Unable to find manual contract audit (e.g. Certik, PeckShield, Solidity...)
KekInu.addLiquidity(uint256,uint256) (#728-741) sends eth to arbitrary user
Dangerous calls:
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#733-740)
Ensure that an arbitrary user cannot withdraw unauthorized funds.
Additional information: link
Reentrancy in KekInu._transfer(address,address,uint256) (#637-675):
External calls:
- swapAndLiquify(contractTokenBalance) (#659)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#733-740)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#717-723)
External calls sending eth:
- swapAndLiquify(contractTokenBalance) (#659)
- recipient.transfer(amount) (#601)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#733-740)
State variables written after the call(s):
- _balances[sender] = _balances[sender].sub(amount,Insufficient Balance) (#662)
- _balances[recipient] = _balances[recipient].add(finalAmount) (#670)
- finalAmount = takeFee(sender,recipient,amount) (#664-665)
- _balances[address(this)] = _balances[address(this)].add(feeAmount) (#755)
Apply the check-effects-interactions pattern.
Additional information: link
Combination 1: Reentrancy vulnerabilities + Functions that send Ether to arbitraty destination. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.
Contract ticker ($KekInu) contains non-alphanumeric characters.
Not a direct threat, but may indicate unreliable intentions of developer. Non-alphanumeric chars (,.;!#*&") are extremely rare among low risk tokens.
KekInu.addLiquidity(uint256,uint256) (#728-741) ignores return value by uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#733-740)
Ensure that all the return values of the function calls are used.
Additional information: link
KekInu.allowance(address,address).owner (#495) shadows:
- Ownable.owner() (#152-154) (function)
KekInu._approve(address,address,uint256).owner (#514) shadows:
- Ownable.owner() (#152-154) (function)
Rename the local variables that shadow another component.
Additional information: link
KekInu.setBuyTaxes(uint256,uint256,uint256) (#534-540) should emit an event for:
- _totalTaxIfBuying = _buyLiquidityFee.add(_buyMarketingFee).add(_buyBuyBackFee) (#539)
KekInu.setSellTaxes(uint256,uint256,uint256) (#542-548) should emit an event for:
- _totalTaxIfSelling = _sellLiquidityFee.add(_sellMarketingFee).add(_sellBuyBackFee) (#547)
KekInu.setDistributionSettings(uint256,uint256,uint256) (#550-556) should emit an event for:
- _liquidityShare = newLiquidityShare (#551)
- _BuyBackShare = newBuyBackShare (#553)
- _totalDistributionShares = _liquidityShare.add(_marketingShare).add(_BuyBackShare) (#555)
KekInu.setMaxTxAmount(uint256) (#558-561) should emit an event for:
- _maxTxAmount = maxTxAmount (#560)
KekInu.setWalletLimit(uint256) (#571-573) should emit an event for:
- _walletMax = newLimit (#572)
KekInu.setNumTokensBeforeSwap(uint256) (#575-577) should emit an event for:
- minimumTokensBeforeSwap = newLimit (#576)
Emit an event for critical parameter changes.
Additional information: link
KekInu.setMarketingWalletAddress(address).newAddress (#579) lacks a zero-check on :
- marketingWalletAddress = address(newAddress) (#580)
KekInu.setBuyBackWalletAddress(address).newAddress (#583) lacks a zero-check on :
- BuyBackWalletAddress = address(newAddress) (#584)
Check that the address is not zero.
