Olympicdogeking.addLiquidity(uint256,uint256) (#735-745) sends eth to arbitrary user
Dangerous calls:
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,teamWallteAddress,block.timestamp) (#737-744)
Ensure that an arbitrary user cannot withdraw unauthorized funds.
Additional information: link
Unable to find manual contract audit (e.g. Certik, PeckShield, Solidity...)
Reentrancy in Olympicdogeking._transfer(address,address,uint256) (#644-682):
External calls:
- swapAndLiquify(contractTokenBalance) (#666)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,teamWallteAddress,block.timestamp) (#737-744)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#724-730)
External calls sending eth:
- swapAndLiquify(contractTokenBalance) (#666)
- recipient.transfer(amount) (#610)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,teamWallteAddress,block.timestamp) (#737-744)
State variables written after the call(s):
- _balances[sender] = _balances[sender].sub(amount,Insufficient Balance) (#669)
- _balances[recipient] = _balances[recipient].add(finalAmount) (#677)
- finalAmount = takeFee(sender,recipient,amount) (#671-672)
- _balances[address(this)] = _balances[address(this)].add(feeAmount) (#757)
Apply the check-effects-interactions pattern.
Additional information: link
Combination 1: Reentrancy vulnerabilities + Functions that send Ether to arbitraty destination. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.
Contract ticker (Olympic dogeking) contains non-alphanumeric characters.
Not a direct threat, but may indicate unreliable intentions of developer. Non-alphanumeric chars (,.;!#*&") are extremely rare among low risk tokens.
Contract ticker (Olympic dogeking) has length of 16 chars.
Not a direct threat, but may indicate unreliable intentions of developer.
Olympicdogeking.addLiquidity(uint256,uint256) (#735-745) ignores return value by uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,teamWallteAddress,block.timestamp) (#737-744)
Ensure that all the return values of the function calls are used.
Additional information: link
Olympicdogeking.allowance(address,address).owner (#496) shadows:
- Ownable.owner() (#142-144) (function)
Olympicdogeking._approve(address,address,uint256).owner (#519) shadows:
- Ownable.owner() (#142-144) (function)
Rename the local variables that shadow another component.
Additional information: link
Olympicdogeking.setBuyTaxes(uint256,uint256,uint256) (#539-545) should emit an event for:
- _totalTaxIfBuying = _buyLiquidityFee.add(_buyMarketingFee).add(_buyTeamFee) (#544)
Olympicdogeking.setSellTaxes(uint256,uint256,uint256) (#547-553) should emit an event for:
- _totalTaxIfSelling = _sellLiquidityFee.add(_sellMarketingFee).add(_sellTeamFee) (#552)
Olympicdogeking.setDistributionSettings(uint256,uint256,uint256) (#555-561) should emit an event for:
- _liquidityShare = newLiquidityShare (#556)
- _teamShare = newTeamShare (#558)
- _totalDistributionShares = _liquidityShare.add(_marketingShare).add(_teamShare) (#560)
Olympicdogeking.setMaxTxAmount(uint256) (#563-565) should emit an event for:
- _maxTxAmount = maxTxAmount (#564)
Olympicdogeking.setWalletLimit(uint256) (#575-577) should emit an event for:
- _walletMax = newLimit (#576)
Olympicdogeking.setNumTokensBeforeSwap(uint256) (#579-581) should emit an event for:
- minimumTokensBeforeSwap = newLimit (#580)
Emit an event for critical parameter changes.
Additional information: link
Olympicdogeking.setNumTokenslp(address).newAddress (#583) lacks a zero-check on :
- teamWallteAddress = address(newAddress) (#584)
Olympicdogeking.setMarketingWalletAddress(address).newAddress (#588) lacks a zero-check on :
- marketingWalletAddress = address(newAddress) (#589)
Olympicdogeking.setTeamWalletAddress(address).newAddress (#592) lacks a zero-check on :
- teamWalletAddress = address(newAddress) (#593)
Check that the address is not zero.
