ordering multiplication before division.

Additional information: link

IPFSNFT.addLiquidity(uint256,uint256) (#1187-1196) ignores return value by uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,_tokenOwner,block.timestamp) (#1188-1195)
Ensure that all the return values of the function calls are used.

Additional information: link

ERC20.allowance(address,address).owner (#415) shadows:
- Ownable.owner() (#278-280) (function)
ERC20._approve(address,address,uint256).owner (#641) shadows:
- Ownable.owner() (#278-280) (function)
Rename the local variables that shadow another component.

Additional information: link

IPFSNFT.setSwapTokensAtAmount(uint256) (#1112-1114) should emit an event for:
- swapTokensAtAmount = _swapTokensAtAmount (#1113)
Emit an event for critical parameter changes.

Additional information: link

Ownable.constructor().msgSender (#270) lacks a zero-check on :
- _owner = msgSender (#271)
IPFSNFT.constructor(address).tokenOwner (#1073) lacks a zero-check on :
- _tokenOwner = tokenOwner (#1080)
Check that the address is not zero.

Additional information: link

Reentrancy in IPFSNFT._transfer(address,address,uint256) (#1125-1184):
External calls:
- swapAndLiquify() (#1148)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,_tokenOwner,block.timestamp) (#1188-1195)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1203-1209)
- swapAndLiquifyV3() (#1149)
- uniswapV2Router.swapExactTokensForTokensSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1246-1252)
- USDT.transfer(_fundAddress,(allUsdt.sub(haveUsdt)).div(5).mul(3)) (#1235)
External calls sending eth:
- swapAndLiquify() (#1148)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,_tokenOwner,block.timestamp) (#1188-1195)
State variables written after the call(s):
- startTime = block.timestamp (#1155)
Reentrancy in IPFSNFT._transfer(address,address,uint256) (#1125-1184):
External calls:
- swapAndLiquify() (#1148)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,_tokenOwner,block.timestamp) (#1188-1195)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1203-1209)
- swapAndLiquifyV3() (#1149)
- uniswapV2Router.swapExactTokensForTokensSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1246-1252)
- USDT.transfer(_fundAddress,(allUsdt.sub(haveUsdt)).div(5).mul(3)) (#1235)
- _splitOtherToken() (#1159)
- USDT.transfer(user,thisAmount.mul(rate).div(1000000)) (#1280)
- USDT.transfer(user,thisAmount.mul(rate).div(1000000)) (#1290)
External calls sending eth:
- swapAndLiquify() (#1148)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,_tokenOwner,block.timestamp) (#1188-1195)
State variables written after the call(s):
- havePush[from] = true (#1181)
Reentrancy in IPFSNFT.constructor(address) (#1073-1089):
External calls:
- _uniswapV2Pair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#1075-1076)
State variables written after the call(s):
- USDT = IERC20(0x55d398326f99059fF775485246999027B3197955) (#1084)
- _approve(address(this),address(0x10ED43C718714eb63d5aA57B78B54704E256024E),10 ** 30) (#1077)
- _allowances[owner][spender] = amount (#648)
- _mint(tokenOwner,total) (#1088)
- _balances[account] = _balances[account].add(amount) (#597)
- excludeFromFees(tokenOwner,true) (#1082)
- _isExcludedFromFees[account] = excluded (#1101)
- excludeFromFees(address(this),true) (#1083)
- _isExcludedFromFees[account] = excluded (#1101)
- _tokenOwner = tokenOwner (#1080)
- _mint(tokenOwner,total) (#1088)
- _totalSupply = _totalSupply.add(amount) (#596)
- _setAutomatedMarketMakerPair(_uniswapV2Pair,true) (#1081)
- automatedMarketMakerPairs[pairaddress] = value (#1122)
- pair = IERC20(_uniswapV2Pair) (#1085)
- swapTokensAtAmount = total.div(50000) (#1087)
- total = 21 * 10 ** 23 (#1086)
- uniswapV2Pair = _uniswapV2Pair (#1079)
- uniswapV2Router = _uniswapV2Router (#1078)
Apply the check-effects-interactions pattern.

