PBK [Profit Bank] Token

Unable to find manual contract audit (e.g. Certik, PeckShield, Solidity...)

ProfitBank.addLiquidity(uint256,uint256) (#1090-1103) sends eth to arbitrary user
Dangerous calls:
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1095-1102)
Ensure that an arbitrary user cannot withdraw unauthorized funds.

Additional information: link

Reentrancy in ProfitBank._transfer(address,address,uint256) (#1035-1058):
External calls:
- swapTokens(contractTokenBalance) (#1053)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1095-1102)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1078-1084)
External calls sending eth:
- swapTokens(contractTokenBalance) (#1053)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1095-1102)
State variables written after the call(s):
- _tokenTransfer(from,to,amount) (#1057)
- _rOwned[sender] = _rOwned[sender].sub(rAmount) (#1130)
- _rOwned[recipient] = _rOwned[recipient].add(rAmount) (#1131)
- _rOwned[marketingAddress] = _rOwned[marketingAddress].add(forMarketing) (#1178)
- _rOwned[devAddress] = _rOwned[devAddress].add(forDev) (#1179)
- _rOwned[address(this)] = _rOwned[address(this)].add(rLiquidity.sub(forMarketing.add(forDev))) (#1180)
- _rOwned[sender] = _rOwned[sender].sub(rAmount) (#1120)
- _rOwned[recipient] = _rOwned[recipient].add(rTransferAmount) (#1121)
- _tokenTransfer(from,to,amount) (#1057)
- _rTotal = _rTotal.sub(rFee) (#1136)
Apply the check-effects-interactions pattern.

Additional information: link

Combination 1: Reentrancy vulnerabilities + Functions that send Ether to arbitraty destination. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.

ProfitBank._decimals (#883) should be constant
ProfitBank._name (#881) should be constant
ProfitBank._symbol (#882) should be constant
ProfitBank._tTotal (#877) should be constant
ProfitBank.devAddress (#869) should be constant
ProfitBank.minimumTokensBeforeSwap (#896) should be constant
Add the constant attributes to state variables that never change.

Additional information: link

ProfitBank.addLiquidity(uint256,uint256) (#1090-1103) ignores return value by uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1095-1102)
Ensure that all the return values of the function calls are used.

Additional information: link

ProfitBank.allowance(address,address).owner (#968) shadows:
- Ownable.owner() (#583-585) (function)
ProfitBank._approve(address,address,uint256).owner (#1027) shadows:
- Ownable.owner() (#583-585) (function)
Rename the local variables that shadow another component.

Additional information: link

ProfitBank.setMaxTxAmount(uint256) (#1226-1228) should emit an event for:
- _maxTxAmount = maxTxAmount (#1227)
Emit an event for critical parameter changes.

Additional information: link

ProfitBank.setMarketingAddress(address)._marketingAddress (#1238) lacks a zero-check on :
- marketingAddress = address(_marketingAddress) (#1239)
Check that the address is not zero.

Additional information: link

Reentrancy in ProfitBank._transfer(address,address,uint256) (#1035-1058):
External calls:
- swapTokens(contractTokenBalance) (#1053)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1095-1102)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1078-1084)
External calls sending eth:
- swapTokens(contractTokenBalance) (#1053)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1095-1102)
State variables written after the call(s):
- _tokenTransfer(from,to,amount) (#1057)
- _tFeeTotal = _tFeeTotal.add(tFee) (#1137)
Reentrancy in ProfitBank.constructor(IUniswapV2Router02) (#931-941):
External calls:
- uniswapV2Pair = IUniswapV2Factory(_router.factory()).createPair(address(this),_router.WETH()) (#935-936)
State variables written after the call(s):
- uniswapV2Router = _router (#938)
Reentrancy in ProfitBank.swapTokens(uint256) (#1060-1066):
External calls:
- swapTokensForEth(contractTokenBalance.div(2)) (#1062)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1078-1084)
- addLiquidity(leftToken,transferredBalance) (#1065)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1095-1102)
External calls sending eth:
- addLiquidity(leftToken,transferredBalance) (#1065)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1095-1102)
State variables written after the call(s):
- addLiquidity(leftToken,transferredBalance) (#1065)
- _allowances[owner][spender] = amount (#1031)
Reentrancy in ProfitBank.transferFrom(address,address,uint256) (#977-981):
External calls:
- _transfer(sender,recipient,amount) (#978)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1095-1102)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1078-1084)
External calls sending eth:
- _transfer(sender,recipient,amount) (#978)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1095-1102)
State variables written after the call(s):
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#979)
- _allowances[owner][spender] = amount (#1031)
Apply the check-effects-interactions pattern.

