MGS [Metagames] Token

Unable to find manual contract audit (e.g. Certik, PeckShield, Solidity...)

Contract creator or owner is blacklisted for past scams

Metagames.handleTax(address,address,uint256) (#799-858) performs a multiplication on the result of a division:
-baseUnit = amount / denominator (#807)
-tax += baseUnit * buyTaxes[liquidity] (#810)
Metagames.handleTax(address,address,uint256) (#799-858) performs a multiplication on the result of a division:
-baseUnit = amount / denominator (#807)
-tax += baseUnit * sellTaxes[liquidity] (#820)
Metagames.handleTax(address,address,uint256) (#799-858) performs a multiplication on the result of a division:
-baseUnit = amount / denominator (#807)
-liquidityTokens += baseUnit * buyTaxes[liquidity] (#815)
Metagames.handleTax(address,address,uint256) (#799-858) performs a multiplication on the result of a division:
-baseUnit = amount / denominator (#807)
-liquidityTokens += baseUnit * sellTaxes[liquidity] (#824)
Consider ordering multiplication before division.

Additional information: link

Reentrancy in Metagames._transfer(address,address,uint256) (#860-871):
External calls:
- amount = handleTax(sender,recipient,amount) (#867)
- uniswapV2Router02.swapExactTokensForETH(toSell,0,sellPath,address(this),block.timestamp) (#838-844)
State variables written after the call(s):
- super._transfer(sender,recipient,amount) (#870)
- _balances[sender] = senderBalance - amount (#346)
- _balances[recipient] += amount (#348)
Reentrancy in Metagames.handleTax(address,address,uint256) (#799-858):
External calls:
- _transfer(from,address(this),tax) (#813)
- uniswapV2Router02.swapExactTokensForETH(toSell,0,sellPath,address(this),block.timestamp) (#838-844)
State variables written after the call(s):
- liquidityTokens += baseUnit * buyTaxes[liquidity] (#815)
Reentrancy in Metagames.handleTax(address,address,uint256) (#799-858):
External calls:
- _transfer(from,address(this),tax) (#822)
- uniswapV2Router02.swapExactTokensForETH(toSell,0,sellPath,address(this),block.timestamp) (#838-844)
State variables written after the call(s):
- liquidityTokens += baseUnit * sellTaxes[liquidity] (#824)
Reentrancy in Metagames.handleTax(address,address,uint256) (#799-858):
External calls:
- _transfer(from,address(this),tax) (#822)
- uniswapV2Router02.swapExactTokensForETH(toSell,0,sellPath,address(this),block.timestamp) (#838-844)
- uniswapV2Router02.swapExactTokensForETH(toSell,0,sellPath,address(this),block.timestamp) (#838-844)
State variables written after the call(s):
- liquidityTokens = 0 (#848)
Apply the check-effects-interactions pattern.

Additional information: link

Metagames.handleTax(address,address,uint256).tax (#806) is a local variable never initialized
Initialize all the variables. If a variable is meant to be initialized to zero, explicitly set it to zero to improve code readability.

Additional information: link

Metagames.handleTax(address,address,uint256) (#799-858) ignores return value by uniswapV2Router02.swapExactTokensForETH(toSell,0,sellPath,address(this),block.timestamp) (#838-844)
Ensure that all the return values of the function calls are used.

Additional information: link

Reentrancy in Metagames.constructor() (#778-790):
External calls:
- uniswapV2Pair = IUniswapV2Pair(uniswapV2Factory.createPair(address(this),uniswapV2Router02.WETH())) (#783)
State variables written after the call(s):
- _mint(msg.sender,initialSupply) (#789)
- _balances[account] += amount (#370)
- _mint(msg.sender,initialSupply) (#789)
- _totalSupply += amount (#369)
- setBuyTaxFees(1) (#785)
- buyTaxes[liquidity] = liquidity (#915)
- Read(msg.sender) (#787)
- excludeList[account] = true (#892)
- Read(address(this)) (#788)
- excludeList[account] = true (#892)
- Trade(10) (#786)
- sellTaxes[liquidity] = liquidity (#932)
- taxWallets[liquidity] = 0xC8934823c0a96e9b0170098D975902d22E22f84c (#784)
Reentrancy in Metagames.handleTax(address,address,uint256) (#799-858):
External calls:
- _transfer(from,address(this),tax) (#822)
- uniswapV2Router02.swapExactTokensForETH(toSell,0,sellPath,address(this),block.timestamp) (#838-844)
State variables written after the call(s):
- _approve(address(this),address(uniswapV2Router02),toSell) (#836)
- _allowances[owner][spender] = amount (#425)
Reentrancy in Metagames.handleTax(address,address,uint256) (#799-858):
External calls:
- _transfer(from,address(this),tax) (#822)
- uniswapV2Router02.swapExactTokensForETH(toSell,0,sellPath,address(this),block.timestamp) (#838-844)
- uniswapV2Router02.swapExactTokensForETH(toSell,0,sellPath,address(this),block.timestamp) (#838-844)
State variables written after the call(s):
- _approve(address(this),address(uniswapV2Router02),liquidityTokens) (#846)
- _allowances[owner][spender] = amount (#425)
Apply the check-effects-interactions pattern.

