Join the fight in Pet Wars and take command of an army of pets in this free-to-play online digital trading card game!
PWARS.addLiquidity(uint256,uint256) (#1714-1729) sends eth to arbitrary user
Dangerous calls:
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (#1720-1727)
Ensure that an arbitrary user cannot withdraw unauthorized funds.
Additional information: link
Reentrancy in PWARS._transfer(address,address,uint256) (#1524-1620):
External calls:
- pinkAntiBot.onPreTransferCheck(from,to,amount) (#1533)
- swapAndSendToFee(feeTokens) (#1554)
- uniswapV2Router.swapExactTokensForTokensSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1705-1711)
- IERC20(BNB).transfer(_marketingWalletAddress,marketingShare) (#1645)
- IERC20(BNB).transfer(_buybackWalletAddress,buybackShare) (#1646)
- IERC20(BNB).transfer(_charityWalletAddress,charityShare) (#1647)
- swapAndLiquify(swapTokens) (#1557)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (#1720-1727)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1685-1691)
- swapAndSendDividends(sellTokens) (#1560)
- success = IERC20(BNB).transfer(address(dividendTracker),dividends) (#1734)
- dividendTracker.distributeBNBDividends(dividends) (#1737)
- uniswapV2Router.swapExactTokensForTokensSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1705-1711)
External calls sending eth:
- swapAndLiquify(swapTokens) (#1557)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (#1720-1727)
State variables written after the call(s):
- super._transfer(from,address(this),fee_Amount) (#1602)
- _balances[sender] = _balances[sender].sub(amount,ERC20: transfer amount exceeds balance) (#873)
- _balances[recipient] = _balances[recipient].add(amount) (#874)
- super._transfer(from,to,amount) (#1605)
- _balances[sender] = _balances[sender].sub(amount,ERC20: transfer amount exceeds balance) (#873)
- _balances[recipient] = _balances[recipient].add(amount) (#874)
- buybackFee = SELLbuybackFee (#1585)
- buybackFee = BUYbuybackFee (#1595)
- charityFee = SELLcharityFee (#1586)
- charityFee = BUYcharityFee (#1596)
- liquidityFee = SELLliquidityFee (#1583)
- liquidityFee = BUYliquidityFee (#1593)
- marketingFee = SELLmarketingFee (#1584)
- marketingFee = BUYmarketingFee (#1594)
- swapping = false (#1562)
- totalFees = SELLtotalFees (#1587)
- totalFees = BUYtotalFees (#1597)
Apply the check-effects-interactions pattern.
Additional information: link
PWARS.removeStuckToken(address) (#1628-1633) ignores return value by IERC20(_address).transfer(owner(),IERC20(_address).balanceOf(address(this))) (#1632)
PWARS.swapAndSendToFee(uint256) (#1635-1648) ignores return value by IERC20(BNB).transfer(_marketingWalletAddress,marketingShare) (#1645)
PWARS.swapAndSendToFee(uint256) (#1635-1648) ignores return value by IERC20(BNB).transfer(_buybackWalletAddress,buybackShare) (#1646)
PWARS.swapAndSendToFee(uint256) (#1635-1648) ignores return value by IERC20(BNB).transfer(_charityWalletAddress,charityShare) (#1647)
Use SafeERC20, or ensure that the transfer/transferFrom return value is checked.
Additional information: link
Unable to verify that contract auditor is trusted: Certik, Quantstamp, Hacken, Solidity, Paladinsec, Openzeppelin, Verichains
Contract ownership is not renounced (belongs to a wallet)
Combination 1: Reentrancy vulnerabilities + Functions that send Ether to arbitraty destination. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.
Combination 2: Unchecked transfer + Functions that send Ether to arbitraty destination. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.
Combination 3: Reentrancy vulnerabilities + Unchecked transfer vulnerability. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.
Redundant expression "this (#241)" inContext (#235-244)
Remove redundant statements if they congest code but offer no value.
Additional information: link
Reentrancy in DividendPayingToken._withdrawDividendOfUser(address) (#1082-1098):
External calls:
- success = IERC20(BNB).transfer(user,_withdrawableDividend) (#1087)
State variables written after the call(s):
- withdrawnDividends[user] = withdrawnDividends[user].sub(_withdrawableDividend) (#1090)
Reentrancy in PWARS.updateDividendTracker(address) (#1339-1354):
External calls:
- newDividendTracker.excludeFromDividends(address(newDividendTracker)) (#1346)
- newDividendTracker.excludeFromDividends(address(this)) (#1347)
- newDividendTracker.excludeFromDividends(owner()) (#1348)
- newDividendTracker.excludeFromDividends(address(uniswapV2Router)) (#1349)
State variables written after the call(s):
- dividendTracker = newDividendTracker (#1353)
Apply the check-effects-interactions pattern.
