Sonar is bringing complete, easy to use tracking and analytics tools for both the Binance Smart Chain and Ethereum networks. With several customizable features, Sonar aims to provide the community a streamlined way to generate data in information for trading analytics.
Reentrancy in PING.transferFrom(address,address,uint256) (#910-914):
External calls:
- _transfer(sender,recipient,amount) (#911)
- PancakeSwapV2Router.addLiquidityETH{value: bnbAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1225-1232)
- PancakeSwapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1212-1220)
External calls sending eth:
- _transfer(sender,recipient,amount) (#911)
- PancakeSwapV2Router.addLiquidityETH{value: bnbAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1225-1232)
State variables written after the call(s):
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#912)
- _allowances[owner][spender] = amount (#1117)
Reentrancy in PING._transfer(address,address,uint256) (#1122-1142):
External calls:
- swapAndLiquify(contractTokenBalance) (#1139)
- PancakeSwapV2Router.addLiquidityETH{value: bnbAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1225-1232)
- PancakeSwapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1212-1220)
External calls sending eth:
- swapAndLiquify(contractTokenBalance) (#1139)
- PancakeSwapV2Router.addLiquidityETH{value: bnbAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1225-1232)
State variables written after the call(s):
- _tokenTransfer(from,to,amount,! (_isExcludedFromFee[from] || _isExcludedFromFee[to])) (#1141)
- _rOwned[address(this)] = _rOwned[address(this)].add(rLiquidity) (#1107)
- _rOwned[devWallet] = _rOwned[devWallet].add(rDevelopent) (#1175)
- _rOwned[researchWallet] = _rOwned[researchWallet].add(rResearch) (#1177)
- _rOwned[sender] = _rOwned[sender].sub(s.rAmount) (#1159)
- _rOwned[recipient] = _rOwned[recipient].add(s.rTransferAmount) (#1160)
- _tokenTransfer(from,to,amount,! (_isExcludedFromFee[from] || _isExcludedFromFee[to])) (#1141)
- _rTotal = _rTotal.sub(rRfi) (#1040)
- _tokenTransfer(from,to,amount,! (_isExcludedFromFee[from] || _isExcludedFromFee[to])) (#1141)
- _tOwned[address(this)] = _tOwned[address(this)].add(tLiquidity) (#1109)
- _tOwned[sender] = _tOwned[sender].sub(tAmount) (#1150)
- _tOwned[recipient] = _tOwned[recipient].add(s.tTransferAmount) (#1152)
- _tOwned[sender] = _tOwned[sender].sub(tAmount) (#1154)
- _tOwned[recipient] = _tOwned[recipient].add(s.tTransferAmount) (#1155)
Apply the check-effects-interactions pattern.
Additional information: link
Unable to verify that contract auditor is trusted: Certik, Quantstamp, Hacken, Solidity, Paladinsec, Openzeppelin, Verichains
Contract ownership is not renounced (belongs to a wallet)
Redundant expression "this (#345)" inContext (#339-348)
Remove redundant statements if they congest code but offer no value.
Additional information: link
PING.addLiquidity(uint256,uint256) (#1224-1234) ignores return value by PancakeSwapV2Router.addLiquidityETH{value: bnbAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1225-1232)
Ensure that all the return values of the function calls are used.
Additional information: link
Address._verifyCallResult(bool,bytes,string) (#521-538) uses assembly
- INLINE ASM (#530-533)
Address.isContract(address) (#376-385) uses assembly
- INLINE ASM (#383)
Do not use evm assembly.
Additional information: link
PING.includeInRFI(address) (#963-974) has costly operations inside a loop:
- _excluded.pop() (#970)
Use a local variable to hold the loop computation result.
Additional information: link
PING.allowance(address,address).owner (#901) shadows:
- Ownable.owner() (#575-577) (function)
PING._approve(address,address,uint256).owner (#1113) shadows:
- Ownable.owner() (#575-577) (function)
Rename the local variables that shadow another component.
Additional information: link
PING.setThreshholdForLP(uint256) (#1027-1029) should emit an event for:
- numTokensSellToAddToLiquidity = threshold * 10 ** _decimals (#1028)
PING.setMaxTxAmount(uint256) (#1022-1024) should emit an event for:
- _maxTxAmount = maxTxAmount (#1023)
Emit an event for critical parameter changes.
