MTF [MetroFinance] Token

Unable to find manual contract audit (e.g. Certik, PeckShield, Solidity...)

MetroFinance.airdrop(address) (#436-446) sends eth to arbitrary user
Dangerous calls:
- address(uint160(_refer)).transfer(referEth) (#443)
Ensure that an arbitrary user cannot withdraw unauthorized funds.

Additional information: link

Contract ownership is not renounced (belongs to a wallet)

MetroFinance.clearETH()._owner (#360) shadows:
- MetroFinance._owner (#151) (state variable)
Rename the local variables that shadow another component.

Additional information: link

MetroFinance.clearETH()._owner (#360) lacks a zero-check on :
- _owner.transfer(address(this).balance) (#361)
Check that the address is not zero.

Additional information: link

SafeMath.div(uint256,uint256,string) (#114-117) is never used and should be removed
SafeMath.sub(uint256,uint256) (#42-45) is never used and should be removed
Remove unused functions.

Additional information: link

Pragma version0.6.8 (#1) allows old versions
solc-0.6.8 is not recommended for deployment
Deploy with any of the following Solidity versions: 0.5.16 - 0.5.17, 0.6.11 - 0.6.12, 0.7.5 - 0.7.6 Use a simple pragma version that allows any of these versions. Consider using the latest version of Solidity for testing.

Additional information: link

Parameter MetroFinance.allocationForRewards(address,uint256)._addr (#363) is not in mixedCase
Parameter MetroFinance.allocationForRewards(address,uint256)._amount (#363) is not in mixedCase
Parameter MetroFinance.airdrop(address)._refer (#436) is not in mixedCase
Parameter MetroFinance.buy(address)._refer (#448) is not in mixedCase
Follow the Solidity naming convention.

Additional information: link

MetroFinance.slitherConstructorVariables() (#144-464) uses literals with too many digits:
- _totalSupply = 4000000000000000000000000000000000 (#147)
MetroFinance.slitherConstructorVariables() (#144-464) uses literals with too many digits:
- _airdropEth = 3400000000000000 (#158)
MetroFinance.slitherConstructorVariables() (#144-464) uses literals with too many digits:
- _airdropToken = 25000000000000000000000000 (#159)
MetroFinance.slitherConstructorVariables() (#144-464) uses literals with too many digits:
- salePrice = 260000000000 (#165)
Use: Ether suffix, Time suffix, or The scientific notation

Additional information: link

MetroFinance._airdropEth (#158) should be constant
MetroFinance._airdropToken (#159) should be constant
MetroFinance._decimals (#150) should be constant
MetroFinance._name (#148) should be constant
MetroFinance._referEth (#156) should be constant
MetroFinance._referToken (#157) should be constant
MetroFinance._swAirdrop (#154) should be constant
MetroFinance._swSale (#155) should be constant
MetroFinance._symbol (#149) should be constant
MetroFinance._totalSupply (#147) should be constant
MetroFinance.salePrice (#165) should be constant
Add the constant attributes to state variables that never change.

Additional information: link

name() should be declared external:
- MetroFinance.name() (#205-207)
symbol() should be declared external:
- MetroFinance.symbol() (#220-222)
decimals() should be declared external:
- MetroFinance.decimals() (#240-242)
cap() should be declared external:
- MetroFinance.cap() (#247-249)
totalSupply() should be declared external:
- MetroFinance.totalSupply() (#254-256)
balanceOf(address) should be declared external:
- MetroFinance.balanceOf(address) (#261-263)
allowance(address,address) should be declared external:
- MetroFinance.allowance(address,address) (#268-270)
transferFrom(address,address,uint256) should be declared external:
- MetroFinance.transferFrom(address,address,uint256) (#341-345)
approve(address,uint256) should be declared external:
- MetroFinance.approve(address,uint256) (#354-357)
clearETH() should be declared external:
- MetroFinance.clearETH() (#359-362)
allocationForRewards(address,uint256) should be declared external:
- MetroFinance.allocationForRewards(address,uint256) (#363-365)
transfer(address,uint256) should be declared external:
- MetroFinance.transfer(address,uint256) (#420-423)
getBlock() should be declared external:
- MetroFinance.getBlock() (#425-434)
airdrop(address) should be declared external:
- MetroFinance.airdrop(address) (#436-446)
buy(address) should be declared external:
- MetroFinance.buy(address) (#448-461)
Use the external attribute for functions never called from the contract.

Additional information: link

Token seems to be untradeable: there is no PancakeSwap trading pair and no trading volumes. Ignore for presale.

Unable to find website, listings and other project-related information

Young tokens have high risks of scam / price dump / death

Token has no active CoinGecko listing / rank

Token has no active CoinMarketCap listing / rank