Additional information: link
PWARS.constructor() (#1285-1326) uses literals with too many digits:
- _mint(owner(),10000000000 * (10 ** 9)) (#1325)
PWARS.updateGasForProcessing(uint256) (#1445-1450) uses literals with too many digits:
- require(bool,string)(newValue >= 200000 && newValue <= 500000,PETWARS: gasForProcessing must be between 200,000 and 500,000) (#1446)
PWARS.slitherConstructorVariables() (#1192-1741) uses literals with too many digits:
- deadWallet = 0x000000000000000000000000000000000000dEaD (#1209)
PWARS.slitherConstructorVariables() (#1192-1741) uses literals with too many digits:
- swapTokensAtAmount = 2000000 * (10 ** 9) (#1213)
PWARS.slitherConstructorVariables() (#1192-1741) uses literals with too many digits:
- gasForProcessing = 300000 (#1242)
PETWARSDividendTracker.constructor() (#1763-1766) uses literals with too many digits:
- minimumTokenBalanceForDividends = 200000 * (10 ** 9) (#1765)
PETWARSDividendTracker.getAccountAtIndex(uint256) (#1848-1865) uses literals with too many digits:
- (0x0000000000000000000000000000000000000000,- 1,- 1,0,0,0,0,0) (#1859)
Use: Ether suffix, Time suffix, or The scientific notation
Additional information: link
SafeMathInt.MAX_INT256 (#23) is never used in SafeMathInt (#21-79)
Remove unused state variables.
Additional information: link
PWARS.deadWallet (#1209) should be constant
PWARS.enableAntiBot (#1202) should be constant
Add the constant attributes to state variables that never change.
Additional information: link
PWARS._transfer(address,address,uint256).iterations (#1613) is a local variable never initialized
PWARS._transfer(address,address,uint256).lastProcessedIndex (#1613) is a local variable never initialized
PWARS._transfer(address,address,uint256).claims (#1613) is a local variable never initialized
Initialize all the variables. If a variable is meant to be initialized to zero, explicitly set it to zero to improve code readability.
Additional information: link
PWARS.claim() (#1511-1513) ignores return value by dividendTracker.processAccount(address(msg.sender),false) (#1512)
PWARS._transfer(address,address,uint256) (#1524-1620) ignores return value by dividendTracker.process(gas) (#1613-1618)
PWARS.addLiquidity(uint256,uint256) (#1714-1729) ignores return value by uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (#1720-1727)
Ensure that all the return values of the function calls are used.
Additional information: link
DividendPayingToken.constructor(string,string)._name (#1056) shadows:
- ERC20._name (#695) (state variable)
DividendPayingToken.constructor(string,string)._symbol (#1056) shadows:
- ERC20._symbol (#696) (state variable)
DividendPayingToken.dividendOf(address)._owner (#1104) shadows:
- Ownable._owner (#247) (state variable)
DividendPayingToken.withdrawableDividendOf(address)._owner (#1111) shadows:
- Ownable._owner (#247) (state variable)
DividendPayingToken.withdrawnDividendOf(address)._owner (#1118) shadows:
- Ownable._owner (#247) (state variable)
DividendPayingToken.accumulativeDividendOf(address)._owner (#1128) shadows:
- Ownable._owner (#247) (state variable)
Rename the local variables that shadow another component.
Additional information: link
PWARS.setBUYFee(uint256,uint256,uint256,uint256,uint256) (#1392-1401) should emit an event for:
- BUYBNBRewardsFee = newRewardFee (#1394)
- BUYliquidityFee = newLiquidityFee (#1395)
- BUYmarketingFee = newMarketingFee (#1396)
- BUYbuybackFee = newBuybackFee (#1397)
- BUYcharityFee = newCharityFee (#1398)
- BUYtotalFees = BUYBNBRewardsFee.add(BUYliquidityFee).add(BUYmarketingFee).add(BUYbuybackFee).add(BUYcharityFee) (#1399)
PWARS.setSELLFee(uint256,uint256,uint256,uint256,uint256) (#1403-1412) should emit an event for:
- SELLBNBRewardsFee = newRewardFee (#1405)
- SELLliquidityFee = newLiquidityFee (#1406)
- SELLmarketingFee = newMarketingFee (#1407)
- SELLbuybackFee = newBuybackFee (#1408)
- SELLcharityFee = newCharityFee (#1409)
- SELLtotalFees = SELLBNBRewardsFee.add(SELLliquidityFee).add(SELLmarketingFee).add(SELLbuybackFee).add(SELLcharityFee) (#1410)
PWARS.changeSwapTokensAtAmount(uint256) (#1421-1424) should emit an event for:
- swapTokensAtAmount = amount (#1423)
Emit an event for critical parameter changes.
