EverRise is a blockchain technology company focused on increasing accessibility to decentralized finance by bringing security solutions to the space. Through an innovative ecosystem of decentralized applications, EverRise provides investors and developers the tools to access the widest possible market with the maximum level of security.
The EverRise token is a multi-chain, collateralized cryptocurrency that powers the EverRise dApp ecosystem.
Reentrancy in EverRise._transfer(address,address,uint256) (#1360-1466):
External calls:
- swapTokens(contractTokenBalance) (#1402)
- IERC20(tokenAddress).approve(address(uniswapV2Router),tokenAmount) (#1549)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,toAddress,block.timestamp) (#1552-1558)
- tokensReceived = buyBackTokens(nextBuybackAmount) (#1417)
- amounts = uniswapV2Router.swapExactETHForTokens{value: amount}(0,path,toAddress,block.timestamp.add(300)) (#1574-1581)
External calls sending eth:
- swapTokens(contractTokenBalance) (#1402)
- recipient.transfer(amount) (#1776)
- tokensReceived = buyBackTokens(nextBuybackAmount) (#1417)
- amounts = uniswapV2Router.swapExactETHForTokens{value: amount}(0,path,toAddress,block.timestamp.add(300)) (#1574-1581)
State variables written after the call(s):
- tokensReceived = buyBackTokens(nextBuybackAmount) (#1417)
- _inSwapAndLiquify = _TRUE (#773)
- _inSwapAndLiquify = _FALSE (#777)
Reentrancy in EverRise._transfer(address,address,uint256) (#1360-1466):
External calls:
- swapTokens(contractTokenBalance) (#1402)
- IERC20(tokenAddress).approve(address(uniswapV2Router),tokenAmount) (#1549)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,toAddress,block.timestamp) (#1552-1558)
- tokensReceived = buyBackTokens(nextBuybackAmount) (#1417)
- amounts = uniswapV2Router.swapExactETHForTokens{value: amount}(0,path,toAddress,block.timestamp.add(300)) (#1574-1581)
- distributeStakingRewards(tokensReceived) (#1419)
- stakeToken.createRewards(address(this),amount) (#1638)
- stakeToken.deliver(amount) (#1639)
External calls sending eth:
- swapTokens(contractTokenBalance) (#1402)
- recipient.transfer(amount) (#1776)
- tokensReceived = buyBackTokens(nextBuybackAmount) (#1417)
- amounts = uniswapV2Router.swapExactETHForTokens{value: amount}(0,path,toAddress,block.timestamp.add(300)) (#1574-1581)
State variables written after the call(s):
- _recordPotentialLiquidityAddTransaction(to) (#1462)
- _checkingTokens = _TRUE (#782)
- _checkingTokens = _FALSE (#786)
- _tokenTransfer(from,to,amount,takeFee) (#1465)
- _tOwned[address(this)] = afterAmount (#1749)
- _tOwned[sender] = senderAfter (#1670)
- _tOwned[recipient] = recipientAfter (#1674)
- buyVolume = 0 (#1421)
- buyVolume = buyVolume.add(amount) (#1440)
- _tokenTransfer(from,to,amount,takeFee) (#1465)
- liquidityFee = _previousLiquidityFee (#1770)
- liquidityFee = 0 (#1766)
- nextBuybackAmount = 0 (#1420)
- nextBuybackAmount = nextBuybackAmount.add(balance.div(100)) (#1435)
- sellVolume = 0 (#1422)
- sellVolume = sellVolume.add(amount) (#1430)
Apply the check-effects-interactions pattern.
Additional information: link
EverRise.swapETHForTokens(address,address,uint256) (#1587-1608) sends eth to arbitrary user
Dangerous calls:
- uniswapV2Router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: amount}(0,path,toAddress,block.timestamp.add(300)) (#1598-1605)
EverRise.swapETHForTokensNoFee(address,address,uint256) (#1563-1585) sends eth to arbitrary user
Dangerous calls:
- amounts = uniswapV2Router.swapExactETHForTokens{value: amount}(0,path,toAddress,block.timestamp.add(300)) (#1574-1581)
Ensure that an arbitrary user cannot withdraw unauthorized funds.
