Unable to find manual contract audit (e.g. Certik, PeckShield, Solidity...)
LordsOfDoge.swapBack() (#1643-1687) sends eth to arbitrary user
Dangerous calls:
- (success,None) = address(devWallet).call{value: ethForDev}() (#1671)
Ensure that an arbitrary user cannot withdraw unauthorized funds.
Additional information: link
Reentrancy in LordsOfDoge._transfer(address,address,uint256) (#1470-1590):
External calls:
- swapBack() (#1530)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0xdead),block.timestamp) (#1632-1639)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1617-1623)
- uniswapV2Router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: bnbAmount}(0,path,address(this),block.timestamp) (#1598-1603)
- (success) = address(marketingWallet).call{value: ethForMarketing}() (#1670)
- (success,None) = address(devWallet).call{value: ethForDev}() (#1671)
- success = IERC20(token).transfer(address(dividendTracker),tokenBalance) (#1681)
- dividendTracker.distributeTokenDividends(tokenBalance) (#1684)
External calls sending eth:
- swapBack() (#1530)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0xdead),block.timestamp) (#1632-1639)
- uniswapV2Router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: bnbAmount}(0,path,address(this),block.timestamp) (#1598-1603)
- (success) = address(marketingWallet).call{value: ethForMarketing}() (#1670)
- (success,None) = address(devWallet).call{value: ethForDev}() (#1671)
State variables written after the call(s):
- super._transfer(from,address(this),fees) (#1571)
- _balances[sender] = senderBalance - amount (#204)
- _balances[recipient] += amount (#206)
- super._transfer(from,to,amount) (#1577)
- _balances[sender] = senderBalance - amount (#204)
- _balances[recipient] += amount (#206)
- swapping = false (#1531)
- tokensForDev += fees * devSellFee / totalSellFees (#1558)
- tokensForDev += fees * devBuyFee / totalBuyFees (#1567)
- tokensForLiquidity += fees * 33 / 99 (#1547)
- tokensForLiquidity += fees * liquiditySellFee / totalSellFees (#1556)
- tokensForLiquidity += fees * liquidityBuyFee / totalBuyFees (#1565)
- tokensForMarketing += fees * 33 / 99 (#1549)
- tokensForMarketing += fees * marketingSellFee / totalSellFees (#1557)
- tokensForMarketing += fees * marketingBuyFee / totalBuyFees (#1566)
- tokensForRewards += fees * 33 / 99 (#1548)
- tokensForRewards += fees * rewardsSellFee / totalSellFees (#1555)
- tokensForRewards += fees * rewardsBuyFee / totalBuyFees (#1564)
Apply the check-effects-interactions pattern.
Additional information: link
LordsOfDoge._transfer(address,address,uint256) (#1470-1590) uses a dangerous strict equality:
- tradingActiveBlock == block.number && (automatedMarketMakerPairs[to] || automatedMarketMakerPairs[from]) (#1545)
Don't use strict equality to determine if an account has enough Ether or tokens.
Additional information: link
Combination 1: Reentrancy vulnerabilities + Functions that send Ether to arbitraty destination. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.
Contract locking ether found:
Contract DividendTracker (#846-1110) has payable functions:
- DividendPayingToken.receive() (#718-720)
- DividendPayingToken.distributeDividends() (#736-738)
- DividendPayingTokenInterface.distributeDividends() (#259)
But does not have a function to withdraw the ether
Remove the payable attribute or add a withdraw function.
Additional information: link
LordsOfDoge.swapBack().success (#1670) is written in both
(success) = address(marketingWallet).call{value: ethForMarketing}() (#1670)
(success,None) = address(devWallet).call{value: ethForDev}() (#1671)
Fix or remove the writes.
