REFLECTO Token

Reflecto.swapBack() (contracts/Reflecto.sol#388-447) sends eth to arbitrary user
Dangerous calls:
- address(marketingFeeReceiver).transfer(amountBNBMarketing) (contracts/Reflecto.sol#433)
- address(gasWalletFeeReceiver).transfer(amountBNBGasWallet) (contracts/Reflecto.sol#434)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,autoLiquidityReceiver,block.timestamp) (contracts/Reflecto.sol#437-444)
Reflecto.buyTokens(uint256,address) (contracts/Reflecto.sol#482-490) sends eth to arbitrary user
Dangerous calls:
- router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: amount}(0,path,to,block.timestamp) (contracts/Reflecto.sol#487-489)
Ensure that an arbitrary user cannot withdraw unauthorized funds.

Additional information: link

Reentrancy in Reflecto._transferFrom(address,address,uint256) (contracts/Reflecto.sol#262-306):
External calls:
- swapBack() (contracts/Reflecto.sol#274)
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(amountToSwap,0,path,address(this),block.timestamp) (contracts/Reflecto.sol#405-411)
- distributor.deposit{value: amountBNBReflection}() (contracts/Reflecto.sol#432)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,autoLiquidityReceiver,block.timestamp) (contracts/Reflecto.sol#437-444)
- triggerAutoBuyback() (contracts/Reflecto.sol#277)
- router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: amount}(0,path,to,block.timestamp) (contracts/Reflecto.sol#487-489)
External calls sending eth:
- swapBack() (contracts/Reflecto.sol#274)
- distributor.deposit{value: amountBNBReflection}() (contracts/Reflecto.sol#432)
- address(marketingFeeReceiver).transfer(amountBNBMarketing) (contracts/Reflecto.sol#433)
- address(gasWalletFeeReceiver).transfer(amountBNBGasWallet) (contracts/Reflecto.sol#434)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,autoLiquidityReceiver,block.timestamp) (contracts/Reflecto.sol#437-444)
- triggerAutoBuyback() (contracts/Reflecto.sol#277)
- router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: amount}(0,path,to,block.timestamp) (contracts/Reflecto.sol#487-489)
State variables written after the call(s):
- _balances[sender] = _balances[sender].sub(amount,Insufficient Balance) (contracts/Reflecto.sol#282-285)
- _balances[recipient] = _balances[recipient].add(amountReceived) (contracts/Reflecto.sol#291)
- amountReceived = takeFee(sender,recipient,amount) (contracts/Reflecto.sol#287-289)
- _balances[address(this)] = _balances[address(this)].add(feeAmount) (contracts/Reflecto.sol#374)
- triggerAutoBuyback() (contracts/Reflecto.sol#277)
- inSwap = true (contracts/Reflecto.sol#85)
- inSwap = false (contracts/Reflecto.sol#87)
Apply the check-effects-interactions pattern.

Additional information: link

DividendDistributor.distributeDividend(address) (contracts/DividendDistributor.sol#154-172) ignores return value by BEP_TOKEN.transfer(shareholder,amount) (contracts/DividendDistributor.sol#163)
Use SafeERC20, or ensure that the transfer/transferFrom return value is checked.

Additional information: link

Unable to verify that contract auditor is trusted: Certik, Quantstamp, Hacken, Solidity, Paladinsec, Openzeppelin, Verichains

Combination 1: Reentrancy vulnerabilities + Functions that send Ether to arbitraty destination. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.

Combination 2: Unchecked transfer + Functions that send Ether to arbitraty destination. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.

Combination 3: Reentrancy vulnerabilities + Unchecked transfer vulnerability. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.

Contract ownership is not renounced (belongs to a wallet)

Reentrancy in Reflecto.constructor(address,address) (contracts/Reflecto.sol#90-127):
External calls:
- pair = IDEXFactory(router.factory()).createPair(WBNB,address(this)) (contracts/Reflecto.sol#94)
State variables written after the call(s):
- WBNB = router.WETH() (contracts/Reflecto.sol#96)
Reentrancy in DividendDistributor.distributeDividend(address) (contracts/DividendDistributor.sol#154-172):
External calls:
- BEP_TOKEN.transfer(shareholder,amount) (contracts/DividendDistributor.sol#163)
State variables written after the call(s):
- shares[shareholder].totalRealised = shares[shareholder].totalRealised.add(amount) (contracts/DividendDistributor.sol#165-167)
- shares[shareholder].totalExcluded = getCumulativeDividends(shares[shareholder].amount) (contracts/DividendDistributor.sol#168-170)
Reentrancy in DividendDistributor.process(uint256) (contracts/DividendDistributor.sol#116-142):
External calls:
- distributeDividend(shareholders[currentIndex]) (contracts/DividendDistributor.sol#134)
- BEP_TOKEN.transfer(shareholder,amount) (contracts/DividendDistributor.sol#163)
State variables written after the call(s):
- currentIndex ++ (contracts/DividendDistributor.sol#139)
Reentrancy in DividendDistributor.setShare(address,uint256) (contracts/DividendDistributor.sol#75-96):
External calls:
- distributeDividend(shareholder) (contracts/DividendDistributor.sol#81)
- BEP_TOKEN.transfer(shareholder,amount) (contracts/DividendDistributor.sol#163)
State variables written after the call(s):
- shares[shareholder].amount = amount (contracts/DividendDistributor.sol#91)
- shares[shareholder].totalExcluded = getCumulativeDividends(shares[shareholder].amount) (contracts/DividendDistributor.sol#93-95)
Apply the check-effects-interactions pattern.

