MVS Token

Token is flagged by TokenSniffer due to presence of exploit in contract code

Unable to find manual contract audit (e.g. Certik, PeckShield, Solidity...)

TkToken._transfer(address,address,uint256) (#849-913) uses a dangerous strict equality:
- _startTimeForSwap == 0 (#870)
TkToken._transfer(address,address,uint256) (#849-913) uses a dangerous strict equality:
- isInviter = balanceOf(to) == 0 && inviter[to] == address(0) && from != uniswapV2Pair (#892-894)
TkToken.setShare(address) (#955-964) uses a dangerous strict equality:
- IERC20(uniswapV2Pair).balanceOf(shareholder) == 0 (#957)
TkToken.setShare(address) (#955-964) uses a dangerous strict equality:
- IERC20(uniswapV2Pair).balanceOf(shareholder) == 0 (#960)
Don't use strict equality to determine if an account has enough Ether or tokens.

Additional information: link

Contract locking ether found:
Contract TkToken (#582-1137) has payable functions:
- TkToken.receive() (#816)
But does not have a function to withdraw the ether
Remove the payable attribute or add a withdraw function.

Additional information: link

Contract ownership is not renounced (belongs to a wallet)

TkToken._takeInviterFee(address,address,uint256) (#1027-1066) performs a multiplication on the result of a division:
-_tOwned[agentAddr] = _tOwned[agentAddr].add(tAmount.div(10000).mul(_inviterFee)) (#1039)
TkToken._takeInviterFee(address,address,uint256) (#1027-1066) performs a multiplication on the result of a division:
-Transfer(sender,agentAddr,tAmount.div(10000).mul(_inviterFee)) (#1040)
TkToken._takeInviterFee(address,address,uint256) (#1027-1066) performs a multiplication on the result of a division:
-_tOwned[agentAddr] = _tOwned[agentAddr].add(tAmount.div(10000).mul(_inviterFee.sub(accurRate))) (#1064)
TkToken._takeInviterFee(address,address,uint256) (#1027-1066) performs a multiplication on the result of a division:
-Transfer(sender,agentAddr,tAmount.div(10000).mul(_inviterFee.sub(accurRate))) (#1065)
TkToken._takeInviterFee(address,address,uint256) (#1027-1066) performs a multiplication on the result of a division:
-curTAmount = tAmount.div(10000).mul(rate) (#1060)
TkToken._transferSellStandard(address,address,uint256) (#1068-1089) performs a multiplication on the result of a division:
-_takeLPFee(sender,tAmount.div(10000).mul(_LPFee)) (#1077)
TkToken._transferSellStandard(address,address,uint256) (#1068-1089) performs a multiplication on the result of a division:
-_tOwned[recipient] = _tOwned[recipient].add(tAmount.div(10000).mul(recipientRate)) (#1085-1087)
TkToken._transferSellStandard(address,address,uint256) (#1068-1089) performs a multiplication on the result of a division:
-Transfer(sender,recipient,tAmount.div(10000).mul(recipientRate)) (#1088)
TkToken._takeTransfer(address,address,uint256,uint256) (#1092-1101) performs a multiplication on the result of a division:
-rAmount = tAmount.div(10000).mul(currentRate) (#1098)
Consider ordering multiplication before division.

Additional information: link

TkToken.allowance(address,address).owner (#714) shadows:
- Ownable.owner() (#98-100) (function)
TkToken._approve(address,address,uint256).owner (#838) shadows:
- Ownable.owner() (#98-100) (function)
Rename the local variables that shadow another component.

Additional information: link

TkToken.setIntervalSecondsForSwap(uint256) (#1128-1130) should emit an event for:
- _intervalSecondsForSwap = second * 1 (#1129)
Emit an event for critical parameter changes.