Additional information: link
LordsOfDoge._transfer(address,address,uint256) (#1470-1590) performs a multiplication on the result of a division:
-fees = amount.mul(99).div(100) (#1546)
-tokensForLiquidity += fees * 33 / 99 (#1547)
LordsOfDoge._transfer(address,address,uint256) (#1470-1590) performs a multiplication on the result of a division:
-fees = amount.mul(99).div(100) (#1546)
-tokensForRewards += fees * 33 / 99 (#1548)
LordsOfDoge._transfer(address,address,uint256) (#1470-1590) performs a multiplication on the result of a division:
-fees = amount.mul(99).div(100) (#1546)
-tokensForMarketing += fees * 33 / 99 (#1549)
LordsOfDoge._transfer(address,address,uint256) (#1470-1590) performs a multiplication on the result of a division:
-tokensForRewards += fees * rewardsSellFee / totalSellFees (#1555)
-fees = amount.mul(totalBuyFees).div(feeDivisor) (#1563)
LordsOfDoge._transfer(address,address,uint256) (#1470-1590) performs a multiplication on the result of a division:
-fees = amount.mul(totalBuyFees).div(feeDivisor) (#1563)
-tokensForRewards += fees * rewardsBuyFee / totalBuyFees (#1564)
LordsOfDoge._transfer(address,address,uint256) (#1470-1590) performs a multiplication on the result of a division:
-tokensForLiquidity += fees * liquiditySellFee / totalSellFees (#1556)
-fees = amount.mul(totalBuyFees).div(feeDivisor) (#1563)
LordsOfDoge._transfer(address,address,uint256) (#1470-1590) performs a multiplication on the result of a division:
-fees = amount.mul(totalBuyFees).div(feeDivisor) (#1563)
-tokensForLiquidity += fees * liquidityBuyFee / totalBuyFees (#1565)
LordsOfDoge._transfer(address,address,uint256) (#1470-1590) performs a multiplication on the result of a division:
-tokensForMarketing += fees * marketingSellFee / totalSellFees (#1557)
-fees = amount.mul(totalBuyFees).div(feeDivisor) (#1563)
LordsOfDoge._transfer(address,address,uint256) (#1470-1590) performs a multiplication on the result of a division:
-fees = amount.mul(totalBuyFees).div(feeDivisor) (#1563)
-tokensForMarketing += fees * marketingBuyFee / totalBuyFees (#1566)
LordsOfDoge._transfer(address,address,uint256) (#1470-1590) performs a multiplication on the result of a division:
-tokensForDev += fees * devSellFee / totalSellFees (#1558)
-fees = amount.mul(totalBuyFees).div(feeDivisor) (#1563)
LordsOfDoge._transfer(address,address,uint256) (#1470-1590) performs a multiplication on the result of a division:
-fees = amount.mul(totalBuyFees).div(feeDivisor) (#1563)
-tokensForDev += fees * devBuyFee / totalBuyFees (#1567)
Consider ordering multiplication before division.
Additional information: link
Reentrancy in DividendPayingToken._withdrawDividendOfUser(address) (#761-777):
External calls:
- success = IERC20(token).transfer(user,_withdrawableDividend) (#766)
State variables written after the call(s):
- withdrawnDividends[user] = withdrawnDividends[user].sub(_withdrawableDividend) (#769)
Reentrancy in LordsOfDoge.swapBack() (#1643-1687):
External calls:
- swapTokensForEth(amountToSwapForETH) (#1655)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1617-1623)
State variables written after the call(s):
- tokensForDev = 0 (#1668)
- tokensForLiquidity = 0 (#1665)
- tokensForMarketing = 0 (#1666)
- tokensForRewards = 0 (#1667)
Apply the check-effects-interactions pattern.
Additional information: link
LordsOfDoge._transfer(address,address,uint256) (#1470-1590) uses tx.origin for authorization: require(bool,string)(_holderLastTransferTimestamp[tx.origin] < block.number,_transfer:: Transfer Delay enabled. Only one purchase per block allowed.) (#1501)
Do not use tx.origin for authorization.
Additional information: link
LordsOfDoge._transfer(address,address,uint256).iterations (#1585) is a local variable never initialized
LordsOfDoge._transfer(address,address,uint256).claims (#1585) is a local variable never initialized
LordsOfDoge._transfer(address,address,uint256).lastProcessedIndex (#1585) is a local variable never initialized
Initialize all the variables. If a variable is meant to be initialized to zero, explicitly set it to zero to improve code readability.