Additional information: link
PWARS.updateUniswapV2Router(address)._uniswapV2Pair (#1360-1361) lacks a zero-check on :
- uniswapV2Pair = _uniswapV2Pair (#1362)
PWARS.setMarketingWallet(address).wallet (#1380) lacks a zero-check on :
- _marketingWalletAddress = wallet (#1381)
PWARS.setBuybackWallet(address).wallet (#1384) lacks a zero-check on :
- _buybackWalletAddress = wallet (#1385)
PWARS.setCharityWallet(address).wallet (#1388) lacks a zero-check on :
- _charityWalletAddress = wallet (#1389)
Check that the address is not zero.
Additional information: link
DividendPayingToken._withdrawDividendOfUser(address) (#1082-1098) has external calls inside a loop: success = IERC20(BNB).transfer(user,_withdrawableDividend) (#1087)
Favor pull over push strategy for external calls.
Additional information: link
Variable 'PWARS._transfer(address,address,uint256).claims (#1613)' in PWARS._transfer(address,address,uint256) (#1524-1620) potentially used before declaration: ProcessedDividendTracker(iterations,claims,lastProcessedIndex,true,gas,tx.origin) (#1614)
Variable 'PWARS._transfer(address,address,uint256).iterations (#1613)' in PWARS._transfer(address,address,uint256) (#1524-1620) potentially used before declaration: ProcessedDividendTracker(iterations,claims,lastProcessedIndex,true,gas,tx.origin) (#1614)
Variable 'PWARS._transfer(address,address,uint256).lastProcessedIndex (#1613)' in PWARS._transfer(address,address,uint256) (#1524-1620) potentially used before declaration: ProcessedDividendTracker(iterations,claims,lastProcessedIndex,true,gas,tx.origin) (#1614)
Move all variable declarations prior to any usage of the variable, and ensure that reaching a variable declaration does not depend on some conditional if it is used unconditionally.
Additional information: link
Reentrancy in PWARS._transfer(address,address,uint256) (#1524-1620):
External calls:
- pinkAntiBot.onPreTransferCheck(from,to,amount) (#1533)
State variables written after the call(s):
- super._transfer(from,to,0) (#1537)
- _balances[sender] = _balances[sender].sub(amount,ERC20: transfer amount exceeds balance) (#873)
- _balances[recipient] = _balances[recipient].add(amount) (#874)
- swapping = true (#1551)
Reentrancy in PWARS._transfer(address,address,uint256) (#1524-1620):
External calls:
- pinkAntiBot.onPreTransferCheck(from,to,amount) (#1533)
- swapAndSendToFee(feeTokens) (#1554)
- uniswapV2Router.swapExactTokensForTokensSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1705-1711)
- IERC20(BNB).transfer(_marketingWalletAddress,marketingShare) (#1645)
- IERC20(BNB).transfer(_buybackWalletAddress,buybackShare) (#1646)
- IERC20(BNB).transfer(_charityWalletAddress,charityShare) (#1647)
State variables written after the call(s):
- swapAndSendToFee(feeTokens) (#1554)
- _allowances[owner][spender] = amount (#939)
Reentrancy in PWARS._transfer(address,address,uint256) (#1524-1620):
External calls:
- pinkAntiBot.onPreTransferCheck(from,to,amount) (#1533)
- swapAndSendToFee(feeTokens) (#1554)
- uniswapV2Router.swapExactTokensForTokensSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1705-1711)
- IERC20(BNB).transfer(_marketingWalletAddress,marketingShare) (#1645)
- IERC20(BNB).transfer(_buybackWalletAddress,buybackShare) (#1646)
- IERC20(BNB).transfer(_charityWalletAddress,charityShare) (#1647)
- swapAndLiquify(swapTokens) (#1557)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (#1720-1727)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1685-1691)
External calls sending eth:
- swapAndLiquify(swapTokens) (#1557)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (#1720-1727)
State variables written after the call(s):
- swapAndLiquify(swapTokens) (#1557)
- _allowances[owner][spender] = amount (#939)
Reentrancy in PWARS._transfer(address,address,uint256) (#1524-1620):
External calls:
- pinkAntiBot.onPreTransferCheck(from,to,amount) (#1533)
- swapAndSendToFee(feeTokens) (#1554)
- uniswapV2Router.swapExactTokensForTokensSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1705-1711)
