MARVIN [Marvin Inu] Token

Reentrancy in MarvinInu._transfer(address,address,uint256) (#1097-1204):
External calls:
- swapBack() (#1162)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,deadAddress,block.timestamp) (#1233-1240)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1216-1222)
- (success,None) = address(devWallet).call{value: ethForDev}() (#1275)
- (success,None) = address(marketingWallet).call{value: address(this).balance}() (#1283)
External calls sending eth:
- swapBack() (#1162)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,deadAddress,block.timestamp) (#1233-1240)
- (success,None) = address(devWallet).call{value: ethForDev}() (#1275)
- (success,None) = address(marketingWallet).call{value: address(this).balance}() (#1283)
State variables written after the call(s):
- swapping = false (#1164)
Reentrancy in MarvinInu._transfer(address,address,uint256) (#1097-1204):
External calls:
- swapBack() (#1162)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,deadAddress,block.timestamp) (#1233-1240)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1216-1222)
- (success,None) = address(devWallet).call{value: ethForDev}() (#1275)
- (success,None) = address(marketingWallet).call{value: address(this).balance}() (#1283)
- autoBurnLiquidityPairTokens() (#1168)
- pair.sync() (#1311)
External calls sending eth:
- swapBack() (#1162)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,deadAddress,block.timestamp) (#1233-1240)
- (success,None) = address(devWallet).call{value: ethForDev}() (#1275)
- (success,None) = address(marketingWallet).call{value: address(this).balance}() (#1283)
State variables written after the call(s):
- autoBurnLiquidityPairTokens() (#1168)
- _balances[sender] = _balances[sender].sub(amount,ERC20: transfer amount exceeds balance) (#374)
- _balances[recipient] = _balances[recipient].add(amount) (#375)
- super._transfer(from,address(this),fees) (#1197)
- _balances[sender] = _balances[sender].sub(amount,ERC20: transfer amount exceeds balance) (#374)
- _balances[recipient] = _balances[recipient].add(amount) (#375)
- super._transfer(from,to,amount) (#1203)
- _balances[sender] = _balances[sender].sub(amount,ERC20: transfer amount exceeds balance) (#374)
- _balances[recipient] = _balances[recipient].add(amount) (#375)
- tokensForDev += fees * sellDevFee / sellTotalFees (#1185)
- tokensForDev += fees * buyDevFee / buyTotalFees (#1192)
- tokensForLiquidity += fees * sellLiquidityFee / sellTotalFees (#1184)
- tokensForLiquidity += fees * buyLiquidityFee / buyTotalFees (#1191)
- tokensForMarketing += fees * sellMarketingFee / sellTotalFees (#1186)
- tokensForMarketing += fees * buyMarketingFee / buyTotalFees (#1193)
Apply the check-effects-interactions pattern.

Additional information: link

Contract ownership is not renounced (belongs to a wallet)

MarvinInu.swapBack() (#1243-1284) uses a dangerous strict equality:
- contractBalance == 0 || totalTokensToSwap == 0 (#1248)
Don't use strict equality to determine if an account has enough Ether or tokens.

Additional information: link

MarvinInu.setAutoLPBurnSettings(uint256,uint256,bool) (#1286-1292) contains a tautology or contradiction:
- require(bool,string)(_percent <= 1000 && _percent >= 0,Must set auto LP burn percent between 0% and 10%) (#1288)
Fix the incorrect comparison by changing the value type or the comparison.

Additional information: link

MarvinInu._transfer(address,address,uint256) (#1097-1204) performs a multiplication on the result of a division:
-fees = amount.mul(sellTotalFees).div(100) (#1183)
-tokensForLiquidity += fees * sellLiquidityFee / sellTotalFees (#1184)
MarvinInu._transfer(address,address,uint256) (#1097-1204) performs a multiplication on the result of a division:
-fees = amount.mul(sellTotalFees).div(100) (#1183)
-tokensForDev += fees * sellDevFee / sellTotalFees (#1185)
MarvinInu._transfer(address,address,uint256) (#1097-1204) performs a multiplication on the result of a division:
-fees = amount.mul(sellTotalFees).div(100) (#1183)
-tokensForMarketing += fees * sellMarketingFee / sellTotalFees (#1186)
MarvinInu._transfer(address,address,uint256) (#1097-1204) performs a multiplication on the result of a division:
-fees = amount.mul(buyTotalFees).div(100) (#1190)
-tokensForLiquidity += fees * buyLiquidityFee / buyTotalFees (#1191)
MarvinInu._transfer(address,address,uint256) (#1097-1204) performs a multiplication on the result of a division:
-fees = amount.mul(buyTotalFees).div(100) (#1190)
-tokensForDev += fees * buyDevFee / buyTotalFees (#1192)
MarvinInu._transfer(address,address,uint256) (#1097-1204) performs a multiplication on the result of a division:
-fees = amount.mul(buyTotalFees).div(100) (#1190)
-tokensForMarketing += fees * buyMarketingFee / buyTotalFees (#1193)
Consider ordering multiplication before division.