Additional information: link

Reflecto.addDistributor(address,address,address) (contracts/Reflecto.sol#137-143) ignores return value by distributor.addDistributor(_dexRouter,_BEP_TOKEN,_WBNB) (contracts/Reflecto.sol#142)
Reflecto.deleteDistributor(address) (contracts/Reflecto.sol#145-147) ignores return value by distributor.deleteDistributor(_BEP_TOKEN) (contracts/Reflecto.sol#146)
Reflecto.swapBack() (contracts/Reflecto.sol#388-447) ignores return value by router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,autoLiquidityReceiver,block.timestamp) (contracts/Reflecto.sol#437-444)
Ensure that all the return values of the function calls are used.

Additional information: link

Reflecto._setAllowance(address,address,uint256).owner (contracts/Reflecto.sol#647) shadows:
- Auth.owner (contracts/libs/Auth.sol#5) (state variable)
Rename the local variables that shadow another component.

Additional information: link

DividendDistributor.setDistributionCriteria(uint256,uint256) (contracts/DividendDistributor.sol#67-73) should emit an event for:
- minPeriod = _minPeriod (contracts/DividendDistributor.sol#71)
- minDistribution = _minDistribution (contracts/DividendDistributor.sol#72)
Reflecto.setAutoBuybackSettings(bool,uint256,uint256,uint256) (contracts/Reflecto.sol#492-504) should emit an event for:
- autoBuybackCap = _cap (contracts/Reflecto.sol#499)
- autoBuybackAmount = _amount (contracts/Reflecto.sol#501)
Reflecto.setBuybackMultiplierSettings(uint256,uint256,uint256) (contracts/Reflecto.sol#506-515) should emit an event for:
- buybackMultiplierNumerator = numerator (contracts/Reflecto.sol#512)
- buybackMultiplierDenominator = denominator (contracts/Reflecto.sol#513)
- buybackMultiplierLength = length (contracts/Reflecto.sol#514)
Reflecto.setTxLimit(uint256) (contracts/Reflecto.sol#527-530) should emit an event for:
- _maxTxAmount = amount (contracts/Reflecto.sol#529)
Reflecto.setFees(uint256,uint256,uint256,uint256,uint256,uint256) (contracts/Reflecto.sol#556-576) should emit an event for:
- liquidityFee = _liquidityFee (contracts/Reflecto.sol#564)
- reflectionFee = _reflectionFee (contracts/Reflecto.sol#566)
- marketingFee = _marketingFee (contracts/Reflecto.sol#567)
- gasWalletFee = _gasWalletFee (contracts/Reflecto.sol#568)
- totalFee = _liquidityFee.add(_buybackFee).add(_reflectionFee).add(_marketingFee).add(gasWalletFee) (contracts/Reflecto.sol#569-573)
- feeDenominator = _feeDenominator (contracts/Reflecto.sol#574)
Reflecto.setSwapBackSettings(bool,uint256) (contracts/Reflecto.sol#588-594) should emit an event for:
- swapThreshold = _amount (contracts/Reflecto.sol#593)
Reflecto.setTargetLiquidity(uint256,uint256) (contracts/Reflecto.sol#596-602) should emit an event for:
- targetLiquidity = _target (contracts/Reflecto.sol#600)
- targetLiquidityDenominator = _denominator (contracts/Reflecto.sol#601)
Emit an event for critical parameter changes.

Additional information: link

DividendDistributor.constructor(address,address,address)._wbnb (contracts/DividendDistributor.sol#57) lacks a zero-check on :
- WBNB = _wbnb (contracts/DividendDistributor.sol#64)
Auth.transferOwnership(address).adr (contracts/libs/Auth.sol#60) lacks a zero-check on :
- owner = adr (contracts/libs/Auth.sol#61)
Reflecto.constructor(address,address)._WBNBinput (contracts/Reflecto.sol#90) lacks a zero-check on :
- WBNB = _WBNBinput (contracts/Reflecto.sol#91)
Reflecto.setFeeReceivers(address,address,address)._autoLiquidityReceiver (contracts/Reflecto.sol#579) lacks a zero-check on :
- autoLiquidityReceiver = _autoLiquidityReceiver (contracts/Reflecto.sol#583)
Reflecto.setFeeReceivers(address,address,address)._marketingFeeReceiver (contracts/Reflecto.sol#580) lacks a zero-check on :
- marketingFeeReceiver = _marketingFeeReceiver (contracts/Reflecto.sol#584)
Reflecto.setFeeReceivers(address,address,address)._gasWalletReceiver (contracts/Reflecto.sol#581) lacks a zero-check on :
- gasWalletFeeReceiver = _gasWalletReceiver (contracts/Reflecto.sol#585)
Check that the address is not zero.