Additional information: link
LordsOfDoge.claim() (#1447-1449) ignores return value by dividendTracker.processAccount(address(msg.sender),false) (#1448)
LordsOfDoge._transfer(address,address,uint256) (#1470-1590) ignores return value by dividendTracker.process(gas) (#1585-1588)
LordsOfDoge.addLiquidity(uint256,uint256) (#1627-1641) ignores return value by uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0xdead),block.timestamp) (#1632-1639)
Ensure that all the return values of the function calls are used.
Additional information: link
DividendPayingToken.dividendOf(address)._owner (#783) shadows:
- Ownable._owner (#427) (state variable)
DividendPayingToken.withdrawableDividendOf(address)._owner (#790) shadows:
- Ownable._owner (#427) (state variable)
DividendPayingToken.withdrawnDividendOf(address)._owner (#797) shadows:
- Ownable._owner (#427) (state variable)
DividendPayingToken.accumulativeDividendOf(address)._owner (#807) shadows:
- Ownable._owner (#427) (state variable)
LordsOfDoge.constructor().totalSupply (#1213) shadows:
- ERC20.totalSupply() (#140-142) (function)
- IERC20.totalSupply() (#24) (function)
Rename the local variables that shadow another component.
Additional information: link
LordsOfDoge.updateMaxAmount(uint256) (#1312-1315) should emit an event for:
- maxTransactionAmount = newNum * (10 ** 18) (#1314)
LordsOfDoge.updateBuyFees(uint256,uint256,uint256,uint256) (#1317-1324) should emit an event for:
- marketingBuyFee = _marketingFee (#1318)
- rewardsBuyFee = _rewardsFee (#1319)
- liquidityBuyFee = _liquidityFee (#1320)
- devBuyFee = _devFee (#1321)
- totalBuyFees = marketingBuyFee + rewardsBuyFee + liquidityBuyFee + devBuyFee (#1322)
LordsOfDoge.updateSellFees(uint256,uint256,uint256,uint256) (#1326-1333) should emit an event for:
- marketingSellFee = _marketingFee (#1327)
- rewardsSellFee = _rewardsFee (#1328)
- liquiditySellFee = _liquidityFee (#1329)
- devSellFee = _devFee (#1330)
- totalSellFees = marketingSellFee + rewardsSellFee + liquiditySellFee + devSellFee (#1331)
Emit an event for critical parameter changes.
Additional information: link
DividendPayingToken._withdrawDividendOfUser(address) (#761-777) has external calls inside a loop: success = IERC20(token).transfer(user,_withdrawableDividend) (#766)
Favor pull over push strategy for external calls.
Additional information: link
Variable 'LordsOfDoge._transfer(address,address,uint256).iterations (#1585)' in LordsOfDoge._transfer(address,address,uint256) (#1470-1590) potentially used before declaration: ProcessedDividendTracker(iterations,claims,lastProcessedIndex,true,gas,tx.origin) (#1586)
Variable 'LordsOfDoge._transfer(address,address,uint256).lastProcessedIndex (#1585)' in LordsOfDoge._transfer(address,address,uint256) (#1470-1590) potentially used before declaration: ProcessedDividendTracker(iterations,claims,lastProcessedIndex,true,gas,tx.origin) (#1586)
Variable 'LordsOfDoge._transfer(address,address,uint256).claims (#1585)' in LordsOfDoge._transfer(address,address,uint256) (#1470-1590) potentially used before declaration: ProcessedDividendTracker(iterations,claims,lastProcessedIndex,true,gas,tx.origin) (#1586)
Move all variable declarations prior to any usage of the variable, and ensure that reaching a variable declaration does not depend on some conditional if it is used unconditionally.
