Unable to find manual contract audit (e.g. Certik, PeckShield, Solidity...)
LichunBingDwenDwen.swapBack() (#336-377) sends eth to arbitrary user
Dangerous calls:
- (MarketingSuccess) = address(marketingFeeReceiver).call{gas: 30000,value: amountBNBMarketing}() (#361)
- (buybackSuccess) = address(buybackFeeReceiver).call{gas: 30000,value: amountBNBbuyback}() (#363)
Ensure that an arbitrary user cannot withdraw unauthorized funds.
Additional information: link
Reentrancy in LichunBingDwenDwen._transferFrom(address,address,uint256) (#277-297):
External calls:
- swapBack() (#286)
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(amountToSwap,0,path,address(this),block.timestamp) (#347-353)
- (MarketingSuccess) = address(marketingFeeReceiver).call{gas: 30000,value: amountBNBMarketing}() (#361)
- (buybackSuccess) = address(buybackFeeReceiver).call{gas: 30000,value: amountBNBbuyback}() (#363)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,marketingFeeReceiver,block.timestamp) (#367-374)
External calls sending eth:
- swapBack() (#286)
- (MarketingSuccess) = address(marketingFeeReceiver).call{gas: 30000,value: amountBNBMarketing}() (#361)
- (buybackSuccess) = address(buybackFeeReceiver).call{gas: 30000,value: amountBNBbuyback}() (#363)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,marketingFeeReceiver,block.timestamp) (#367-374)
State variables written after the call(s):
- _balances[sender] = _balances[sender].sub(amount,Insufficient Balance) (#290)
- _balances[recipient] = _balances[recipient].add(amountReceived) (#293)
- amountReceived = takeFee(sender,recipient,amount) (#292)
- _balances[address(this)] = _balances[address(this)].add(feeAmount) (#323)
Apply the check-effects-interactions pattern.
Additional information: link
Combination 1: Reentrancy vulnerabilities + Functions that send Ether to arbitraty destination. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.
Contract ticker (LichunBingDwenDwen) has length of 18 chars.
Not a direct threat, but may indicate unreliable intentions of developer.
Not a direct threat, but may indicate unreliable intentions of developer. Widespread names (e.g. Elon, King, Moon, Doge) are common among meme-tokens and scams. The allow to gain free hype and attract unexperienced investors.
Variable IDEXRouter.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountADesired (#151) is too similar to IDEXRouter.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountBDesired (#152)
Prevent variables from having similar names.
Additional information: link
LichunBingDwenDwen.slitherConstructorVariables() (#192-461) uses literals with too many digits:
- DEAD = 0x000000000000000000000000000000000000dEaD (#196)
LichunBingDwenDwen.slitherConstructorVariables() (#192-461) uses literals with too many digits:
- ZERO = 0x0000000000000000000000000000000000000000 (#197)
LichunBingDwenDwen.slitherConstructorVariables() (#192-461) uses literals with too many digits:
- _totalSupply = 1000000000 * (10 ** _decimals) (#203)
Use: Ether suffix, Time suffix, or The scientific notation
Additional information: link
LichunBingDwenDwen.DEAD (#196) should be constant
LichunBingDwenDwen.WBNB (#195) should be constant
LichunBingDwenDwen.ZERO (#197) should be constant
LichunBingDwenDwen._totalSupply (#203) should be constant
Add the constant attributes to state variables that never change.
Additional information: link
authorize(address) should be declared external:
- Auth.authorize(address) (#103-105)
unauthorize(address) should be declared external:
- Auth.unauthorize(address) (#110-112)
transferOwnership(address) should be declared external:
- Auth.transferOwnership(address) (#131-135)
transferForeignToken(address) should be declared external:
- LichunBingDwenDwen.transferForeignToken(address) (#441-445)
isOverLiquified(uint256,uint256) should be declared external:
- LichunBingDwenDwen.isOverLiquified(uint256,uint256) (#455-457)
Use the external attribute for functions never called from the contract.
Additional information: link
LichunBingDwenDwen.slitherConstructorVariables() (#192-461) performs a multiplication on the result of a division:
-swapThreshold = _totalSupply / 1000 * 3 (#228)
Consider ordering multiplication before division.
Additional information: link
LichunBingDwenDwen.swapBack() (#336-377) ignores return value by router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,marketingFeeReceiver,block.timestamp) (#367-374)
Ensure that all the return values of the function calls are used.
