Unable to find manual contract audit (e.g. Certik, PeckShield, Solidity...)
MANC.addLiquidity(uint256,uint256) (#1105-1118) sends eth to arbitrary user
Dangerous calls:
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1110-1117)
Ensure that an arbitrary user cannot withdraw unauthorized funds.
Additional information: link
Reentrancy in MANC._transfer(address,address,uint256) (#1018-1062):
External calls:
- swapAndLiquify(contractTokenBalance) (#1049)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1110-1117)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1096-1102)
External calls sending eth:
- swapAndLiquify(contractTokenBalance) (#1049)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1110-1117)
State variables written after the call(s):
- _tokenTransfer(from,to,amount,takeFee) (#1061)
- _rOwned[address(this)] = _rOwned[address(this)].add(rLiquidity) (#969)
- _rOwned[sender] = _rOwned[sender].sub(rAmount) (#1152)
- _rOwned[sender] = _rOwned[sender].sub(rAmount) (#1143)
- _rOwned[recipient] = _rOwned[recipient].add(rTransferAmount) (#1144)
- _rOwned[sender] = _rOwned[sender].sub(rAmount) (#1163)
- _rOwned[sender] = _rOwned[sender].sub(rAmount) (#883)
- _rOwned[recipient] = _rOwned[recipient].add(rTransferAmount) (#1164)
- _rOwned[recipient] = _rOwned[recipient].add(rTransferAmount) (#1154)
- _rOwned[recipient] = _rOwned[recipient].add(rTransferAmount) (#885)
- _tokenTransfer(from,to,amount,takeFee) (#1061)
- _rTotal = _rTotal.sub(rFee) (#924)
- _tokenTransfer(from,to,amount,takeFee) (#1061)
- _tOwned[address(this)] = _tOwned[address(this)].add(tLiquidity) (#971)
- _tOwned[sender] = _tOwned[sender].sub(tAmount) (#882)
- _tOwned[sender] = _tOwned[sender].sub(tAmount) (#1162)
- _tOwned[recipient] = _tOwned[recipient].add(tTransferAmount) (#1153)
- _tOwned[recipient] = _tOwned[recipient].add(tTransferAmount) (#884)
Apply the check-effects-interactions pattern.
Additional information: link
Combination 1: Reentrancy vulnerabilities + Functions that send Ether to arbitraty destination. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.
MANC.addLiquidity(uint256,uint256) (#1105-1118) ignores return value by uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1110-1117)
Ensure that all the return values of the function calls are used.
Additional information: link
MANC.allowance(address,address).owner (#799) shadows:
- Ownable.owner() (#420-422) (function)
MANC._approve(address,address,uint256).owner (#1010) shadows:
- Ownable.owner() (#420-422) (function)
Rename the local variables that shadow another component.
Additional information: link
MANC.setTaxFeePercent(uint256) (#899-901) should emit an event for:
- _taxFee = taxFee (#900)
MANC.setLiquidityFeePercent(uint256) (#903-905) should emit an event for:
- _liquidityFee = liquidityFee (#904)
MANC.setNumTokensSellToAddToLiquidity(uint256) (#907-909) should emit an event for:
- numTokensSellToAddToLiquidity = swapNumber * 10 ** _decimals (#908)
MANC.setMaxTxPercent(uint256) (#911-913) should emit an event for:
- _maxTxAmount = maxTxPercent * 10 ** _decimals (#912)
Emit an event for critical parameter changes.
Additional information: link
MANC.constructor(string,string,uint256,uint256,uint256,uint256,uint256,uint256,address,address).tokenOwner (#740) lacks a zero-check on :
- _owner = tokenOwner (#768)
Check that the address is not zero.