Additional information: link
EverRise.manualBuyback(uint256,uint256) (#946-962) contains a tautology or contradiction:
- require(bool,string)(amount > 0 && numOfDecimals >= 0,Invalid Input) (#950)
Fix the incorrect comparison by changing the value type or the comparison.
Additional information: link
Combination 1: Reentrancy vulnerabilities + Functions that send Ether to arbitraty destination. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.
EverRise._validateIfLiquidityAdd(address,uint112) (#1853-1885) uses a dangerous strict equality:
- _lastTransfer.origin == tx.origin (#1860)
EverRise.validateDuringTradingCoolDown(address,address,uint256) (#1799-1817) uses a dangerous strict equality:
- disallow = lastCoolDownTrade[to] == block.number || lastCoolDownTrade[tx.origin] == block.number (#1805)
EverRise.balanceOf(address) (#1213-1231) uses a dangerous strict equality:
- ! inSwapAndLiquify() && lastTransfer.blockNumber == uint32(block.number) && account == lastTransfer.to (#1221-1223)
EverRise._clearTransferIfNeeded() (#1495-1507) uses a dangerous strict equality:
- lastTransfer.blockNumber == uint32(block.number) (#1497)
EverRise.validateDuringTradingCoolDown(address,address,uint256) (#1799-1817) uses a dangerous strict equality:
- disallow = lastCoolDownTrade[from] == block.number || lastCoolDownTrade[tx.origin] == block.number (#1809)
Don't use strict equality to determine if an account has enough Ether or tokens.
Additional information: link
Token is flagged by TokenSniffer (admin)
Contract ownership is not renounced (belongs to a wallet)
EverRise.everRiseEcosystemContractRemove(address) (#1193-1211) has costly operations inside a loop:
- allEcosystemContracts.pop() (#1204)
EverRise.authorizedSwapTokenRemove(address) (#1311-1327) has costly operations inside a loop:
- allAuthorizedSwapTokens.pop() (#1321)
Use a local variable to hold the loop computation result.
Additional information: link
Redundant expression "this (#551)" inContext (#545-554)
Remove redundant statements if they congest code but offer no value.
Additional information: link
PairHelper.isContract(address) (#530-542) uses assembly
- INLINE ASM (#537-539)
Do not use evm assembly.
Additional information: link
SafeMath.mod(uint256,uint256,string) (#488-495) is never used and should be removed
Context._msgData() (#550-553) is never used and should be removed
SafeMath.mod(uint256,uint256) (#484-486) is never used and should be removed
Remove unused functions.
Additional information: link
EverRise._validateIfLiquidityAdd(address,uint112) (#1853-1885) uses tx.origin for authorization: _lastTransfer.origin == tx.origin (#1860)
Do not use tx.origin for authorization.
Additional information: link
Variable IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountADesired (#250) is too similar to IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountBDesired (#251)
Variable PairHelper.token0Selector (#500-501) is too similar to PairHelper.token1Selector (#502-503)
Prevent variables from having similar names.
Additional information: link
EverRise.validateDuringTradingCoolDown(address,address,uint256).disallow (#1801) is a local variable never initialized
EverRise.buyBackTokens(uint256).tokensReceived (#1528) is a local variable never initialized
Initialize all the variables. If a variable is meant to be initialized to zero, explicitly set it to zero to improve code readability.
Additional information: link
EverRise.swapTokensForEth(address,address,uint256) (#1539-1561) ignores return value by IERC20(tokenAddress).approve(address(uniswapV2Router),tokenAmount) (#1549)
EverRise.swapTokensForTokens(address,address,address,uint256) (#1610-1634) ignores return value by IERC20(fromTokenAddress).approve(address(uniswapV2Router),tokenAmount) (#1622)
Ensure that all the return values of the function calls are used.
