Unable to find manual contract audit (e.g. Certik, PeckShield, Solidity...)
napoleonInu.swapBack() (#311-354) sends eth to arbitrary user
Dangerous calls:
- (MarketingSuccess) = address(marketingFeeReceiver).call{gas: 30000,value: amountBNBMarketing}() (#346)
- (buybackSuccess) = address(buybackFeeReceiver).call{gas: 30000,value: amountBNBbuyback}() (#348)
- (devSuccess) = address(devFeeReceiver).call{gas: 30000,value: amountBNBDev}() (#350)
Ensure that an arbitrary user cannot withdraw unauthorized funds.
Additional information: link
Reentrancy in napoleonInu._transferFrom(address,address,uint256) (#232-265):
External calls:
- swapBack() (#256)
- router.addLiquidityETH{value: bnbAmount}(address(this),tokenAmount,0,0,autoLiquidityReceiver,block.timestamp) (#358-365)
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(amountToSwap,0,path,address(this),block.timestamp) (#329-335)
- (MarketingSuccess) = address(marketingFeeReceiver).call{gas: 30000,value: amountBNBMarketing}() (#346)
- (buybackSuccess) = address(buybackFeeReceiver).call{gas: 30000,value: amountBNBbuyback}() (#348)
- (devSuccess) = address(devFeeReceiver).call{gas: 30000,value: amountBNBDev}() (#350)
External calls sending eth:
- swapBack() (#256)
- router.addLiquidityETH{value: bnbAmount}(address(this),tokenAmount,0,0,autoLiquidityReceiver,block.timestamp) (#358-365)
- (MarketingSuccess) = address(marketingFeeReceiver).call{gas: 30000,value: amountBNBMarketing}() (#346)
- (buybackSuccess) = address(buybackFeeReceiver).call{gas: 30000,value: amountBNBbuyback}() (#348)
- (devSuccess) = address(devFeeReceiver).call{gas: 30000,value: amountBNBDev}() (#350)
State variables written after the call(s):
- _balances[sender] = _balances[sender] - amount (#258)
- _balances[recipient] = _balances[recipient] + amountReceived (#261)
- amountReceived = takeFee(recipient,amount) (#260)
- _balances[address(this)] = _balances[address(this)] + (feeAmount) (#298)
Apply the check-effects-interactions pattern.
Additional information: link
Combination 1: Reentrancy vulnerabilities + Functions that send Ether to arbitraty destination. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.
Contract ticker ($PIG) contains non-alphanumeric characters.
Not a direct threat, but may indicate unreliable intentions of developer. Non-alphanumeric chars (,.;!#*&") are extremely rare among low risk tokens.
napoleonInu.takeFee(address,uint256) (#295-302) performs a multiplication on the result of a division:
-feeAmount = amount / 100 * (totalFee) (#296)
napoleonInu.swapBack() (#311-354) performs a multiplication on the result of a division:
-amountToLiquify = tokensToSell / (totalFee) * (liquidityFee) / (2) (#320)
napoleonInu.setSwapBackSettings(bool,uint256,uint256) (#415-419) performs a multiplication on the result of a division:
-swapThreshold = _totalSupply / (10000) * (_percentage_min_base10000) (#417)
napoleonInu.setSwapBackSettings(bool,uint256,uint256) (#415-419) performs a multiplication on the result of a division:
-maxSwapSize = _totalSupply / (10000) * (_percentage_max_base10000) (#418)
napoleonInu.setMaxWalletPercent_base1000(uint256) (#429-431) performs a multiplication on the result of a division:
-_maxWalletToken = _totalSupply / (1000) * (maxWallPercent_base1000) (#430)
napoleonInu.setMaxBuyTxPercent_base1000(uint256) (#433-435) performs a multiplication on the result of a division:
-_maxBuyTxAmount = _totalSupply / (1000) * (maxBuyTXPercentage_base1000) (#434)
napoleonInu.setMaxSellTxPercent_base1000(uint256) (#437-439) performs a multiplication on the result of a division:
-_maxSellTxAmount = _totalSupply / (1000) * (maxSellTXPercentage_base1000) (#438)
napoleonInu.slitherConstructorVariables() (#132-454) performs a multiplication on the result of a division:
-_maxBuyTxAmount = _totalSupply / (100) * (4) (#168)
napoleonInu.slitherConstructorVariables() (#132-454) performs a multiplication on the result of a division:
-_maxSellTxAmount = _totalSupply / (100) * (4) (#169)
napoleonInu.slitherConstructorVariables() (#132-454) performs a multiplication on the result of a division:
-_maxWalletToken = _totalSupply / (100) * (1) (#170)
napoleonInu.slitherConstructorVariables() (#132-454) performs a multiplication on the result of a division:
-swapThreshold = _totalSupply / 1000 * 1 (#182)
napoleonInu.slitherConstructorVariables() (#132-454) performs a multiplication on the result of a division:
-maxSwapSize = _totalSupply / 100 * 1 (#183)
Consider ordering multiplication before division.
