Unable to find manual contract audit (e.g. Certik, PeckShield, Solidity...)
MorieInu.swapBack() (#639-688) sends eth to arbitrary user
Dangerous calls:
- (tmpSuccess) = address(marketingWallet).call{gas: 30000,value: marketingShare}() (#670)
- (tmpSuccess1) = address(anothermarketingWallet).call{gas: 30000,value: anothermarketingShare}() (#671)
Ensure that an arbitrary user cannot withdraw unauthorized funds.
Additional information: link
Reentrancy in MorieInu._transferFrom(address,address,uint256) (#574-615):
External calls:
- swapBack() (#584)
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(amountToSwap,0,path,address(this),block.timestamp) (#649-655)
- dividendDistributor.deposit{value: amountBNBReflection}() (#665)
- (tmpSuccess) = address(marketingWallet).call{gas: 30000,value: marketingShare}() (#670)
- (tmpSuccess1) = address(anothermarketingWallet).call{gas: 30000,value: anothermarketingShare}() (#671)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,autoLiquidityReceiver,block.timestamp) (#678-685)
External calls sending eth:
- swapBack() (#584)
- dividendDistributor.deposit{value: amountBNBReflection}() (#665)
- (tmpSuccess) = address(marketingWallet).call{gas: 30000,value: marketingShare}() (#670)
- (tmpSuccess1) = address(anothermarketingWallet).call{gas: 30000,value: anothermarketingShare}() (#671)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,autoLiquidityReceiver,block.timestamp) (#678-685)
State variables written after the call(s):
- _balances[sender] = _balances[sender].sub(amount,Insufficient Balance) (#592)
- _balances[recipient] = _balances[recipient].add(finalAmount) (#600)
- finalAmount = takeFee(sender,recipient,amount) (#599)
- _balances[address(this)] = _balances[address(this)].add(feeAmount) (#629)
Apply the check-effects-interactions pattern.
Additional information: link
DividendDistributor.distributeDividend(address) (#260-272) ignores return value by RewardToken.transfer(shareholder,amount) (#266)
Use SafeERC20, or ensure that the transfer/transferFrom return value is checked.
Additional information: link
Too many vulnerabilities (Unchecked transfer, Reentrancy vulnerability, etc.). High risk of a scam. DYOR & manual audit are advised.
MorieInu.swapBack().tmpSuccess (#670) is written in both
(tmpSuccess) = address(marketingWallet).call{gas: 30000,value: marketingShare}() (#670)
tmpSuccess = false (#674)
MorieInu.swapBack().tmpSuccess1 (#671) is written in both
(tmpSuccess1) = address(anothermarketingWallet).call{gas: 30000,value: anothermarketingShare}() (#671)
tmpSuccess1 = false (#675)
Fix or remove the writes.
Additional information: link
Combination 3: Reentrancy vulnerabilities + Unchecked transfer vulnerability. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.
Combination 1: Reentrancy vulnerabilities + Functions that send Ether to arbitraty destination. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.
Combination 2: Unchecked transfer + Functions that send Ether to arbitraty destination. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.
Not a direct threat, but may indicate unreliable intentions of developer. Widespread names (e.g. Elon, King, Moon, Doge) are common among meme-tokens and scams. The allow to gain free hype and attract unexperienced investors.
DividendDistributor.setDistributionCriteria(uint256,uint256) (#189-192) should emit an event for:
- minPeriod = newMinPeriod (#190)
- minDistribution = newMinDistribution (#191)
MorieInu.changeFees(uint256,uint256,uint256,uint256) (#531-539) should emit an event for:
- liquidityFee = newLiqFee (#532)
- rewardsFee = newRewardFee (#533)
- totalFee = liquidityFee.add(marketingFee).add(rewardsFee) (#537)
- totalFeeIfSelling = totalFee.add(extraFeeOnSell) (#538)
Emit an event for critical parameter changes.
Additional information: link
Reentrancy in DividendDistributor.distributeDividend(address) (#260-272):
External calls:
- RewardToken.transfer(shareholder,amount) (#266)
State variables written after the call(s):
- shares[shareholder].totalRealised = shares[shareholder].totalRealised.add(amount) (#268)
- shares[shareholder].totalExcluded = getCumulativeDividends(shares[shareholder].amount) (#269)
Reentrancy in DividendDistributor.process(uint256) (#231-253):
External calls:
- distributeDividend(shareholders[currentIndex]) (#245)
- RewardToken.transfer(shareholder,amount) (#266)
State variables written after the call(s):
- currentIndex ++ (#250)
Reentrancy in DividendDistributor.setShare(address,uint256) (#194-209):
External calls:
- distributeDividend(shareholder) (#197)
- RewardToken.transfer(shareholder,amount) (#266)
State variables written after the call(s):
- shares[shareholder].amount = amount (#207)
- shares[shareholder].totalExcluded = getCumulativeDividends(shares[shareholder].amount) (#208)
Apply the check-effects-interactions pattern.
