REDSHIBA Token

RedShiba.sendETHToFee(uint256) (#384-387) sends eth to arbitrary user
Dangerous calls:
- _FeeAddress.transfer(amount.div(2)) (#385)
- _marketingWalletAddress.transfer(amount.div(2)) (#386)
Ensure that an arbitrary user cannot withdraw unauthorized funds.

Additional information: link

Reentrancy in RedShiba._transfer(address,address,uint256) (#322-368):
External calls:
- swapTokensForEth(contractTokenBalance) (#354)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#375-381)
External calls sending eth:
- sendETHToFee(address(this).balance) (#357)
- _FeeAddress.transfer(amount.div(2)) (#385)
- _marketingWalletAddress.transfer(amount.div(2)) (#386)
State variables written after the call(s):
- _tokenTransfer(from,to,amount,takeFee) (#367)
- _rOwned[address(this)] = _rOwned[address(this)].add(rTeam) (#460)
- _rOwned[sender] = _rOwned[sender].sub(rAmount) (#450)
- _rOwned[recipient] = _rOwned[recipient].add(rTransferAmount) (#451)
- _tokenTransfer(from,to,amount,takeFee) (#367)
- _rTotal = _rTotal.sub(rFee) (#464)
Reentrancy in RedShiba.openTrading() (#389-414):
External calls:
- uniswapV2Pair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#396-397)
- uniswapV2Router.addLiquidityETH{value: address(this).balance}(address(this),balanceOf(address(this)),0,0,owner(),block.timestamp) (#398-405)
External calls sending eth:
- uniswapV2Router.addLiquidityETH{value: address(this).balance}(address(this),balanceOf(address(this)),0,0,owner(),block.timestamp) (#398-405)
State variables written after the call(s):
- tradingOpen = true (#409)
Apply the check-effects-interactions pattern.

Additional information: link

Unable to find manual contract audit (e.g. Certik, PeckShield, Solidity...)

Combination 1: Reentrancy vulnerabilities + Functions that send Ether to arbitraty destination. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.

RedShiba.openTrading() (#389-414) ignores return value by uniswapV2Router.addLiquidityETH{value: address(this).balance}(address(this),balanceOf(address(this)),0,0,owner(),block.timestamp) (#398-405)
RedShiba.openTrading() (#389-414) ignores return value by IERC20(uniswapV2Pair).approve(address(uniswapV2Router),type()(uint256).max) (#410-413)
Ensure that all the return values of the function calls are used.

Additional information: link

RedShiba.allowance(address,address).owner (#246) shadows:
- Ownable.owner() (#117-119) (function)
RedShiba._approve(address,address,uint256).owner (#312) shadows:
- Ownable.owner() (#117-119) (function)
Rename the local variables that shadow another component.

Additional information: link

Ownable.constructor().msgSender (#112) lacks a zero-check on :
- _owner = msgSender (#113)
RedShiba.constructor(address,address).FeeAddress (#204) lacks a zero-check on :
- _FeeAddress = FeeAddress (#207)
RedShiba.constructor(address,address).marketingWalletAddress (#205) lacks a zero-check on :
- _marketingWalletAddress = marketingWalletAddress (#208)
Check that the address is not zero.

Additional information: link

Reentrancy in RedShiba._transfer(address,address,uint256) (#322-368):
External calls:
- swapTokensForEth(contractTokenBalance) (#354)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#375-381)
External calls sending eth:
- sendETHToFee(address(this).balance) (#357)
- _FeeAddress.transfer(amount.div(2)) (#385)
- _marketingWalletAddress.transfer(amount.div(2)) (#386)
State variables written after the call(s):
- _tokenTransfer(from,to,amount,takeFee) (#367)
- _previousTaxFee = _taxFee (#300)
- _tokenTransfer(from,to,amount,takeFee) (#367)
- _previousteamFee = _teamFee (#301)
- _tokenTransfer(from,to,amount,takeFee) (#367)
- _tFeeTotal = _tFeeTotal.add(tFee) (#465)
- _tokenTransfer(from,to,amount,takeFee) (#367)
- _taxFee = _previousTaxFee (#307)
- _taxFee = 0 (#302)
- _tokenTransfer(from,to,amount,takeFee) (#367)
- _teamFee = _previousteamFee (#308)
- _teamFee = 0 (#303)
Reentrancy in RedShiba.openTrading() (#389-414):
External calls:
- uniswapV2Pair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#396-397)
- uniswapV2Router.addLiquidityETH{value: address(this).balance}(address(this),balanceOf(address(this)),0,0,owner(),block.timestamp) (#398-405)
External calls sending eth:
- uniswapV2Router.addLiquidityETH{value: address(this).balance}(address(this),balanceOf(address(this)),0,0,owner(),block.timestamp) (#398-405)
State variables written after the call(s):
- _maxTxAmount = 300000000000000000 * 10 ** 9 (#408)
- cooldownEnabled = true (#407)
- swapEnabled = true (#406)
Reentrancy in RedShiba.transferFrom(address,address,uint256) (#264-279):
External calls:
- _transfer(sender,recipient,amount) (#269)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#375-381)
External calls sending eth:
- _transfer(sender,recipient,amount) (#269)
- _FeeAddress.transfer(amount.div(2)) (#385)
- _marketingWalletAddress.transfer(amount.div(2)) (#386)
State variables written after the call(s):
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#270-277)
- _allowances[owner][spender] = amount (#318)
Apply the check-effects-interactions pattern.