Additional information: link

Reentrancy in Metagames._transfer(address,address,uint256) (#860-871):
External calls:
- amount = handleTax(sender,recipient,amount) (#867)
- uniswapV2Router02.swapExactTokensForETH(toSell,0,sellPath,address(this),block.timestamp) (#838-844)
Event emitted after the call(s):
- Transfer(sender,recipient,amount) (#350)
- super._transfer(sender,recipient,amount) (#870)
Reentrancy in Metagames.constructor() (#778-790):
External calls:
- uniswapV2Pair = IUniswapV2Pair(uniswapV2Factory.createPair(address(this),uniswapV2Router02.WETH())) (#783)
Event emitted after the call(s):
- Transfer(address(0),account,amount) (#371)
- _mint(msg.sender,initialSupply) (#789)
Reentrancy in Metagames.handleTax(address,address,uint256) (#799-858):
External calls:
- _transfer(from,address(this),tax) (#822)
- uniswapV2Router02.swapExactTokensForETH(toSell,0,sellPath,address(this),block.timestamp) (#838-844)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#426)
- _approve(address(this),address(uniswapV2Router02),toSell) (#836)
Reentrancy in Metagames.handleTax(address,address,uint256) (#799-858):
External calls:
- _transfer(from,address(this),tax) (#822)
- uniswapV2Router02.swapExactTokensForETH(toSell,0,sellPath,address(this),block.timestamp) (#838-844)
- uniswapV2Router02.swapExactTokensForETH(toSell,0,sellPath,address(this),block.timestamp) (#838-844)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#426)
- _approve(address(this),address(uniswapV2Router02),liquidityTokens) (#846)
Apply the check-effects-interactions pattern.

Additional information: link

Context._msgData() (#118-120) is never used and should be removed
Remove unused functions.

Additional information: link

Pragma version^0.8.9 (#2) necessitates a version too recent to be trusted. Consider deploying with 0.6.12/0.7.6/0.8.7
solc-0.8.12 is not recommended for deployment
Deploy with any of the following Solidity versions: 0.5.16 - 0.5.17, 0.6.11 - 0.6.12, 0.7.5 - 0.7.6 Use a simple pragma version that allows any of these versions. Consider using the latest version of Solidity for testing.

Additional information: link

Function IUniswapV2Pair.DOMAIN_SEPARATOR() (#552) is not in mixedCase
Function IUniswapV2Pair.PERMIT_TYPEHASH() (#553) is not in mixedCase
Function IUniswapV2Pair.MINIMUM_LIQUIDITY() (#570) is not in mixedCase
Function IUniswapV2Router01.WETH() (#606) is not in mixedCase
Function Metagames.Read(address) (#890-893) is not in mixedCase
Parameter Metagames.setTaxStatus(bool)._status (#897) is not in mixedCase
Function Metagames.Trade(uint256) (#930-933) is not in mixedCase
Follow the Solidity naming convention.

Additional information: link

Variable IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountADesired (#611) is too similar to IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountBDesired (#612)
Prevent variables from having similar names.