Additional information: link

MarvinInu.constructor().totalSupply (#961) shadows:
- ERC20.totalSupply() (#248-250) (function)
- IERC20.totalSupply() (#98) (function)
Rename the local variables that shadow another component.

Additional information: link

MarvinInu.updateMarketingWallet(address).newMarketingWallet (#1080) lacks a zero-check on :
- marketingWallet = newMarketingWallet (#1082)
MarvinInu.updateDevWallet(address).newWallet (#1085) lacks a zero-check on :
- devWallet = newWallet (#1087)
Check that the address is not zero.

Additional information: link

Reentrancy in MarvinInu.constructor() (#942-995):
External calls:
- uniswapV2Pair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#949)
State variables written after the call(s):
- _mint(msg.sender,totalSupply) (#994)
- _balances[account] = _balances[account].add(amount) (#394)
- excludeFromFees(owner(),true) (#982)
- _isExcludedFromFees[account] = excluded (#1064)
- excludeFromFees(address(this),true) (#983)
- _isExcludedFromFees[account] = excluded (#1064)
- excludeFromFees(address(0xdead),true) (#984)
- _isExcludedFromFees[account] = excluded (#1064)
- excludeFromMaxTransaction(address(uniswapV2Pair),true) (#950)
- _isExcludedMaxTransactionAmount[updAds] = isEx (#1039)
- excludeFromMaxTransaction(owner(),true) (#986)
- _isExcludedMaxTransactionAmount[updAds] = isEx (#1039)
- excludeFromMaxTransaction(address(this),true) (#987)
- _isExcludedMaxTransactionAmount[updAds] = isEx (#1039)
- excludeFromMaxTransaction(address(0xdead),true) (#988)
- _isExcludedMaxTransactionAmount[updAds] = isEx (#1039)
- _mint(msg.sender,totalSupply) (#994)
- _totalSupply = _totalSupply.add(amount) (#393)
- _setAutomatedMarketMakerPair(address(uniswapV2Pair),true) (#951)
- automatedMarketMakerPairs[pair] = value (#1075)
- buyDevFee = _buyDevFee (#970)
- buyLiquidityFee = _buyLiquidityFee (#969)
- buyMarketingFee = _buyMarketingFee (#968)
- buyTotalFees = buyMarketingFee + buyLiquidityFee + buyDevFee (#971)
- devWallet = address(owner()) (#979)
- marketingWallet = address(owner()) (#978)
- maxTransactionAmount = 5000000000 * 1e18 (#964)
- maxWallet = totalSupply * 15 / 1000 (#965)
- sellDevFee = _sellDevFee (#975)
- sellLiquidityFee = _sellLiquidityFee (#974)
- sellMarketingFee = _sellMarketingFee (#973)
- sellTotalFees = sellMarketingFee + sellLiquidityFee + sellDevFee (#976)
- swapTokensAtAmount = totalSupply * 15 / 10000 (#966)
Reentrancy in MarvinInu.swapBack() (#1243-1284):
External calls:
- swapTokensForEth(amountToSwapForETH) (#1260)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1216-1222)
- (success,None) = address(devWallet).call{value: ethForDev}() (#1275)
- addLiquidity(liquidityTokens,ethForLiquidity) (#1278)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,deadAddress,block.timestamp) (#1233-1240)
External calls sending eth:
- (success,None) = address(devWallet).call{value: ethForDev}() (#1275)
- addLiquidity(liquidityTokens,ethForLiquidity) (#1278)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,deadAddress,block.timestamp) (#1233-1240)
State variables written after the call(s):
- addLiquidity(liquidityTokens,ethForLiquidity) (#1278)
- _allowances[owner][spender] = amount (#440)
Apply the check-effects-interactions pattern.