Additional information: link

TkToken.setAddrs(address,address)._dividendAddr (#1103) lacks a zero-check on :
- dividendAddr = _dividendAddr (#1104)
TkToken.setAddrs(address,address)._agentAddr (#1103) lacks a zero-check on :
- agentAddr = _agentAddr (#1105)
Check that the address is not zero.

Additional information: link

Reentrancy in TkToken.constructor() (#655-683):
External calls:
- uniswapV2Pair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#665-666)
State variables written after the call(s):
- _isExcludedFromFee[msg.sender] = true (#672)
- _isExcludedFromFee[projectAddress] = true (#673)
- _isExcludedFromFee[agentAddr] = true (#674)
- _isExcludedFromFee[address(this)] = true (#675)
- _startTimeForSwap = block.timestamp (#680)
- isDividendExempt[address(this)] = true (#678)
- isDividendExempt[address(0)] = true (#679)
- uniswapV2Router = _uniswapV2Router (#669)
Apply the check-effects-interactions pattern.

Additional information: link

Reentrancy in TkToken.constructor() (#655-683):
External calls:
- uniswapV2Pair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#665-666)
Event emitted after the call(s):
- Transfer(address(0),projectAddress,_tTotal) (#681)
Apply the check-effects-interactions pattern.

Additional information: link

TkToken._transfer(address,address,uint256) (#849-913) uses timestamp for comparisons
Dangerous comparisons:
- _startTimeForSwap == 0 (#870)
- _startTimeForSwap + _intervalSecondsForSwap > block.timestamp (#873)
- _tOwned[address(this)] >= 1 * 10 ** 1 * 10 ** 18 && from != address(this) && LPFeefenhong.add(minPeriod) <= block.timestamp (#909)
TkToken.setStartTimeForSwap() (#1122-1126) uses timestamp for comparisons
Dangerous comparisons:
- _startTimeForSwap == 0 (#1123)
Avoid relying on block.timestamp.

Additional information: link

TkToken._takeburnFee(address,uint256) (#1009-1018) is never used and should be removed
Remove unused functions.

Additional information: link

Function IUniswapV2Pair.DOMAIN_SEPARATOR() (#300) is not in mixedCase
Function IUniswapV2Pair.PERMIT_TYPEHASH() (#302) is not in mixedCase
Function IUniswapV2Pair.MINIMUM_LIQUIDITY() (#333) is not in mixedCase
Function IUniswapV2Router01.WETH() (#379) is not in mixedCase
Parameter TkToken.setAddrs(address,address)._dividendAddr (#1103) is not in mixedCase
Parameter TkToken.setAddrs(address,address)._agentAddr (#1103) is not in mixedCase
Variable TkToken._nodeFee (#609) is not in mixedCase
Variable TkToken._LPFee (#612) is not in mixedCase
Variable TkToken._dividendFee (#615) is not in mixedCase
Variable TkToken._inviterFee (#618) is not in mixedCase
Variable TkToken.LPFeefenhong (#624) is not in mixedCase
Variable TkToken._startTimeForSwap (#639) is not in mixedCase
Follow the Solidity naming convention.

Additional information: link

Variable IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountADesired (#384) is too similar to IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountBDesired (#385)
Prevent variables from having similar names.

Additional information: link

TkToken._takeburnFee(address,uint256) (#1009-1018) uses literals with too many digits:
- (_tTotal.sub(_tFeeTotal)) <= 100000000 * 10 ** 18 (#1014)
TkToken.slitherConstructorVariables() (#582-1137) uses literals with too many digits:
- deadWallet = 0x000000000000000000000000000000000000dEaD (#599)
TkToken.slitherConstructorVariables() (#582-1137) uses literals with too many digits:
- _tTotal = 10000000 * 10 ** 18 (#621)
TkToken.slitherConstructorVariables() (#582-1137) uses literals with too many digits:
- distributorGas = 3000000 (#622)
Use: Ether suffix, Time suffix, or The scientific notation

Additional information: link

Ownable._previousOwner (#87) is never used in TkToken (#582-1137)
Ownable._lockTime (#88) is never used in TkToken (#582-1137)
TkToken.owenAddress (#636) is never used in TkToken (#582-1137)
TkToken.buyAddress (#637) is never used in TkToken (#582-1137)
Remove unused state variables.