- IERC20(BNB).transfer(_marketingWalletAddress,marketingShare) (#1645)
- IERC20(BNB).transfer(_buybackWalletAddress,buybackShare) (#1646)
- IERC20(BNB).transfer(_charityWalletAddress,charityShare) (#1647)
- swapAndLiquify(swapTokens) (#1557)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (#1720-1727)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1685-1691)
- swapAndSendDividends(sellTokens) (#1560)
- success = IERC20(BNB).transfer(address(dividendTracker),dividends) (#1734)
- dividendTracker.distributeBNBDividends(dividends) (#1737)
- uniswapV2Router.swapExactTokensForTokensSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1705-1711)
External calls sending eth:
- swapAndLiquify(swapTokens) (#1557)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (#1720-1727)
State variables written after the call(s):
- BNBRewardsFee = SELLBNBRewardsFee (#1582)
- BNBRewardsFee = BUYBNBRewardsFee (#1592)
- swapAndSendDividends(sellTokens) (#1560)
- _allowances[owner][spender] = amount (#939)
Reentrancy in PWARS.constructor() (#1285-1326):
External calls:
- pinkAntiBot.setTokenOwner(owner()) (#1293)
State variables written after the call(s):
- antiBotEnabled = true (#1294)
Reentrancy in PWARS.constructor() (#1285-1326):
External calls:
- pinkAntiBot.setTokenOwner(owner()) (#1293)
- _uniswapV2Pair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#1298-1299)
State variables written after the call(s):
- uniswapV2Pair = _uniswapV2Pair (#1302)
- uniswapV2Router = _uniswapV2Router (#1301)
Reentrancy in PWARS.constructor() (#1285-1326):
External calls:
- pinkAntiBot.setTokenOwner(owner()) (#1293)
- _uniswapV2Pair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#1298-1299)
- _setAutomatedMarketMakerPair(_uniswapV2Pair,true) (#1304)
- dividendTracker.excludeFromDividends(pair) (#1438)
- dividendTracker.excludeFromDividends(address(dividendTracker)) (#1307)
- dividendTracker.excludeFromDividends(address(this)) (#1308)
- dividendTracker.excludeFromDividends(owner()) (#1309)
- dividendTracker.excludeFromDividends(deadWallet) (#1310)
- dividendTracker.excludeFromDividends(address(_uniswapV2Router)) (#1311)
State variables written after the call(s):
- _mint(owner(),10000000000 * (10 ** 9)) (#1325)
- _balances[account] = _balances[account].add(amount) (#893)
- excludeFromFees(owner(),true) (#1314)
- _isExcludedFromFees[account] = excluded (#1367)
- excludeFromFees(_marketingWalletAddress,true) (#1315)
- _isExcludedFromFees[account] = excluded (#1367)
- excludeFromFees(_buybackWalletAddress,true) (#1316)
- _isExcludedFromFees[account] = excluded (#1367)
- excludeFromFees(_charityWalletAddress,true) (#1317)
- _isExcludedFromFees[account] = excluded (#1367)
- excludeFromFees(address(this),true) (#1318)
- _isExcludedFromFees[account] = excluded (#1367)
- _mint(owner(),10000000000 * (10 ** 9)) (#1325)
- _totalSupply = _totalSupply.add(amount) (#892)
Reentrancy in PETWARSDividendTracker.processAccount(address,bool) (#1939-1949):
External calls:
- amount = _withdrawDividendOfUser(account) (#1940)
- success = IERC20(BNB).transfer(user,_withdrawableDividend) (#1087)
State variables written after the call(s):
- lastClaimTimes[account] = block.timestamp (#1943)
Reentrancy in PWARS.swapAndLiquify(uint256) (#1650-1671):
External calls:
- swapTokensForEth(half) (#1662)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1685-1691)
- addLiquidity(otherHalf,newBalance) (#1668)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (#1720-1727)
External calls sending eth:
- addLiquidity(otherHalf,newBalance) (#1668)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (#1720-1727)
State variables written after the call(s):
- addLiquidity(otherHalf,newBalance) (#1668)
- _allowances[owner][spender] = amount (#939)
Reentrancy in PWARS.updateUniswapV2Router(address) (#1356-1363):
External calls:
- _uniswapV2Pair = IUniswapV2Factory(uniswapV2Router.factory()).createPair(address(this),uniswapV2Router.WETH()) (#1360-1361)
State variables written after the call(s):
- uniswapV2Pair = _uniswapV2Pair (#1362)
Apply the check-effects-interactions pattern.