Additional information: link
Reentrancy in LordsOfDoge.addPresaleAddressForExclusions(address) (#1277-1281):
External calls:
- dividendTracker.excludeFromDividends(_presaleAddress) (#1279)
State variables written after the call(s):
- excludeFromMaxTransaction(_presaleAddress,true) (#1280)
- _isExcludedMaxTransactionAmount[updAds] = isEx (#1336)
Reentrancy in LordsOfDoge.constructor() (#1209-1270):
External calls:
- _uniswapV2Pair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#1240-1241)
State variables written after the call(s):
- uniswapV2Pair = _uniswapV2Pair (#1244)
- uniswapV2Router = _uniswapV2Router (#1243)
Reentrancy in LordsOfDoge.constructor() (#1209-1270):
External calls:
- _uniswapV2Pair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#1240-1241)
- _setAutomatedMarketMakerPair(_uniswapV2Pair,true) (#1246)
- dividendTracker.excludeFromDividends(pair) (#1366)
State variables written after the call(s):
- _setAutomatedMarketMakerPair(_uniswapV2Pair,true) (#1246)
- _isExcludedMaxTransactionAmount[updAds] = isEx (#1336)
- _setAutomatedMarketMakerPair(_uniswapV2Pair,true) (#1246)
- automatedMarketMakerPairs[pair] = value (#1361)
Reentrancy in LordsOfDoge.constructor() (#1209-1270):
External calls:
- _uniswapV2Pair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#1240-1241)
- _setAutomatedMarketMakerPair(_uniswapV2Pair,true) (#1246)
- dividendTracker.excludeFromDividends(pair) (#1366)
- dividendTracker.excludeFromDividends(address(dividendTracker)) (#1249)
- dividendTracker.excludeFromDividends(address(this)) (#1250)
- dividendTracker.excludeFromDividends(newOwner) (#1251)
- dividendTracker.excludeFromDividends(address(_uniswapV2Router)) (#1252)
- dividendTracker.excludeFromDividends(address(0xdead)) (#1253)
State variables written after the call(s):
- _createInitialSupply(address(owner()),totalSupply) (#1269)
- _balances[account] += amount (#214)
- excludeFromFees(newOwner,true) (#1256)
- _isExcludedFromFees[account] = excluded (#1341)
- excludeFromFees(address(this),true) (#1257)
- _isExcludedFromFees[account] = excluded (#1341)
- excludeFromFees(address(0xdead),true) (#1258)
- _isExcludedFromFees[account] = excluded (#1341)
- excludeFromMaxTransaction(newOwner,true) (#1259)
- _isExcludedMaxTransactionAmount[updAds] = isEx (#1336)
- excludeFromMaxTransaction(address(this),true) (#1260)
- _isExcludedMaxTransactionAmount[updAds] = isEx (#1336)
- excludeFromMaxTransaction(address(dividendTracker),true) (#1261)
- _isExcludedMaxTransactionAmount[updAds] = isEx (#1336)
- excludeFromMaxTransaction(address(_uniswapV2Router),true) (#1262)
- _isExcludedMaxTransactionAmount[updAds] = isEx (#1336)
- excludeFromMaxTransaction(address(0xdead),true) (#1263)
- _isExcludedMaxTransactionAmount[updAds] = isEx (#1336)
- _createInitialSupply(address(owner()),totalSupply) (#1269)
- _totalSupply += amount (#213)
Reentrancy in DividendTracker.processAccount(address,bool) (#1099-1109):
External calls:
- amount = _withdrawDividendOfUser(account) (#1100)
- success = IERC20(token).transfer(user,_withdrawableDividend) (#766)
State variables written after the call(s):
- lastClaimTimes[account] = block.timestamp (#1103)
Reentrancy in LordsOfDoge.swapBack() (#1643-1687):
External calls:
- swapTokensForEth(amountToSwapForETH) (#1655)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1617-1623)
- (success) = address(marketingWallet).call{value: ethForMarketing}() (#1670)
- (success,None) = address(devWallet).call{value: ethForDev}() (#1671)
- addLiquidity(liquidityTokens,ethForLiquidity) (#1674)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0xdead),block.timestamp) (#1632-1639)
External calls sending eth:
- (success) = address(marketingWallet).call{value: ethForMarketing}() (#1670)
- (success,None) = address(devWallet).call{value: ethForDev}() (#1671)
- addLiquidity(liquidityTokens,ethForLiquidity) (#1674)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0xdead),block.timestamp) (#1632-1639)
State variables written after the call(s):
- addLiquidity(liquidityTokens,ethForLiquidity) (#1674)
- _allowances[owner][spender] = amount (#226)
Apply the check-effects-interactions pattern.