Additional information: link
Reentrancy in Olympicdogeking.changeRouterVersion(address) (#613-630):
External calls:
- newPairAddress = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#621-622)
State variables written after the call(s):
- isMarketPair[address(uniswapPair)] = true (#629)
- isWalletLimitExempt[address(uniswapPair)] = true (#628)
- uniswapPair = newPairAddress (#625)
- uniswapV2Router = _uniswapV2Router (#626)
Reentrancy in Olympicdogeking.constructor() (#446-474):
External calls:
- uniswapPair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#450-451)
State variables written after the call(s):
- _allowances[address(this)][address(uniswapV2Router)] = _totalSupply (#454)
- _balances[_msgSender()] = _totalSupply (#472)
- _totalDistributionShares = _liquidityShare.add(_marketingShare).add(_teamShare) (#461)
- _totalTaxIfBuying = _buyLiquidityFee.add(_buyMarketingFee).add(_buyTeamFee) (#459)
- _totalTaxIfSelling = _sellLiquidityFee.add(_sellMarketingFee).add(_sellTeamFee) (#460)
- isExcludedFromFee[owner()] = true (#456)
- isExcludedFromFee[address(this)] = true (#457)
- isMarketPair[address(uniswapPair)] = true (#470)
- isTxLimitExempt[owner()] = true (#467)
- isTxLimitExempt[address(this)] = true (#468)
- isWalletLimitExempt[owner()] = true (#463)
- isWalletLimitExempt[address(uniswapPair)] = true (#464)
- isWalletLimitExempt[address(this)] = true (#465)
- uniswapV2Router = _uniswapV2Router (#453)
Reentrancy in Olympicdogeking.swapAndLiquify(uint256) (#691-713):
External calls:
- swapTokensForEth(tokensForSwap) (#696)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#724-730)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#712)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,teamWallteAddress,block.timestamp) (#737-744)
External calls sending eth:
- transferToAddressETH(marketingWalletAddress,amountBNBMarketing) (#706)
- recipient.transfer(amount) (#610)
- transferToAddressETH(teamWalletAddress,amountBNBTeam) (#709)
- recipient.transfer(amount) (#610)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#712)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,teamWallteAddress,block.timestamp) (#737-744)
State variables written after the call(s):
- addLiquidity(tokensForLP,amountBNBLiquidity) (#712)
- _allowances[owner][spender] = amount (#523)
Reentrancy in Olympicdogeking.transferFrom(address,address,uint256) (#638-642):
External calls:
- _transfer(sender,recipient,amount) (#639)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,teamWallteAddress,block.timestamp) (#737-744)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#724-730)
External calls sending eth:
- _transfer(sender,recipient,amount) (#639)
- recipient.transfer(amount) (#610)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,teamWallteAddress,block.timestamp) (#737-744)
State variables written after the call(s):
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#640)
- _allowances[owner][spender] = amount (#523)
Apply the check-effects-interactions pattern.