Additional information: link
Reentrancy in MANC._transfer(address,address,uint256) (#1018-1062):
External calls:
- swapAndLiquify(contractTokenBalance) (#1049)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1110-1117)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1096-1102)
External calls sending eth:
- swapAndLiquify(contractTokenBalance) (#1049)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1110-1117)
State variables written after the call(s):
- _tokenTransfer(from,to,amount,takeFee) (#1061)
- _liquidityFee = _previousLiquidityFee (#1003)
- _liquidityFee = 0 (#998)
- _tokenTransfer(from,to,amount,takeFee) (#1061)
- _previousLiquidityFee = _liquidityFee (#995)
- _tokenTransfer(from,to,amount,takeFee) (#1061)
- _previousTaxFee = _taxFee (#994)
- _tokenTransfer(from,to,amount,takeFee) (#1061)
- _tFeeTotal = _tFeeTotal.add(tFee) (#925)
- _tokenTransfer(from,to,amount,takeFee) (#1061)
- _taxFee = _previousTaxFee (#1002)
- _taxFee = 0 (#997)
Reentrancy in MANC.constructor(string,string,uint256,uint256,uint256,uint256,uint256,uint256,address,address) (#740-770):
External calls:
- uniswapV2Pair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#758-759)
State variables written after the call(s):
- _isExcludedFromFee[tokenOwner] = true (#765)
- _isExcludedFromFee[address(this)] = true (#766)
- _owner = tokenOwner (#768)
- uniswapV2Router = _uniswapV2Router (#762)
Reentrancy in MANC.swapAndLiquify(uint256) (#1064-1085):
External calls:
- swapTokensForEth(half) (#1076)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1096-1102)
- addLiquidity(otherHalf,newBalance) (#1082)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1110-1117)
External calls sending eth:
- addLiquidity(otherHalf,newBalance) (#1082)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1110-1117)
State variables written after the call(s):
- addLiquidity(otherHalf,newBalance) (#1082)
- _allowances[owner][spender] = amount (#1014)
Reentrancy in MANC.transferFrom(address,address,uint256) (#808-812):
External calls:
- _transfer(sender,recipient,amount) (#809)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1110-1117)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1096-1102)
External calls sending eth:
- _transfer(sender,recipient,amount) (#809)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1110-1117)
State variables written after the call(s):
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#810)
- _allowances[owner][spender] = amount (#1014)
Apply the check-effects-interactions pattern.
Additional information: link
Reentrancy in MANC._transfer(address,address,uint256) (#1018-1062):
External calls:
- swapAndLiquify(contractTokenBalance) (#1049)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1110-1117)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1096-1102)
External calls sending eth:
- swapAndLiquify(contractTokenBalance) (#1049)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1110-1117)
Event emitted after the call(s):
- Transfer(sender,recipient,tTransferAmount) (#1147)
- _tokenTransfer(from,to,amount,takeFee) (#1061)
- Transfer(sender,recipient,tTransferAmount) (#1167)
- _tokenTransfer(from,to,amount,takeFee) (#1061)
- Transfer(sender,recipient,tTransferAmount) (#1157)
- _tokenTransfer(from,to,amount,takeFee) (#1061)
- Transfer(sender,recipient,tTransferAmount) (#888)
- _tokenTransfer(from,to,amount,takeFee) (#1061)
Reentrancy in MANC.constructor(string,string,uint256,uint256,uint256,uint256,uint256,uint256,address,address) (#740-770):
External calls:
- uniswapV2Pair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#758-759)
Event emitted after the call(s):
- Transfer(address(0),tokenOwner,_tTotal) (#769)
Reentrancy in MANC.swapAndLiquify(uint256) (#1064-1085):
External calls:
- swapTokensForEth(half) (#1076)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1096-1102)
- addLiquidity(otherHalf,newBalance) (#1082)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1110-1117)
External calls sending eth:
- addLiquidity(otherHalf,newBalance) (#1082)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1110-1117)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#1015)
- addLiquidity(otherHalf,newBalance) (#1082)
- SwapAndLiquify(half,newBalance,otherHalf) (#1084)
Reentrancy in MANC.transferFrom(address,address,uint256) (#808-812):
External calls:
- _transfer(sender,recipient,amount) (#809)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1110-1117)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1096-1102)
External calls sending eth:
- _transfer(sender,recipient,amount) (#809)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1110-1117)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#1015)
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#810)
Apply the check-effects-interactions pattern.
Additional information: link
Ownable.unlock() (#467-472) uses timestamp for comparisons
Dangerous comparisons:
- require(bool,string)(now > _lockTime,Contract is locked until 7 days) (#469)
Avoid relying on block.timestamp.
Additional information: link
Address.isContract(address) (#280-289) uses assembly
- INLINE ASM (#287)
Address._functionCallWithValue(address,bytes,uint256,string) (#373-394) uses assembly
- INLINE ASM (#386-389)
Do not use evm assembly.
