$OXFI is an innovative financial protocol, which effectively reduces the risk of investors, and at the same time can serve the purpose of increasing the price of tokens indefinitely.
Secure Vault - Users can exchange BUSD from the vault at any time, independent of liquidity prices.
The initial capital of the vault - 47% of the pre-sale capital will provide a considerable floor price for the token price.
Unlimited price increases - 7% of each purchase tax will increase the vault funds; 5% of the sales tax on the total burn; these two points in the agreement play a role in continuously increasing the repurchase price.
The unit price of the repurchase will not decrease - when the holder exchanges BUSD through the vault, 100% of the OXFi used will be destroyed, and the total amount of tokens will be reduced, which ensures that the token price will not fall in the protocol algorithm.
Sufficient vault - The agreement calculates the repurchase unit price according to the vault balance/total amount of tokens = repurchase unit price, so the treasury funds will not be 100% exchanged.
The OXFi team will complete the goal according to the roadmap in the shortest time, and other applications in the OX ecosystem will be launched soon, OX node, OXNFT, OX launch pad, OX farm, OX LP pool, OX swap.
Reentrancy in OXFI._transferFrom(address,address,uint256) (contracts/OXFI.sol#219-270):
External calls:
- _depositToVault() (contracts/OXFI.sol#235)
- router.swapExactTokensForTokensSupportingFeeOnTransferTokens(amountToSwap,0,path,address(vault),block.timestamp) (contracts/OXFI.sol#338-344)
- _addLiquidity() (contracts/OXFI.sol#239)
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(half,0,path,address(this),block.timestamp) (contracts/OXFI.sol#372-378)
- router.addLiquidityETH{value: newBalance}(address(this),otherHalf,0,0,autoLiquidityReceiver,block.timestamp) (contracts/OXFI.sol#384-391)
External calls sending eth:
- _addLiquidity() (contracts/OXFI.sol#239)
- router.addLiquidityETH{value: newBalance}(address(this),otherHalf,0,0,autoLiquidityReceiver,block.timestamp) (contracts/OXFI.sol#384-391)
State variables written after the call(s):
- _takeSellFee(sender,amount) (contracts/OXFI.sol#257)
- liquidityFeeTracker = liquidityFeeTracker.add(lFee) (contracts/OXFI.sol#302)
- _takeBuyFee(sender,amount) (contracts/OXFI.sol#267)
- vaultFeeTracker = vaultFeeTracker.add(vFee) (contracts/OXFI.sol#290)
Apply the check-effects-interactions pattern.
Additional information: link
OXFIvault.redeemBUSD(uint256) (contracts/OXFIvault.sol#78-93) ignores return value by BUSD.transferFrom(address(this),msg.sender,busdForTransfer) (contracts/OXFIvault.sol#86)
OXFIvault.withdrawBUSD() (contracts/OXFIvault.sol#113-119) ignores return value by BUSD.transferFrom(address(this),msg.sender,BUSD.balanceOf(address(this))) (contracts/OXFIvault.sol#116)
Use SafeERC20, or ensure that the transfer/transferFrom return value is checked.
Additional information: link
Combination 3: Reentrancy vulnerabilities + Unchecked transfer vulnerability. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.