Additional information: link
MorieInu.swapBack() (#639-688) ignores return value by router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,autoLiquidityReceiver,block.timestamp) (#678-685)
Ensure that all the return values of the function calls are used.
Additional information: link
Auth.transferOwnership(address).adr (#359) lacks a zero-check on :
- owner = adr (#360)
MorieInu.changeFeeReceivers(address,address,address).newLiquidityReceiver (#541) lacks a zero-check on :
- autoLiquidityReceiver = newLiquidityReceiver (#542)
MorieInu.changeFeeReceivers(address,address,address).newMarketingWallet (#541) lacks a zero-check on :
- marketingWallet = newMarketingWallet (#543)
MorieInu.changeFeeReceivers(address,address,address).newanothermarketingWallet (#541) lacks a zero-check on :
- anothermarketingWallet = newanothermarketingWallet (#544)
Check that the address is not zero.
Additional information: link
DividendDistributor.distributeDividend(address) (#260-272) has external calls inside a loop: RewardToken.transfer(shareholder,amount) (#266)
Favor pull over push strategy for external calls.
Additional information: link
Reentrancy in MorieInu._transferFrom(address,address,uint256) (#574-615):
External calls:
- swapBack() (#584)
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(amountToSwap,0,path,address(this),block.timestamp) (#649-655)
- dividendDistributor.deposit{value: amountBNBReflection}() (#665)
- (tmpSuccess) = address(marketingWallet).call{gas: 30000,value: marketingShare}() (#670)
- (tmpSuccess1) = address(anothermarketingWallet).call{gas: 30000,value: anothermarketingShare}() (#671)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,autoLiquidityReceiver,block.timestamp) (#678-685)
External calls sending eth:
- swapBack() (#584)
- dividendDistributor.deposit{value: amountBNBReflection}() (#665)
- (tmpSuccess) = address(marketingWallet).call{gas: 30000,value: marketingShare}() (#670)
- (tmpSuccess1) = address(anothermarketingWallet).call{gas: 30000,value: anothermarketingShare}() (#671)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,autoLiquidityReceiver,block.timestamp) (#678-685)
State variables written after the call(s):
- launch() (#588)
- launchedAt = block.number (#497)
Reentrancy in MorieInu.constructor() (#427-459):
External calls:
- pair = IDEXFactory(router.factory()).createPair(router.WETH(),address(this)) (#430)
State variables written after the call(s):
- _allowances[address(this)][address(router)] = uint256(- 1) (#431)
- _balances[msg.sender] = _totalSupply (#457)
- anothermarketingWallet = 0xADd2e7f109d6C34910d430A85226b4953f73b128 (#452)
- autoLiquidityReceiver = msg.sender (#450)
- dividendDistributor = new DividendDistributor(address(router)) (#433)
- isDividendExempt[pair] = true (#443)
- isDividendExempt[address(this)] = true (#445)
- isDividendExempt[DEAD] = true (#446)
- isDividendExempt[ZERO] = true (#447)
- isFeeExempt[msg.sender] = true (#435)
- isFeeExempt[address(this)] = true (#436)
- isFeeExempt[anothermarketingWallet] = true (#437)
- isTxLimitExempt[msg.sender] = true (#439)
- isTxLimitExempt[pair] = true (#440)
- isTxLimitExempt[DEAD] = true (#441)
- marketingWallet = msg.sender (#451)
- totalFee = liquidityFee.add(marketingFee).add(rewardsFee) (#454)
- totalFeeIfSelling = totalFee.add(extraFeeOnSell) (#455)
Reentrancy in DividendDistributor.deposit() (#211-229):
External calls:
- router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: msg.value}(0,path,address(this),block.timestamp) (#219-224)
State variables written after the call(s):
- dividendsPerShare = dividendsPerShare.add(dividendsPerShareAccuracyFactor.mul(amount).div(totalShares)) (#228)
- totalDividends = totalDividends.add(amount) (#227)
Reentrancy in DividendDistributor.distributeDividend(address) (#260-272):
External calls:
- RewardToken.transfer(shareholder,amount) (#266)
State variables written after the call(s):
- shareholderClaims[shareholder] = block.timestamp (#267)
Reentrancy in DividendDistributor.setShare(address,uint256) (#194-209):
External calls:
- distributeDividend(shareholder) (#197)
- RewardToken.transfer(shareholder,amount) (#266)
State variables written after the call(s):
- addShareholder(shareholder) (#201)
- shareholderIndexes[shareholder] = shareholders.length (#290)
- removeShareholder(shareholder) (#203)
- shareholderIndexes[shareholders[shareholders.length - 1]] = shareholderIndexes[shareholder] (#296)
- addShareholder(shareholder) (#201)
- shareholders.push(shareholder) (#291)
- removeShareholder(shareholder) (#203)
- shareholders[shareholderIndexes[shareholder]] = shareholders[shareholders.length - 1] (#295)
- shareholders.pop() (#297)
- totalShares = totalShares.sub(shares[shareholder].amount).add(amount) (#206)
Apply the check-effects-interactions pattern.