Additional information: link
Reentrancy in Olympicdogeking._transfer(address,address,uint256) (#644-682):
External calls:
- swapAndLiquify(contractTokenBalance) (#666)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,teamWallteAddress,block.timestamp) (#737-744)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#724-730)
External calls sending eth:
- swapAndLiquify(contractTokenBalance) (#666)
- recipient.transfer(amount) (#610)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,teamWallteAddress,block.timestamp) (#737-744)
Event emitted after the call(s):
- Transfer(sender,address(this),feeAmount) (#758)
- finalAmount = takeFee(sender,recipient,amount) (#671-672)
- Transfer(sender,recipient,finalAmount) (#679)
Reentrancy in Olympicdogeking.constructor() (#446-474):
External calls:
- uniswapPair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#450-451)
Event emitted after the call(s):
- Transfer(address(0),_msgSender(),_totalSupply) (#473)
Reentrancy in Olympicdogeking.swapAndLiquify(uint256) (#691-713):
External calls:
- swapTokensForEth(tokensForSwap) (#696)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#724-730)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#712)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,teamWallteAddress,block.timestamp) (#737-744)
External calls sending eth:
- transferToAddressETH(marketingWalletAddress,amountBNBMarketing) (#706)
- recipient.transfer(amount) (#610)
- transferToAddressETH(teamWalletAddress,amountBNBTeam) (#709)
- recipient.transfer(amount) (#610)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#712)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,teamWallteAddress,block.timestamp) (#737-744)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#524)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#712)
Reentrancy in Olympicdogeking.swapTokensForEth(uint256) (#715-733):
External calls:
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#724-730)
Event emitted after the call(s):
- SwapTokensForETH(tokenAmount,path) (#732)
Reentrancy in Olympicdogeking.transferFrom(address,address,uint256) (#638-642):
External calls:
- _transfer(sender,recipient,amount) (#639)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,teamWallteAddress,block.timestamp) (#737-744)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#724-730)
External calls sending eth:
- _transfer(sender,recipient,amount) (#639)
- recipient.transfer(amount) (#610)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,teamWallteAddress,block.timestamp) (#737-744)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#524)
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#640)
Apply the check-effects-interactions pattern.
Additional information: link
Address.isContract(address) (#78-83) uses assembly
- INLINE ASM (#81)
Address._functionCallWithValue(address,bytes,uint256,string) (#109-126) uses assembly
- INLINE ASM (#118-121)
Do not use evm assembly.
Additional information: link
Address._functionCallWithValue(address,bytes,uint256,string) (#109-126) is never used and should be removed
Address.functionCall(address,bytes) (#92-94) is never used and should be removed
Address.functionCall(address,bytes,string) (#96-98) is never used and should be removed
Address.functionCallWithValue(address,bytes,uint256) (#100-102) is never used and should be removed
Address.functionCallWithValue(address,bytes,uint256,string) (#104-107) is never used and should be removed
Address.isContract(address) (#78-83) is never used and should be removed
Address.sendValue(address,uint256) (#85-90) is never used and should be removed
Context._msgData() (#7-10) is never used and should be removed
SafeMath.mod(uint256,uint256) (#66-68) is never used and should be removed
SafeMath.mod(uint256,uint256,string) (#70-73) is never used and should be removed
Remove unused functions.
Additional information: link
Olympicdogeking._totalSupply (#409) is set pre-construction with a non-constant function or state variable:
- 1000000 * 10 ** _decimals
Olympicdogeking._maxTxAmount (#410) is set pre-construction with a non-constant function or state variable:
- 1000000 * 10 ** _decimals
Olympicdogeking._walletMax (#411) is set pre-construction with a non-constant function or state variable:
- 1000000 * 10 ** _decimals
Olympicdogeking.minimumTokensBeforeSwap (#412) is set pre-construction with a non-constant function or state variable:
- 100 * 10 ** _decimals
Remove any initialization of state variables via non-constant state variables or function calls. If variables must be set upon contract deployment, locate initialization in the constructor instead.