Additional information: link

Reentrancy in ProfitBank._transfer(address,address,uint256) (#1035-1058):
External calls:
- swapTokens(contractTokenBalance) (#1053)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1095-1102)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1078-1084)
External calls sending eth:
- swapTokens(contractTokenBalance) (#1053)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1095-1102)
Event emitted after the call(s):
- Transfer(sender,recipient,tAmount) (#1132)
- _tokenTransfer(from,to,amount) (#1057)
- Transfer(sender,recipient,tTransferAmount) (#1124)
- _tokenTransfer(from,to,amount) (#1057)
Reentrancy in ProfitBank.constructor(IUniswapV2Router02) (#931-941):
External calls:
- uniswapV2Pair = IUniswapV2Factory(_router.factory()).createPair(address(this),_router.WETH()) (#935-936)
Event emitted after the call(s):
- Transfer(address(0),_msgSender(),_tTotal) (#940)
Reentrancy in ProfitBank.swapTokens(uint256) (#1060-1066):
External calls:
- swapTokensForEth(contractTokenBalance.div(2)) (#1062)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1078-1084)
- addLiquidity(leftToken,transferredBalance) (#1065)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1095-1102)
External calls sending eth:
- addLiquidity(leftToken,transferredBalance) (#1065)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1095-1102)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#1032)
- addLiquidity(leftToken,transferredBalance) (#1065)
Reentrancy in ProfitBank.swapTokensForEth(uint256) (#1069-1087):
External calls:
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1078-1084)
Event emitted after the call(s):
- SwapTokensForETH(tokenAmount,path) (#1086)
Reentrancy in ProfitBank.transferFrom(address,address,uint256) (#977-981):
External calls:
- _transfer(sender,recipient,amount) (#978)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1095-1102)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1078-1084)
External calls sending eth:
- _transfer(sender,recipient,amount) (#978)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1095-1102)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#1032)
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#979)
Apply the check-effects-interactions pattern.

Additional information: link

Address.isContract(address) (#112-122) uses assembly
- INLINE ASM (#118-120)
Address.verifyCallResult(bool,bytes,string) (#281-301) uses assembly
- INLINE ASM (#293-296)
Do not use evm assembly.

Additional information: link

Different versions of Solidity is used:
- Version used: ['>=0.5.0', '>=0.6.2', '>=0.8.0', '^0.8.0']
- ^0.8.0 (#5)
- ^0.8.0 (#89)
- >=0.5.0 (#306)
- >=0.5.0 (#326)
- >=0.6.2 (#381)
- >=0.6.2 (#479)
- ^0.8.0 (#527)
- ^0.8.0 (#553)
- ^0.8.0 (#626)
- >=0.8.0 (#854)
Use one Solidity version.

Additional information: link

Address.functionCall(address,bytes) (#165-167) is never used and should be removed
Address.functionCall(address,bytes,string) (#175-181) is never used and should be removed
Address.functionCallWithValue(address,bytes,uint256) (#194-200) is never used and should be removed
Address.functionCallWithValue(address,bytes,uint256,string) (#208-219) is never used and should be removed
Address.functionDelegateCall(address,bytes) (#254-256) is never used and should be removed
Address.functionDelegateCall(address,bytes,string) (#264-273) is never used and should be removed
Address.functionStaticCall(address,bytes) (#227-229) is never used and should be removed
Address.functionStaticCall(address,bytes,string) (#237-246) is never used and should be removed
Address.isContract(address) (#112-122) is never used and should be removed
Address.sendValue(address,uint256) (#140-145) is never used and should be removed
Address.verifyCallResult(bool,bytes,string) (#281-301) is never used and should be removed
Context._msgData() (#544-546) is never used and should be removed
ProfitBank.removeAllFee() (#1196-1208) is never used and should be removed
ProfitBank.restoreAllFee() (#1210-1215) is never used and should be removed
ProfitBank.transferToAddressETH(address,uint256) (#1256-1258) is never used and should be removed
SafeMath.div(uint256,uint256,string) (#813-822) is never used and should be removed
SafeMath.mod(uint256,uint256) (#773-775) is never used and should be removed
SafeMath.mod(uint256,uint256,string) (#839-848) is never used and should be removed
SafeMath.tryAdd(uint256,uint256) (#644-650) is never used and should be removed
SafeMath.tryDiv(uint256,uint256) (#686-691) is never used and should be removed
SafeMath.tryMod(uint256,uint256) (#698-703) is never used and should be removed
SafeMath.tryMul(uint256,uint256) (#669-679) is never used and should be removed
SafeMath.trySub(uint256,uint256) (#657-662) is never used and should be removed
Remove unused functions.