Additional information: link
MANC.includeInReward(address) (#868-879) has costly operations inside a loop:
- _excluded.pop() (#875)
Use a local variable to hold the loop computation result.
Additional information: link
Address._functionCallWithValue(address,bytes,uint256,string) (#373-394) is never used and should be removed
Address.functionCall(address,bytes) (#333-335) is never used and should be removed
Address.functionCall(address,bytes,string) (#343-345) is never used and should be removed
Address.functionCallWithValue(address,bytes,uint256) (#358-360) is never used and should be removed
Address.functionCallWithValue(address,bytes,uint256,string) (#368-371) is never used and should be removed
Address.isContract(address) (#280-289) is never used and should be removed
Address.sendValue(address,uint256) (#307-313) is never used and should be removed
Context._msgData() (#252-255) is never used and should be removed
SafeMath.mod(uint256,uint256) (#225-227) is never used and should be removed
SafeMath.mod(uint256,uint256,string) (#241-244) is never used and should be removed
Remove unused functions.
Additional information: link
Low level call in Address.sendValue(address,uint256) (#307-313):
- (success) = recipient.call{value: amount}() (#311)
Low level call in Address._functionCallWithValue(address,bytes,uint256,string) (#373-394):
- (success,returndata) = target.call{value: weiValue}(data) (#377)
Avoid low-level calls. Check the call success. If the call is meant for a contract, check for code existence
Additional information: link
Variable Ownable._owner (#410) is not in mixedCase
Function IUniswapV2Pair.DOMAIN_SEPARATOR() (#511) is not in mixedCase
Function IUniswapV2Pair.PERMIT_TYPEHASH() (#512) is not in mixedCase
Function IUniswapV2Pair.MINIMUM_LIQUIDITY() (#529) is not in mixedCase
Function IUniswapV2Router01.WETH() (#551) is not in mixedCase
Parameter MANC.setSwapAndLiquifyEnabled(bool)._enabled (#915) is not in mixedCase
Parameter MANC.calculateTaxFee(uint256)._amount (#979) is not in mixedCase
Parameter MANC.calculateLiquidityFee(uint256)._amount (#985) is not in mixedCase
Variable MANC._taxFee (#711) is not in mixedCase
Variable MANC._liquidityFee (#714) is not in mixedCase
Variable MANC._maxTxAmount (#723) is not in mixedCase
Follow the Solidity naming convention.
Additional information: link
Redundant expression "this (#253)" inContext (#247-256)
Remove redundant statements if they congest code but offer no value.
Additional information: link
Variable IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountADesired (#556) is too similar to IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountBDesired (#557)
Variable MANC._transferBothExcluded(address,address,uint256).rTransferAmount (#881) is too similar to MANC._transferBothExcluded(address,address,uint256).tTransferAmount (#881)
Variable MANC._transferFromExcluded(address,address,uint256).rTransferAmount (#1161) is too similar to MANC._transferFromExcluded(address,address,uint256).tTransferAmount (#1161)
Variable MANC._getValues(uint256).rTransferAmount (#930) is too similar to MANC._transferToExcluded(address,address,uint256).tTransferAmount (#1151)
Variable MANC._transferBothExcluded(address,address,uint256).rTransferAmount (#881) is too similar to MANC._transferToExcluded(address,address,uint256).tTransferAmount (#1151)
Variable MANC._getRValues(uint256,uint256,uint256,uint256).rTransferAmount (#945) is too similar to MANC._getTValues(uint256).tTransferAmount (#937)
Variable MANC._transferToExcluded(address,address,uint256).rTransferAmount (#1151) is too similar to MANC._getTValues(uint256).tTransferAmount (#937)
Variable MANC.reflectionFromToken(uint256,bool).rTransferAmount (#847) is too similar to MANC._getTValues(uint256).tTransferAmount (#937)
Variable MANC._transferFromExcluded(address,address,uint256).rTransferAmount (#1161) is too similar to MANC._getTValues(uint256).tTransferAmount (#937)
Variable MANC._transferFromExcluded(address,address,uint256).rTransferAmount (#1161) is too similar to MANC._transferStandard(address,address,uint256).tTransferAmount (#1142)