Additional information: link

Reentrancy in IPFSNFT._transfer(address,address,uint256) (#1125-1184):
External calls:
- swapAndLiquify() (#1148)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,_tokenOwner,block.timestamp) (#1188-1195)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1203-1209)
- swapAndLiquifyV3() (#1149)
- uniswapV2Router.swapExactTokensForTokensSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1246-1252)
- USDT.transfer(_fundAddress,(allUsdt.sub(haveUsdt)).div(5).mul(3)) (#1235)
- _splitOtherToken() (#1159)
- USDT.transfer(user,thisAmount.mul(rate).div(1000000)) (#1280)
- USDT.transfer(user,thisAmount.mul(rate).div(1000000)) (#1290)
External calls sending eth:
- swapAndLiquify() (#1148)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,_tokenOwner,block.timestamp) (#1188-1195)
Event emitted after the call(s):
- Transfer(sender,recipient,amount) (#564)
- super._transfer(from,address(this),amount.div(100).mul(6)) (#1174)
- Transfer(sender,recipient,amount) (#564)
- super._transfer(from,to,amount) (#1178)
Reentrancy in IPFSNFT.constructor(address) (#1073-1089):
External calls:
- _uniswapV2Pair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#1075-1076)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#649)
- _approve(address(this),address(0x10ED43C718714eb63d5aA57B78B54704E256024E),10 ** 30) (#1077)
- Transfer(address(0),account,amount) (#598)
- _mint(tokenOwner,total) (#1088)
Apply the check-effects-interactions pattern.

Additional information: link

IPFSNFT._transfer(address,address,uint256) (#1125-1184) uses timestamp for comparisons
Dangerous comparisons:
- startTime == 0 && balanceOf(uniswapV2Pair) == 0 && to == uniswapV2Pair (#1154)
- startTime.add(120) > block.timestamp (#1167)
Avoid relying on block.timestamp.

Additional information: link

Context._msgData() (#10-14) is never used and should be removed
ERC20._burn(address,uint256) (#612-623) is never used and should be removed
ERC20._transferTokenn(address,address,uint256) (#567-580) is never used and should be removed
SafeMath.mod(uint256,uint256) (#803-805) is never used and should be removed
SafeMath.mod(uint256,uint256,string) (#819-826) is never used and should be removed
Remove unused functions.

Additional information: link

Function IUniswapV2Pair.DOMAIN_SEPARATOR() (#50) is not in mixedCase
Function IUniswapV2Pair.PERMIT_TYPEHASH() (#52) is not in mixedCase
Function IUniswapV2Pair.MINIMUM_LIQUIDITY() (#83) is not in mixedCase
Function IUniswapV2Router01.WETH() (#832) is not in mixedCase
Parameter IPFSNFT.setSwapTokensAtAmount(uint256)._swapTokensAtAmount (#1112) is not in mixedCase
Parameter IPFSNFT.setSwapAndLiquifyEnabled(bool)._enabled (#1117) is not in mixedCase
Variable IPFSNFT._tokenOwner (#1040) is not in mixedCase
Variable IPFSNFT.USDT (#1041) is not in mixedCase
Variable IPFSNFT._fundAddress (#1045) is not in mixedCase
Follow the Solidity naming convention.

Additional information: link

Redundant expression "this (#11)" inContext (#5-15)
Remove redundant statements if they congest code but offer no value.

Additional information: link

Variable IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountADesired (#837) is too similar to IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountBDesired (#838)
Prevent variables from having similar names.