Additional information: link

DistributorFactory.addDistributor(address,address,address) (contracts/DistributorFactory.sol#31-79) has external calls inside a loop: shareholderAddress = distributorsMapping[firstDistributerKey].distributorAddress.getShareholders()[i] (contracts/DistributorFactory.sol#66-68)
DistributorFactory.addDistributor(address,address,address) (contracts/DistributorFactory.sol#31-79) has external calls inside a loop: shareholderAmount = distributorsMapping[firstDistributerKey].distributorAddress.getShareholderAmount(shareholderAddress) (contracts/DistributorFactory.sol#70-72)
DistributorFactory.addDistributor(address,address,address) (contracts/DistributorFactory.sol#31-79) has external calls inside a loop: distributor.setShare(shareholderAddress,shareholderAmount) (contracts/DistributorFactory.sol#74)
DistributorFactory.setShare(address,uint256) (contracts/DistributorFactory.sol#124-131) has external calls inside a loop: distributorsMapping[distributorsArrayOfKeys[i]].distributorAddress.setShare(shareholder,amount) (contracts/DistributorFactory.sol#127-129)
DistributorFactory.process(uint256) (contracts/DistributorFactory.sol#133-140) has external calls inside a loop: distributorsMapping[distributorsArrayOfKeys[i]].distributorAddress.process(gas) (contracts/DistributorFactory.sol#136-138)
DistributorFactory.deposit() (contracts/DistributorFactory.sol#142-151) has external calls inside a loop: distributorsMapping[distributorsArrayOfKeys[i]].distributorAddress.deposit{value: valuePerToken}() (contracts/DistributorFactory.sol#147-149)
DividendDistributor.distributeDividend(address) (contracts/DividendDistributor.sol#154-172) has external calls inside a loop: BEP_TOKEN.transfer(shareholder,amount) (contracts/DividendDistributor.sol#163)
Favor pull over push strategy for external calls.

Additional information: link

Reentrancy in Reflecto.constructor(address,address) (contracts/Reflecto.sol#90-127):
External calls:
- pair = IDEXFactory(router.factory()).createPair(WBNB,address(this)) (contracts/Reflecto.sol#94)
State variables written after the call(s):
- DOMAIN_SEPARATOR = keccak256(bytes)(abi.encode(keccak256(bytes)(EIP712Domain(string name,string version,uint256 chainId,address verifyingContract)),keccak256(bytes)(bytes(_name)),keccak256(bytes)(bytes(version())),block.chainid,address(this))) (contracts/Reflecto.sol#114-124)
- _allowances[address(this)][address(router)] = _totalSupply (contracts/Reflecto.sol#95)
- approve(_dexRouter,_totalSupply) (contracts/Reflecto.sol#110)
- _allowances[msg.sender][spender] = amount (contracts/Reflecto.sol#232)
- approve(address(pair),_totalSupply) (contracts/Reflecto.sol#111)
- _allowances[msg.sender][spender] = amount (contracts/Reflecto.sol#232)
- _balances[msg.sender] = _totalSupply (contracts/Reflecto.sol#112)
- autoLiquidityReceiver = msg.sender (contracts/Reflecto.sol#106)
- buyBacker[msg.sender] = true (contracts/Reflecto.sol#104)
- distributor = new DistributorFactory() (contracts/Reflecto.sol#97)
- gasWalletFeeReceiver = msg.sender (contracts/Reflecto.sol#108)
- isDividendExempt[pair] = true (contracts/Reflecto.sol#101)
- isDividendExempt[address(this)] = true (contracts/Reflecto.sol#102)
- isDividendExempt[DEAD] = true (contracts/Reflecto.sol#103)
- isFeeExempt[msg.sender] = true (contracts/Reflecto.sol#99)
- isTxLimitExempt[msg.sender] = true (contracts/Reflecto.sol#100)
- marketingFeeReceiver = msg.sender (contracts/Reflecto.sol#107)
Reentrancy in DividendDistributor.deposit() (contracts/DividendDistributor.sol#98-114):
External calls:
- router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: msg.value}(0,path,address(this),block.timestamp) (contracts/DividendDistributor.sol#104-106)
State variables written after the call(s):
- dividendsPerShare = dividendsPerShare.add(dividendsPerShareAccuracyFactor.mul(amount).div(totalShares)) (contracts/DividendDistributor.sol#111-113)
- totalDividends = totalDividends.add(amount) (contracts/DividendDistributor.sol#110)
Reentrancy in DividendDistributor.distributeDividend(address) (contracts/DividendDistributor.sol#154-172):
External calls:
- BEP_TOKEN.transfer(shareholder,amount) (contracts/DividendDistributor.sol#163)
State variables written after the call(s):
- shareholderClaims[shareholder] = block.timestamp (contracts/DividendDistributor.sol#164)
Reentrancy in DividendDistributor.setShare(address,uint256) (contracts/DividendDistributor.sol#75-96):
External calls:
- distributeDividend(shareholder) (contracts/DividendDistributor.sol#81)
- BEP_TOKEN.transfer(shareholder,amount) (contracts/DividendDistributor.sol#163)
State variables written after the call(s):
- addShareholder(shareholder) (contracts/DividendDistributor.sol#85)
- shareholderIndexes[shareholder] = shareholders.length (contracts/DividendDistributor.sol#209)
- removeShareholder(shareholder) (contracts/DividendDistributor.sol#87)
- shareholderIndexes[shareholders[shareholders.length - 1]] = shareholderIndexes[shareholder] (contracts/DividendDistributor.sol#234-236)
- addShareholder(shareholder) (contracts/DividendDistributor.sol#85)
- shareholders.push(shareholder) (contracts/DividendDistributor.sol#210)
- removeShareholder(shareholder) (contracts/DividendDistributor.sol#87)
- shareholders[shareholderIndexes[shareholder]] = shareholders[shareholders.length - 1] (contracts/DividendDistributor.sol#231-233)
- shareholders.pop() (contracts/DividendDistributor.sol#237)
- totalShares = totalShares.sub(shares[shareholder].amount).add(amount) (contracts/DividendDistributor.sol#90)
Reentrancy in Reflecto.triggerAutoBuyback() (contracts/Reflecto.sol#473-480):
External calls:
- buyTokens(autoBuybackAmount,DEAD) (contracts/Reflecto.sol#474)
- router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: amount}(0,path,to,block.timestamp) (contracts/Reflecto.sol#487-489)
State variables written after the call(s):
- autoBuybackAccumulator = autoBuybackAccumulator.add(autoBuybackAmount) (contracts/Reflecto.sol#476)
- autoBuybackBlockLast = block.number (contracts/Reflecto.sol#475)
- autoBuybackEnabled = false (contracts/Reflecto.sol#478)
Reentrancy in Reflecto.triggerZeusBuyback(uint256,bool) (contracts/Reflecto.sol#458-467):
External calls:
- buyTokens(amount,DEAD) (contracts/Reflecto.sol#462)
- router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: amount}(0,path,to,block.timestamp) (contracts/Reflecto.sol#487-489)
State variables written after the call(s):
- buybackMultiplierTriggeredAt = block.timestamp (contracts/Reflecto.sol#464)
Apply the check-effects-interactions pattern.