Additional information: link
Reentrancy in KekInu.changeRouterVersion(address) (#604-621):
External calls:
- newPairAddress = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#612-613)
State variables written after the call(s):
- isMarketPair[address(uniswapPair)] = true (#620)
- isWalletLimitExempt[address(uniswapPair)] = true (#619)
- uniswapPair = newPairAddress (#616)
- uniswapV2Router = _uniswapV2Router (#617)
Reentrancy in KekInu.constructor() (#445-473):
External calls:
- uniswapPair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#449-450)
State variables written after the call(s):
- _allowances[address(this)][address(uniswapV2Router)] = _totalSupply (#453)
- _balances[_msgSender()] = _totalSupply (#471)
- _totalDistributionShares = _liquidityShare.add(_marketingShare).add(_BuyBackShare) (#460)
- _totalTaxIfBuying = _buyLiquidityFee.add(_buyMarketingFee).add(_buyBuyBackFee) (#458)
- _totalTaxIfSelling = _sellLiquidityFee.add(_sellMarketingFee).add(_sellBuyBackFee) (#459)
- isExcludedFromFee[owner()] = true (#455)
- isExcludedFromFee[address(this)] = true (#456)
- isMarketPair[address(uniswapPair)] = true (#469)
- isTxLimitExempt[owner()] = true (#466)
- isTxLimitExempt[address(this)] = true (#467)
- isWalletLimitExempt[owner()] = true (#462)
- isWalletLimitExempt[address(uniswapPair)] = true (#463)
- isWalletLimitExempt[address(this)] = true (#464)
- uniswapV2Router = _uniswapV2Router (#452)
Reentrancy in KekInu.swapAndLiquify(uint256) (#684-706):
External calls:
- swapTokensForEth(tokensForSwap) (#689)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#717-723)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#705)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#733-740)
External calls sending eth:
- transferToAddressETH(marketingWalletAddress,amountBNBMarketing) (#699)
- recipient.transfer(amount) (#601)
- transferToAddressETH(BuyBackWalletAddress,amountBNBBuyBack) (#702)
- recipient.transfer(amount) (#601)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#705)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#733-740)
State variables written after the call(s):
- addLiquidity(tokensForLP,amountBNBLiquidity) (#705)
- _allowances[owner][spender] = amount (#518)
Reentrancy in KekInu.transferFrom(address,address,uint256) (#631-635):
External calls:
- _transfer(sender,recipient,amount) (#632)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#733-740)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#717-723)
External calls sending eth:
- _transfer(sender,recipient,amount) (#632)
- recipient.transfer(amount) (#601)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#733-740)
State variables written after the call(s):
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#633)
- _allowances[owner][spender] = amount (#518)
Apply the check-effects-interactions pattern.
Additional information: link
Reentrancy in KekInu._transfer(address,address,uint256) (#637-675):
External calls:
- swapAndLiquify(contractTokenBalance) (#659)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#733-740)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#717-723)
External calls sending eth:
- swapAndLiquify(contractTokenBalance) (#659)
- recipient.transfer(amount) (#601)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#733-740)
Event emitted after the call(s):
- Transfer(sender,address(this),feeAmount) (#756)
- finalAmount = takeFee(sender,recipient,amount) (#664-665)
- Transfer(sender,recipient,finalAmount) (#672)
Reentrancy in KekInu.constructor() (#445-473):
External calls:
- uniswapPair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#449-450)
Event emitted after the call(s):
- Transfer(address(0),_msgSender(),_totalSupply) (#472)
Reentrancy in KekInu.swapAndLiquify(uint256) (#684-706):
External calls:
- swapTokensForEth(tokensForSwap) (#689)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#717-723)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#705)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#733-740)
External calls sending eth:
- transferToAddressETH(marketingWalletAddress,amountBNBMarketing) (#699)
- recipient.transfer(amount) (#601)
- transferToAddressETH(BuyBackWalletAddress,amountBNBBuyBack) (#702)
- recipient.transfer(amount) (#601)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#705)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#733-740)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#519)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#705)
Reentrancy in KekInu.swapTokensForEth(uint256) (#708-726):
External calls:
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#717-723)
Event emitted after the call(s):
- SwapTokensForETH(tokenAmount,path) (#725)
Reentrancy in KekInu.transferFrom(address,address,uint256) (#631-635):
External calls:
- _transfer(sender,recipient,amount) (#632)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#733-740)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#717-723)
External calls sending eth:
- _transfer(sender,recipient,amount) (#632)
- recipient.transfer(amount) (#601)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#733-740)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#519)
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#633)
Apply the check-effects-interactions pattern.
Additional information: link
Address.isContract(address) (#84-93) uses assembly
- INLINE ASM (#91)
Address._functionCallWithValue(address,bytes,uint256,string) (#120-137) uses assembly
- INLINE ASM (#129-132)
Do not use evm assembly.