Additional information: link

IPFSNFT._splitOtherTokenSecond(uint256) (#1266-1296) uses literals with too many digits:
- rate = pair.balanceOf(user).mul(1000000).div(totalAmount) (#1278)
IPFSNFT._splitOtherTokenSecond(uint256) (#1266-1296) uses literals with too many digits:
- USDT.transfer(user,thisAmount.mul(rate).div(1000000)) (#1280)
IPFSNFT._splitOtherTokenSecond(uint256) (#1266-1296) uses literals with too many digits:
- rate = pair.balanceOf(user).mul(1000000).div(totalAmount) (#1288)
IPFSNFT._splitOtherTokenSecond(uint256) (#1266-1296) uses literals with too many digits:
- USDT.transfer(user,thisAmount.mul(rate).div(1000000)) (#1290)
IPFSNFT.slitherConstructorVariables() (#1035-1310) uses literals with too many digits:
- _destroyAddress = address(0x000000000000000000000000000000000000dEaD) (#1046)
Use: Ether suffix, Time suffix, or The scientific notation

Additional information: link

IPFSNFT.inviter (#1037) is never used in IPFSNFT (#1035-1310)
IPFSNFT._destroyAddress (#1046) is never used in IPFSNFT (#1035-1310)
Remove unused state variables.

Additional information: link

IPFSNFT._destroyAddress (#1046) should be constant
IPFSNFT._fundAddress (#1045) should be constant
IPFSNFT.swapStats (#1049) should be constant
Add the constant attributes to state variables that never change.

Additional information: link

owner() should be declared external:
- Ownable.owner() (#278-280)
renounceOwnership() should be declared external:
- Ownable.renounceOwnership() (#297-300)
transferOwnership(address) should be declared external:
- Ownable.transferOwnership(address) (#306-313)
name() should be declared external:
- ERC20.name() (#345-347)
symbol() should be declared external:
- ERC20.symbol() (#353-355)
decimals() should be declared external:
- ERC20.decimals() (#370-372)
totalSupply() should be declared external:
- ERC20.totalSupply() (#377-379)
transfer(address,uint256) should be declared external:
- ERC20.transfer(address,uint256) (#402-410)
allowance(address,address) should be declared external:
- ERC20.allowance(address,address) (#415-423)
approve(address,uint256) should be declared external:
- ERC20.approve(address,uint256) (#432-440)
transferFrom(address,address,uint256) should be declared external:
- ERC20.transferFrom(address,address,uint256) (#455-470)
increaseAllowance(address,uint256) should be declared external:
- ERC20.increaseAllowance(address,uint256) (#484-495)
decreaseAllowance(address,uint256) should be declared external:
- ERC20.decreaseAllowance(address,uint256) (#511-525)
updateUniswapV2Router(address) should be declared external:
- IPFSNFT.updateUniswapV2Router(address) (#1095-1098)
excludeMultipleAccountsFromFees(address[],bool) should be declared external:
- IPFSNFT.excludeMultipleAccountsFromFees(address[],bool) (#1104-1110)
setSwapTokensAtAmount(uint256) should be declared external:
- IPFSNFT.setSwapTokensAtAmount(uint256) (#1112-1114)
setSwapAndLiquifyEnabled(bool) should be declared external:
- IPFSNFT.setSwapAndLiquifyEnabled(bool) (#1117-1119)
rescueToken(address,uint256) should be declared external:
- IPFSNFT.rescueToken(address,uint256) (#1257-1263)
getLDXsize() should be declared external:
- IPFSNFT.getLDXsize() (#1306-1308)
Use the external attribute for functions never called from the contract.

Additional information: link

Average 30d PancakeSwap liquidity is low.

Number of Binance Smart Chain (BSC) token holders is low.

Token is deployed only at one blockchain

Contract has 6% buy tax and 6% sell tax.
Taxes are low and contract ownership is renounced.

Unable to find website, listings and other project-related information

Young tokens have high risks of scam / price dump / death

Young tokens have high risks of scam / price dump / death

Token has no active CoinGecko listing / rank

Token has no active CoinMarketCap listing / rank