Additional information: link

Reentrancy in Reflecto._transferFrom(address,address,uint256) (contracts/Reflecto.sol#262-306):
External calls:
- swapBack() (contracts/Reflecto.sol#274)
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(amountToSwap,0,path,address(this),block.timestamp) (contracts/Reflecto.sol#405-411)
- distributor.deposit{value: amountBNBReflection}() (contracts/Reflecto.sol#432)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,autoLiquidityReceiver,block.timestamp) (contracts/Reflecto.sol#437-444)
- triggerAutoBuyback() (contracts/Reflecto.sol#277)
- router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: amount}(0,path,to,block.timestamp) (contracts/Reflecto.sol#487-489)
- distributor.setShare(sender,_balances[sender]) (contracts/Reflecto.sol#294)
- distributor.setShare(recipient,_balances[recipient]) (contracts/Reflecto.sol#297-299)
- distributor.process(distributorGas) (contracts/Reflecto.sol#302)
External calls sending eth:
- swapBack() (contracts/Reflecto.sol#274)
- distributor.deposit{value: amountBNBReflection}() (contracts/Reflecto.sol#432)
- address(marketingFeeReceiver).transfer(amountBNBMarketing) (contracts/Reflecto.sol#433)
- address(gasWalletFeeReceiver).transfer(amountBNBGasWallet) (contracts/Reflecto.sol#434)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,autoLiquidityReceiver,block.timestamp) (contracts/Reflecto.sol#437-444)
- triggerAutoBuyback() (contracts/Reflecto.sol#277)
- router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: amount}(0,path,to,block.timestamp) (contracts/Reflecto.sol#487-489)
Event emitted after the call(s):
- Transfer(sender,recipient,amountReceived) (contracts/Reflecto.sol#304)
Reentrancy in Reflecto._transferFrom(address,address,uint256) (contracts/Reflecto.sol#262-306):
External calls:
- swapBack() (contracts/Reflecto.sol#274)
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(amountToSwap,0,path,address(this),block.timestamp) (contracts/Reflecto.sol#405-411)
- distributor.deposit{value: amountBNBReflection}() (contracts/Reflecto.sol#432)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,autoLiquidityReceiver,block.timestamp) (contracts/Reflecto.sol#437-444)
- triggerAutoBuyback() (contracts/Reflecto.sol#277)
- router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: amount}(0,path,to,block.timestamp) (contracts/Reflecto.sol#487-489)
External calls sending eth:
- swapBack() (contracts/Reflecto.sol#274)
- distributor.deposit{value: amountBNBReflection}() (contracts/Reflecto.sol#432)
- address(marketingFeeReceiver).transfer(amountBNBMarketing) (contracts/Reflecto.sol#433)
- address(gasWalletFeeReceiver).transfer(amountBNBGasWallet) (contracts/Reflecto.sol#434)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,autoLiquidityReceiver,block.timestamp) (contracts/Reflecto.sol#437-444)
- triggerAutoBuyback() (contracts/Reflecto.sol#277)
- router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: amount}(0,path,to,block.timestamp) (contracts/Reflecto.sol#487-489)
Event emitted after the call(s):
- Transfer(sender,address(this),feeAmount) (contracts/Reflecto.sol#375)
- amountReceived = takeFee(sender,recipient,amount) (contracts/Reflecto.sol#287-289)
Reentrancy in Reflecto.constructor(address,address) (contracts/Reflecto.sol#90-127):
External calls:
- pair = IDEXFactory(router.factory()).createPair(WBNB,address(this)) (contracts/Reflecto.sol#94)
Event emitted after the call(s):
- Approval(msg.sender,spender,amount) (contracts/Reflecto.sol#233)
- approve(address(pair),_totalSupply) (contracts/Reflecto.sol#111)
- Approval(msg.sender,spender,amount) (contracts/Reflecto.sol#233)
- approve(_dexRouter,_totalSupply) (contracts/Reflecto.sol#110)
- Transfer(address(0),msg.sender,_totalSupply) (contracts/Reflecto.sol#126)
Reentrancy in Reflecto.swapBack() (contracts/Reflecto.sol#388-447):
External calls:
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(amountToSwap,0,path,address(this),block.timestamp) (contracts/Reflecto.sol#405-411)
- distributor.deposit{value: amountBNBReflection}() (contracts/Reflecto.sol#432)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,autoLiquidityReceiver,block.timestamp) (contracts/Reflecto.sol#437-444)
External calls sending eth:
- distributor.deposit{value: amountBNBReflection}() (contracts/Reflecto.sol#432)
- address(marketingFeeReceiver).transfer(amountBNBMarketing) (contracts/Reflecto.sol#433)
- address(gasWalletFeeReceiver).transfer(amountBNBGasWallet) (contracts/Reflecto.sol#434)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,autoLiquidityReceiver,block.timestamp) (contracts/Reflecto.sol#437-444)
Event emitted after the call(s):
- AutoLiquify(amountBNBLiquidity,amountToLiquify) (contracts/Reflecto.sol#445)
Reentrancy in Reflecto.triggerZeusBuyback(uint256,bool) (contracts/Reflecto.sol#458-467):
External calls:
- buyTokens(amount,DEAD) (contracts/Reflecto.sol#462)
- router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: amount}(0,path,to,block.timestamp) (contracts/Reflecto.sol#487-489)
Event emitted after the call(s):
- BuybackMultiplierActive(buybackMultiplierLength) (contracts/Reflecto.sol#465)
Apply the check-effects-interactions pattern.