Unable to verify that contract auditor is trusted: Certik, Quantstamp, Hacken, Solidity, Paladinsec, Openzeppelin, Verichains
Function IPancakePair.DOMAIN_SEPARATOR() (contracts/IPancakePair.sol#16) is not in mixedCase
Function IPancakePair.PERMIT_TYPEHASH() (contracts/IPancakePair.sol#17) is not in mixedCase
Function IPancakePair.MINIMUM_LIQUIDITY() (contracts/IPancakePair.sol#34) is not in mixedCase
Function IPancakeRouter.WETH() (contracts/IPancakeRouter.sol#4) is not in mixedCase
Function IPancakeRouterVault.WETH() (contracts/IPancakeRouterVault.sol#6) is not in mixedCase
Parameter OXFI.setBuyFeePercent(uint256,uint256)._vaultFee (contracts/OXFI.sol#405) is not in mixedCase
Parameter OXFI.setBuyFeePercent(uint256,uint256)._marketFee (contracts/OXFI.sol#405) is not in mixedCase
Parameter OXFI.setSellFeePercent(uint256,uint256)._destroyFee (contracts/OXFI.sol#413) is not in mixedCase
Parameter OXFI.setSellFeePercent(uint256,uint256)._liquidityFee (contracts/OXFI.sol#413) is not in mixedCase
Parameter OXFI.setFeeReceivers(address,address)._autoLiquidityReceiver (contracts/OXFI.sol#420) is not in mixedCase
Parameter OXFI.setFeeReceivers(address,address)._marketingFeeReceiver (contracts/OXFI.sol#420) is not in mixedCase
Parameter OXFI.setSwapBackSettings(bool,uint256)._enabled (contracts/OXFI.sol#428) is not in mixedCase
Parameter OXFI.setSwapBackSettings(bool,uint256)._amount (contracts/OXFI.sol#428) is not in mixedCase
Constant OXFI._name (contracts/OXFI.sol#35) is not in UPPER_CASE_WITH_UNDERSCORES
Constant OXFI._symbol (contracts/OXFI.sol#36) is not in UPPER_CASE_WITH_UNDERSCORES
Constant OXFI._decimals (contracts/OXFI.sol#37) is not in UPPER_CASE_WITH_UNDERSCORES
Variable OXFI._totalSupply (contracts/OXFI.sol#39) is not in mixedCase
Variable OXFI._fixedTotalSupply (contracts/OXFI.sol#40) is not in mixedCase
Variable OXFI._maxTxAmount (contracts/OXFI.sol#41) is not in mixedCase
Variable OXFI._balances (contracts/OXFI.sol#43) is not in mixedCase
Variable OXFI._allowances (contracts/OXFI.sol#44) is not in mixedCase
Constant OXFI.feeDenominator (contracts/OXFI.sol#65) is not in UPPER_CASE_WITH_UNDERSCORES
Variable OXFI.WBNB (contracts/OXFI.sol#79) is not in mixedCase
Parameter OXFIvault.transferOwnership(address)._newOwner (contracts/OXFIvault.sol#100) is not in mixedCase
Variable OXFIvault.OXFI (contracts/OXFIvault.sol#39) is not in mixedCase
Follow the Solidity naming convention.
Additional information: link
Variable IPancakeRouter.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountADesired (contracts/IPancakeRouter.sol#11) is too similar to IPancakeRouter.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountBDesired (contracts/IPancakeRouter.sol#12)
Variable IPancakeRouterVault.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountADesired (contracts/IPancakeRouterVault.sol#12) is too similar to IPancakeRouterVault.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountBDesired (contracts/IPancakeRouterVault.sol#13)
Prevent variables from having similar names.
Additional information: link
OXFI._fixedTotalSupply (contracts/OXFI.sol#40) should be constant
Add the constant attributes to state variables that never change.
Additional information: link
grantRole(bytes32,address) should be declared external:
- AccessControl.grantRole(bytes32,address) (@openzeppelin/contracts/access/AccessControl.sol#130-132)
revokeRole(bytes32,address) should be declared external:
- AccessControl.revokeRole(bytes32,address) (@openzeppelin/contracts/access/AccessControl.sol#143-145)
renounceRole(bytes32,address) should be declared external:
- AccessControl.renounceRole(bytes32,address) (@openzeppelin/contracts/access/AccessControl.sol#161-165)
renounceOwnership() should be declared external:
- Ownable.renounceOwnership() (@openzeppelin/contracts/access/Ownable.sol#54-56)
balanceOf(address) should be declared external:
- OXFI.balanceOf(address) (contracts/OXFI.sol#182-184)
userBalanceBUSD(address) should be declared external:
- OXFIvault.userBalanceBUSD(address) (contracts/OXFIvault.sol#62-64)
Use the external attribute for functions never called from the contract.