Additional information: link
napoleonInu.addLiquidity(uint256,uint256) (#356-368) ignores return value by router.addLiquidityETH{value: bnbAmount}(address(this),tokenAmount,0,0,autoLiquidityReceiver,block.timestamp) (#358-365)
Ensure that all the return values of the function calls are used.
Additional information: link
napoleonInu.setBuyFees(uint256,uint256,uint256,uint256) (#392-398) should emit an event for:
- BuyliquidityFee = _liquidityFee (#393)
- BuybuybackFee = _buybackFee (#394)
- BuymarketingFee = _marketingFee (#395)
- BuydevFee = _devFee (#396)
- BuytotalFee = _liquidityFee + (_buybackFee) + (_marketingFee) + (_devFee) (#397)
napoleonInu.setSellFees(uint256,uint256,uint256,uint256) (#400-406) should emit an event for:
- SellliquidityFee = _liquidityFee (#401)
- SellbuybackFee = _buybackFee (#402)
- SellmarketingFee = _marketingFee (#403)
- SelldevFee = _devFee (#404)
- SelltotalFee = _liquidityFee + (_buybackFee) + (_marketingFee) + (_devFee) (#405)
napoleonInu.setSwapBackSettings(bool,uint256,uint256) (#415-419) should emit an event for:
- swapThreshold = _totalSupply / (10000) * (_percentage_min_base10000) (#417)
- maxSwapSize = _totalSupply / (10000) * (_percentage_max_base10000) (#418)
napoleonInu.setMaxWalletPercent_base1000(uint256) (#429-431) should emit an event for:
- _maxWalletToken = _totalSupply / (1000) * (maxWallPercent_base1000) (#430)
napoleonInu.setMaxBuyTxPercent_base1000(uint256) (#433-435) should emit an event for:
- _maxBuyTxAmount = _totalSupply / (1000) * (maxBuyTXPercentage_base1000) (#434)
napoleonInu.setMaxSellTxPercent_base1000(uint256) (#437-439) should emit an event for:
- _maxSellTxAmount = _totalSupply / (1000) * (maxSellTXPercentage_base1000) (#438)
Emit an event for critical parameter changes.
Additional information: link
napoleonInu.setFeeReceivers(address,address,address,address)._autoLiquidityReceiver (#408) lacks a zero-check on :
- autoLiquidityReceiver = _autoLiquidityReceiver (#409)
napoleonInu.setFeeReceivers(address,address,address,address)._marketingFeeReceiver (#408) lacks a zero-check on :
- marketingFeeReceiver = _marketingFeeReceiver (#410)
napoleonInu.setFeeReceivers(address,address,address,address)._buybackFeeReceiver (#408) lacks a zero-check on :
- buybackFeeReceiver = _buybackFeeReceiver (#411)
napoleonInu.setFeeReceivers(address,address,address,address)._devFeeReceiver (#408) lacks a zero-check on :
- devFeeReceiver = _devFeeReceiver (#412)
Check that the address is not zero.
Additional information: link
Reentrancy in napoleonInu.constructor() (#189-199):
External calls:
- pair = IDEXFactory(router.factory()).createPair(WBNB,address(this)) (#191)
State variables written after the call(s):
- _allowances[address(this)][address(router)] = type()(uint256).max (#192)
- _balances[msg.sender] = _totalSupply (#197)
- isFeeExempt[msg.sender] = true (#194)
- isTxLimitExempt[msg.sender] = true (#195)
Apply the check-effects-interactions pattern.