Additional information: link
Reentrancy in PWARS._setAutomatedMarketMakerPair(address,bool) (#1433-1442):
External calls:
- dividendTracker.excludeFromDividends(pair) (#1438)
Event emitted after the call(s):
- SetAutomatedMarketMakerPair(pair,value) (#1441)
Reentrancy in PWARS._transfer(address,address,uint256) (#1524-1620):
External calls:
- pinkAntiBot.onPreTransferCheck(from,to,amount) (#1533)
Event emitted after the call(s):
- Transfer(sender,recipient,amount) (#875)
- super._transfer(from,to,0) (#1537)
Reentrancy in PWARS._transfer(address,address,uint256) (#1524-1620):
External calls:
- pinkAntiBot.onPreTransferCheck(from,to,amount) (#1533)
- swapAndSendToFee(feeTokens) (#1554)
- uniswapV2Router.swapExactTokensForTokensSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1705-1711)
- IERC20(BNB).transfer(_marketingWalletAddress,marketingShare) (#1645)
- IERC20(BNB).transfer(_buybackWalletAddress,buybackShare) (#1646)
- IERC20(BNB).transfer(_charityWalletAddress,charityShare) (#1647)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#940)
- swapAndSendToFee(feeTokens) (#1554)
Reentrancy in PWARS._transfer(address,address,uint256) (#1524-1620):
External calls:
- pinkAntiBot.onPreTransferCheck(from,to,amount) (#1533)
- swapAndSendToFee(feeTokens) (#1554)
- uniswapV2Router.swapExactTokensForTokensSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1705-1711)
- IERC20(BNB).transfer(_marketingWalletAddress,marketingShare) (#1645)
- IERC20(BNB).transfer(_buybackWalletAddress,buybackShare) (#1646)
- IERC20(BNB).transfer(_charityWalletAddress,charityShare) (#1647)
- swapAndLiquify(swapTokens) (#1557)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (#1720-1727)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1685-1691)
External calls sending eth:
- swapAndLiquify(swapTokens) (#1557)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (#1720-1727)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#940)
- swapAndLiquify(swapTokens) (#1557)
- SwapAndLiquify(half,newBalance,otherHalf) (#1670)
- swapAndLiquify(swapTokens) (#1557)
Reentrancy in PWARS._transfer(address,address,uint256) (#1524-1620):
External calls:
- pinkAntiBot.onPreTransferCheck(from,to,amount) (#1533)
- swapAndSendToFee(feeTokens) (#1554)
- uniswapV2Router.swapExactTokensForTokensSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1705-1711)
- IERC20(BNB).transfer(_marketingWalletAddress,marketingShare) (#1645)
- IERC20(BNB).transfer(_buybackWalletAddress,buybackShare) (#1646)
- IERC20(BNB).transfer(_charityWalletAddress,charityShare) (#1647)
- swapAndLiquify(swapTokens) (#1557)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (#1720-1727)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1685-1691)
- swapAndSendDividends(sellTokens) (#1560)
- success = IERC20(BNB).transfer(address(dividendTracker),dividends) (#1734)
- dividendTracker.distributeBNBDividends(dividends) (#1737)
- uniswapV2Router.swapExactTokensForTokensSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1705-1711)
External calls sending eth:
- swapAndLiquify(swapTokens) (#1557)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (#1720-1727)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#940)
- swapAndSendDividends(sellTokens) (#1560)
- SendDividends(tokens,dividends) (#1738)
- swapAndSendDividends(sellTokens) (#1560)
- Transfer(sender,recipient,amount) (#875)
- super._transfer(from,to,amount) (#1605)
- Transfer(sender,recipient,amount) (#875)
- super._transfer(from,address(this),fee_Amount) (#1602)
Reentrancy in PWARS._transfer(address,address,uint256) (#1524-1620):
External calls:
- pinkAntiBot.onPreTransferCheck(from,to,amount) (#1533)
- swapAndSendToFee(feeTokens) (#1554)
- uniswapV2Router.swapExactTokensForTokensSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1705-1711)
- IERC20(BNB).transfer(_marketingWalletAddress,marketingShare) (#1645)
- IERC20(BNB).transfer(_buybackWalletAddress,buybackShare) (#1646)
- IERC20(BNB).transfer(_charityWalletAddress,charityShare) (#1647)
- swapAndLiquify(swapTokens) (#1557)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (#1720-1727)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1685-1691)
- swapAndSendDividends(sellTokens) (#1560)
- success = IERC20(BNB).transfer(address(dividendTracker),dividends) (#1734)
- dividendTracker.distributeBNBDividends(dividends) (#1737)