Additional information: link

ProfitBank._rTotal (#878) is set pre-construction with a non-constant function or state variable:
- (MAX - (MAX % _tTotal))
ProfitBank._previousTaxFee (#887) is set pre-construction with a non-constant function or state variable:
- _taxFee
ProfitBank._previousLiquidityFee (#890) is set pre-construction with a non-constant function or state variable:
- _liquidityFee
Remove any initialization of state variables via non-constant state variables or function calls. If variables must be set upon contract deployment, locate initialization in the constructor instead.

Additional information: link

Pragma version^0.8.0 (#5) allows old versions
Pragma version^0.8.0 (#89) allows old versions
Pragma version>=0.5.0 (#306) allows old versions
Pragma version>=0.5.0 (#326) allows old versions
Pragma version>=0.6.2 (#381) allows old versions
Pragma version>=0.6.2 (#479) allows old versions
Pragma version^0.8.0 (#527) allows old versions
Pragma version^0.8.0 (#553) allows old versions
Pragma version^0.8.0 (#626) allows old versions
Pragma version>=0.8.0 (#854) allows old versions
solc-0.8.0 is not recommended for deployment
Deploy with any of the following Solidity versions: 0.5.16 - 0.5.17, 0.6.11 - 0.6.12, 0.7.5 - 0.7.6 Use a simple pragma version that allows any of these versions. Consider using the latest version of Solidity for testing.

Additional information: link

Low level call in Address.sendValue(address,uint256) (#140-145):
- (success) = recipient.call{value: amount}() (#143)
Low level call in Address.functionCallWithValue(address,bytes,uint256,string) (#208-219):
- (success,returndata) = target.call{value: value}(data) (#217)
Low level call in Address.functionStaticCall(address,bytes,string) (#237-246):
- (success,returndata) = target.staticcall(data) (#244)
Low level call in Address.functionDelegateCall(address,bytes,string) (#264-273):
- (success,returndata) = target.delegatecall(data) (#271)
Avoid low-level calls. Check the call success. If the call is meant for a contract, check for code existence

Additional information: link

Function IUniswapV2Pair.DOMAIN_SEPARATOR() (#343) is not in mixedCase
Function IUniswapV2Pair.PERMIT_TYPEHASH() (#344) is not in mixedCase
Function IUniswapV2Pair.MINIMUM_LIQUIDITY() (#361) is not in mixedCase
Function IUniswapV2Router01.WETH() (#385) is not in mixedCase
Parameter ProfitBank.calculateTaxFee(uint256,uint256)._amount (#1184) is not in mixedCase
Parameter ProfitBank.calculateLiquidityFee(uint256,uint256)._amount (#1190) is not in mixedCase
Parameter ProfitBank.setMarketingAddress(address)._marketingAddress (#1238) is not in mixedCase
Parameter ProfitBank.setSwapAndLiquifyEnabled(bool)._enabled (#1242) is not in mixedCase
Parameter ProfitBank.setBuyBackEnabled(bool)._enabled (#1247) is not in mixedCase
Parameter ProfitBank.setExclusions(address,bool)._account (#1252) is not in mixedCase
Parameter ProfitBank.setExclusions(address,bool)._status (#1252) is not in mixedCase
Variable ProfitBank._taxFee (#886) is not in mixedCase
Variable ProfitBank._liquidityFee (#889) is not in mixedCase
Variable ProfitBank._maxTxAmount (#895) is not in mixedCase
Follow the Solidity naming convention.