Additional information: link
Pragma version^0.8.0 (@openzeppelin/contracts/access/AccessControl.sol#4) allows old versions
Pragma version^0.8.0 (@openzeppelin/contracts/access/IAccessControl.sol#4) allows old versions
Pragma version^0.8.0 (@openzeppelin/contracts/access/Ownable.sol#4) allows old versions
Pragma version^0.8.0 (@openzeppelin/contracts/security/ReentrancyGuard.sol#4) allows old versions
Pragma version^0.8.0 (@openzeppelin/contracts/token/ERC20/IERC20.sol#4) allows old versions
Pragma version^0.8.1 (@openzeppelin/contracts/utils/Address.sol#4) allows old versions
Pragma version^0.8.0 (@openzeppelin/contracts/utils/Context.sol#4) allows old versions
Pragma version^0.8.0 (@openzeppelin/contracts/utils/Strings.sol#4) allows old versions
Pragma version^0.8.0 (@openzeppelin/contracts/utils/introspection/ERC165.sol#4) allows old versions
Pragma version^0.8.0 (@openzeppelin/contracts/utils/introspection/IERC165.sol#4) allows old versions
Pragma version^0.8.0 (@openzeppelin/contracts/utils/math/SafeMath.sol#4) allows old versions
Pragma version^0.8.0 (contracts/IOXFIERC20.sol#4) allows old versions
Pragma version^0.8.8 (contracts/OXFI.sol#3) is known to contain severe issues (https://solidity.readthedocs.io/en/latest/bugs.html)
Pragma version^0.8.8 (contracts/OXFIvault.sol#3) is known to contain severe issues (https://solidity.readthedocs.io/en/latest/bugs.html)
solc-0.8.8 is known to contain severe issues (https://solidity.readthedocs.io/en/latest/bugs.html)
Deploy with any of the following Solidity versions: 0.5.16 - 0.5.17, 0.6.11 - 0.6.12, 0.7.5 - 0.7.6 Use a simple pragma version that allows any of these versions. Consider using the latest version of Solidity for testing.
Additional information: link
OXFI._addLiquidity() (contracts/OXFI.sol#352-394) ignores return value by router.addLiquidityETH{value: newBalance}(address(this),otherHalf,0,0,autoLiquidityReceiver,block.timestamp) (contracts/OXFI.sol#384-391)
OXFIvault.constructor(address,address,address) (contracts/OXFIvault.sol#50-56) ignores return value by BUSD.approve(address(this),type()(uint256).max) (contracts/OXFIvault.sol#52)
OXFIvault.constructor(address,address,address) (contracts/OXFIvault.sol#50-56) ignores return value by BUSD.approve(address(_router),type()(uint256).max) (contracts/OXFIvault.sol#53)
Ensure that all the return values of the function calls are used.
Additional information: link
OXFI.setFeeReceivers(address,address)._autoLiquidityReceiver (contracts/OXFI.sol#420) lacks a zero-check on :
- autoLiquidityReceiver = _autoLiquidityReceiver (contracts/OXFI.sol#424)
OXFI.setFeeReceivers(address,address)._marketingFeeReceiver (contracts/OXFI.sol#420) lacks a zero-check on :
- marketingFeeReceiver = _marketingFeeReceiver (contracts/OXFI.sol#425)
OXFIvault.constructor(address,address,address)._owner (contracts/OXFIvault.sol#50) lacks a zero-check on :
- owner = _owner (contracts/OXFIvault.sol#54)
Check that the address is not zero.
Additional information: link
Reentrancy in OXFI._transferFrom(address,address,uint256) (contracts/OXFI.sol#219-270):
External calls:
- _depositToVault() (contracts/OXFI.sol#235)
- router.swapExactTokensForTokensSupportingFeeOnTransferTokens(amountToSwap,0,path,address(vault),block.timestamp) (contracts/OXFI.sol#338-344)
- _addLiquidity() (contracts/OXFI.sol#239)
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(half,0,path,address(this),block.timestamp) (contracts/OXFI.sol#372-378)
- router.addLiquidityETH{value: newBalance}(address(this),otherHalf,0,0,autoLiquidityReceiver,block.timestamp) (contracts/OXFI.sol#384-391)
External calls sending eth:
- _addLiquidity() (contracts/OXFI.sol#239)
- router.addLiquidityETH{value: newBalance}(address(this),otherHalf,0,0,autoLiquidityReceiver,block.timestamp) (contracts/OXFI.sol#384-391)