- uniswapV2Router.swapExactTokensForTokensSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1705-1711)
- dividendTracker.setBalance(address(from),balanceOf(from)) (#1607)
- dividendTracker.setBalance(address(to),balanceOf(to)) (#1608)
- dividendTracker.process(gas) (#1613-1618)
External calls sending eth:
- swapAndLiquify(swapTokens) (#1557)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (#1720-1727)
Event emitted after the call(s):
- ProcessedDividendTracker(iterations,claims,lastProcessedIndex,true,gas,tx.origin) (#1614)
Reentrancy in PWARS.constructor() (#1285-1326):
External calls:
- pinkAntiBot.setTokenOwner(owner()) (#1293)
- _uniswapV2Pair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#1298-1299)
- _setAutomatedMarketMakerPair(_uniswapV2Pair,true) (#1304)
- dividendTracker.excludeFromDividends(pair) (#1438)
Event emitted after the call(s):
- SetAutomatedMarketMakerPair(pair,value) (#1441)
- _setAutomatedMarketMakerPair(_uniswapV2Pair,true) (#1304)
Reentrancy in PWARS.constructor() (#1285-1326):
External calls:
- pinkAntiBot.setTokenOwner(owner()) (#1293)
- _uniswapV2Pair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#1298-1299)
- _setAutomatedMarketMakerPair(_uniswapV2Pair,true) (#1304)
- dividendTracker.excludeFromDividends(pair) (#1438)
- dividendTracker.excludeFromDividends(address(dividendTracker)) (#1307)
- dividendTracker.excludeFromDividends(address(this)) (#1308)
- dividendTracker.excludeFromDividends(owner()) (#1309)
- dividendTracker.excludeFromDividends(deadWallet) (#1310)
- dividendTracker.excludeFromDividends(address(_uniswapV2Router)) (#1311)
Event emitted after the call(s):
- ExcludeFromFees(account,excluded) (#1369)
- excludeFromFees(address(this),true) (#1318)
- ExcludeFromFees(account,excluded) (#1369)
- excludeFromFees(owner(),true) (#1314)
- ExcludeFromFees(account,excluded) (#1369)
- excludeFromFees(_charityWalletAddress,true) (#1317)
- ExcludeFromFees(account,excluded) (#1369)
- excludeFromFees(_buybackWalletAddress,true) (#1316)
- ExcludeFromFees(account,excluded) (#1369)
- excludeFromFees(_marketingWalletAddress,true) (#1315)
- Transfer(address(0),account,amount) (#894)
- _mint(owner(),10000000000 * (10 ** 9)) (#1325)
Reentrancy in PETWARSDividendTracker.processAccount(address,bool) (#1939-1949):
External calls:
- amount = _withdrawDividendOfUser(account) (#1940)
- success = IERC20(BNB).transfer(user,_withdrawableDividend) (#1087)
Event emitted after the call(s):
- Claim(account,amount,automatic) (#1944)
Reentrancy in PWARS.processDividendTracker(uint256) (#1506-1509):
External calls:
- (iterations,claims,lastProcessedIndex) = dividendTracker.process(gas) (#1507)
Event emitted after the call(s):
- ProcessedDividendTracker(iterations,claims,lastProcessedIndex,false,gas,tx.origin) (#1508)
Reentrancy in PWARS.swapAndLiquify(uint256) (#1650-1671):
External calls:
- swapTokensForEth(half) (#1662)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1685-1691)
- addLiquidity(otherHalf,newBalance) (#1668)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (#1720-1727)
External calls sending eth:
- addLiquidity(otherHalf,newBalance) (#1668)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (#1720-1727)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#940)
- addLiquidity(otherHalf,newBalance) (#1668)
- SwapAndLiquify(half,newBalance,otherHalf) (#1670)
Reentrancy in PWARS.swapAndSendDividends(uint256) (#1731-1740):
External calls:
- swapTokensForBNB(tokens) (#1732)
- uniswapV2Router.swapExactTokensForTokensSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1705-1711)
- success = IERC20(BNB).transfer(address(dividendTracker),dividends) (#1734)
- dividendTracker.distributeBNBDividends(dividends) (#1737)
Event emitted after the call(s):
- SendDividends(tokens,dividends) (#1738)
Reentrancy in PWARS.updateDividendTracker(address) (#1339-1354):
External calls:
- newDividendTracker.excludeFromDividends(address(newDividendTracker)) (#1346)
- newDividendTracker.excludeFromDividends(address(this)) (#1347)
- newDividendTracker.excludeFromDividends(owner()) (#1348)
- newDividendTracker.excludeFromDividends(address(uniswapV2Router)) (#1349)
Event emitted after the call(s):
- UpdateDividendTracker(newAddress,address(dividendTracker)) (#1351)
Apply the check-effects-interactions pattern.