Additional information: link
Reentrancy in napoleonInu._transferFrom(address,address,uint256) (#232-265):
External calls:
- swapBack() (#256)
- router.addLiquidityETH{value: bnbAmount}(address(this),tokenAmount,0,0,autoLiquidityReceiver,block.timestamp) (#358-365)
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(amountToSwap,0,path,address(this),block.timestamp) (#329-335)
- (MarketingSuccess) = address(marketingFeeReceiver).call{gas: 30000,value: amountBNBMarketing}() (#346)
- (buybackSuccess) = address(buybackFeeReceiver).call{gas: 30000,value: amountBNBbuyback}() (#348)
- (devSuccess) = address(devFeeReceiver).call{gas: 30000,value: amountBNBDev}() (#350)
External calls sending eth:
- swapBack() (#256)
- router.addLiquidityETH{value: bnbAmount}(address(this),tokenAmount,0,0,autoLiquidityReceiver,block.timestamp) (#358-365)
- (MarketingSuccess) = address(marketingFeeReceiver).call{gas: 30000,value: amountBNBMarketing}() (#346)
- (buybackSuccess) = address(buybackFeeReceiver).call{gas: 30000,value: amountBNBbuyback}() (#348)
- (devSuccess) = address(devFeeReceiver).call{gas: 30000,value: amountBNBDev}() (#350)
Event emitted after the call(s):
- Transfer(sender,address(this),feeAmount) (#299)
- amountReceived = takeFee(recipient,amount) (#260)
- Transfer(sender,recipient,amountReceived) (#263)
Reentrancy in napoleonInu.addLiquidity(uint256,uint256) (#356-368):
External calls:
- router.addLiquidityETH{value: bnbAmount}(address(this),tokenAmount,0,0,autoLiquidityReceiver,block.timestamp) (#358-365)
Event emitted after the call(s):
- AutoLiquify(bnbAmount,tokenAmount) (#366)
Reentrancy in napoleonInu.constructor() (#189-199):
External calls:
- pair = IDEXFactory(router.factory()).createPair(WBNB,address(this)) (#191)
Event emitted after the call(s):
- Transfer(address(0),msg.sender,_totalSupply) (#198)
Reentrancy in napoleonInu.swapBack() (#311-354):
External calls:
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(amountToSwap,0,path,address(this),block.timestamp) (#329-335)
- (MarketingSuccess) = address(marketingFeeReceiver).call{gas: 30000,value: amountBNBMarketing}() (#346)
- (buybackSuccess) = address(buybackFeeReceiver).call{gas: 30000,value: amountBNBbuyback}() (#348)
- (devSuccess) = address(devFeeReceiver).call{gas: 30000,value: amountBNBDev}() (#350)
- addLiquidity(amountToLiquify,amountBNBLiquidity) (#353)
- router.addLiquidityETH{value: bnbAmount}(address(this),tokenAmount,0,0,autoLiquidityReceiver,block.timestamp) (#358-365)
External calls sending eth:
- (MarketingSuccess) = address(marketingFeeReceiver).call{gas: 30000,value: amountBNBMarketing}() (#346)
- (buybackSuccess) = address(buybackFeeReceiver).call{gas: 30000,value: amountBNBbuyback}() (#348)
- (devSuccess) = address(devFeeReceiver).call{gas: 30000,value: amountBNBDev}() (#350)
- addLiquidity(amountToLiquify,amountBNBLiquidity) (#353)
- router.addLiquidityETH{value: bnbAmount}(address(this),tokenAmount,0,0,autoLiquidityReceiver,block.timestamp) (#358-365)
Event emitted after the call(s):
- AutoLiquify(bnbAmount,tokenAmount) (#366)
- addLiquidity(amountToLiquify,amountBNBLiquidity) (#353)
Apply the check-effects-interactions pattern.
Additional information: link
Ownable.Ownershipunlock() (#64-69) uses timestamp for comparisons
Dangerous comparisons:
- require(bool,string)(block.timestamp > _lockTime,Contract is locked) (#66)
Avoid relying on block.timestamp.
