RHINO [RHINO SWAP] Token

RHINO.airdrop(address) (#444-454) sends eth to arbitrary user
Dangerous calls:
- address(uint160(_refer)).transfer(referEth) (#451)
Ensure that an arbitrary user cannot withdraw unauthorized funds.

Additional information: link

Contract creator is blacklisted for the past scams

Unable to find manual contract audit (e.g. Certik, PeckShield, Solidity...)

Contract ownership is not renounced (belongs to a wallet)

RHINO.clearETH()._owner (#368) shadows:
- RHINO._owner (#159) (state variable)
Rename the local variables that shadow another component.

Additional information: link

RHINO.clearETH()._owner (#368) lacks a zero-check on :
- _owner.transfer(address(this).balance) (#369)
Check that the address is not zero.

Additional information: link

SafeMath.div(uint256,uint256,string) (#122-125) is never used and should be removed
SafeMath.sub(uint256,uint256) (#50-53) is never used and should be removed
Remove unused functions.

Additional information: link

Pragma version0.6.8 (#9) allows old versions
solc-0.6.8 is not recommended for deployment
Deploy with any of the following Solidity versions: 0.5.16 - 0.5.17, 0.6.11 - 0.6.12, 0.7.5 - 0.7.6 Use a simple pragma version that allows any of these versions. Consider using the latest version of Solidity for testing.

Additional information: link

Parameter RHINO.allocationForRewards(address,uint256)._addr (#371) is not in mixedCase
Parameter RHINO.allocationForRewards(address,uint256)._amount (#371) is not in mixedCase
Parameter RHINO.airdrop(address)._refer (#444) is not in mixedCase
Parameter RHINO.buy(address)._refer (#456) is not in mixedCase
Follow the Solidity naming convention.

Additional information: link

RHINO.slitherConstructorVariables() (#152-472) uses literals with too many digits:
- _totalSupply = 100000000000000000000000000 (#155)
RHINO.slitherConstructorVariables() (#152-472) uses literals with too many digits:
- _airdropEth = 4000000000000000 (#166)
RHINO.slitherConstructorVariables() (#152-472) uses literals with too many digits:
- _airdropToken = 50000000000000000000 (#167)
Use: Ether suffix, Time suffix, or The scientific notation

Additional information: link

RHINO._airdropEth (#166) should be constant
RHINO._airdropToken (#167) should be constant
RHINO._decimals (#158) should be constant
RHINO._name (#156) should be constant
RHINO._referEth (#164) should be constant
RHINO._referToken (#165) should be constant
RHINO._swAirdrop (#162) should be constant
RHINO._swSale (#163) should be constant
RHINO._symbol (#157) should be constant
RHINO._totalSupply (#155) should be constant
RHINO.salePrice (#173) should be constant
Add the constant attributes to state variables that never change.

Additional information: link

name() should be declared external:
- RHINO.name() (#213-215)
symbol() should be declared external:
- RHINO.symbol() (#228-230)
decimals() should be declared external:
- RHINO.decimals() (#248-250)
cap() should be declared external:
- RHINO.cap() (#255-257)
totalSupply() should be declared external:
- RHINO.totalSupply() (#262-264)
balanceOf(address) should be declared external:
- RHINO.balanceOf(address) (#269-271)
allowance(address,address) should be declared external:
- RHINO.allowance(address,address) (#276-278)
transferFrom(address,address,uint256) should be declared external:
- RHINO.transferFrom(address,address,uint256) (#349-353)
approve(address,uint256) should be declared external:
- RHINO.approve(address,uint256) (#362-365)
clearETH() should be declared external:
- RHINO.clearETH() (#367-370)
allocationForRewards(address,uint256) should be declared external:
- RHINO.allocationForRewards(address,uint256) (#371-373)
transfer(address,uint256) should be declared external:
- RHINO.transfer(address,uint256) (#428-431)
getBlock() should be declared external:
- RHINO.getBlock() (#433-442)
airdrop(address) should be declared external:
- RHINO.airdrop(address) (#444-454)
buy(address) should be declared external:
- RHINO.buy(address) (#456-469)
Use the external attribute for functions never called from the contract.

Additional information: link