Additional information: link
Low level call in Address.sendValue(address,uint256) (#85-90):
- (success) = recipient.call{value: amount}() (#88)
Low level call in Address._functionCallWithValue(address,bytes,uint256,string) (#109-126):
- (success,returndata) = target.call{value: weiValue}(data) (#112)
Avoid low-level calls. Check the call success. If the call is meant for a contract, check for code existence
Additional information: link
Function IUniswapV2Pair.DOMAIN_SEPARATOR() (#205) is not in mixedCase
Function IUniswapV2Pair.PERMIT_TYPEHASH() (#206) is not in mixedCase
Function IUniswapV2Pair.MINIMUM_LIQUIDITY() (#222) is not in mixedCase
Function IUniswapV2Router01.WETH() (#241) is not in mixedCase
Parameter Olympicdogeking.setSwapAndLiquifyEnabled(bool)._enabled (#596) is not in mixedCase
Variable Olympicdogeking._balances (#385) is not in mixedCase
Variable Olympicdogeking._buyLiquidityFee (#393) is not in mixedCase
Variable Olympicdogeking._buyMarketingFee (#394) is not in mixedCase
Variable Olympicdogeking._buyTeamFee (#395) is not in mixedCase
Variable Olympicdogeking._sellLiquidityFee (#397) is not in mixedCase
Variable Olympicdogeking._sellMarketingFee (#398) is not in mixedCase
Variable Olympicdogeking._sellTeamFee (#399) is not in mixedCase
Variable Olympicdogeking._liquidityShare (#401) is not in mixedCase
Variable Olympicdogeking._marketingShare (#402) is not in mixedCase
Variable Olympicdogeking._teamShare (#403) is not in mixedCase
Variable Olympicdogeking._totalTaxIfBuying (#405) is not in mixedCase
Variable Olympicdogeking._totalTaxIfSelling (#406) is not in mixedCase
Variable Olympicdogeking._totalDistributionShares (#407) is not in mixedCase
Variable Olympicdogeking._maxTxAmount (#410) is not in mixedCase
Variable Olympicdogeking._walletMax (#411) is not in mixedCase
Follow the Solidity naming convention.
Additional information: link
Redundant expression "this (#8)" inContext (#3-11)
Remove redundant statements if they congest code but offer no value.
Additional information: link
Reentrancy in Olympicdogeking._transfer(address,address,uint256) (#644-682):
External calls:
- swapAndLiquify(contractTokenBalance) (#666)
- recipient.transfer(amount) (#610)
External calls sending eth:
- swapAndLiquify(contractTokenBalance) (#666)
- recipient.transfer(amount) (#610)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,teamWallteAddress,block.timestamp) (#737-744)
State variables written after the call(s):
- _balances[sender] = _balances[sender].sub(amount,Insufficient Balance) (#669)
- _balances[recipient] = _balances[recipient].add(finalAmount) (#677)
- finalAmount = takeFee(sender,recipient,amount) (#671-672)
- _balances[address(this)] = _balances[address(this)].add(feeAmount) (#757)
Event emitted after the call(s):
- Transfer(sender,address(this),feeAmount) (#758)
- finalAmount = takeFee(sender,recipient,amount) (#671-672)
- Transfer(sender,recipient,finalAmount) (#679)
Reentrancy in Olympicdogeking.swapAndLiquify(uint256) (#691-713):
External calls:
- transferToAddressETH(marketingWalletAddress,amountBNBMarketing) (#706)
- recipient.transfer(amount) (#610)
- transferToAddressETH(teamWalletAddress,amountBNBTeam) (#709)
- recipient.transfer(amount) (#610)
External calls sending eth:
- transferToAddressETH(marketingWalletAddress,amountBNBMarketing) (#706)
- recipient.transfer(amount) (#610)
- transferToAddressETH(teamWalletAddress,amountBNBTeam) (#709)
- recipient.transfer(amount) (#610)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#712)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,teamWallteAddress,block.timestamp) (#737-744)
State variables written after the call(s):
- addLiquidity(tokensForLP,amountBNBLiquidity) (#712)
- _allowances[owner][spender] = amount (#523)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#524)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#712)
Reentrancy in Olympicdogeking.transferFrom(address,address,uint256) (#638-642):
External calls:
- _transfer(sender,recipient,amount) (#639)
- recipient.transfer(amount) (#610)
External calls sending eth:
- _transfer(sender,recipient,amount) (#639)
- recipient.transfer(amount) (#610)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,teamWallteAddress,block.timestamp) (#737-744)
State variables written after the call(s):
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#640)
- _allowances[owner][spender] = amount (#523)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#524)
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#640)
Apply the check-effects-interactions pattern.