Additional information: link

DividendDistributor.shouldDistribute(address) (contracts/DividendDistributor.sol#144-152) uses timestamp for comparisons
Dangerous comparisons:
- shareholderClaims[shareholder] + minPeriod < block.timestamp && getUnpaidEarnings(shareholder) > minDistribution (contracts/DividendDistributor.sol#149-151)
Reflecto.getMultipliedFee() (contracts/Reflecto.sol#343-363) uses timestamp for comparisons
Dangerous comparisons:
- launchedAtTimestamp + 86400 > block.timestamp (contracts/Reflecto.sol#344)
- buybackMultiplierTriggeredAt.add(buybackMultiplierLength) > block.timestamp (contracts/Reflecto.sol#347-348)
Reflecto.shouldSwapBack() (contracts/Reflecto.sol#380-386) uses timestamp for comparisons
Dangerous comparisons:
- msg.sender != pair && ! inSwap && swapEnabled && _balances[address(this)] >= swapThreshold (contracts/Reflecto.sol#381-385)
Reflecto.isOverLiquified(uint256,uint256) (contracts/Reflecto.sol#633-639) uses timestamp for comparisons
Dangerous comparisons:
- getLiquidityBacking(accuracy) > target (contracts/Reflecto.sol#638)
Reflecto.permit(address,address,uint256,uint256,bool,uint8,bytes32,bytes32) (contracts/Reflecto.sol#658-697) uses timestamp for comparisons
Dangerous comparisons:
- require(bool,string)(expiry == 0 || block.timestamp <= expiry,Reflecto/permit-expired) (contracts/Reflecto.sol#690-693)
Avoid relying on block.timestamp.

Additional information: link

Reflecto.onlyBuybacker() (contracts/Reflecto.sol#209-212) compares to a boolean constant:
-require(bool,string)(buyBacker[msg.sender] == true,) (contracts/Reflecto.sol#210)
Remove the equality to the boolean constant.

Additional information: link

DividendDistributor.process(uint256) (contracts/DividendDistributor.sol#116-142) has costly operations inside a loop:
- currentIndex = 0 (contracts/DividendDistributor.sol#130)
DividendDistributor.distributeDividend(address) (contracts/DividendDistributor.sol#154-172) has costly operations inside a loop:
- totalDistributed = totalDistributed.add(amount) (contracts/DividendDistributor.sol#162)
DividendDistributor.process(uint256) (contracts/DividendDistributor.sol#116-142) has costly operations inside a loop:
- currentIndex ++ (contracts/DividendDistributor.sol#139)
Use a local variable to hold the loop computation result.

Additional information: link

Reflecto.launched() (contracts/Reflecto.sol#517-519) is never used and should be removed
SafeMath.div(uint256,uint256,string) (contracts/libs/SafeMath.sol#100-109) is never used and should be removed
SafeMath.mod(uint256,uint256) (contracts/libs/SafeMath.sol#85-87) is never used and should be removed
SafeMath.mod(uint256,uint256,string) (contracts/libs/SafeMath.sol#111-120) is never used and should be removed
SafeMath.tryAdd(uint256,uint256) (contracts/libs/SafeMath.sol#8-18) is never used and should be removed
SafeMath.tryDiv(uint256,uint256) (contracts/libs/SafeMath.sol#47-56) is never used and should be removed
SafeMath.tryMod(uint256,uint256) (contracts/libs/SafeMath.sol#58-67) is never used and should be removed
SafeMath.tryMul(uint256,uint256) (contracts/libs/SafeMath.sol#31-45) is never used and should be removed
SafeMath.trySub(uint256,uint256) (contracts/libs/SafeMath.sol#20-29) is never used and should be removed
Remove unused functions.

Additional information: link

Reflecto._maxTxAmount (contracts/Reflecto.sol#27) is set pre-construction with a non-constant function or state variable:
- _totalSupply.div(400)
Reflecto.swapThreshold (contracts/Reflecto.sol#82) is set pre-construction with a non-constant function or state variable:
- _totalSupply / 2000
Remove any initialization of state variables via non-constant state variables or function calls. If variables must be set upon contract deployment, locate initialization in the constructor instead.