Additional information: link
Reentrancy in LordsOfDoge._setAutomatedMarketMakerPair(address,bool) (#1360-1370):
External calls:
- dividendTracker.excludeFromDividends(pair) (#1366)
Event emitted after the call(s):
- SetAutomatedMarketMakerPair(pair,value) (#1369)
Reentrancy in LordsOfDoge._transfer(address,address,uint256) (#1470-1590):
External calls:
- swapBack() (#1530)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0xdead),block.timestamp) (#1632-1639)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1617-1623)
- uniswapV2Router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: bnbAmount}(0,path,address(this),block.timestamp) (#1598-1603)
- (success) = address(marketingWallet).call{value: ethForMarketing}() (#1670)
- (success,None) = address(devWallet).call{value: ethForDev}() (#1671)
- success = IERC20(token).transfer(address(dividendTracker),tokenBalance) (#1681)
- dividendTracker.distributeTokenDividends(tokenBalance) (#1684)
External calls sending eth:
- swapBack() (#1530)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0xdead),block.timestamp) (#1632-1639)
- uniswapV2Router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: bnbAmount}(0,path,address(this),block.timestamp) (#1598-1603)
- (success) = address(marketingWallet).call{value: ethForMarketing}() (#1670)
- (success,None) = address(devWallet).call{value: ethForDev}() (#1671)
Event emitted after the call(s):
- Transfer(sender,recipient,amount) (#208)
- super._transfer(from,to,amount) (#1577)
- Transfer(sender,recipient,amount) (#208)
- super._transfer(from,address(this),fees) (#1571)
Reentrancy in LordsOfDoge._transfer(address,address,uint256) (#1470-1590):
External calls:
- swapBack() (#1530)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0xdead),block.timestamp) (#1632-1639)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1617-1623)
- uniswapV2Router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: bnbAmount}(0,path,address(this),block.timestamp) (#1598-1603)
- (success) = address(marketingWallet).call{value: ethForMarketing}() (#1670)
- (success,None) = address(devWallet).call{value: ethForDev}() (#1671)
- success = IERC20(token).transfer(address(dividendTracker),tokenBalance) (#1681)
- dividendTracker.distributeTokenDividends(tokenBalance) (#1684)
- dividendTracker.setBalance(address(from),balanceOf(from)) (#1579)
- dividendTracker.setBalance(address(to),balanceOf(to)) (#1580)
- dividendTracker.process(gas) (#1585-1588)
External calls sending eth:
- swapBack() (#1530)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0xdead),block.timestamp) (#1632-1639)
- uniswapV2Router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: bnbAmount}(0,path,address(this),block.timestamp) (#1598-1603)
- (success) = address(marketingWallet).call{value: ethForMarketing}() (#1670)
- (success,None) = address(devWallet).call{value: ethForDev}() (#1671)
Event emitted after the call(s):
- ProcessedDividendTracker(iterations,claims,lastProcessedIndex,true,gas,tx.origin) (#1586)
Reentrancy in LordsOfDoge.addPresaleAddressForExclusions(address) (#1277-1281):
External calls:
- dividendTracker.excludeFromDividends(_presaleAddress) (#1279)
Event emitted after the call(s):
- ExcludedMaxTransactionAmount(updAds,isEx) (#1337)
- excludeFromMaxTransaction(_presaleAddress,true) (#1280)
Reentrancy in LordsOfDoge.constructor() (#1209-1270):
External calls:
- _uniswapV2Pair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#1240-1241)
- _setAutomatedMarketMakerPair(_uniswapV2Pair,true) (#1246)
- dividendTracker.excludeFromDividends(pair) (#1366)
Event emitted after the call(s):
- ExcludedMaxTransactionAmount(updAds,isEx) (#1337)
- _setAutomatedMarketMakerPair(_uniswapV2Pair,true) (#1246)
- SetAutomatedMarketMakerPair(pair,value) (#1369)
- _setAutomatedMarketMakerPair(_uniswapV2Pair,true) (#1246)
Reentrancy in LordsOfDoge.constructor() (#1209-1270):
External calls:
- _uniswapV2Pair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#1240-1241)
- _setAutomatedMarketMakerPair(_uniswapV2Pair,true) (#1246)
- dividendTracker.excludeFromDividends(pair) (#1366)
- dividendTracker.excludeFromDividends(address(dividendTracker)) (#1249)