Additional information: link
Address._functionCallWithValue(address,bytes,uint256,string) (#120-137) is never used and should be removed
Address.functionCall(address,bytes) (#103-105) is never used and should be removed
Address.functionCall(address,bytes,string) (#107-109) is never used and should be removed
Address.functionCallWithValue(address,bytes,uint256) (#111-113) is never used and should be removed
Address.functionCallWithValue(address,bytes,uint256,string) (#115-118) is never used and should be removed
Address.isContract(address) (#84-93) is never used and should be removed
Address.sendValue(address,uint256) (#95-101) is never used and should be removed
Context._msgData() (#11-14) is never used and should be removed
SafeMath.mod(uint256,uint256) (#72-74) is never used and should be removed
SafeMath.mod(uint256,uint256,string) (#76-79) is never used and should be removed
Remove unused functions.
Additional information: link
Low level call in Address.sendValue(address,uint256) (#95-101):
- (success) = recipient.call{value: amount}() (#99)
Low level call in Address._functionCallWithValue(address,bytes,uint256,string) (#120-137):
- (success,returndata) = target.call{value: weiValue}(data) (#123)
Avoid low-level calls. Check the call success. If the call is meant for a contract, check for code existence
Additional information: link
Function IUniswapV2Pair.DOMAIN_SEPARATOR() (#204) is not in mixedCase
Function IUniswapV2Pair.PERMIT_TYPEHASH() (#205) is not in mixedCase
Function IUniswapV2Pair.MINIMUM_LIQUIDITY() (#221) is not in mixedCase
Function IUniswapV2Router01.WETH() (#240) is not in mixedCase
Parameter KekInu.setSwapAndLiquifyEnabled(bool)._enabled (#587) is not in mixedCase
Variable KekInu.BuyBackWalletAddress (#383) is not in mixedCase
Variable KekInu._balances (#386) is not in mixedCase
Variable KekInu._buyLiquidityFee (#394) is not in mixedCase
Variable KekInu._buyMarketingFee (#395) is not in mixedCase
Variable KekInu._buyBuyBackFee (#396) is not in mixedCase
Variable KekInu._sellLiquidityFee (#397) is not in mixedCase
Variable KekInu._sellMarketingFee (#398) is not in mixedCase
Variable KekInu._sellBuyBackFee (#399) is not in mixedCase
Variable KekInu._liquidityShare (#401) is not in mixedCase
Variable KekInu._marketingShare (#402) is not in mixedCase
Variable KekInu._BuyBackShare (#403) is not in mixedCase
Variable KekInu._totalTaxIfBuying (#405) is not in mixedCase
Variable KekInu._totalTaxIfSelling (#406) is not in mixedCase
Variable KekInu._totalDistributionShares (#407) is not in mixedCase
Variable KekInu._maxTxAmount (#410) is not in mixedCase
Variable KekInu._walletMax (#411) is not in mixedCase
Follow the Solidity naming convention.
Additional information: link
Redundant expression "this (#12)" inContext (#5-15)
Remove redundant statements if they congest code but offer no value.
Additional information: link
Reentrancy in KekInu._transfer(address,address,uint256) (#637-675):
External calls:
- swapAndLiquify(contractTokenBalance) (#659)
- recipient.transfer(amount) (#601)
External calls sending eth:
- swapAndLiquify(contractTokenBalance) (#659)
- recipient.transfer(amount) (#601)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#733-740)
State variables written after the call(s):
- _balances[sender] = _balances[sender].sub(amount,Insufficient Balance) (#662)
- _balances[recipient] = _balances[recipient].add(finalAmount) (#670)
- finalAmount = takeFee(sender,recipient,amount) (#664-665)
- _balances[address(this)] = _balances[address(this)].add(feeAmount) (#755)
Event emitted after the call(s):
- Transfer(sender,address(this),feeAmount) (#756)
- finalAmount = takeFee(sender,recipient,amount) (#664-665)
- Transfer(sender,recipient,finalAmount) (#672)
Reentrancy in KekInu.swapAndLiquify(uint256) (#684-706):
External calls:
- transferToAddressETH(marketingWalletAddress,amountBNBMarketing) (#699)
- recipient.transfer(amount) (#601)
- transferToAddressETH(BuyBackWalletAddress,amountBNBBuyBack) (#702)
- recipient.transfer(amount) (#601)
External calls sending eth:
- transferToAddressETH(marketingWalletAddress,amountBNBMarketing) (#699)
- recipient.transfer(amount) (#601)
- transferToAddressETH(BuyBackWalletAddress,amountBNBBuyBack) (#702)
- recipient.transfer(amount) (#601)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#705)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#733-740)
State variables written after the call(s):
- addLiquidity(tokensForLP,amountBNBLiquidity) (#705)
- _allowances[owner][spender] = amount (#518)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#519)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#705)
Reentrancy in KekInu.transferFrom(address,address,uint256) (#631-635):
External calls:
- _transfer(sender,recipient,amount) (#632)
- recipient.transfer(amount) (#601)
External calls sending eth:
- _transfer(sender,recipient,amount) (#632)
- recipient.transfer(amount) (#601)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#733-740)
State variables written after the call(s):
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#633)
- _allowances[owner][spender] = amount (#518)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#519)
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#633)
Apply the check-effects-interactions pattern.