Additional information: link
Reentrancy in MorieInu._transferFrom(address,address,uint256) (#574-615):
External calls:
- swapBack() (#584)
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(amountToSwap,0,path,address(this),block.timestamp) (#649-655)
- dividendDistributor.deposit{value: amountBNBReflection}() (#665)
- (tmpSuccess) = address(marketingWallet).call{gas: 30000,value: marketingShare}() (#670)
- (tmpSuccess1) = address(anothermarketingWallet).call{gas: 30000,value: anothermarketingShare}() (#671)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,autoLiquidityReceiver,block.timestamp) (#678-685)
- dividendDistributor.setShare(sender,_balances[sender]) (#604)
- dividendDistributor.setShare(recipient,_balances[recipient]) (#608)
- dividendDistributor.process(distributorGas) (#611)
External calls sending eth:
- swapBack() (#584)
- dividendDistributor.deposit{value: amountBNBReflection}() (#665)
- (tmpSuccess) = address(marketingWallet).call{gas: 30000,value: marketingShare}() (#670)
- (tmpSuccess1) = address(anothermarketingWallet).call{gas: 30000,value: anothermarketingShare}() (#671)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,autoLiquidityReceiver,block.timestamp) (#678-685)
Event emitted after the call(s):
- Transfer(sender,recipient,finalAmount) (#613)
Reentrancy in MorieInu._transferFrom(address,address,uint256) (#574-615):
External calls:
- swapBack() (#584)
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(amountToSwap,0,path,address(this),block.timestamp) (#649-655)
- dividendDistributor.deposit{value: amountBNBReflection}() (#665)
- (tmpSuccess) = address(marketingWallet).call{gas: 30000,value: marketingShare}() (#670)
- (tmpSuccess1) = address(anothermarketingWallet).call{gas: 30000,value: anothermarketingShare}() (#671)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,autoLiquidityReceiver,block.timestamp) (#678-685)
External calls sending eth:
- swapBack() (#584)
- dividendDistributor.deposit{value: amountBNBReflection}() (#665)
- (tmpSuccess) = address(marketingWallet).call{gas: 30000,value: marketingShare}() (#670)
- (tmpSuccess1) = address(anothermarketingWallet).call{gas: 30000,value: anothermarketingShare}() (#671)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,autoLiquidityReceiver,block.timestamp) (#678-685)
Event emitted after the call(s):
- Transfer(sender,address(this),feeAmount) (#630)
- finalAmount = takeFee(sender,recipient,amount) (#599)
Reentrancy in MorieInu.constructor() (#427-459):
External calls:
- pair = IDEXFactory(router.factory()).createPair(router.WETH(),address(this)) (#430)
Event emitted after the call(s):
- Transfer(address(0),msg.sender,_totalSupply) (#458)
Reentrancy in MorieInu.swapBack() (#639-688):
External calls:
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(amountToSwap,0,path,address(this),block.timestamp) (#649-655)
- dividendDistributor.deposit{value: amountBNBReflection}() (#665)
- (tmpSuccess) = address(marketingWallet).call{gas: 30000,value: marketingShare}() (#670)
- (tmpSuccess1) = address(anothermarketingWallet).call{gas: 30000,value: anothermarketingShare}() (#671)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,autoLiquidityReceiver,block.timestamp) (#678-685)
External calls sending eth:
- dividendDistributor.deposit{value: amountBNBReflection}() (#665)
- (tmpSuccess) = address(marketingWallet).call{gas: 30000,value: marketingShare}() (#670)
- (tmpSuccess1) = address(anothermarketingWallet).call{gas: 30000,value: anothermarketingShare}() (#671)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,autoLiquidityReceiver,block.timestamp) (#678-685)
Event emitted after the call(s):
- AutoLiquify(amountBNBLiquidity,amountToLiquify) (#686)
Apply the check-effects-interactions pattern.
Additional information: link
DividendDistributor.shouldDistribute(address) (#255-258) uses timestamp for comparisons
Dangerous comparisons:
- shareholderClaims[shareholder] + minPeriod < block.timestamp && getUnpaidEarnings(shareholder) > minDistribution (#256-257)
Avoid relying on block.timestamp.