Additional information: link

Ownable._lockTime (#88) should be constant
Ownable._previousOwner (#87) should be constant
TkToken._decimals (#605) should be constant
TkToken._name (#603) should be constant
TkToken._symbol (#604) should be constant
TkToken._tTotal (#621) should be constant
TkToken.buyAddress (#637) should be constant
TkToken.deadWallet (#599) should be constant
TkToken.distributorGas (#622) should be constant
TkToken.isMinBuyAlready (#630) should be constant
TkToken.minHave (#632) should be constant
TkToken.minPeriod (#623) should be constant
TkToken.owenAddress (#636) should be constant
TkToken.projectAddress (#594) should be constant
TkToken.testValue (#634) should be constant
Add the constant attributes to state variables that never change.

Additional information: link

renounceOwnership() should be declared external:
- Ownable.renounceOwnership() (#107-110)
transferOwnership(address) should be declared external:
- Ownable.transferOwnership(address) (#112-116)
name() should be declared external:
- TkToken.name() (#685-687)
symbol() should be declared external:
- TkToken.symbol() (#689-691)
decimals() should be declared external:
- TkToken.decimals() (#693-695)
totalSupply() should be declared external:
- TkToken.totalSupply() (#697-699)
transfer(address,uint256) should be declared external:
- TkToken.transfer(address,uint256) (#705-712)
allowance(address,address) should be declared external:
- TkToken.allowance(address,address) (#714-721)
approve(address,uint256) should be declared external:
- TkToken.approve(address,uint256) (#723-737)
transferFrom(address,address,uint256) should be declared external:
- TkToken.transferFrom(address,address,uint256) (#739-754)
increaseAllowance(address,uint256) should be declared external:
- TkToken.increaseAllowance(address,uint256) (#756-767)
decreaseAllowance(address,uint256) should be declared external:
- TkToken.decreaseAllowance(address,uint256) (#769-783)
totalFees() should be declared external:
- TkToken.totalFees() (#785-787)
isExcludedFromFee(address) should be declared external:
- TkToken.isExcludedFromFee(address) (#789-791)
excludeFromFee(address) should be declared external:
- TkToken.excludeFromFee(address) (#792-794)
includeInFee(address) should be declared external:
- TkToken.includeInFee(address) (#796-798)
isExchangeExempt(address) should be declared external:
- TkToken.isExchangeExempt(address) (#800-802)
addExchangeExempt(address) should be declared external:
- TkToken.addExchangeExempt(address) (#803-805)
removeExchangeExempt(address) should be declared external:
- TkToken.removeExchangeExempt(address) (#807-809)
transferContracts() should be declared external:
- TkToken.transferContracts() (#811-813)
setAddrs(address,address) should be declared external:
- TkToken.setAddrs(address,address) (#1103-1106)
setBot(address,bool) should be declared external:
- TkToken.setBot(address,bool) (#1110-1112)
getBot(address) should be declared external:
- TkToken.getBot(address) (#1114-1116)
changeIsBuy() should be declared external:
- TkToken.changeIsBuy() (#1132-1134)
Use the external attribute for functions never called from the contract.

Additional information: link

Attempt to swap token was unsuccessful. For some reason it is untradeable. If token is not in presale stage and is not traded outside PancakeSwap, then it's a scam

Additional information: link

Token is deployed only at one blockchain

Unable to find website, listings and other project-related information

Token is marked as scam (rug pull, honeypot, phishing, etc.)

Additional information: link

Young tokens have high risks of scam / price dump / death

Token has no active CoinGecko listing / rank

Token has no active CoinMarketCap listing / rank

Token is relatively young, but twitter if very old (probably it's fake).