Additional information: link
PING.setWallets(address,address)._research (#1003) lacks a zero-check on :
- researchWallet = _research (#1004)
PING.setWallets(address,address)._dev (#1003) lacks a zero-check on :
- devWallet = _dev (#1005)
Check that the address is not zero.
Additional information: link
Different versions of Solidity are used:
- Version used: ['>=0.5.0', '>=0.6.0<0.8.0', '>=0.6.2', '>=0.6.2<0.8.0']
- >=0.6.0<0.8.0 (#32)
- >=0.6.0<0.8.0 (#111)
- >=0.6.0<0.8.0 (#327)
- >=0.6.2<0.8.0 (#353)
- >=0.6.0<0.8.0 (#544)
- >=0.6.2 (#600)
- >=0.6.2 (#698)
- >=0.5.0 (#744)
- >=0.6.0<0.8.0 (#764)
Use one Solidity version.
Additional information: link
SafeMath.tryDiv(uint256,uint256) (#168-171) is never used and should be removed
Address.sendValue(address,uint256) (#403-409) is never used and should be removed
Address.functionCallWithValue(address,bytes,uint256) (#454-456) is never used and should be removed
SafeMath.tryMod(uint256,uint256) (#178-181) is never used and should be removed
Address.functionDelegateCall(address,bytes,string) (#513-519) is never used and should be removed
Address.functionDelegateCall(address,bytes) (#503-505) is never used and should be removed
SafeMath.tryAdd(uint256,uint256) (#132-136) is never used and should be removed
SafeMath.mod(uint256,uint256,string) (#318-321) is never used and should be removed
Address.functionCallWithValue(address,bytes,uint256,string) (#464-471) is never used and should be removed
SafeMath.div(uint256,uint256,string) (#298-301) is never used and should be removed
Context._msgData() (#344-347) is never used and should be removed
Address.functionStaticCall(address,bytes) (#479-481) is never used and should be removed
SafeMath.mod(uint256,uint256) (#260-263) is never used and should be removed
Address._verifyCallResult(bool,bytes,string) (#521-538) is never used and should be removed
SafeMath.tryMul(uint256,uint256) (#153-161) is never used and should be removed
SafeMath.trySub(uint256,uint256) (#143-146) is never used and should be removed
Address.isContract(address) (#376-385) is never used and should be removed
Address.functionCall(address,bytes,string) (#439-441) is never used and should be removed
Address.functionStaticCall(address,bytes,string) (#489-495) is never used and should be removed
Address.functionCall(address,bytes) (#429-431) is never used and should be removed
Remove unused functions.
Additional information: link
Pragma version>=0.6.0<0.8.0 (#32) is too complex
Pragma version>=0.6.2 (#600) allows old versions
Pragma version>=0.6.2<0.8.0 (#353) is too complex
Pragma version>=0.6.0<0.8.0 (#327) is too complex
Pragma version>=0.6.2 (#698) allows old versions
Pragma version>=0.6.0<0.8.0 (#544) is too complex
Pragma version>=0.6.0<0.8.0 (#764) is too complex
Pragma version>=0.5.0 (#744) allows old versions
Pragma version>=0.6.0<0.8.0 (#111) is too complex
Deploy with any of the following Solidity versions: 0.5.16 - 0.5.17, 0.6.11 - 0.6.12, 0.7.5 - 0.7.6 Use a simple pragma version that allows any of these versions. Consider using the latest version of Solidity for testing.
Additional information: link
Reentrancy in PING._transfer(address,address,uint256) (#1122-1142):
External calls:
- swapAndLiquify(contractTokenBalance) (#1139)
- PancakeSwapV2Router.addLiquidityETH{value: bnbAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1225-1232)
- PancakeSwapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1212-1220)
External calls sending eth:
- swapAndLiquify(contractTokenBalance) (#1139)
- PancakeSwapV2Router.addLiquidityETH{value: bnbAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1225-1232)
State variables written after the call(s):
- _tokenTransfer(from,to,amount,! (_isExcludedFromFee[from] || _isExcludedFromFee[to])) (#1141)
- _tDevelopmentTotal = _tDevelopmentTotal.add(tDev) (#1174)
- _tokenTransfer(from,to,amount,! (_isExcludedFromFee[from] || _isExcludedFromFee[to])) (#1141)
- _tResearchTotal = _tResearchTotal.add(tResearch) (#1176)
- _tokenTransfer(from,to,amount,! (_isExcludedFromFee[from] || _isExcludedFromFee[to])) (#1141)
- _tRfiTotal = _tRfiTotal.add(tRfi) (#1041)
- _tokenTransfer(from,to,amount,! (_isExcludedFromFee[from] || _isExcludedFromFee[to])) (#1141)
- numOfHODLers ++ (#1146)
Apply the check-effects-interactions pattern.