Additional information: link
PETWARSDividendTracker.getAccount(address) (#1803-1846) uses timestamp for comparisons
Dangerous comparisons:
- nextClaimTime > block.timestamp (#1843-1845)
PETWARSDividendTracker.canAutoClaim(uint256) (#1867-1873) uses timestamp for comparisons
Dangerous comparisons:
- lastClaimTime > block.timestamp (#1868)
- block.timestamp.sub(lastClaimTime) >= claimWait (#1872)
Avoid relying on block.timestamp.
Additional information: link
Context._msgData() (#240-243) is never used and should be removed
DividendPayingToken._transfer(address,address,uint256) (#1138-1144) is never used and should be removed
SafeMath.mod(uint256,uint256) (#203-205) is never used and should be removed
SafeMath.mod(uint256,uint256,string) (#219-222) is never used and should be removed
SafeMathInt.abs(int256) (#69-72) is never used and should be removed
SafeMathInt.div(int256,int256) (#40-46) is never used and should be removed
SafeMathInt.mul(int256,int256) (#28-35) is never used and should be removed
Remove unused functions.
Additional information: link
PWARS.totalFees (#1220) is set pre-construction with a non-constant function or state variable:
- BNBRewardsFee.add(liquidityFee).add(marketingFee).add(buybackFee).add(charityFee)
PWARS.BUYtotalFees (#1227) is set pre-construction with a non-constant function or state variable:
- BUYBNBRewardsFee.add(BUYliquidityFee).add(BUYmarketingFee).add(BUYbuybackFee).add(BUYcharityFee)
PWARS.SELLtotalFees (#1234) is set pre-construction with a non-constant function or state variable:
- SELLBNBRewardsFee.add(SELLliquidityFee).add(SELLmarketingFee).add(SELLbuybackFee).add(SELLcharityFee)
Remove any initialization of state variables via non-constant state variables or function calls. If variables must be set upon contract deployment, locate initialization in the constructor instead.
Additional information: link
Pragma version^0.8.12 (#3) necessitates a version too recent to be trusted. Consider deploying with 0.6.12/0.7.6/0.8.7
solc-0.8.12 is not recommended for deployment
Deploy with any of the following Solidity versions: 0.5.16 - 0.5.17, 0.6.11 - 0.6.12, 0.7.5 - 0.7.6 Use a simple pragma version that allows any of these versions. Consider using the latest version of Solidity for testing.
Additional information: link
Function IUniswapV2Router01.WETH() (#300) is not in mixedCase
Function IUniswapV2Pair.DOMAIN_SEPARATOR() (#448) is not in mixedCase
Function IUniswapV2Pair.PERMIT_TYPEHASH() (#449) is not in mixedCase
Function IUniswapV2Pair.MINIMUM_LIQUIDITY() (#466) is not in mixedCase
Parameter DividendPayingToken.dividendOf(address)._owner (#1104) is not in mixedCase
Parameter DividendPayingToken.withdrawableDividendOf(address)._owner (#1111) is not in mixedCase
Parameter DividendPayingToken.withdrawnDividendOf(address)._owner (#1118) is not in mixedCase
Parameter DividendPayingToken.accumulativeDividendOf(address)._owner (#1128) is not in mixedCase
Variable DividendPayingToken.BNB (#1030) is not in mixedCase
Constant DividendPayingToken.magnitude (#1036) is not in UPPER_CASE_WITH_UNDERSCORES
Parameter PWARS.setEnableAntiBot(bool)._enable (#1334) is not in mixedCase
Parameter PWARS.removeStuckToken(address)._address (#1628) is not in mixedCase
Variable PWARS.BNB (#1211) is not in mixedCase
Variable PWARS.BNBRewardsFee (#1215) is not in mixedCase
Variable PWARS.BUYBNBRewardsFee (#1222) is not in mixedCase
Variable PWARS.BUYliquidityFee (#1223) is not in mixedCase
Variable PWARS.BUYmarketingFee (#1224) is not in mixedCase
Variable PWARS.BUYbuybackFee (#1225) is not in mixedCase
Variable PWARS.BUYcharityFee (#1226) is not in mixedCase
Variable PWARS.BUYtotalFees (#1227) is not in mixedCase
Variable PWARS.SELLBNBRewardsFee (#1229) is not in mixedCase
Variable PWARS.SELLliquidityFee (#1230) is not in mixedCase
Variable PWARS.SELLmarketingFee (#1231) is not in mixedCase
Variable PWARS.SELLbuybackFee (#1232) is not in mixedCase
Variable PWARS.SELLcharityFee (#1233) is not in mixedCase
Variable PWARS.SELLtotalFees (#1234) is not in mixedCase
Variable PWARS._marketingWalletAddress (#1236) is not in mixedCase
Variable PWARS._buybackWalletAddress (#1237) is not in mixedCase
Variable PWARS._charityWalletAddress (#1238) is not in mixedCase
Parameter PETWARSDividendTracker.getAccount(address)._account (#1803) is not in mixedCase
Follow the Solidity naming convention.