Additional information: link

Reentrancy in RedShiba._transfer(address,address,uint256) (#322-368):
External calls:
- swapTokensForEth(contractTokenBalance) (#354)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#375-381)
External calls sending eth:
- sendETHToFee(address(this).balance) (#357)
- _FeeAddress.transfer(amount.div(2)) (#385)
- _marketingWalletAddress.transfer(amount.div(2)) (#386)
Event emitted after the call(s):
- Transfer(sender,recipient,tTransferAmount) (#454)
- _tokenTransfer(from,to,amount,takeFee) (#367)
Reentrancy in RedShiba.transferFrom(address,address,uint256) (#264-279):
External calls:
- _transfer(sender,recipient,amount) (#269)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#375-381)
External calls sending eth:
- _transfer(sender,recipient,amount) (#269)
- _FeeAddress.transfer(amount.div(2)) (#385)
- _marketingWalletAddress.transfer(amount.div(2)) (#386)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#319)
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#270-277)
Apply the check-effects-interactions pattern.

Additional information: link

RedShiba._transfer(address,address,uint256) (#322-368) uses timestamp for comparisons
Dangerous comparisons:
- require(bool)(cooldown[to] < block.timestamp) (#341)
Avoid relying on block.timestamp.

Additional information: link

RedShiba._previousTaxFee (#185) is set pre-construction with a non-constant function or state variable:
- _taxFee
RedShiba._previousteamFee (#186) is set pre-construction with a non-constant function or state variable:
- _teamFee
Remove any initialization of state variables via non-constant state variables or function calls. If variables must be set upon contract deployment, locate initialization in the constructor instead.

Additional information: link

Function IUniswapV2Router02.WETH() (#149) is not in mixedCase
Constant RedShiba._tTotal (#177) is not in UPPER_CASE_WITH_UNDERSCORES
Constant RedShiba._name (#180) is not in UPPER_CASE_WITH_UNDERSCORES
Constant RedShiba._symbol (#181) is not in UPPER_CASE_WITH_UNDERSCORES
Constant RedShiba._decimals (#182) is not in UPPER_CASE_WITH_UNDERSCORES
Variable RedShiba._FeeAddress (#187) is not in mixedCase
Follow the Solidity naming convention.

Additional information: link

Reentrancy in RedShiba._transfer(address,address,uint256) (#322-368):
External calls:
- sendETHToFee(address(this).balance) (#357)
- _FeeAddress.transfer(amount.div(2)) (#385)
- _marketingWalletAddress.transfer(amount.div(2)) (#386)
State variables written after the call(s):
- _tokenTransfer(from,to,amount,takeFee) (#367)
- _previousTaxFee = _taxFee (#300)
- _tokenTransfer(from,to,amount,takeFee) (#367)
- _previousteamFee = _teamFee (#301)
- _tokenTransfer(from,to,amount,takeFee) (#367)
- _rOwned[address(this)] = _rOwned[address(this)].add(rTeam) (#460)
- _rOwned[sender] = _rOwned[sender].sub(rAmount) (#450)
- _rOwned[recipient] = _rOwned[recipient].add(rTransferAmount) (#451)
- _tokenTransfer(from,to,amount,takeFee) (#367)
- _rTotal = _rTotal.sub(rFee) (#464)
- _tokenTransfer(from,to,amount,takeFee) (#367)
- _tFeeTotal = _tFeeTotal.add(tFee) (#465)
- _tokenTransfer(from,to,amount,takeFee) (#367)
- _taxFee = _previousTaxFee (#307)
- _taxFee = 0 (#302)
- _tokenTransfer(from,to,amount,takeFee) (#367)
- _teamFee = _previousteamFee (#308)
- _teamFee = 0 (#303)
Event emitted after the call(s):
- Transfer(sender,recipient,tTransferAmount) (#454)
- _tokenTransfer(from,to,amount,takeFee) (#367)
Reentrancy in RedShiba.transferFrom(address,address,uint256) (#264-279):
External calls:
- _transfer(sender,recipient,amount) (#269)
- _FeeAddress.transfer(amount.div(2)) (#385)
- _marketingWalletAddress.transfer(amount.div(2)) (#386)
State variables written after the call(s):
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#270-277)
- _allowances[owner][spender] = amount (#318)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#319)
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#270-277)
Apply the check-effects-interactions pattern.