Additional information: link

Variable IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountADesired (#390) is too similar to IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountBDesired (#391)
Variable ProfitBank._getRValues(uint256,uint256,uint256,uint256).rTransferAmount (#1157) is too similar to ProfitBank._getTValues(uint256,uint256).tTransferAmount (#1149)
Variable ProfitBank._getValues(uint256,uint256).rTransferAmount (#1142) is too similar to ProfitBank._getTValues(uint256,uint256).tTransferAmount (#1149)
Variable ProfitBank.reflectionFromToken(uint256,bool).rTransferAmount (#1016) is too similar to ProfitBank._getTValues(uint256,uint256).tTransferAmount (#1149)
Variable ProfitBank._getRValues(uint256,uint256,uint256,uint256).rTransferAmount (#1157) is too similar to ProfitBank._transferStandard(address,address,uint256,uint256).tTransferAmount (#1119)
Variable ProfitBank._transferStandard(address,address,uint256,uint256).rTransferAmount (#1119) is too similar to ProfitBank._transferStandard(address,address,uint256,uint256).tTransferAmount (#1119)
Variable ProfitBank.reflectionFromToken(uint256,bool).rTransferAmount (#1016) is too similar to ProfitBank._transferStandard(address,address,uint256,uint256).tTransferAmount (#1119)
Variable ProfitBank._getValues(uint256,uint256).rTransferAmount (#1142) is too similar to ProfitBank._transferStandard(address,address,uint256,uint256).tTransferAmount (#1119)
Variable ProfitBank._transferStandard(address,address,uint256,uint256).rTransferAmount (#1119) is too similar to ProfitBank._getTValues(uint256,uint256).tTransferAmount (#1149)
Variable ProfitBank.reflectionFromToken(uint256,bool).rTransferAmount (#1016) is too similar to ProfitBank._getValues(uint256,uint256).tTransferAmount (#1141)
Variable ProfitBank._getValues(uint256,uint256).rTransferAmount (#1142) is too similar to ProfitBank._getValues(uint256,uint256).tTransferAmount (#1141)
Variable ProfitBank._transferStandard(address,address,uint256,uint256).rTransferAmount (#1119) is too similar to ProfitBank._getValues(uint256,uint256).tTransferAmount (#1141)
Variable ProfitBank._getRValues(uint256,uint256,uint256,uint256).rTransferAmount (#1157) is too similar to ProfitBank._getValues(uint256,uint256).tTransferAmount (#1141)
Prevent variables from having similar names.

Additional information: link

ProfitBank.slitherConstructorVariables() (#864-1263) uses literals with too many digits:
- _tTotal = 100000000000 * 10 ** 6 (#877)
ProfitBank.slitherConstructorVariables() (#864-1263) uses literals with too many digits:
- _maxTxAmount = 30000000000 * 10 ** 6 (#895)
Use: Ether suffix, Time suffix, or The scientific notation

Additional information: link

ProfitBank._tOwned (#872) is never used in ProfitBank (#864-1263)
Remove unused state variables.

Additional information: link

renounceOwnership() should be declared external:
- Ownable.renounceOwnership() (#602-604)
transferOwnership(address) should be declared external:
- Ownable.transferOwnership(address) (#610-613)
name() should be declared external:
- ProfitBank.name() (#943-945)
symbol() should be declared external:
- ProfitBank.symbol() (#947-949)
decimals() should be declared external:
- ProfitBank.decimals() (#951-953)
totalSupply() should be declared external:
- ProfitBank.totalSupply() (#955-957)
transfer(address,uint256) should be declared external:
- ProfitBank.transfer(address,uint256) (#963-966)
allowance(address,address) should be declared external:
- ProfitBank.allowance(address,address) (#968-970)
approve(address,uint256) should be declared external:
- ProfitBank.approve(address,uint256) (#972-975)
transferFrom(address,address,uint256) should be declared external:
- ProfitBank.transferFrom(address,address,uint256) (#977-981)
increaseAllowance(address,uint256) should be declared external:
- ProfitBank.increaseAllowance(address,uint256) (#983-986)
decreaseAllowance(address,uint256) should be declared external:
- ProfitBank.decreaseAllowance(address,uint256) (#988-991)
totalFees() should be declared external:
- ProfitBank.totalFees() (#993-995)
minimumTokensBeforeSwapAmount() should be declared external:
- ProfitBank.minimumTokensBeforeSwapAmount() (#997-999)
deliver(uint256) should be declared external:
- ProfitBank.deliver(uint256) (#1001-1008)
reflectionFromToken(uint256,bool) should be declared external:
- ProfitBank.reflectionFromToken(uint256,bool) (#1010-1019)
setSwapAndLiquifyEnabled(bool) should be declared external:
- ProfitBank.setSwapAndLiquifyEnabled(bool) (#1242-1245)
setBuyBackEnabled(bool) should be declared external:
- ProfitBank.setBuyBackEnabled(bool) (#1247-1250)
setExclusions(address,bool) should be declared external:
- ProfitBank.setExclusions(address,bool) (#1252-1254)
Use the external attribute for functions never called from the contract.

Additional information: link

Token seems to be untradeable: there is no PancakeSwap trading pair and no trading volumes. Ignore for presale.

BscScan page for the token does not contain additional info: website, socials, description, etc.

Additional information: link

Unable to find token contract audit

Unable to find audit link on the website

Unable to find whitepaper link on the website

Token was delisted (assigned to inactive / untracked listing) from CoinMarketCap

Additional information: link

Unable to find token on CoinHunt

Additional information: link

Unable to find code repository for the project

Young tokens have high risks of price dump / death

Young tokens have high risks of scam / price dump / death

Young tokens have high risks of scam / price dump / death

Token has no active CoinMarketCap listing / rank

Young tokens have high risks of price dump / death

Token has relatively low CoinGecko rank