Additional information: link
Variable IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountADesired (#305) is too similar to IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountBDesired (#306)
Variable DividendPayingToken._withdrawDividendOfUser(address)._withdrawableDividend (#1083) is too similar to PETWARSDividendTracker.getAccount(address).withdrawableDividends (#1808)
Prevent variables from having similar names.
Additional information: link
renounceOwnership() should be declared external:
- Ownable.renounceOwnership() (#282-285)
transferOwnership(address) should be declared external:
- Ownable.transferOwnership(address) (#291-295)
get(IterableMapping.Map,address) should be declared external:
- IterableMapping.get(IterableMapping.Map,address) (#509-511)
getIndexOfKey(IterableMapping.Map,address) should be declared external:
- IterableMapping.getIndexOfKey(IterableMapping.Map,address) (#513-518)
getKeyAtIndex(IterableMapping.Map,uint256) should be declared external:
- IterableMapping.getKeyAtIndex(IterableMapping.Map,uint256) (#520-522)
size(IterableMapping.Map) should be declared external:
- IterableMapping.size(IterableMapping.Map) (#526-528)
name() should be declared external:
- ERC20.name() (#715-717)
symbol() should be declared external:
- ERC20.symbol() (#723-725)
decimals() should be declared external:
- ERC20.decimals() (#740-742)
transfer(address,uint256) should be declared external:
- ERC20.transfer(address,uint256) (#766-769)
allowance(address,address) should be declared external:
- ERC20.allowance(address,address) (#774-776)
approve(address,uint256) should be declared external:
- ERC20.approve(address,uint256) (#785-788)
transferFrom(address,address,uint256) should be declared external:
- ERC20.transferFrom(address,address,uint256) (#803-811)
increaseAllowance(address,uint256) should be declared external:
- ERC20.increaseAllowance(address,uint256) (#825-828)
decreaseAllowance(address,uint256) should be declared external:
- ERC20.decreaseAllowance(address,uint256) (#844-847)
distributeBNBDividends(uint256) should be declared external:
- DividendPayingToken.distributeBNBDividends(uint256) (#1061-1072)
withdrawDividend() should be declared external:
- DividendPayingToken.withdrawDividend() (#1076-1078)
- PETWARSDividendTracker.withdrawDividend() (#1772-1774)
dividendOf(address) should be declared external:
- DividendPayingToken.dividendOf(address) (#1104-1106)
withdrawnDividendOf(address) should be declared external:
- DividendPayingToken.withdrawnDividendOf(address) (#1118-1120)
updateDividendTracker(address) should be declared external:
- PWARS.updateDividendTracker(address) (#1339-1354)
updateUniswapV2Router(address) should be declared external:
- PWARS.updateUniswapV2Router(address) (#1356-1363)
excludeMultipleAccountsFromFees(address[],bool) should be declared external:
- PWARS.excludeMultipleAccountsFromFees(address[],bool) (#1372-1378)
setAutomatedMarketMakerPair(address,bool) should be declared external:
- PWARS.setAutomatedMarketMakerPair(address,bool) (#1426-1430)
updateGasForProcessing(uint256) should be declared external:
- PWARS.updateGasForProcessing(uint256) (#1445-1450)
isExcludedFromFees(address) should be declared external:
- PWARS.isExcludedFromFees(address) (#1464-1466)
withdrawableDividendOf(address) should be declared external:
- PWARS.withdrawableDividendOf(address) (#1468-1470)
dividendTokenBalanceOf(address) should be declared external:
- PWARS.dividendTokenBalanceOf(address) (#1472-1474)
getAccountAtIndex(uint256) should be declared external:
- PETWARSDividendTracker.getAccountAtIndex(uint256) (#1848-1865)
process(uint256) should be declared external:
- PETWARSDividendTracker.process(uint256) (#1892-1937)
Use the external attribute for functions never called from the contract.
Additional information: link
Contract has 5% buy tax and 11% sell tax.
Taxes are suspiciously high (over 10%) and contract ownership is not renounced. Token has a high risk of becoming a honeypot.
Number of Binance Smart Chain (BSC) token holders is low.
Token is deployed only at one blockchain
Token has only one trading pair
Young tokens have high risks of scam / price dump / death
Young tokens have high risks of scam / price dump / death
Young tokens have high risks of scam / price dump / death
Token has no active CoinGecko listing / rank
Token has relatively low CoinMarketCap rank
Young tokens have high risks of price dump / death
Unable to find Discord account