Variable MANC._getValues(uint256).rTransferAmount (#930) is too similar to MANC._transferStandard(address,address,uint256).tTransferAmount (#1142)
Variable MANC._transferFromExcluded(address,address,uint256).rTransferAmount (#1161) is too similar to MANC._transferBothExcluded(address,address,uint256).tTransferAmount (#881)
Variable MANC._getValues(uint256).rTransferAmount (#930) is too similar to MANC._getTValues(uint256).tTransferAmount (#937)
Variable MANC._getRValues(uint256,uint256,uint256,uint256).rTransferAmount (#945) is too similar to MANC._transferToExcluded(address,address,uint256).tTransferAmount (#1151)
Variable MANC._getValues(uint256).rTransferAmount (#930) is too similar to MANC._transferBothExcluded(address,address,uint256).tTransferAmount (#881)
Variable MANC._transferToExcluded(address,address,uint256).rTransferAmount (#1151) is too similar to MANC._transferToExcluded(address,address,uint256).tTransferAmount (#1151)
Variable MANC.reflectionFromToken(uint256,bool).rTransferAmount (#847) is too similar to MANC._transferToExcluded(address,address,uint256).tTransferAmount (#1151)
Variable MANC._transferBothExcluded(address,address,uint256).rTransferAmount (#881) is too similar to MANC._transferStandard(address,address,uint256).tTransferAmount (#1142)
Variable MANC._transferFromExcluded(address,address,uint256).rTransferAmount (#1161) is too similar to MANC._transferToExcluded(address,address,uint256).tTransferAmount (#1151)
Variable MANC._transferBothExcluded(address,address,uint256).rTransferAmount (#881) is too similar to MANC._getTValues(uint256).tTransferAmount (#937)
Variable MANC._transferStandard(address,address,uint256).rTransferAmount (#1142) is too similar to MANC._transferFromExcluded(address,address,uint256).tTransferAmount (#1161)
Variable MANC._transferStandard(address,address,uint256).rTransferAmount (#1142) is too similar to MANC._transferBothExcluded(address,address,uint256).tTransferAmount (#881)
Variable MANC._transferToExcluded(address,address,uint256).rTransferAmount (#1151) is too similar to MANC._getValues(uint256).tTransferAmount (#929)
Variable MANC._getRValues(uint256,uint256,uint256,uint256).rTransferAmount (#945) is too similar to MANC._transferFromExcluded(address,address,uint256).tTransferAmount (#1161)
Variable MANC._transferStandard(address,address,uint256).rTransferAmount (#1142) is too similar to MANC._transferStandard(address,address,uint256).tTransferAmount (#1142)
Variable MANC._getRValues(uint256,uint256,uint256,uint256).rTransferAmount (#945) is too similar to MANC._transferStandard(address,address,uint256).tTransferAmount (#1142)
Variable MANC._getRValues(uint256,uint256,uint256,uint256).rTransferAmount (#945) is too similar to MANC._transferBothExcluded(address,address,uint256).tTransferAmount (#881)
Variable MANC._transferToExcluded(address,address,uint256).rTransferAmount (#1151) is too similar to MANC._transferFromExcluded(address,address,uint256).tTransferAmount (#1161)
Variable MANC._getValues(uint256).rTransferAmount (#930) is too similar to MANC._getValues(uint256).tTransferAmount (#929)
Variable MANC._transferStandard(address,address,uint256).rTransferAmount (#1142) is too similar to MANC._getTValues(uint256).tTransferAmount (#937)
Variable MANC._transferFromExcluded(address,address,uint256).rTransferAmount (#1161) is too similar to MANC._getValues(uint256).tTransferAmount (#929)
Variable MANC._transferToExcluded(address,address,uint256).rTransferAmount (#1151) is too similar to MANC._transferStandard(address,address,uint256).tTransferAmount (#1142)
Variable MANC._transferToExcluded(address,address,uint256).rTransferAmount (#1151) is too similar to MANC._transferBothExcluded(address,address,uint256).tTransferAmount (#881)
Variable MANC._getValues(uint256).rTransferAmount (#930) is too similar to MANC._transferFromExcluded(address,address,uint256).tTransferAmount (#1161)
Variable MANC._getRValues(uint256,uint256,uint256,uint256).rTransferAmount (#945) is too similar to MANC._getValues(uint256).tTransferAmount (#929)
Variable MANC.reflectionFromToken(uint256,bool).rTransferAmount (#847) is too similar to MANC._getValues(uint256).tTransferAmount (#929)