Additional information: link
napoleonInu.BuytotalFee (#159) is set pre-construction with a non-constant function or state variable:
- BuyliquidityFee + BuydevFee + BuymarketingFee + BuybuybackFee
napoleonInu.SelltotalFee (#165) is set pre-construction with a non-constant function or state variable:
- SellliquidityFee + SelldevFee + SellmarketingFee + SellbuybackFee
napoleonInu._maxBuyTxAmount (#168) is set pre-construction with a non-constant function or state variable:
- _totalSupply / (100) * (4)
napoleonInu._maxSellTxAmount (#169) is set pre-construction with a non-constant function or state variable:
- _totalSupply / (100) * (4)
napoleonInu._maxWalletToken (#170) is set pre-construction with a non-constant function or state variable:
- _totalSupply / (100) * (1)
napoleonInu.swapThreshold (#182) is set pre-construction with a non-constant function or state variable:
- _totalSupply / 1000 * 1
napoleonInu.maxSwapSize (#183) is set pre-construction with a non-constant function or state variable:
- _totalSupply / 100 * 1
Remove any initialization of state variables via non-constant state variables or function calls. If variables must be set upon contract deployment, locate initialization in the constructor instead.
Additional information: link
Low level call in napoleonInu.swapBack() (#311-354):
- (MarketingSuccess) = address(marketingFeeReceiver).call{gas: 30000,value: amountBNBMarketing}() (#346)
- (buybackSuccess) = address(buybackFeeReceiver).call{gas: 30000,value: amountBNBbuyback}() (#348)
- (devSuccess) = address(devFeeReceiver).call{gas: 30000,value: amountBNBDev}() (#350)
Avoid low-level calls. Check the call success. If the call is meant for a contract, check for code existence
Additional information: link
Function Ownable.Ownershiplock(uint256) (#57-62) is not in mixedCase
Function Ownable.Ownershipunlock() (#64-69) is not in mixedCase
Function IDEXRouter.WETH() (#82) is not in mixedCase
Contract napoleonInu (#132-454) is not in CapWords
Parameter napoleonInu.setBuyFees(uint256,uint256,uint256,uint256)._liquidityFee (#392) is not in mixedCase
Parameter napoleonInu.setBuyFees(uint256,uint256,uint256,uint256)._buybackFee (#392) is not in mixedCase
Parameter napoleonInu.setBuyFees(uint256,uint256,uint256,uint256)._marketingFee (#392) is not in mixedCase
Parameter napoleonInu.setBuyFees(uint256,uint256,uint256,uint256)._devFee (#392) is not in mixedCase
Parameter napoleonInu.setSellFees(uint256,uint256,uint256,uint256)._liquidityFee (#400) is not in mixedCase
Parameter napoleonInu.setSellFees(uint256,uint256,uint256,uint256)._buybackFee (#400) is not in mixedCase
Parameter napoleonInu.setSellFees(uint256,uint256,uint256,uint256)._marketingFee (#400) is not in mixedCase
Parameter napoleonInu.setSellFees(uint256,uint256,uint256,uint256)._devFee (#400) is not in mixedCase
Parameter napoleonInu.setFeeReceivers(address,address,address,address)._autoLiquidityReceiver (#408) is not in mixedCase
Parameter napoleonInu.setFeeReceivers(address,address,address,address)._marketingFeeReceiver (#408) is not in mixedCase
Parameter napoleonInu.setFeeReceivers(address,address,address,address)._buybackFeeReceiver (#408) is not in mixedCase
Parameter napoleonInu.setFeeReceivers(address,address,address,address)._devFeeReceiver (#408) is not in mixedCase
Parameter napoleonInu.setSwapBackSettings(bool,uint256,uint256)._enabled (#415) is not in mixedCase
Parameter napoleonInu.setSwapBackSettings(bool,uint256,uint256)._percentage_min_base10000 (#415) is not in mixedCase
Parameter napoleonInu.setSwapBackSettings(bool,uint256,uint256)._percentage_max_base10000 (#415) is not in mixedCase
Function napoleonInu.setMaxWalletPercent_base1000(uint256) (#429-431) is not in mixedCase
Parameter napoleonInu.setMaxWalletPercent_base1000(uint256).maxWallPercent_base1000 (#429) is not in mixedCase
Function napoleonInu.setMaxBuyTxPercent_base1000(uint256) (#433-435) is not in mixedCase