Additional information: link

Variable RedShiba._transferStandard(address,address,uint256).rTransferAmount (#444) is too similar to RedShiba._getValues(uint256).tTransferAmount (#494)
Variable RedShiba._transferStandard(address,address,uint256).rTransferAmount (#444) is too similar to RedShiba._transferStandard(address,address,uint256).tTransferAmount (#446)
Variable RedShiba._getRValues(uint256,uint256,uint256,uint256).rTransferAmount (#545) is too similar to RedShiba._getValues(uint256).tTransferAmount (#494)
Variable RedShiba._getRValues(uint256,uint256,uint256,uint256).rTransferAmount (#545) is too similar to RedShiba._getTValues(uint256,uint256,uint256).tTransferAmount (#524)
Variable RedShiba._getValues(uint256).rTransferAmount (#500) is too similar to RedShiba._getTValues(uint256,uint256,uint256).tTransferAmount (#524)
Variable RedShiba._getValues(uint256).rTransferAmount (#500) is too similar to RedShiba._transferStandard(address,address,uint256).tTransferAmount (#446)
Variable RedShiba._getValues(uint256).rTransferAmount (#500) is too similar to RedShiba._getValues(uint256).tTransferAmount (#494)
Variable RedShiba._transferStandard(address,address,uint256).rTransferAmount (#444) is too similar to RedShiba._getTValues(uint256,uint256,uint256).tTransferAmount (#524)
Variable RedShiba._getRValues(uint256,uint256,uint256,uint256).rTransferAmount (#545) is too similar to RedShiba._transferStandard(address,address,uint256).tTransferAmount (#446)
Prevent variables from having similar names.

Additional information: link

RedShiba.openTrading() (#389-414) uses literals with too many digits:
- _maxTxAmount = 300000000000000000 * 10 ** 9 (#408)
RedShiba.slitherConstructorConstantVariables() (#168-567) uses literals with too many digits:
- _tTotal = 1000000000000000000 * 10 ** 9 (#177)
Use: Ether suffix, Time suffix, or The scientific notation

Additional information: link

Ownable._previousOwner (#105) is never used in RedShiba (#168-567)
RedShiba._tOwned (#171) is never used in RedShiba (#168-567)
Remove unused state variables.

Additional information: link

Ownable._previousOwner (#105) should be constant
Add the constant attributes to state variables that never change.

Additional information: link

renounceOwnership() should be declared external:
- Ownable.renounceOwnership() (#126-129)
name() should be declared external:
- RedShiba.name() (#217-219)
symbol() should be declared external:
- RedShiba.symbol() (#221-223)
decimals() should be declared external:
- RedShiba.decimals() (#225-227)
totalSupply() should be declared external:
- RedShiba.totalSupply() (#229-231)
transfer(address,uint256) should be declared external:
- RedShiba.transfer(address,uint256) (#237-244)
allowance(address,address) should be declared external:
- RedShiba.allowance(address,address) (#246-253)
approve(address,uint256) should be declared external:
- RedShiba.approve(address,uint256) (#255-262)
transferFrom(address,address,uint256) should be declared external:
- RedShiba.transferFrom(address,address,uint256) (#264-279)
setBots(address[]) should be declared external:
- RedShiba.setBots(address[]) (#416-420)
delBot(address) should be declared external:
- RedShiba.delBot(address) (#422-424)
Use the external attribute for functions never called from the contract.

Additional information: link

Average PancakeSwap trading volume, liqudity, number of swaps are extremely low. Token seems to be dead.

Average 30d PancakeSwap liquidity is less than $100. Token is either dead or inactive.

Average 30d PancakeSwap volume is less than $100. Token is either dead or inactive.

Token is deployed only at one blockchain

Contract has 13% buy tax and 22% sell tax.
Taxes are high (over 10%) but contract ownership is renounced.

Average 30d number of PancakeSwap swaps is low.

Unable to find website, listings and other project-related information

Token has a considerable age, but we're still unable to find its website

Token has no active CoinGecko listing / rank

Token has a considerable age, but social accounts / website are missing or have few users

Token has a considerable age, but average PancakeSwap 30d trading volume is low

Token has no active CoinMarketCap listing / rank

Young tokens have high risks of price dump / death