Additional information: link

Reentrancy in MarvinInu._transfer(address,address,uint256) (#1097-1204):
External calls:
- swapBack() (#1162)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,deadAddress,block.timestamp) (#1233-1240)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1216-1222)
- (success,None) = address(devWallet).call{value: ethForDev}() (#1275)
- (success,None) = address(marketingWallet).call{value: address(this).balance}() (#1283)
- autoBurnLiquidityPairTokens() (#1168)
- pair.sync() (#1311)
External calls sending eth:
- swapBack() (#1162)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,deadAddress,block.timestamp) (#1233-1240)
- (success,None) = address(devWallet).call{value: ethForDev}() (#1275)
- (success,None) = address(marketingWallet).call{value: address(this).balance}() (#1283)
Event emitted after the call(s):
- AutoNukeLP() (#1312)
- autoBurnLiquidityPairTokens() (#1168)
- Transfer(sender,recipient,amount) (#376)
- super._transfer(from,to,amount) (#1203)
- Transfer(sender,recipient,amount) (#376)
- super._transfer(from,address(this),fees) (#1197)
- Transfer(sender,recipient,amount) (#376)
- autoBurnLiquidityPairTokens() (#1168)
Reentrancy in MarvinInu.autoBurnLiquidityPairTokens() (#1294-1314):
External calls:
- pair.sync() (#1311)
Event emitted after the call(s):
- AutoNukeLP() (#1312)
Reentrancy in MarvinInu.constructor() (#942-995):
External calls:
- uniswapV2Pair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#949)
Event emitted after the call(s):
- ExcludeFromFees(account,excluded) (#1065)
- excludeFromFees(address(0xdead),true) (#984)
- ExcludeFromFees(account,excluded) (#1065)
- excludeFromFees(address(this),true) (#983)
- ExcludeFromFees(account,excluded) (#1065)
- excludeFromFees(owner(),true) (#982)
- SetAutomatedMarketMakerPair(pair,value) (#1077)
- _setAutomatedMarketMakerPair(address(uniswapV2Pair),true) (#951)
- Transfer(address(0),account,amount) (#395)
- _mint(msg.sender,totalSupply) (#994)
Reentrancy in MarvinInu.manualBurnLiquidityPairTokens(uint256) (#1316-1337):
External calls:
- pair.sync() (#1334)
Event emitted after the call(s):
- ManualNukeLP() (#1335)
Reentrancy in MarvinInu.swapBack() (#1243-1284):
External calls:
- swapTokensForEth(amountToSwapForETH) (#1260)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1216-1222)
- (success,None) = address(devWallet).call{value: ethForDev}() (#1275)
- addLiquidity(liquidityTokens,ethForLiquidity) (#1278)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,deadAddress,block.timestamp) (#1233-1240)
External calls sending eth:
- (success,None) = address(devWallet).call{value: ethForDev}() (#1275)
- addLiquidity(liquidityTokens,ethForLiquidity) (#1278)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,deadAddress,block.timestamp) (#1233-1240)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#441)
- addLiquidity(liquidityTokens,ethForLiquidity) (#1278)
- SwapAndLiquify(amountToSwapForETH,ethForLiquidity,tokensForLiquidity) (#1279)
Apply the check-effects-interactions pattern.

Additional information: link

MarvinInu._transfer(address,address,uint256) (#1097-1204) uses timestamp for comparisons
Dangerous comparisons:
- ! swapping && automatedMarketMakerPairs[to] && lpBurnEnabled && block.timestamp >= lastLpBurnTime + lpBurnFrequency && ! _isExcludedFromFees[from] (#1167)
MarvinInu.manualBurnLiquidityPairTokens(uint256) (#1316-1337) uses timestamp for comparisons
Dangerous comparisons:
- require(bool,string)(block.timestamp > lastManualLpBurnTime + manualBurnFrequency,Must wait for cooldown to finish) (#1317)
Avoid relying on block.timestamp.