State variables written after the call(s):
- _balances[sender] = _balances[sender].sub(amount,Insufficient Balance) (contracts/OXFI.sol#242)
- _balances[recipient] = _balances[recipient].add(amount) (contracts/OXFI.sol#246)
- _balances[recipient] = _balances[recipient].add(amount.sub(tFee)) (contracts/OXFI.sol#254)
- _takeSellFee(sender,amount) (contracts/OXFI.sol#257)
- _balances[address(this)] = _balances[address(this)].add(lFee) (contracts/OXFI.sol#298)
- _balances[recipient] = _balances[recipient].add(amount.sub(tFee)) (contracts/OXFI.sol#264)
- _takeBuyFee(sender,amount) (contracts/OXFI.sol#267)
- _balances[address(this)] = _balances[address(this)].add(vFee) (contracts/OXFI.sol#286)
- _balances[marketingFeeReceiver] = _balances[marketingFeeReceiver].add(mFee) (contracts/OXFI.sol#288)
- _takeSellFee(sender,amount) (contracts/OXFI.sol#257)
- _totalSupply = _totalSupply.sub(dFee) (contracts/OXFI.sol#300)
- _takeSellFee(sender,amount) (contracts/OXFI.sol#257)
- destroyedTokenCount = destroyedTokenCount.add(dFee) (contracts/OXFI.sol#304)
Reentrancy in OXFI.constructor() (contracts/OXFI.sol#105-143):
External calls:
- vault = new OXFIvault(address(this),0x10ED43C718714eb63d5aA57B78B54704E256024E,owner()) (contracts/OXFI.sol#113)
State variables written after the call(s):
- WBNB = router.WETH() (contracts/OXFI.sol#118)
- _setupRole(DESTROYER_ROLE,address(vault)) (contracts/OXFI.sol#114)
- _roles[role].members[account] = true (@openzeppelin/contracts/access/AccessControl.sol#207)
- router = IPancakeRouter(0x10ED43C718714eb63d5aA57B78B54704E256024E) (contracts/OXFI.sol#117)
Reentrancy in OXFI.constructor() (contracts/OXFI.sol#105-143):
External calls:
- vault = new OXFIvault(address(this),0x10ED43C718714eb63d5aA57B78B54704E256024E,owner()) (contracts/OXFI.sol#113)
- pair = IPancakeFactory(router.factory()).createPair(WBNB,address(this)) (contracts/OXFI.sol#119)
State variables written after the call(s):
- _allowances[address(this)][address(router)] = _fixedTotalSupply (contracts/OXFI.sol#122)
- approve(address(router),_fixedTotalSupply) (contracts/OXFI.sol#137)
- _allowances[msg.sender][spender] = amount (contracts/OXFI.sol#191)
- approve(address(pair),_fixedTotalSupply) (contracts/OXFI.sol#138)
- _allowances[msg.sender][spender] = amount (contracts/OXFI.sol#191)
- _balances[owner()] = _totalSupply (contracts/OXFI.sol#141)
- autoLiquidityReceiver = 0x0957bE1AC1018a615e58B19c543b7830E88B0Eee (contracts/OXFI.sol#128)
- isFeeExempt[owner()] = true (contracts/OXFI.sol#131)
- isFeeExempt[msg.sender] = true (contracts/OXFI.sol#133)
- isTxLimitExempt[owner()] = true (contracts/OXFI.sol#132)
- isTxLimitExempt[msg.sender] = true (contracts/OXFI.sol#134)
- marketingFeeReceiver = 0x51e70acd3B1BbDF82f664654a81D4A2C98D1b91c (contracts/OXFI.sol#127)
- pair = IPancakeFactory(router.factory()).createPair(WBNB,address(this)) (contracts/OXFI.sol#119)
Reentrancy in OXFIvault.constructor(address,address,address) (contracts/OXFIvault.sol#50-56):
External calls:
- BUSD.approve(address(this),type()(uint256).max) (contracts/OXFIvault.sol#52)
- BUSD.approve(address(_router),type()(uint256).max) (contracts/OXFIvault.sol#53)
State variables written after the call(s):
- creationTime = block.timestamp (contracts/OXFIvault.sol#55)
- owner = _owner (contracts/OXFIvault.sol#54)
Reentrancy in OXFIvault.redeemBUSD(uint256) (contracts/OXFIvault.sol#78-93):
External calls:
- require(bool,string)(OXFI.destroy(msg.sender,amount),OXFIvault: Tokens not destroyed) (contracts/OXFIvault.sol#81)
- BUSD.transferFrom(address(this),msg.sender,busdForTransfer) (contracts/OXFIvault.sol#86)
State variables written after the call(s):
- totalBusdRedeemed += busdForTransfer (contracts/OXFIvault.sol#89)
- totalOxfiDeposited += amount (contracts/OXFIvault.sol#88)
Apply the check-effects-interactions pattern.