Variable MANC.reflectionFromToken(uint256,bool).rTransferAmount (#847) is too similar to MANC._transferFromExcluded(address,address,uint256).tTransferAmount (#1161)
Variable MANC._transferStandard(address,address,uint256).rTransferAmount (#1142) is too similar to MANC._transferToExcluded(address,address,uint256).tTransferAmount (#1151)
Variable MANC.reflectionFromToken(uint256,bool).rTransferAmount (#847) is too similar to MANC._transferStandard(address,address,uint256).tTransferAmount (#1142)
Variable MANC.reflectionFromToken(uint256,bool).rTransferAmount (#847) is too similar to MANC._transferBothExcluded(address,address,uint256).tTransferAmount (#881)
Variable MANC._transferStandard(address,address,uint256).rTransferAmount (#1142) is too similar to MANC._getValues(uint256).tTransferAmount (#929)
Variable MANC._transferBothExcluded(address,address,uint256).rTransferAmount (#881) is too similar to MANC._getValues(uint256).tTransferAmount (#929)
Variable MANC._transferBothExcluded(address,address,uint256).rTransferAmount (#881) is too similar to MANC._transferFromExcluded(address,address,uint256).tTransferAmount (#1161)
Prevent variables from having similar names.
Additional information: link
renounceOwnership() should be declared external:
- Ownable.renounceOwnership() (#439-442)
transferOwnership(address) should be declared external:
- Ownable.transferOwnership(address) (#448-452)
geUnlockTime() should be declared external:
- Ownable.geUnlockTime() (#454-456)
lock(uint256) should be declared external:
- Ownable.lock(uint256) (#459-464)
unlock() should be declared external:
- Ownable.unlock() (#467-472)
name() should be declared external:
- MANC.name() (#773-775)
symbol() should be declared external:
- MANC.symbol() (#777-779)
decimals() should be declared external:
- MANC.decimals() (#781-783)
totalSupply() should be declared external:
- MANC.totalSupply() (#785-787)
transfer(address,uint256) should be declared external:
- MANC.transfer(address,uint256) (#794-797)
allowance(address,address) should be declared external:
- MANC.allowance(address,address) (#799-801)
approve(address,uint256) should be declared external:
- MANC.approve(address,uint256) (#803-806)
transferFrom(address,address,uint256) should be declared external:
- MANC.transferFrom(address,address,uint256) (#808-812)
increaseAllowance(address,uint256) should be declared external:
- MANC.increaseAllowance(address,uint256) (#814-817)
decreaseAllowance(address,uint256) should be declared external:
- MANC.decreaseAllowance(address,uint256) (#819-822)
isExcludedFromReward(address) should be declared external:
- MANC.isExcludedFromReward(address) (#824-826)
totalFees() should be declared external:
- MANC.totalFees() (#828-830)
deliver(uint256) should be declared external:
- MANC.deliver(uint256) (#832-839)
reflectionFromToken(uint256,bool) should be declared external:
- MANC.reflectionFromToken(uint256,bool) (#841-850)
excludeFromReward(address) should be declared external:
- MANC.excludeFromReward(address) (#858-866)
excludeFromFee(address) should be declared external:
- MANC.excludeFromFee(address) (#891-893)
includeInFee(address) should be declared external:
- MANC.includeInFee(address) (#895-897)
setNumTokensSellToAddToLiquidity(uint256) should be declared external:
- MANC.setNumTokensSellToAddToLiquidity(uint256) (#907-909)
setMaxTxPercent(uint256) should be declared external:
- MANC.setMaxTxPercent(uint256) (#911-913)
setSwapAndLiquifyEnabled(bool) should be declared external:
- MANC.setSwapAndLiquifyEnabled(bool) (#915-918)
claimTokens() should be declared external:
- MANC.claimTokens() (#975-977)
isExcludedFromFee(address) should be declared external:
- MANC.isExcludedFromFee(address) (#1006-1008)
Use the external attribute for functions never called from the contract.
Additional information: link
Unable to find website, listings and other project-related information
Young tokens have high risks of price dump / death
Token has no active CoinGecko listing / rank
Token has no active CoinMarketCap listing / rank
Unable to find Telegram and Twitter accounts