Additional information: link

Function IUniswapV2Pair.DOMAIN_SEPARATOR() (#42) is not in mixedCase
Function IUniswapV2Pair.PERMIT_TYPEHASH() (#43) is not in mixedCase
Function IUniswapV2Pair.MINIMUM_LIQUIDITY() (#60) is not in mixedCase
Function IUniswapV2Router01.WETH() (#733) is not in mixedCase
Event MarvinInumarketingWalletUpdated(address,address) (#928) is not in CapWords
Event MarvinInudevWalletUpdated(address,address) (#930) is not in CapWords
Parameter MarvinInu.updateBuyFees(uint256,uint256,uint256)._marketingFee (#1047) is not in mixedCase
Parameter MarvinInu.updateBuyFees(uint256,uint256,uint256)._liquidityFee (#1047) is not in mixedCase
Parameter MarvinInu.updateBuyFees(uint256,uint256,uint256)._devFee (#1047) is not in mixedCase
Parameter MarvinInu.updateSellFees(uint256,uint256,uint256)._marketingFee (#1055) is not in mixedCase
Parameter MarvinInu.updateSellFees(uint256,uint256,uint256)._liquidityFee (#1055) is not in mixedCase
Parameter MarvinInu.updateSellFees(uint256,uint256,uint256)._devFee (#1055) is not in mixedCase
Parameter MarvinInu.setAutoLPBurnSettings(uint256,uint256,bool)._frequencyInSeconds (#1286) is not in mixedCase
Parameter MarvinInu.setAutoLPBurnSettings(uint256,uint256,bool)._percent (#1286) is not in mixedCase
Parameter MarvinInu.setAutoLPBurnSettings(uint256,uint256,bool)._Enabled (#1286) is not in mixedCase
Constant MarvinInu.deadAddress (#871) is not in UPPER_CASE_WITH_UNDERSCORES
Variable MarvinInu._isExcludedMaxTransactionAmount (#916) is not in mixedCase
Follow the Solidity naming convention.

Additional information: link

Redundant expression "this (#22)" inContext (#16-25)
Remove redundant statements if they congest code but offer no value.

Additional information: link

Variable IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountADesired (#738) is too similar to IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountBDesired (#739)
Prevent variables from having similar names.

Additional information: link

SafeMathInt.MAX_INT256 (#664) is never used in SafeMathInt (#662-720)
Remove unused state variables.

Additional information: link

name() should be declared external:
- ERC20.name() (#216-218)
symbol() should be declared external:
- ERC20.symbol() (#224-226)
decimals() should be declared external:
- ERC20.decimals() (#241-243)
transfer(address,uint256) should be declared external:
- ERC20.transfer(address,uint256) (#267-270)
allowance(address,address) should be declared external:
- ERC20.allowance(address,address) (#275-277)
approve(address,uint256) should be declared external:
- ERC20.approve(address,uint256) (#286-289)
transferFrom(address,address,uint256) should be declared external:
- ERC20.transferFrom(address,address,uint256) (#304-312)
increaseAllowance(address,uint256) should be declared external:
- ERC20.increaseAllowance(address,uint256) (#326-329)
decreaseAllowance(address,uint256) should be declared external:
- ERC20.decreaseAllowance(address,uint256) (#345-348)
renounceOwnership() should be declared external:
- Ownable.renounceOwnership() (#644-647)
transferOwnership(address) should be declared external:
- Ownable.transferOwnership(address) (#653-657)
setAutomatedMarketMakerPair(address,bool) should be declared external:
- MarvinInu.setAutomatedMarketMakerPair(address,bool) (#1068-1072)
isExcludedFromFees(address) should be declared external:
- MarvinInu.isExcludedFromFees(address) (#1091-1093)
Use the external attribute for functions never called from the contract.

Additional information: link

Pragma version0.8.9 (#14) necessitates a version too recent to be trusted. Consider deploying with 0.6.12/0.7.6/0.8.7
solc-0.8.9 is not recommended for deployment
Deploy with any of the following Solidity versions: 0.5.16 - 0.5.17, 0.6.11 - 0.6.12, 0.7.5 - 0.7.6 Use a simple pragma version that allows any of these versions. Consider using the latest version of Solidity for testing.