- dividendTracker.excludeFromDividends(address(this)) (#1250)
- dividendTracker.excludeFromDividends(newOwner) (#1251)
- dividendTracker.excludeFromDividends(address(_uniswapV2Router)) (#1252)
- dividendTracker.excludeFromDividends(address(0xdead)) (#1253)
Event emitted after the call(s):
- ExcludeFromFees(account,excluded) (#1343)
- excludeFromFees(address(0xdead),true) (#1258)
- ExcludeFromFees(account,excluded) (#1343)
- excludeFromFees(newOwner,true) (#1256)
- ExcludeFromFees(account,excluded) (#1343)
- excludeFromFees(address(this),true) (#1257)
- ExcludedMaxTransactionAmount(updAds,isEx) (#1337)
- excludeFromMaxTransaction(address(0xdead),true) (#1263)
- ExcludedMaxTransactionAmount(updAds,isEx) (#1337)
- excludeFromMaxTransaction(address(_uniswapV2Router),true) (#1262)
- ExcludedMaxTransactionAmount(updAds,isEx) (#1337)
- excludeFromMaxTransaction(address(this),true) (#1260)
- ExcludedMaxTransactionAmount(updAds,isEx) (#1337)
- excludeFromMaxTransaction(address(dividendTracker),true) (#1261)
- ExcludedMaxTransactionAmount(updAds,isEx) (#1337)
- excludeFromMaxTransaction(newOwner,true) (#1259)
- Transfer(address(0),account,amount) (#215)
- _createInitialSupply(address(owner()),totalSupply) (#1269)
Reentrancy in DividendTracker.processAccount(address,bool) (#1099-1109):
External calls:
- amount = _withdrawDividendOfUser(account) (#1100)
- success = IERC20(token).transfer(user,_withdrawableDividend) (#766)
Event emitted after the call(s):
- Claim(account,amount,automatic) (#1104)
Reentrancy in LordsOfDoge.processDividendTracker(uint256) (#1442-1445):
External calls:
- (iterations,claims,lastProcessedIndex) = dividendTracker.process(gas) (#1443)
Event emitted after the call(s):
- ProcessedDividendTracker(iterations,claims,lastProcessedIndex,false,gas,tx.origin) (#1444)
Reentrancy in LordsOfDoge.swapBack() (#1643-1687):
External calls:
- swapTokensForEth(amountToSwapForETH) (#1655)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1617-1623)
- (success) = address(marketingWallet).call{value: ethForMarketing}() (#1670)
- (success,None) = address(devWallet).call{value: ethForDev}() (#1671)
- addLiquidity(liquidityTokens,ethForLiquidity) (#1674)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0xdead),block.timestamp) (#1632-1639)
External calls sending eth:
- (success) = address(marketingWallet).call{value: ethForMarketing}() (#1670)
- (success,None) = address(devWallet).call{value: ethForDev}() (#1671)
- addLiquidity(liquidityTokens,ethForLiquidity) (#1674)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0xdead),block.timestamp) (#1632-1639)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#227)
- addLiquidity(liquidityTokens,ethForLiquidity) (#1674)
- SwapAndLiquify(amountToSwapForETH,ethForLiquidity,tokensForLiquidity) (#1675)
Reentrancy in LordsOfDoge.swapBack() (#1643-1687):
External calls:
- swapTokensForEth(amountToSwapForETH) (#1655)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1617-1623)
- (success) = address(marketingWallet).call{value: ethForMarketing}() (#1670)
- (success,None) = address(devWallet).call{value: ethForDev}() (#1671)
- addLiquidity(liquidityTokens,ethForLiquidity) (#1674)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0xdead),block.timestamp) (#1632-1639)
- swapBnbForRewardToken(ethForRewards) (#1678)
- uniswapV2Router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: bnbAmount}(0,path,address(this),block.timestamp) (#1598-1603)
- success = IERC20(token).transfer(address(dividendTracker),tokenBalance) (#1681)
- dividendTracker.distributeTokenDividends(tokenBalance) (#1684)
External calls sending eth:
- (success) = address(marketingWallet).call{value: ethForMarketing}() (#1670)
- (success,None) = address(devWallet).call{value: ethForDev}() (#1671)
- addLiquidity(liquidityTokens,ethForLiquidity) (#1674)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0xdead),block.timestamp) (#1632-1639)
- swapBnbForRewardToken(ethForRewards) (#1678)
- uniswapV2Router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: bnbAmount}(0,path,address(this),block.timestamp) (#1598-1603)
Event emitted after the call(s):
- SendDividends(tokenBalance,ethForRewards) (#1685)
Apply the check-effects-interactions pattern.