Additional information: link
Variable IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountADesired (#245) is too similar to IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountBDesired (#246)
Prevent variables from having similar names.
Additional information: link
KekInu.slitherConstructorVariables() (#373-763) uses literals with too many digits:
- deadAddress = 0x000000000000000000000000000000000000dEaD (#384)
Use: Ether suffix, Time suffix, or The scientific notation
Additional information: link
Ownable._previousOwner (#142) is never used in KekInu (#373-763)
Remove unused state variables.
Additional information: link
KekInu._decimals (#380) should be constant
KekInu._name (#378) should be constant
KekInu._symbol (#379) should be constant
KekInu._totalSupply (#409) should be constant
Ownable._previousOwner (#142) should be constant
Add the constant attributes to state variables that never change.
Additional information: link
waiveOwnership() should be declared external:
- Ownable.waiveOwnership() (#161-164)
transferOwnership(address) should be declared external:
- Ownable.transferOwnership(address) (#166-170)
name() should be declared external:
- KekInu.name() (#475-477)
symbol() should be declared external:
- KekInu.symbol() (#479-481)
decimals() should be declared external:
- KekInu.decimals() (#483-485)
totalSupply() should be declared external:
- KekInu.totalSupply() (#487-489)
allowance(address,address) should be declared external:
- KekInu.allowance(address,address) (#495-497)
increaseAllowance(address,uint256) should be declared external:
- KekInu.increaseAllowance(address,uint256) (#499-502)
decreaseAllowance(address,uint256) should be declared external:
- KekInu.decreaseAllowance(address,uint256) (#504-507)
approve(address,uint256) should be declared external:
- KekInu.approve(address,uint256) (#509-512)
addMarketPair(address) should be declared external:
- KekInu.addMarketPair(address) (#522-524)
setIsExcludedFromFee(address,bool) should be declared external:
- KekInu.setIsExcludedFromFee(address,bool) (#530-532)
setSwapAndLiquifyEnabled(bool) should be declared external:
- KekInu.setSwapAndLiquifyEnabled(bool) (#587-590)
setSwapAndLiquifyByLimitOnly(bool) should be declared external:
- KekInu.setSwapAndLiquifyByLimitOnly(bool) (#592-594)
getCirculatingSupply() should be declared external:
- KekInu.getCirculatingSupply() (#596-598)
changeRouterVersion(address) should be declared external:
- KekInu.changeRouterVersion(address) (#604-621)
transfer(address,uint256) should be declared external:
- KekInu.transfer(address,uint256) (#626-629)
transferFrom(address,address,uint256) should be declared external:
- KekInu.transferFrom(address,address,uint256) (#631-635)
Use the external attribute for functions never called from the contract.
Additional information: link
Unable to find website, listings and other project-related information
Token is marked as scam (rug pull, honeypot, phishing, etc.)
Additional information: link
Young tokens have high risks of scam / price dump / death
Token has no active CoinGecko listing / rank
Token has no active CoinMarketCap listing / rank
Unable to find Telegram and Twitter accounts