Additional information: link
Reentrancy in OXFI._addLiquidity() (contracts/OXFI.sol#352-394):
External calls:
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(half,0,path,address(this),block.timestamp) (contracts/OXFI.sol#372-378)
- router.addLiquidityETH{value: newBalance}(address(this),otherHalf,0,0,autoLiquidityReceiver,block.timestamp) (contracts/OXFI.sol#384-391)
External calls sending eth:
- router.addLiquidityETH{value: newBalance}(address(this),otherHalf,0,0,autoLiquidityReceiver,block.timestamp) (contracts/OXFI.sol#384-391)
Event emitted after the call(s):
- AutoLiquify(newBalance,otherHalf) (contracts/OXFI.sol#393)
Reentrancy in OXFI._depositToVault() (contracts/OXFI.sol#319-351):
External calls:
- router.swapExactTokensForTokensSupportingFeeOnTransferTokens(amountToSwap,0,path,address(vault),block.timestamp) (contracts/OXFI.sol#338-344)
Event emitted after the call(s):
- VaultDeposit(deposited) (contracts/OXFI.sol#350)
Reentrancy in OXFI._transferFrom(address,address,uint256) (contracts/OXFI.sol#219-270):
External calls:
- _depositToVault() (contracts/OXFI.sol#235)
- router.swapExactTokensForTokensSupportingFeeOnTransferTokens(amountToSwap,0,path,address(vault),block.timestamp) (contracts/OXFI.sol#338-344)
- _addLiquidity() (contracts/OXFI.sol#239)
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(half,0,path,address(this),block.timestamp) (contracts/OXFI.sol#372-378)
- router.addLiquidityETH{value: newBalance}(address(this),otherHalf,0,0,autoLiquidityReceiver,block.timestamp) (contracts/OXFI.sol#384-391)
External calls sending eth:
- _addLiquidity() (contracts/OXFI.sol#239)
- router.addLiquidityETH{value: newBalance}(address(this),otherHalf,0,0,autoLiquidityReceiver,block.timestamp) (contracts/OXFI.sol#384-391)
Event emitted after the call(s):
- AutoLiquify(newBalance,otherHalf) (contracts/OXFI.sol#393)
- _addLiquidity() (contracts/OXFI.sol#239)
- Transfer(sender,address(this),vFee) (contracts/OXFI.sol#291)
- _takeBuyFee(sender,amount) (contracts/OXFI.sol#267)
- Transfer(sender,marketingFeeReceiver,mFee) (contracts/OXFI.sol#292)
- _takeBuyFee(sender,amount) (contracts/OXFI.sol#267)
- Transfer(sender,address(this),lFee) (contracts/OXFI.sol#305)
- _takeSellFee(sender,amount) (contracts/OXFI.sol#257)
- Transfer(sender,address(0),dFee) (contracts/OXFI.sol#306)
- _takeSellFee(sender,amount) (contracts/OXFI.sol#257)
- Transfer(sender,recipient,amount) (contracts/OXFI.sol#247)
- Transfer(sender,recipient,amount.sub(tFee)) (contracts/OXFI.sol#255)
- Transfer(sender,recipient,amount.sub(tFee)) (contracts/OXFI.sol#265)
Reentrancy in OXFI.constructor() (contracts/OXFI.sol#105-143):
External calls:
- vault = new OXFIvault(address(this),0x10ED43C718714eb63d5aA57B78B54704E256024E,owner()) (contracts/OXFI.sol#113)
Event emitted after the call(s):
- RoleGranted(role,account,_msgSender()) (@openzeppelin/contracts/access/AccessControl.sol#208)
- _setupRole(DESTROYER_ROLE,address(vault)) (contracts/OXFI.sol#114)
Reentrancy in OXFI.constructor() (contracts/OXFI.sol#105-143):
External calls:
- vault = new OXFIvault(address(this),0x10ED43C718714eb63d5aA57B78B54704E256024E,owner()) (contracts/OXFI.sol#113)
- pair = IPancakeFactory(router.factory()).createPair(WBNB,address(this)) (contracts/OXFI.sol#119)
Event emitted after the call(s):
- Approval(msg.sender,spender,amount) (contracts/OXFI.sol#192)
- approve(address(pair),_fixedTotalSupply) (contracts/OXFI.sol#138)
- Approval(msg.sender,spender,amount) (contracts/OXFI.sol#192)
- approve(address(router),_fixedTotalSupply) (contracts/OXFI.sol#137)
- Transfer(address(0),owner(),_totalSupply) (contracts/OXFI.sol#142)
Reentrancy in OXFIvault.redeemBUSD(uint256) (contracts/OXFIvault.sol#78-93):
External calls:
- require(bool,string)(OXFI.destroy(msg.sender,amount),OXFIvault: Tokens not destroyed) (contracts/OXFIvault.sol#81)
- BUSD.transferFrom(address(this),msg.sender,busdForTransfer) (contracts/OXFIvault.sol#86)
Event emitted after the call(s):
- BusdRedeemed(msg.sender,busdForTransfer) (contracts/OXFIvault.sol#92)
- OxfiDeposited(msg.sender,amount) (contracts/OXFIvault.sol#91)
Reentrancy in OXFIvault.withdrawBUSD() (contracts/OXFIvault.sol#113-119):
External calls:
- BUSD.transferFrom(address(this),msg.sender,BUSD.balanceOf(address(this))) (contracts/OXFIvault.sol#116)
Event emitted after the call(s):
- OwnerWithdraw(ALL BUSD) (contracts/OXFIvault.sol#117)
Apply the check-effects-interactions pattern.