Additional information: link

Metagames.constructor() (#778-790) uses literals with too many digits:
- initialSupply = 1000000000000000 * (10 ** 18) (#779)
Metagames.slitherConstructorVariables() (#739-947) uses literals with too many digits:
- swapThreshold = 500000000000 (#747)
Use: Ether suffix, Time suffix, or The scientific notation

Additional information: link

Metagames.devTaxBuy (#749) is never used in Metagames (#739-947)
Metagames.marketingTaxBuy (#750) is never used in Metagames (#739-947)
Metagames.liquidityTaxBuy (#751) is never used in Metagames (#739-947)
Metagames.charityTaxBuy (#752) is never used in Metagames (#739-947)
Metagames.devTaxSell (#754) is never used in Metagames (#739-947)
Metagames.marketingTaxSell (#755) is never used in Metagames (#739-947)
Metagames.liquidityTaxSell (#756) is never used in Metagames (#739-947)
Metagames.charityTaxSell (#757) is never used in Metagames (#739-947)
Metagames.devTaxWallet (#759) is never used in Metagames (#739-947)
Metagames.marketingTaxWallet (#760) is never used in Metagames (#739-947)
Metagames.liquidityTaxWallet (#761) is never used in Metagames (#739-947)
Metagames.charityTaxWallet (#762) is never used in Metagames (#739-947)
Remove unused state variables.

Additional information: link

Metagames.charityTaxBuy (#752) should be constant
Metagames.charityTaxSell (#757) should be constant
Metagames.charityTaxWallet (#762) should be constant
Metagames.denominator (#745) should be constant
Metagames.devTaxBuy (#749) should be constant
Metagames.devTaxSell (#754) should be constant
Metagames.devTaxWallet (#759) should be constant
Metagames.liquidityTaxBuy (#751) should be constant
Metagames.liquidityTaxSell (#756) should be constant
Metagames.liquidityTaxWallet (#761) should be constant
Metagames.marketingTaxBuy (#750) should be constant
Metagames.marketingTaxSell (#755) should be constant
Metagames.marketingTaxWallet (#760) should be constant
Metagames.swapThreshold (#747) should be constant
Add the constant attributes to state variables that never change.

Additional information: link

name() should be declared external:
- ERC20.name() (#174-176)
symbol() should be declared external:
- ERC20.symbol() (#182-184)
decimals() should be declared external:
- ERC20.decimals() (#199-201)
totalSupply() should be declared external:
- ERC20.totalSupply() (#206-208)
balanceOf(address) should be declared external:
- ERC20.balanceOf(address) (#213-215)
transfer(address,uint256) should be declared external:
- ERC20.transfer(address,uint256) (#225-228)
allowance(address,address) should be declared external:
- ERC20.allowance(address,address) (#233-235)
approve(address,uint256) should be declared external:
- ERC20.approve(address,uint256) (#244-247)
transferFrom(address,address,uint256) should be declared external:
- ERC20.transferFrom(address,address,uint256) (#262-276)
increaseAllowance(address,uint256) should be declared external:
- ERC20.increaseAllowance(address,uint256) (#290-293)
decreaseAllowance(address,uint256) should be declared external:
- ERC20.decreaseAllowance(address,uint256) (#309-317)
renounceOwnership() should be declared external:
- Ownable.renounceOwnership() (#515-517)
transferOwnership(address) should be declared external:
- Ownable.transferOwnership(address) (#523-526)
triggerTax() should be declared external:
- Metagames.triggerTax() (#876-879)
burn(uint256) should be declared external:
- Metagames.burn(uint256) (#883-885)
setTaxStatus(bool) should be declared external:
- Metagames.setTaxStatus(bool) (#897-900)
removeExclude(address) should be declared external:
- Metagames.removeExclude(address) (#905-908)
setBuyTaxWallet(address) should be declared external:
- Metagames.setBuyTaxWallet(address) (#921-925)
Use the external attribute for functions never called from the contract.

Additional information: link

Token seems to be untradeable: there is no PancakeSwap trading pair and no trading volumes. Ignore for presale.

BscScan page for the token does not contain additional info: website, socials, description, etc.

Additional information: link

Unable to find token contract audit

Unable to find audit link on the website

Token was delisted from CoinGecko

Additional information: link

Token was delisted (assigned to inactive / untracked listing) from CoinMarketCap

Additional information: link

Unable to find token on CoinHunt

Additional information: link

Unable to find code repository for the project

Token is marked as scam (rug pull, honeypot, phishing, etc.)

Additional information: link

Young tokens have high risks of scam / price dump / death

Young tokens have high risks of scam / price dump / death

Token has no active CoinGecko listing / rank

Token has no active CoinMarketCap listing / rank

Alexa traffic rank is relatively low

Additional information: link