Additional information: link
LichunBingDwenDwen.setTxLimit(uint256) (#400-403) should emit an event for:
- _maxTxAmount = amount (#402)
LichunBingDwenDwen.setFees(uint256,uint256,uint256,uint256) (#418-424) should emit an event for:
- liquidityFee = _liquidityFee (#419)
- buybackFee = _buybackFee (#420)
- marketingFee = _marketingFee (#421)
- totalFee = _liquidityFee.add(_buybackFee).add(_marketingFee) (#422)
- feeDenominator = _feeDenominator (#423)
Emit an event for critical parameter changes.
Additional information: link
Auth.transferOwnership(address).adr (#131) lacks a zero-check on :
- owner = adr (#132)
LichunBingDwenDwen.setFeeReceiver(address,address)._marketingFeeReceiver (#426) lacks a zero-check on :
- marketingFeeReceiver = _marketingFeeReceiver (#427)
LichunBingDwenDwen.setFeeReceiver(address,address)._buybackFeeReceiver (#426) lacks a zero-check on :
- buybackFeeReceiver = _buybackFeeReceiver (#428)
Check that the address is not zero.
Additional information: link
Reentrancy in LichunBingDwenDwen._transferFrom(address,address,uint256) (#277-297):
External calls:
- swapBack() (#286)
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(amountToSwap,0,path,address(this),block.timestamp) (#347-353)
- (MarketingSuccess) = address(marketingFeeReceiver).call{gas: 30000,value: amountBNBMarketing}() (#361)
- (buybackSuccess) = address(buybackFeeReceiver).call{gas: 30000,value: amountBNBbuyback}() (#363)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,marketingFeeReceiver,block.timestamp) (#367-374)
External calls sending eth:
- swapBack() (#286)
- (MarketingSuccess) = address(marketingFeeReceiver).call{gas: 30000,value: amountBNBMarketing}() (#361)
- (buybackSuccess) = address(buybackFeeReceiver).call{gas: 30000,value: amountBNBbuyback}() (#363)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,marketingFeeReceiver,block.timestamp) (#367-374)
State variables written after the call(s):
- launch() (#288)
- launchedAt = block.number (#397)
Reentrancy in LichunBingDwenDwen.constructor() (#232-243):
External calls:
- pair = IDEXFactory(router.factory()).createPair(WBNB,address(this)) (#234)
State variables written after the call(s):
- _allowances[address(this)][address(router)] = type()(uint256).max (#235)
- _balances[_owner] = _totalSupply (#241)
- isFeeExempt[_owner] = true (#238)
- isTxLimitExempt[_owner] = true (#239)
Apply the check-effects-interactions pattern.
Additional information: link
Reentrancy in LichunBingDwenDwen._transferFrom(address,address,uint256) (#277-297):
External calls:
- swapBack() (#286)
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(amountToSwap,0,path,address(this),block.timestamp) (#347-353)
- (MarketingSuccess) = address(marketingFeeReceiver).call{gas: 30000,value: amountBNBMarketing}() (#361)
- (buybackSuccess) = address(buybackFeeReceiver).call{gas: 30000,value: amountBNBbuyback}() (#363)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,marketingFeeReceiver,block.timestamp) (#367-374)
External calls sending eth:
- swapBack() (#286)
- (MarketingSuccess) = address(marketingFeeReceiver).call{gas: 30000,value: amountBNBMarketing}() (#361)
- (buybackSuccess) = address(buybackFeeReceiver).call{gas: 30000,value: amountBNBbuyback}() (#363)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,marketingFeeReceiver,block.timestamp) (#367-374)
Event emitted after the call(s):
- Transfer(sender,address(this),feeAmount) (#324)
- amountReceived = takeFee(sender,recipient,amount) (#292)
- Transfer(sender,recipient,amountReceived) (#295)
Reentrancy in LichunBingDwenDwen.constructor() (#232-243):
External calls:
- pair = IDEXFactory(router.factory()).createPair(WBNB,address(this)) (#234)
Event emitted after the call(s):
- Transfer(address(0),_owner,_totalSupply) (#242)
Reentrancy in LichunBingDwenDwen.swapBack() (#336-377):
External calls:
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(amountToSwap,0,path,address(this),block.timestamp) (#347-353)
- (MarketingSuccess) = address(marketingFeeReceiver).call{gas: 30000,value: amountBNBMarketing}() (#361)
- (buybackSuccess) = address(buybackFeeReceiver).call{gas: 30000,value: amountBNBbuyback}() (#363)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,marketingFeeReceiver,block.timestamp) (#367-374)
External calls sending eth:
- (MarketingSuccess) = address(marketingFeeReceiver).call{gas: 30000,value: amountBNBMarketing}() (#361)
- (buybackSuccess) = address(buybackFeeReceiver).call{gas: 30000,value: amountBNBbuyback}() (#363)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,marketingFeeReceiver,block.timestamp) (#367-374)
Event emitted after the call(s):
- AutoLiquify(amountBNBLiquidity,amountToLiquify) (#375)
Apply the check-effects-interactions pattern.