Additional information: link
OXFIvault.withdrawBUSD() (contracts/OXFIvault.sol#113-119) uses timestamp for comparisons
Dangerous comparisons:
- require(bool,string)(block.timestamp > creationTime + lockTime,OXFI: lock time not over) (contracts/OXFIvault.sol#115)
Avoid relying on block.timestamp.
Additional information: link
Address.verifyCallResult(bool,bytes,string) (@openzeppelin/contracts/utils/Address.sol#201-221) uses assembly
- INLINE ASM (@openzeppelin/contracts/utils/Address.sol#213-216)
Do not use evm assembly.
Additional information: link
Different versions of Solidity is used:
- Version used: ['^0.8.0', '^0.8.1', '^0.8.8']
- ^0.8.0 (@openzeppelin/contracts/access/AccessControl.sol#4)
- ^0.8.0 (@openzeppelin/contracts/access/IAccessControl.sol#4)
- ^0.8.0 (@openzeppelin/contracts/access/Ownable.sol#4)
- ^0.8.0 (@openzeppelin/contracts/security/ReentrancyGuard.sol#4)
- ^0.8.0 (@openzeppelin/contracts/token/ERC20/IERC20.sol#4)
- ^0.8.1 (@openzeppelin/contracts/utils/Address.sol#4)
- ^0.8.0 (@openzeppelin/contracts/utils/Context.sol#4)
- ^0.8.0 (@openzeppelin/contracts/utils/Strings.sol#4)
- ^0.8.0 (@openzeppelin/contracts/utils/introspection/ERC165.sol#4)
- ^0.8.0 (@openzeppelin/contracts/utils/introspection/IERC165.sol#4)
- ^0.8.0 (@openzeppelin/contracts/utils/math/SafeMath.sol#4)
- ^0.8.0 (contracts/IOXFIERC20.sol#4)
- ^0.8.8 (contracts/OXFI.sol#3)
- ^0.8.8 (contracts/OXFIvault.sol#3)
Use one Solidity version.