Additional information: link
DividendDistributor.process(uint256) (#231-253) has costly operations inside a loop:
- currentIndex = 0 (#242)
DividendDistributor.distributeDividend(address) (#260-272) has costly operations inside a loop:
- totalDistributed = totalDistributed.add(amount) (#265)
DividendDistributor.process(uint256) (#231-253) has costly operations inside a loop:
- currentIndex ++ (#250)
Use a local variable to hold the loop computation result.
Additional information: link
MorieInu._maxTxAmount (#382) is set pre-construction with a non-constant function or state variable:
- _totalSupply * 2 / 100
MorieInu._walletMax (#383) is set pre-construction with a non-constant function or state variable:
- _totalSupply * 2 / 100
MorieInu.swapThreshold (#419) is set pre-construction with a non-constant function or state variable:
- _totalSupply * 5 / 2000
Remove any initialization of state variables via non-constant state variables or function calls. If variables must be set upon contract deployment, locate initialization in the constructor instead.
Additional information: link
Pragma version^0.7.4 (#29) allows old versions
Deploy with any of the following Solidity versions: 0.5.16 - 0.5.17, 0.6.11 - 0.6.12, 0.7.5 - 0.7.6 Use a simple pragma version that allows any of these versions. Consider using the latest version of Solidity for testing.
Additional information: link
Low level call in MorieInu.swapBack() (#639-688):
- (tmpSuccess) = address(marketingWallet).call{gas: 30000,value: marketingShare}() (#670)
- (tmpSuccess1) = address(anothermarketingWallet).call{gas: 30000,value: anothermarketingShare}() (#671)
Avoid low-level calls. Check the call success. If the call is meant for a contract, check for code existence
Additional information: link
Function IDEXRouter.WETH() (#88) is not in mixedCase
Variable DividendDistributor._token (#145) is not in mixedCase
Variable DividendDistributor.RewardToken (#155) is not in mixedCase
Constant MorieInu._name (#372) is not in UPPER_CASE_WITH_UNDERSCORES
Constant MorieInu._symbol (#373) is not in UPPER_CASE_WITH_UNDERSCORES
Constant MorieInu._decimals (#374) is not in UPPER_CASE_WITH_UNDERSCORES
Variable MorieInu.DEAD (#376) is not in mixedCase
Variable MorieInu.ZERO (#377) is not in mixedCase
Variable MorieInu.RewardToken (#379) is not in mixedCase
Variable MorieInu._totalSupply (#381) is not in mixedCase
Variable MorieInu._maxTxAmount (#382) is not in mixedCase
Variable MorieInu._walletMax (#383) is not in mixedCase
Variable MorieInu._balances (#387) is not in mixedCase
Variable MorieInu._allowances (#388) is not in mixedCase
Follow the Solidity naming convention.
Additional information: link
Variable IDEXRouter.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountADesired (#93) is too similar to IDEXRouter.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountBDesired (#94)
Prevent variables from having similar names.
Additional information: link
MorieInu.slitherConstructorVariables() (#368-693) uses literals with too many digits:
- DEAD = 0x000000000000000000000000000000000000dEaD (#376)
MorieInu.slitherConstructorVariables() (#368-693) uses literals with too many digits:
- ZERO = 0x0000000000000000000000000000000000000000 (#377)
MorieInu.slitherConstructorVariables() (#368-693) uses literals with too many digits:
- _totalSupply = 1000000 * (10 ** _decimals) (#381)
MorieInu.slitherConstructorVariables() (#368-693) uses literals with too many digits:
- distributorGas = 300000 (#413)
Use: Ether suffix, Time suffix, or The scientific notation
Additional information: link
MorieInu.RewardToken (#379) is never used in MorieInu (#368-693)
Remove unused state variables.
Additional information: link
DividendDistributor.dividendsPerShareAccuracyFactor (#166) should be constant
DividendDistributor.routerAddress (#154) should be constant
MorieInu.DEAD (#376) should be constant
MorieInu.RewardToken (#379) should be constant
MorieInu.ZERO (#377) should be constant
MorieInu._totalSupply (#381) should be constant
MorieInu.routerAddress (#378) should be constant
Add the constant attributes to state variables that never change.
Additional information: link
authorize(address) should be declared external:
- Auth.authorize(address) (#331-333)
unauthorize(address) should be declared external:
- Auth.unauthorize(address) (#338-340)
transferOwnership(address) should be declared external:
- Auth.transferOwnership(address) (#359-363)
getCirculatingSupply() should be declared external:
- MorieInu.getCirculatingSupply() (#469-471)
claim() should be declared external:
- MorieInu.claim() (#487-490)
tradingStatus(bool) should be declared external:
- MorieInu.tradingStatus(bool) (#635-637)
Use the external attribute for functions never called from the contract.
Additional information: link
Unable to find website, listings and other project-related information
Young tokens have high risks of scam / price dump / death
Token has no active CoinGecko listing / rank
Token has no active CoinMarketCap listing / rank
Unable to find Telegram and Twitter accounts