Additional information: link

Pragma version^0.8.0 (contracts/DistributorFactory.sol#2) allows old versions
Pragma version^0.8.0 (contracts/DividendDistributor.sol#2) allows old versions
Pragma version^0.8.0 (contracts/Reflecto.sol#2) allows old versions
Pragma version^0.8.0 (contracts/libs/Auth.sol#2) allows old versions
Pragma version^0.8.0 (contracts/libs/IBEP20.sol#2) allows old versions
Pragma version^0.8.0 (contracts/libs/IDEX.sol#2) allows old versions
Pragma version^0.8.0 (contracts/libs/IDividendDistributor.sol#2) allows old versions
Pragma version^0.8.0 (contracts/libs/SafeMath.sol#2) allows old versions
solc-0.8.0 is not recommended for deployment
Deploy with any of the following Solidity versions: 0.5.16 - 0.5.17, 0.6.11 - 0.6.12, 0.7.5 - 0.7.6 Use a simple pragma version that allows any of these versions. Consider using the latest version of Solidity for testing.

Additional information: link

Struct DistributorFactory.structDistributors (contracts/DistributorFactory.sol#12-17) is not in CapWords
Parameter DistributorFactory.addDistributor(address,address,address)._router (contracts/DistributorFactory.sol#32) is not in mixedCase
Parameter DistributorFactory.addDistributor(address,address,address)._BEP_TOKEN (contracts/DistributorFactory.sol#33) is not in mixedCase
Parameter DistributorFactory.addDistributor(address,address,address)._wbnb (contracts/DistributorFactory.sol#34) is not in mixedCase
Parameter DistributorFactory.getShareholderAmount(address,address)._BEP_TOKEN (contracts/DistributorFactory.sol#81) is not in mixedCase
Parameter DistributorFactory.deleteDistributor(address)._BEP_TOKEN (contracts/DistributorFactory.sol#92) is not in mixedCase
Parameter DistributorFactory.getDistributor(address)._BEP_TOKEN (contracts/DistributorFactory.sol#153) is not in mixedCase
Parameter DistributorFactory.setDistributionCriteria(address,uint256,uint256)._BEP_TOKEN (contracts/DistributorFactory.sol#166) is not in mixedCase
Parameter DistributorFactory.setDistributionCriteria(address,uint256,uint256)._minPeriod (contracts/DistributorFactory.sol#167) is not in mixedCase
Parameter DistributorFactory.setDistributionCriteria(address,uint256,uint256)._minDistribution (contracts/DistributorFactory.sol#168) is not in mixedCase
Variable DistributorFactory._token (contracts/DistributorFactory.sol#10) is not in mixedCase
Parameter DividendDistributor.setDistributionCriteria(uint256,uint256)._minPeriod (contracts/DividendDistributor.sol#68) is not in mixedCase
Parameter DividendDistributor.setDistributionCriteria(uint256,uint256)._minDistribution (contracts/DividendDistributor.sol#69) is not in mixedCase
Variable DividendDistributor._token (contracts/DividendDistributor.sol#12) is not in mixedCase
Variable DividendDistributor.BEP_TOKEN (contracts/DividendDistributor.sol#20) is not in mixedCase
Variable DividendDistributor.WBNB (contracts/DividendDistributor.sol#22) is not in mixedCase
Parameter Reflecto.addDistributor(address,address,address)._dexRouter (contracts/Reflecto.sol#138) is not in mixedCase
Parameter Reflecto.addDistributor(address,address,address)._BEP_TOKEN (contracts/Reflecto.sol#139) is not in mixedCase
Parameter Reflecto.addDistributor(address,address,address)._WBNB (contracts/Reflecto.sol#140) is not in mixedCase
Parameter Reflecto.deleteDistributor(address)._BEP_TOKEN (contracts/Reflecto.sol#145) is not in mixedCase
Parameter Reflecto.getDistributer(address)._BEP_TOKEN (contracts/Reflecto.sol#157) is not in mixedCase
Parameter Reflecto.getTotalDividends(address)._BEP_TOKEN (contracts/Reflecto.sol#165) is not in mixedCase
Parameter Reflecto.setAutoBuybackSettings(bool,uint256,uint256,uint256)._enabled (contracts/Reflecto.sol#493) is not in mixedCase
Parameter Reflecto.setAutoBuybackSettings(bool,uint256,uint256,uint256)._cap (contracts/Reflecto.sol#494) is not in mixedCase
Parameter Reflecto.setAutoBuybackSettings(bool,uint256,uint256,uint256)._amount (contracts/Reflecto.sol#495) is not in mixedCase
Parameter Reflecto.setAutoBuybackSettings(bool,uint256,uint256,uint256)._period (contracts/Reflecto.sol#496) is not in mixedCase
Parameter Reflecto.setFees(uint256,uint256,uint256,uint256,uint256,uint256)._liquidityFee (contracts/Reflecto.sol#557) is not in mixedCase
Parameter Reflecto.setFees(uint256,uint256,uint256,uint256,uint256,uint256)._buybackFee (contracts/Reflecto.sol#558) is not in mixedCase
Parameter Reflecto.setFees(uint256,uint256,uint256,uint256,uint256,uint256)._gasWalletFee (contracts/Reflecto.sol#559) is not in mixedCase
Parameter Reflecto.setFees(uint256,uint256,uint256,uint256,uint256,uint256)._reflectionFee (contracts/Reflecto.sol#560) is not in mixedCase
Parameter Reflecto.setFees(uint256,uint256,uint256,uint256,uint256,uint256)._marketingFee (contracts/Reflecto.sol#561) is not in mixedCase
Parameter Reflecto.setFees(uint256,uint256,uint256,uint256,uint256,uint256)._feeDenominator (contracts/Reflecto.sol#562) is not in mixedCase
Parameter Reflecto.setFeeReceivers(address,address,address)._autoLiquidityReceiver (contracts/Reflecto.sol#579) is not in mixedCase
Parameter Reflecto.setFeeReceivers(address,address,address)._marketingFeeReceiver (contracts/Reflecto.sol#580) is not in mixedCase
Parameter Reflecto.setFeeReceivers(address,address,address)._gasWalletReceiver (contracts/Reflecto.sol#581) is not in mixedCase
Parameter Reflecto.setSwapBackSettings(bool,uint256)._enabled (contracts/Reflecto.sol#588) is not in mixedCase
Parameter Reflecto.setSwapBackSettings(bool,uint256)._amount (contracts/Reflecto.sol#588) is not in mixedCase
Parameter Reflecto.setTargetLiquidity(uint256,uint256)._target (contracts/Reflecto.sol#596) is not in mixedCase
Parameter Reflecto.setTargetLiquidity(uint256,uint256)._denominator (contracts/Reflecto.sol#596) is not in mixedCase
Parameter Reflecto.setDistributionCriteria(address,uint256,uint256)._BEP_TOKEN (contracts/Reflecto.sol#605) is not in mixedCase
Parameter Reflecto.setDistributionCriteria(address,uint256,uint256)._minPeriod (contracts/Reflecto.sol#606) is not in mixedCase
Parameter Reflecto.setDistributionCriteria(address,uint256,uint256)._minDistribution (contracts/Reflecto.sol#607) is not in mixedCase
Variable Reflecto.BUSD (contracts/Reflecto.sol#15) is not in mixedCase
Variable Reflecto.Crypter (contracts/Reflecto.sol#16) is not in mixedCase
Variable Reflecto.WBNB (contracts/Reflecto.sol#17) is not in mixedCase
Variable Reflecto.DEAD (contracts/Reflecto.sol#18) is not in mixedCase
Variable Reflecto.ZERO (contracts/Reflecto.sol#19) is not in mixedCase
Variable Reflecto.DEAD_NON_CHECKSUM (contracts/Reflecto.sol#20) is not in mixedCase
Constant Reflecto._name (contracts/Reflecto.sol#22) is not in UPPER_CASE_WITH_UNDERSCORES
Constant Reflecto._symbol (contracts/Reflecto.sol#23) is not in UPPER_CASE_WITH_UNDERSCORES
Constant Reflecto._decimals (contracts/Reflecto.sol#24) is not in UPPER_CASE_WITH_UNDERSCORES
Variable Reflecto._totalSupply (contracts/Reflecto.sol#26) is not in mixedCase
Variable Reflecto._maxTxAmount (contracts/Reflecto.sol#27) is not in mixedCase
Variable Reflecto._balances (contracts/Reflecto.sol#29) is not in mixedCase
Variable Reflecto._allowances (contracts/Reflecto.sol#31) is not in mixedCase
Variable Reflecto.DOMAIN_SEPARATOR (contracts/Reflecto.sol#76) is not in mixedCase
Function IDEXRouter.WETH() (contracts/libs/IDEX.sol#7) is not in mixedCase
Follow the Solidity naming convention.