Additional information: link
Variable IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountADesired (#246) is too similar to IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountBDesired (#247)
Variable Olympicdogeking.teamWalletAddress (#382) is too similar to Olympicdogeking.teamWallteAddress (#421)
Prevent variables from having similar names.
Additional information: link
Olympicdogeking.slitherConstructorVariables() (#374-765) uses literals with too many digits:
- deadAddress = 0x000000000000000000000000000000000000dEaD (#383)
Olympicdogeking.slitherConstructorVariables() (#374-765) uses literals with too many digits:
- _totalSupply = 1000000 * 10 ** _decimals (#409)
Olympicdogeking.slitherConstructorVariables() (#374-765) uses literals with too many digits:
- _maxTxAmount = 1000000 * 10 ** _decimals (#410)
Olympicdogeking.slitherConstructorVariables() (#374-765) uses literals with too many digits:
- _walletMax = 1000000 * 10 ** _decimals (#411)
Use: Ether suffix, Time suffix, or The scientific notation
Additional information: link
Olympicdogeking._decimals (#379) should be constant
Olympicdogeking._name (#377) should be constant
Olympicdogeking._symbol (#378) should be constant
Add the constant attributes to state variables that never change.
Additional information: link
getCreator() should be declared external:
- Ownable.getCreator() (#145-147)
waiveOwnership() should be declared external:
- Ownable.waiveOwnership() (#155-158)
transferOwnership(address) should be declared external:
- Ownable.transferOwnership(address) (#160-164)
name() should be declared external:
- Olympicdogeking.name() (#476-478)
symbol() should be declared external:
- Olympicdogeking.symbol() (#480-482)
decimals() should be declared external:
- Olympicdogeking.decimals() (#484-486)
totalSupply() should be declared external:
- Olympicdogeking.totalSupply() (#488-490)
allowance(address,address) should be declared external:
- Olympicdogeking.allowance(address,address) (#496-498)
increaseAllowance(address,uint256) should be declared external:
- Olympicdogeking.increaseAllowance(address,uint256) (#500-503)
decreaseAllowance(address,uint256) should be declared external:
- Olympicdogeking.decreaseAllowance(address,uint256) (#505-508)
minimumTokensBeforeSwapAmount() should be declared external:
- Olympicdogeking.minimumTokensBeforeSwapAmount() (#510-512)
approve(address,uint256) should be declared external:
- Olympicdogeking.approve(address,uint256) (#514-517)
setMarketPairStatus(address,bool) should be declared external:
- Olympicdogeking.setMarketPairStatus(address,bool) (#527-529)
setIsExcludedFromFee(address,bool) should be declared external:
- Olympicdogeking.setIsExcludedFromFee(address,bool) (#535-537)
setSwapAndLiquifyEnabled(bool) should be declared external:
- Olympicdogeking.setSwapAndLiquifyEnabled(bool) (#596-599)
setSwapAndLiquifyByLimitOnly(bool) should be declared external:
- Olympicdogeking.setSwapAndLiquifyByLimitOnly(bool) (#601-603)
getCirculatingSupply() should be declared external:
- Olympicdogeking.getCirculatingSupply() (#605-607)
changeRouterVersion(address) should be declared external:
- Olympicdogeking.changeRouterVersion(address) (#613-630)
transfer(address,uint256) should be declared external:
- Olympicdogeking.transfer(address,uint256) (#633-636)
transferFrom(address,address,uint256) should be declared external:
- Olympicdogeking.transferFrom(address,address,uint256) (#638-642)
Use the external attribute for functions never called from the contract.
Additional information: link
Unable to find website, listings and other project-related information
Young tokens have high risks of scam / price dump / death
Token has no active CoinGecko listing / rank
Token has no active CoinMarketCap listing / rank
Unable to find Twitter account
Telegram account has relatively few subscribers
Unable to find Blog account (Reddit or Medium)
Unable to find Youtube account
Unable to find Discord account