Additional information: link
DividendTracker.getAccount(address) (#963-1006) uses timestamp for comparisons
Dangerous comparisons:
- nextClaimTime > block.timestamp (#1003-1005)
DividendTracker.canAutoClaim(uint256) (#1027-1033) uses timestamp for comparisons
Dangerous comparisons:
- lastClaimTime > block.timestamp (#1028)
- block.timestamp.sub(lastClaimTime) >= claimWait (#1032)
Avoid relying on block.timestamp.
Additional information: link
Context._msgData() (#10-13) is never used and should be removed
DividendTracker.get(address) (#857-859) is never used and should be removed
SafeMath.mod(uint256,uint256) (#404-406) is never used and should be removed
SafeMath.mod(uint256,uint256,string) (#420-423) is never used and should be removed
SafeMathInt.abs(int256) (#528-531) is never used and should be removed
SafeMathInt.div(int256,int256) (#499-505) is never used and should be removed
SafeMathInt.mul(int256,int256) (#487-494) is never used and should be removed
Remove unused functions.
Additional information: link
Pragma version0.8.11 (#3) necessitates a version too recent to be trusted. Consider deploying with 0.6.12/0.7.6/0.8.7
solc-0.8.11 is not recommended for deployment
Deploy with any of the following Solidity versions: 0.5.16 - 0.5.17, 0.6.11 - 0.6.12, 0.7.5 - 0.7.6 Use a simple pragma version that allows any of these versions. Consider using the latest version of Solidity for testing.
Additional information: link
Low level call in LordsOfDoge.swapBack() (#1643-1687):
- (success) = address(marketingWallet).call{value: ethForMarketing}() (#1670)
- (success,None) = address(devWallet).call{value: ethForDev}() (#1671)
Low level call in LordsOfDoge.withdrawStuckEth() (#1706-1709):
- (success) = address(msg.sender).call{value: address(this).balance}() (#1707)
Avoid low-level calls. Check the call success. If the call is meant for a contract, check for code existence
Additional information: link
Function IUniswapV2Router01.WETH() (#551) is not in mixedCase
Parameter DividendPayingToken.dividendOf(address)._owner (#783) is not in mixedCase
Parameter DividendPayingToken.withdrawableDividendOf(address)._owner (#790) is not in mixedCase
Parameter DividendPayingToken.withdrawnDividendOf(address)._owner (#797) is not in mixedCase
Parameter DividendPayingToken.accumulativeDividendOf(address)._owner (#807) is not in mixedCase
Constant DividendPayingToken.magnitude (#692) is not in UPPER_CASE_WITH_UNDERSCORES
Parameter DividendTracker.getAccount(address)._account (#963) is not in mixedCase
Parameter LordsOfDoge.addPresaleAddressForExclusions(address)._presaleAddress (#1277) is not in mixedCase
Parameter LordsOfDoge.updateBuyFees(uint256,uint256,uint256,uint256)._marketingFee (#1317) is not in mixedCase
Parameter LordsOfDoge.updateBuyFees(uint256,uint256,uint256,uint256)._rewardsFee (#1317) is not in mixedCase
Parameter LordsOfDoge.updateBuyFees(uint256,uint256,uint256,uint256)._liquidityFee (#1317) is not in mixedCase
Parameter LordsOfDoge.updateBuyFees(uint256,uint256,uint256,uint256)._devFee (#1317) is not in mixedCase
Parameter LordsOfDoge.updateSellFees(uint256,uint256,uint256,uint256)._marketingFee (#1326) is not in mixedCase
Parameter LordsOfDoge.updateSellFees(uint256,uint256,uint256,uint256)._rewardsFee (#1326) is not in mixedCase