Additional information: link

Reentrancy in Reflecto._transferFrom(address,address,uint256) (contracts/Reflecto.sol#262-306):
External calls:
- swapBack() (contracts/Reflecto.sol#274)
- address(marketingFeeReceiver).transfer(amountBNBMarketing) (contracts/Reflecto.sol#433)
- address(gasWalletFeeReceiver).transfer(amountBNBGasWallet) (contracts/Reflecto.sol#434)
External calls sending eth:
- swapBack() (contracts/Reflecto.sol#274)
- distributor.deposit{value: amountBNBReflection}() (contracts/Reflecto.sol#432)
- address(marketingFeeReceiver).transfer(amountBNBMarketing) (contracts/Reflecto.sol#433)
- address(gasWalletFeeReceiver).transfer(amountBNBGasWallet) (contracts/Reflecto.sol#434)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,autoLiquidityReceiver,block.timestamp) (contracts/Reflecto.sol#437-444)
- triggerAutoBuyback() (contracts/Reflecto.sol#277)
- router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: amount}(0,path,to,block.timestamp) (contracts/Reflecto.sol#487-489)
State variables written after the call(s):
- _balances[sender] = _balances[sender].sub(amount,Insufficient Balance) (contracts/Reflecto.sol#282-285)
- _balances[recipient] = _balances[recipient].add(amountReceived) (contracts/Reflecto.sol#291)
- amountReceived = takeFee(sender,recipient,amount) (contracts/Reflecto.sol#287-289)
- _balances[address(this)] = _balances[address(this)].add(feeAmount) (contracts/Reflecto.sol#374)
- triggerAutoBuyback() (contracts/Reflecto.sol#277)
- autoBuybackAccumulator = autoBuybackAccumulator.add(autoBuybackAmount) (contracts/Reflecto.sol#476)
- triggerAutoBuyback() (contracts/Reflecto.sol#277)
- autoBuybackBlockLast = block.number (contracts/Reflecto.sol#475)
- triggerAutoBuyback() (contracts/Reflecto.sol#277)
- autoBuybackEnabled = false (contracts/Reflecto.sol#478)
- triggerAutoBuyback() (contracts/Reflecto.sol#277)
- inSwap = true (contracts/Reflecto.sol#85)
- inSwap = false (contracts/Reflecto.sol#87)
Event emitted after the call(s):
- Transfer(sender,address(this),feeAmount) (contracts/Reflecto.sol#375)
- amountReceived = takeFee(sender,recipient,amount) (contracts/Reflecto.sol#287-289)
- Transfer(sender,recipient,amountReceived) (contracts/Reflecto.sol#304)
Reentrancy in Reflecto.swapBack() (contracts/Reflecto.sol#388-447):
External calls:
- address(marketingFeeReceiver).transfer(amountBNBMarketing) (contracts/Reflecto.sol#433)
- address(gasWalletFeeReceiver).transfer(amountBNBGasWallet) (contracts/Reflecto.sol#434)
External calls sending eth:
- distributor.deposit{value: amountBNBReflection}() (contracts/Reflecto.sol#432)
- address(marketingFeeReceiver).transfer(amountBNBMarketing) (contracts/Reflecto.sol#433)
- address(gasWalletFeeReceiver).transfer(amountBNBGasWallet) (contracts/Reflecto.sol#434)
- router.addLiquidityETH{value: amountBNBLiquidity}(address(this),amountToLiquify,0,0,autoLiquidityReceiver,block.timestamp) (contracts/Reflecto.sol#437-444)
Event emitted after the call(s):
- AutoLiquify(amountBNBLiquidity,amountToLiquify) (contracts/Reflecto.sol#445)
Apply the check-effects-interactions pattern.