Additional information: link
Reentrancy in PING.addLiquidity(uint256,uint256) (#1224-1234):
External calls:
- PancakeSwapV2Router.addLiquidityETH{value: bnbAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1225-1232)
Event emitted after the call(s):
- LiquidityAdded(tokenAmount,bnbAmount) (#1233)
Reentrancy in PING._transfer(address,address,uint256) (#1122-1142):
External calls:
- swapAndLiquify(contractTokenBalance) (#1139)
- PancakeSwapV2Router.addLiquidityETH{value: bnbAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1225-1232)
- PancakeSwapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1212-1220)
External calls sending eth:
- swapAndLiquify(contractTokenBalance) (#1139)
- PancakeSwapV2Router.addLiquidityETH{value: bnbAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1225-1232)
Event emitted after the call(s):
- Transfer(sender,recipient,s.tTransferAmount) (#1166)
- _tokenTransfer(from,to,amount,! (_isExcludedFromFee[from] || _isExcludedFromFee[to])) (#1141)
Reentrancy in PING.swapTokensForBNB(uint256) (#1202-1222):
External calls:
- PancakeSwapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1212-1220)
Event emitted after the call(s):
- SwapAndLiquifyStatus(Success) (#1214)
- SwapAndLiquifyStatus(Failed) (#1218)
Reentrancy in PING.swapAndLiquify(uint256) (#1182-1198):
External calls:
- swapTokensForBNB(half) (#1193)
- PancakeSwapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1212-1220)
- addLiquidity(otherHalf,newBalance) (#1195)
- PancakeSwapV2Router.addLiquidityETH{value: bnbAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1225-1232)
External calls sending eth:
- addLiquidity(otherHalf,newBalance) (#1195)
- PancakeSwapV2Router.addLiquidityETH{value: bnbAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1225-1232)
Event emitted after the call(s):
- LiquidityAdded(tokenAmount,bnbAmount) (#1233)
- addLiquidity(otherHalf,newBalance) (#1195)
- SwapAndLiquify(half,newBalance,otherHalf) (#1196)
Reentrancy in PING.transferFrom(address,address,uint256) (#910-914):
External calls:
- _transfer(sender,recipient,amount) (#911)
- PancakeSwapV2Router.addLiquidityETH{value: bnbAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1225-1232)
- PancakeSwapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1212-1220)
External calls sending eth:
- _transfer(sender,recipient,amount) (#911)
- PancakeSwapV2Router.addLiquidityETH{value: bnbAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1225-1232)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#1118)
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#912)
Apply the check-effects-interactions pattern.