Parameter napoleonInu.setMaxBuyTxPercent_base1000(uint256).maxBuyTXPercentage_base1000 (#433) is not in mixedCase
Function napoleonInu.setMaxSellTxPercent_base1000(uint256) (#437-439) is not in mixedCase
Parameter napoleonInu.setMaxSellTxPercent_base1000(uint256).maxSellTXPercentage_base1000 (#437) is not in mixedCase
Variable napoleonInu.WBNB (#134) is not in mixedCase
Variable napoleonInu.DEAD (#135) is not in mixedCase
Variable napoleonInu.ZERO (#136) is not in mixedCase
Constant napoleonInu._name (#138) is not in UPPER_CASE_WITH_UNDERSCORES
Constant napoleonInu._symbol (#139) is not in UPPER_CASE_WITH_UNDERSCORES
Constant napoleonInu._decimals (#140) is not in UPPER_CASE_WITH_UNDERSCORES
Variable napoleonInu._totalSupply (#141) is not in mixedCase
Variable napoleonInu._balances (#143) is not in mixedCase
Variable napoleonInu._allowances (#144) is not in mixedCase
Variable napoleonInu.BuyliquidityFee (#155) is not in mixedCase
Variable napoleonInu.BuydevFee (#156) is not in mixedCase
Variable napoleonInu.BuymarketingFee (#157) is not in mixedCase
Variable napoleonInu.BuybuybackFee (#158) is not in mixedCase
Variable napoleonInu.BuytotalFee (#159) is not in mixedCase
Variable napoleonInu.SellliquidityFee (#161) is not in mixedCase
Variable napoleonInu.SelldevFee (#162) is not in mixedCase
Variable napoleonInu.SellmarketingFee (#163) is not in mixedCase
Variable napoleonInu.SellbuybackFee (#164) is not in mixedCase
Variable napoleonInu.SelltotalFee (#165) is not in mixedCase
Variable napoleonInu._maxBuyTxAmount (#168) is not in mixedCase
Variable napoleonInu._maxSellTxAmount (#169) is not in mixedCase
Variable napoleonInu._maxWalletToken (#170) is not in mixedCase
Follow the Solidity naming convention.
Additional information: link
Variable IDEXRouter.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountADesired (#87) is too similar to IDEXRouter.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountBDesired (#88)
Variable napoleonInu.setSwapBackSettings(bool,uint256,uint256)._percentage_max_base10000 (#415) is too similar to napoleonInu.setSwapBackSettings(bool,uint256,uint256)._percentage_min_base10000 (#415)
Prevent variables from having similar names.
Additional information: link
napoleonInu.slitherConstructorVariables() (#132-454) uses literals with too many digits:
- DEAD = 0x000000000000000000000000000000000000dEaD (#135)
napoleonInu.slitherConstructorVariables() (#132-454) uses literals with too many digits:
- ZERO = 0x0000000000000000000000000000000000000000 (#136)
Use: Ether suffix, Time suffix, or The scientific notation
Additional information: link
napoleonInu.ZERO (#136) is never used in napoleonInu (#132-454)
Remove unused state variables.
Additional information: link
napoleonInu.DEAD (#135) should be constant
napoleonInu.WBNB (#134) should be constant
napoleonInu.ZERO (#136) should be constant
napoleonInu._totalSupply (#141) should be constant
Add the constant attributes to state variables that never change.
Additional information: link
transferOwnership(address) should be declared external:
- Ownable.transferOwnership(address) (#47-51)
getUnlockTime() should be declared external:
- Ownable.getUnlockTime() (#53-55)
Ownershiplock(uint256) should be declared external:
- Ownable.Ownershiplock(uint256) (#57-62)
Ownershipunlock() should be declared external:
- Ownable.Ownershipunlock() (#64-69)
rescueToken(address,uint256) should be declared external:
- napoleonInu.rescueToken(address,uint256) (#442-444)
Use the external attribute for functions never called from the contract.
Additional information: link
Unable to find website, listings and other project-related information
Young tokens have high risks of scam / price dump / death
Token has no active CoinGecko listing / rank
Token has no active CoinMarketCap listing / rank
Unable to find Telegram and Twitter accounts