Additional information: link
AccessControl._setRoleAdmin(bytes32,bytes32) (@openzeppelin/contracts/access/AccessControl.sol#194-198) is never used and should be removed
Address.functionCall(address,bytes) (@openzeppelin/contracts/utils/Address.sol#85-87) is never used and should be removed
Address.functionCall(address,bytes,string) (@openzeppelin/contracts/utils/Address.sol#95-101) is never used and should be removed
Address.functionCallWithValue(address,bytes,uint256) (@openzeppelin/contracts/utils/Address.sol#114-120) is never used and should be removed
Address.functionCallWithValue(address,bytes,uint256,string) (@openzeppelin/contracts/utils/Address.sol#128-139) is never used and should be removed
Address.functionDelegateCall(address,bytes) (@openzeppelin/contracts/utils/Address.sol#174-176) is never used and should be removed
Address.functionDelegateCall(address,bytes,string) (@openzeppelin/contracts/utils/Address.sol#184-193) is never used and should be removed
Address.functionStaticCall(address,bytes) (@openzeppelin/contracts/utils/Address.sol#147-149) is never used and should be removed
Address.functionStaticCall(address,bytes,string) (@openzeppelin/contracts/utils/Address.sol#157-166) is never used and should be removed
Address.isContract(address) (@openzeppelin/contracts/utils/Address.sol#36-42) is never used and should be removed
Address.sendValue(address,uint256) (@openzeppelin/contracts/utils/Address.sol#60-65) is never used and should be removed
Address.verifyCallResult(bool,bytes,string) (@openzeppelin/contracts/utils/Address.sol#201-221) is never used and should be removed
Context._msgData() (@openzeppelin/contracts/utils/Context.sol#21-23) is never used and should be removed
SafeMath.div(uint256,uint256,string) (@openzeppelin/contracts/utils/math/SafeMath.sol#191-200) is never used and should be removed
SafeMath.mod(uint256,uint256) (@openzeppelin/contracts/utils/math/SafeMath.sol#151-153) is never used and should be removed
SafeMath.mod(uint256,uint256,string) (@openzeppelin/contracts/utils/math/SafeMath.sol#217-226) is never used and should be removed
SafeMath.tryAdd(uint256,uint256) (@openzeppelin/contracts/utils/math/SafeMath.sol#22-28) is never used and should be removed
SafeMath.tryDiv(uint256,uint256) (@openzeppelin/contracts/utils/math/SafeMath.sol#64-69) is never used and should be removed
SafeMath.tryMod(uint256,uint256) (@openzeppelin/contracts/utils/math/SafeMath.sol#76-81) is never used and should be removed
SafeMath.tryMul(uint256,uint256) (@openzeppelin/contracts/utils/math/SafeMath.sol#47-57) is never used and should be removed
SafeMath.trySub(uint256,uint256) (@openzeppelin/contracts/utils/math/SafeMath.sol#35-40) is never used and should be removed
Strings.toHexString(uint256) (@openzeppelin/contracts/utils/Strings.sol#40-51) is never used and should be removed
Strings.toString(uint256) (@openzeppelin/contracts/utils/Strings.sol#15-35) is never used and should be removed
Remove unused functions.
Additional information: link
OXFI.swapThreshold (contracts/OXFI.sol#86) is set pre-construction with a non-constant function or state variable:
- _totalSupply / 2000
Remove any initialization of state variables via non-constant state variables or function calls. If variables must be set upon contract deployment, locate initialization in the constructor instead.
Additional information: link
Low level call in Address.sendValue(address,uint256) (@openzeppelin/contracts/utils/Address.sol#60-65):
- (success) = recipient.call{value: amount}() (@openzeppelin/contracts/utils/Address.sol#63)
Low level call in Address.functionCallWithValue(address,bytes,uint256,string) (@openzeppelin/contracts/utils/Address.sol#128-139):
- (success,returndata) = target.call{value: value}(data) (@openzeppelin/contracts/utils/Address.sol#137)
Low level call in Address.functionStaticCall(address,bytes,string) (@openzeppelin/contracts/utils/Address.sol#157-166):
- (success,returndata) = target.staticcall(data) (@openzeppelin/contracts/utils/Address.sol#164)
Low level call in Address.functionDelegateCall(address,bytes,string) (@openzeppelin/contracts/utils/Address.sol#184-193):
- (success,returndata) = target.delegatecall(data) (@openzeppelin/contracts/utils/Address.sol#191)
Avoid low-level calls. Check the call success. If the call is meant for a contract, check for code existence
Additional information: link
OXFI (contracts/OXFI.sol#32-448) should inherit from IOXFIERC20 (contracts/IOXFIERC20.sol#9-88)
Inherit from the missing interface or contract.
Additional information: link
BscScan page for the token does not contain additional info: website, socials, description, etc.
Additional information: link
Unable to find token/project description on the website or on BscScan, CoinMarketCap
Unable to verify token contract address on the website
Unable to find whitepaper link on the website
Unable to find Twitter link on the website
Unable to find token on CoinHunt
Additional information: link
Token is not listed at Mobula.Finance
Additional information: link
Young tokens have high risks of scam / price dump / death
Young tokens have high risks of scam / price dump / death
Young tokens have high risks of scam / price dump / death
Young tokens have high risks of scam / price dump / death
Young tokens have high risks of scam / price dump / death
Token has relatively low CoinGecko rank
Unable to find Blog account (Reddit or Medium)
Unable to find Youtube account
Unable to find Discord account