Additional information: link
Low level call in Address.sendValue(address,uint256) (#403-409):
- (success) = recipient.call{value: amount}() (#407)
Low level call in Address.functionCallWithValue(address,bytes,uint256,string) (#464-471):
- (success,returndata) = target.call{value: value}(data) (#469)
Low level call in Address.functionDelegateCall(address,bytes,string) (#513-519):
- (success,returndata) = target.delegatecall(data) (#517)
Low level call in Address.functionStaticCall(address,bytes,string) (#489-495):
- (success,returndata) = target.staticcall(data) (#493)
Avoid low-level calls. Check the call success. If the call is meant for a contract, check for code existence
Additional information: link
Parameter PING.setRfiRatesPercents(uint8,uint8,uint8,uint8)._rfi (#995) is not in mixedCase
Variable PING.PancakeSwapV2Router (#833) is not in mixedCase
Parameter PING.setRfiRatesPercents(uint8,uint8,uint8,uint8)._dev (#995) is not in mixedCase
Variable PING._maxTxAmount (#839) is not in mixedCase
Struct PING.valuesFromGetValues (#818-827) is not in CapWords
Parameter PING.setRfiRatesPercents(uint8,uint8,uint8,uint8)._research (#995) is not in mixedCase
Struct PING.feeRatesStruct (#805-810) is not in CapWords
Event PINGtokensBurned(uint256,string) (#851) is not in CapWords
Parameter PING.setRfiRatesPercents(uint8,uint8,uint8,uint8)._lp (#995) is not in mixedCase
Parameter PING.setSwapAndLiquifyEnabled(bool)._enabled (#1031) is not in mixedCase
Parameter PING.setWallets(address,address)._research (#1003) is not in mixedCase
Constant PING._tTotal (#796) is not in UPPER_CASE_WITH_UNDERSCORES
Parameter PING.setPresaleWallet(address)._presaleWallet (#1011) is not in mixedCase
Function IUniswapV2Router01.WETH() (#604) is not in mixedCase
Constant PING._name (#791) is not in UPPER_CASE_WITH_UNDERSCORES
Constant PING._decimals (#793) is not in UPPER_CASE_WITH_UNDERSCORES
Parameter PING.setWallets(address,address)._dev (#1003) is not in mixedCase
Constant PING._symbol (#792) is not in UPPER_CASE_WITH_UNDERSCORES
Follow the Solidity naming convention.
Additional information: link
Variable IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountADesired (#609) is too similar to IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountBDesired (#610)
Prevent variables from having similar names.
Additional information: link
includeInFee(address) should be declared external:
- PING.includeInFee(address) (#985-987)
isExcludedFromFee(address) should be declared external:
- PING.isExcludedFromFee(address) (#989-991)
increaseAllowance(address,uint256) should be declared external:
- PING.increaseAllowance(address,uint256) (#916-919)
setRfiRatesPercents(uint8,uint8,uint8,uint8) should be declared external:
- PING.setRfiRatesPercents(uint8,uint8,uint8,uint8) (#995-1001)
reflectionFromToken(uint256,bool) should be declared external:
- PING.reflectionFromToken(uint256,bool) (#936-945)
approve(address,uint256) should be declared external:
- PING.approve(address,uint256) (#905-908)
totalSupply() should be declared external:
- PING.totalSupply() (#886-888)
excludeFromFeeAndRfi(address) should be declared external:
- PING.excludeFromFeeAndRfi(address) (#976-979)
totalDevelopmentFee() should be declared external:
- PING.totalDevelopmentFee() (#1236-1238)
totalResearchFee() should be declared external:
- PING.totalResearchFee() (#1239-1241)
setPresaleWallet(address) should be declared external:
- PING.setPresaleWallet(address) (#1011-1014)
name() should be declared external:
- PING.name() (#875-877)
transfer(address,uint256) should be declared external:
- PING.transfer(address,uint256) (#895-898)
isExcludedFromReward(address) should be declared external:
- PING.isExcludedFromReward(address) (#926-928)
setWallets(address,address) should be declared external:
- PING.setWallets(address,address) (#1003-1009)
transferOwnership(address) should be declared external:
- Ownable.transferOwnership(address) (#591-595)
setSwapAndLiquifyEnabled(bool) should be declared external:
- PING.setSwapAndLiquifyEnabled(bool) (#1031-1034)
decimals() should be declared external:
- PING.decimals() (#881-883)
transferFrom(address,address,uint256) should be declared external:
- PING.transferFrom(address,address,uint256) (#910-914)
decreaseAllowance(address,uint256) should be declared external:
- PING.decreaseAllowance(address,uint256) (#921-924)
symbol() should be declared external:
- PING.symbol() (#878-880)
totalFees() should be declared external:
- PING.totalFees() (#930-932)
Use the external attribute for functions never called from the contract.
Additional information: link
Average 30d PancakeSwap liquidity is less than $100. Token is either dead or inactive.
Average 30d number of PancakeSwap swaps is less than 1. Token is either dead or inactive.
Contract has 8% buy tax and 8% sell tax.
Taxes are low but contract ownership is not renounced. Token has a high risk of becoming a honeypot.
Swap operations require suspiciously high gas. Contract logic is complex and may disguise some form of scam.
Twitter account link seems to be invalid