Additional information: link

MarvinInu.updateSwapTokensAtAmount(uint256) (#1021-1026) should emit an event for:
- swapTokensAtAmount = newAmount (#1024)
MarvinInu.updateMaxTxnAmount(uint256) (#1028-1031) should emit an event for:
- maxTransactionAmount = newNum * (10 ** 18) (#1030)
MarvinInu.updateMaxWalletAmount(uint256) (#1033-1036) should emit an event for:
- maxWallet = newNum * (10 ** 18) (#1035)
MarvinInu.updateBuyFees(uint256,uint256,uint256) (#1047-1053) should emit an event for:
- buyMarketingFee = _marketingFee (#1048)
- buyLiquidityFee = _liquidityFee (#1049)
- buyDevFee = _devFee (#1050)
- buyTotalFees = buyMarketingFee + buyLiquidityFee + buyDevFee (#1051)
MarvinInu.updateSellFees(uint256,uint256,uint256) (#1055-1061) should emit an event for:
- sellMarketingFee = _marketingFee (#1056)
- sellLiquidityFee = _liquidityFee (#1057)
- sellDevFee = _devFee (#1058)
- sellTotalFees = sellMarketingFee + sellLiquidityFee + sellDevFee (#1059)
MarvinInu.setAutoLPBurnSettings(uint256,uint256,bool) (#1286-1292) should emit an event for:
- lpBurnFrequency = _frequencyInSeconds (#1289)
- percentForLPBurn = _percent (#1290)
Emit an event for critical parameter changes.

Additional information: link

MarvinInu.constructor() (#942-995) uses literals with too many digits:
- maxTransactionAmount = 5000000000 * 1e18 (#964)
MarvinInu.updateSwapTokensAtAmount(uint256) (#1021-1026) uses literals with too many digits:
- require(bool,string)(newAmount >= totalSupply() * 1 / 100000,Swap amount cannot be lower than 0.001% total supply.) (#1022)
Use: Ether suffix, Time suffix, or The scientific notation

Additional information: link

Context._msgData() (#21-24) is never used and should be removed
ERC20._burn(address,uint256) (#409-417) is never used and should be removed
SafeMath.mod(uint256,uint256) (#586-588) is never used and should be removed
SafeMath.mod(uint256,uint256,string) (#602-605) is never used and should be removed
SafeMathInt.abs(int256) (#710-713) is never used and should be removed
SafeMathInt.add(int256,int256) (#701-705) is never used and should be removed
SafeMathInt.div(int256,int256) (#681-687) is never used and should be removed
SafeMathInt.mul(int256,int256) (#669-676) is never used and should be removed
SafeMathInt.sub(int256,int256) (#692-696) is never used and should be removed
SafeMathInt.toUint256Safe(int256) (#716-719) is never used and should be removed
SafeMathUint.toInt256Safe(uint256) (#723-727) is never used and should be removed
Remove unused functions.

Additional information: link

MarvinInu.manualBurnFrequency (#887) should be constant
Add the constant attributes to state variables that never change.

Additional information: link

MarvinInu.addLiquidity(uint256,uint256) (#1228-1241) ignores return value by uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,deadAddress,block.timestamp) (#1233-1240)
Ensure that all the return values of the function calls are used.

Additional information: link

Reentrancy in MarvinInu.swapBack() (#1243-1284):
External calls:
- swapTokensForEth(amountToSwapForETH) (#1260)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1216-1222)
State variables written after the call(s):
- tokensForDev = 0 (#1273)
- tokensForLiquidity = 0 (#1271)
- tokensForMarketing = 0 (#1272)
Apply the check-effects-interactions pattern.

Additional information: link

MarvinInu._transfer(address,address,uint256) (#1097-1204) uses tx.origin for authorization: require(bool,string)(_holderLastTransferTimestamp[tx.origin] < block.number,_transfer:: Transfer Delay enabled. Only one purchase per block allowed.) (#1125)
Do not use tx.origin for authorization.

Additional information: link

Low level call in MarvinInu.swapBack() (#1243-1284):
- (success,None) = address(devWallet).call{value: ethForDev}() (#1275)
- (success,None) = address(marketingWallet).call{value: address(this).balance}() (#1283)
Avoid low-level calls. Check the call success. If the call is meant for a contract, check for code existence

Additional information: link

Contract has 0% buy tax and 20% sell tax.
Taxes are suspiciously high (over 10%) and contract ownership is not renounced. Token has a high risk of becoming a honeypot.

Unable to find token on CoinHunt

Additional information: link

Token is not listed at Mobula.Finance

Additional information: link

Young tokens have high risks of price dump / death

Young tokens have high risks of price dump / death

Young tokens have high risks of price dump / death

Token has relatively low CoinGecko rank