Additional information: link
LichunBingDwenDwen.buyTokens(uint256,address) (#379-390) is never used and should be removed
Remove unused functions.
Additional information: link
LichunBingDwenDwen._maxTxAmount (#204) is set pre-construction with a non-constant function or state variable:
- (_totalSupply * 4) / 100
LichunBingDwenDwen._maxWalletSize (#205) is set pre-construction with a non-constant function or state variable:
- (_totalSupply * 4) / 100
LichunBingDwenDwen.swapThreshold (#228) is set pre-construction with a non-constant function or state variable:
- _totalSupply / 1000 * 3
Remove any initialization of state variables via non-constant state variables or function calls. If variables must be set upon contract deployment, locate initialization in the constructor instead.
Additional information: link
Low level call in LichunBingDwenDwen.swapBack() (#336-377):
- (MarketingSuccess) = address(marketingFeeReceiver).call{gas: 30000,value: amountBNBMarketing}() (#361)
- (buybackSuccess) = address(buybackFeeReceiver).call{gas: 30000,value: amountBNBbuyback}() (#363)
Avoid low-level calls. Check the call success. If the call is meant for a contract, check for code existence
Additional information: link
Function IDEXRouter.WETH() (#146) is not in mixedCase
Parameter LichunBingDwenDwen.setFees(uint256,uint256,uint256,uint256)._liquidityFee (#418) is not in mixedCase
Parameter LichunBingDwenDwen.setFees(uint256,uint256,uint256,uint256)._buybackFee (#418) is not in mixedCase
Parameter LichunBingDwenDwen.setFees(uint256,uint256,uint256,uint256)._marketingFee (#418) is not in mixedCase
Parameter LichunBingDwenDwen.setFees(uint256,uint256,uint256,uint256)._feeDenominator (#418) is not in mixedCase
Parameter LichunBingDwenDwen.setFeeReceiver(address,address)._marketingFeeReceiver (#426) is not in mixedCase
Parameter LichunBingDwenDwen.setFeeReceiver(address,address)._buybackFeeReceiver (#426) is not in mixedCase
Parameter LichunBingDwenDwen.setSwapBackSettings(bool,uint256)._enabled (#431) is not in mixedCase
Parameter LichunBingDwenDwen.setSwapBackSettings(bool,uint256)._amount (#431) is not in mixedCase
Parameter LichunBingDwenDwen.transferForeignToken(address)._token (#441) is not in mixedCase
Variable LichunBingDwenDwen.WBNB (#195) is not in mixedCase
Variable LichunBingDwenDwen.DEAD (#196) is not in mixedCase
Variable LichunBingDwenDwen.ZERO (#197) is not in mixedCase
Constant LichunBingDwenDwen._name (#199) is not in UPPER_CASE_WITH_UNDERSCORES
Constant LichunBingDwenDwen._symbol (#200) is not in UPPER_CASE_WITH_UNDERSCORES
Constant LichunBingDwenDwen._decimals (#201) is not in UPPER_CASE_WITH_UNDERSCORES
Variable LichunBingDwenDwen._totalSupply (#203) is not in mixedCase
Variable LichunBingDwenDwen._maxTxAmount (#204) is not in mixedCase
Variable LichunBingDwenDwen._maxWalletSize (#205) is not in mixedCase
Variable LichunBingDwenDwen._balances (#207) is not in mixedCase
Variable LichunBingDwenDwen._allowances (#208) is not in mixedCase
Follow the Solidity naming convention.
Additional information: link
Unable to find website, listings and other project-related information
Token is marked as scam (rug pull, honeypot, phishing, etc.)
Additional information: link
Young tokens have high risks of scam / price dump / death
Token has no active CoinGecko listing / rank
Token has no active CoinMarketCap listing / rank
Unable to find Twitter account
Telegram account has relatively few subscribers
Unable to find Blog account (Reddit or Medium)
Unable to find Youtube account
Unable to find Discord account