Parameter LordsOfDoge.updateSellFees(uint256,uint256,uint256,uint256)._liquidityFee (#1326) is not in mixedCase
Parameter LordsOfDoge.updateSellFees(uint256,uint256,uint256,uint256)._devFee (#1326) is not in mixedCase
Constant LordsOfDoge.feeDivisor (#1142) is not in UPPER_CASE_WITH_UNDERSCORES
Variable LordsOfDoge._isExcludedMaxTransactionAmount (#1169) is not in mixedCase
Follow the Solidity naming convention.
Additional information: link
Redundant expression "this (#11)" inContext (#5-14)
Remove redundant statements if they congest code but offer no value.
Additional information: link
Variable IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountADesired (#556) is too similar to IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountBDesired (#557)
Variable DividendPayingToken._withdrawDividendOfUser(address)._withdrawableDividend (#762) is too similar to DividendTracker.getAccount(address).withdrawableDividends (#968)
Prevent variables from having similar names.
Additional information: link
DividendTracker.getAccountAtIndex(uint256) (#1008-1025) uses literals with too many digits:
- (0x0000000000000000000000000000000000000000,- 1,- 1,0,0,0,0,0) (#1019)
LordsOfDoge.updateGasForProcessing(uint256) (#1385-1390) uses literals with too many digits:
- require(bool,string)(newValue >= 200000 && newValue <= 500000, gasForProcessing must be between 200,000 and 500,000) (#1386)
LordsOfDoge.slitherConstructorVariables() (#1112-1711) uses literals with too many digits:
- gasForProcessing = 400000 (#1162)
Use: Ether suffix, Time suffix, or The scientific notation
Additional information: link
SafeMathInt.MAX_INT256 (#482) is never used in SafeMathInt (#480-538)
Remove unused state variables.
Additional information: link
LordsOfDoge.earlyBuyPenaltyEnd (#1132) should be constant
LordsOfDoge.liquidityActiveBlock (#1130) should be constant
Add the constant attributes to state variables that never change.
Additional information: link
name() should be declared external:
- ERC20.name() (#128-130)
symbol() should be declared external:
- ERC20.symbol() (#132-134)
decimals() should be declared external:
- ERC20.decimals() (#136-138)
transfer(address,uint256) should be declared external:
- ERC20.transfer(address,uint256) (#148-151)
allowance(address,address) should be declared external:
- ERC20.allowance(address,address) (#153-155)
approve(address,uint256) should be declared external:
- ERC20.approve(address,uint256) (#157-160)
transferFrom(address,address,uint256) should be declared external:
- ERC20.transferFrom(address,address,uint256) (#162-176)
increaseAllowance(address,uint256) should be declared external:
- ERC20.increaseAllowance(address,uint256) (#178-181)
decreaseAllowance(address,uint256) should be declared external:
- ERC20.decreaseAllowance(address,uint256) (#183-191)
renounceOwnership() should be declared external:
- Ownable.renounceOwnership() (#462-465)
transferOwnership(address) should be declared external:
- Ownable.transferOwnership(address) (#471-475)
Use the external attribute for functions never called from the contract.
Additional information: link
Unable to find website, listings and other project-related information
Young tokens have high risks of scam / price dump / death
Token has no active CoinGecko listing / rank
Token has no active CoinMarketCap listing / rank
Unable to find Telegram and Twitter accounts