Additional information: link

Variable IDEXRouter.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountADesired (contracts/libs/IDEX.sol#12) is too similar to IDEXRouter.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountBDesired (contracts/libs/IDEX.sol#13)
Prevent variables from having similar names.

Additional information: link

Reflecto.slitherConstructorVariables() (contracts/Reflecto.sol#11-701) uses literals with too many digits:
- DEAD = 0x000000000000000000000000000000000000dEaD (contracts/Reflecto.sol#18)
Reflecto.slitherConstructorVariables() (contracts/Reflecto.sol#11-701) uses literals with too many digits:
- ZERO = 0x0000000000000000000000000000000000000000 (contracts/Reflecto.sol#19)
Reflecto.slitherConstructorVariables() (contracts/Reflecto.sol#11-701) uses literals with too many digits:
- DEAD_NON_CHECKSUM = 0x000000000000000000000000000000000000dEaD (contracts/Reflecto.sol#20)
Reflecto.slitherConstructorVariables() (contracts/Reflecto.sol#11-701) uses literals with too many digits:
- distributorGas = 500000 (contracts/Reflecto.sol#73)
Use: Ether suffix, Time suffix, or The scientific notation

Additional information: link

Reflecto.BUSD (contracts/Reflecto.sol#15) is never used in Reflecto (contracts/Reflecto.sol#11-701)
Reflecto.Crypter (contracts/Reflecto.sol#16) is never used in Reflecto (contracts/Reflecto.sol#11-701)
Reflecto.DEAD_NON_CHECKSUM (contracts/Reflecto.sol#20) is never used in Reflecto (contracts/Reflecto.sol#11-701)
Remove unused state variables.

Additional information: link

DividendDistributor.dividendsPerShareAccuracyFactor (contracts/DividendDistributor.sol#35) should be constant
Reflecto.BUSD (contracts/Reflecto.sol#15) should be constant
Reflecto.Crypter (contracts/Reflecto.sol#16) should be constant
Reflecto.DEAD (contracts/Reflecto.sol#18) should be constant
Reflecto.DEAD_NON_CHECKSUM (contracts/Reflecto.sol#20) should be constant
Reflecto.ZERO (contracts/Reflecto.sol#19) should be constant
Reflecto._totalSupply (contracts/Reflecto.sol#26) should be constant
Add the constant attributes to state variables that never change.

Additional information: link

getDistributorsAddresses() should be declared external:
- DistributorFactory.getDistributorsAddresses() (contracts/DistributorFactory.sol#120-122)
getDistributor(address) should be declared external:
- DistributorFactory.getDistributor(address) (contracts/DistributorFactory.sol#153-159)
getTotalDistributers() should be declared external:
- DistributorFactory.getTotalDistributers() (contracts/DistributorFactory.sol#161-163)
launch() should be declared external:
- Reflecto.launch() (contracts/Reflecto.sol#521-525)
authorize(address) should be declared external:
- Auth.authorize(address) (contracts/libs/Auth.sol#32-34)
unauthorize(address) should be declared external:
- Auth.unauthorize(address) (contracts/libs/Auth.sol#39-41)
transferOwnership(address) should be declared external:
- Auth.transferOwnership(address) (contracts/libs/Auth.sol#60-64)
Use the external attribute for functions never called from the contract.

Additional information: link

Token is deployed only at one blockchain

Contract has 0% buy tax and 10% sell tax.
Taxes are low but contract ownership is not renounced. Token has a high risk of becoming a honeypot.

Unable to find token on CoinHunt

Additional information: link

Token is not listed at Mobula.Finance

Additional information: link

Unable to find code repository for the project

Young tokens have high risks of scam / price dump / death

Token has relatively low CoinGecko rank

Young tokens have high risks of price dump / death

Young tokens have high risks of price dump / death