Additional information: link
EverRise._tradeStartMaxTxAmount (#670) should be constant
EverRise.buyBackTriggerVolume (#685) should be constant
Add the constant attributes to state variables that never change.
Additional information: link
authorizedSwapTokenRemove(address) should be declared external:
- EverRise.authorizedSwapTokenRemove(address) (#1311-1327)
Use the external attribute for functions never called from the contract.
Additional information: link
solc-0.8.8 is known to contain severe issues (https://solidity.readthedocs.io/en/latest/bugs.html)
Pragma version0.8.8 (#30) is known to contain severe issues (https://solidity.readthedocs.io/en/latest/bugs.html)
Deploy with any of the following Solidity versions: 0.5.16 - 0.5.17, 0.6.11 - 0.6.12, 0.7.5 - 0.7.6 Use a simple pragma version that allows any of these versions. Consider using the latest version of Solidity for testing.
Additional information: link
EverRise.permit(address,address,uint256,uint256,uint8,bytes32,bytes32).owner (#1707) shadows:
- Ownable.owner() (#612-614) (function)
EverRise.allowance(address,address).owner (#1242) shadows:
- Ownable.owner() (#612-614) (function)
EverRise._approve(address,address,uint256).owner (#1349) shadows:
- Ownable.owner() (#612-614) (function)
EverRise._transfer(address,address,uint256)._owner (#1371) shadows:
- Ownable._owner (#557) (state variable)
Rename the local variables that shadow another component.
Additional information: link
Reentrancy in EverRise.transferFromWithPermit(address,address,uint256,uint256,uint8,bytes32,bytes32) (#895-915):
External calls:
- _transfer(sender,recipient,amount) (#905)
- stakeToken.createRewards(address(this),amount) (#1638)
- stakeToken.deliver(amount) (#1639)
- IERC20(tokenAddress).approve(address(uniswapV2Router),tokenAmount) (#1549)
- amounts = uniswapV2Router.swapExactETHForTokens{value: amount}(0,path,toAddress,block.timestamp.add(300)) (#1574-1581)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,toAddress,block.timestamp) (#1552-1558)
External calls sending eth:
- _transfer(sender,recipient,amount) (#905)
- recipient.transfer(amount) (#1776)
- amounts = uniswapV2Router.swapExactETHForTokens{value: amount}(0,path,toAddress,block.timestamp.add(300)) (#1574-1581)
State variables written after the call(s):
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#906-913)
- _allowances[owner][spender] = amount (#1356)
Reentrancy in EverRise._transfer(address,address,uint256) (#1360-1466):
External calls:
- swapTokens(contractTokenBalance) (#1402)
- IERC20(tokenAddress).approve(address(uniswapV2Router),tokenAmount) (#1549)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,toAddress,block.timestamp) (#1552-1558)
External calls sending eth:
- swapTokens(contractTokenBalance) (#1402)
- recipient.transfer(amount) (#1776)
State variables written after the call(s):
- nextBuybackAmount = address(this).balance (#1413)
Reentrancy in EverRise.transferFrom(address,address,uint256) (#878-893):
External calls:
- _transfer(sender,recipient,amount) (#883)
- stakeToken.createRewards(address(this),amount) (#1638)
- stakeToken.deliver(amount) (#1639)
- IERC20(tokenAddress).approve(address(uniswapV2Router),tokenAmount) (#1549)
- amounts = uniswapV2Router.swapExactETHForTokens{value: amount}(0,path,toAddress,block.timestamp.add(300)) (#1574-1581)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,toAddress,block.timestamp) (#1552-1558)
External calls sending eth:
- _transfer(sender,recipient,amount) (#883)
- recipient.transfer(amount) (#1776)
- amounts = uniswapV2Router.swapExactETHForTokens{value: amount}(0,path,toAddress,block.timestamp.add(300)) (#1574-1581)
State variables written after the call(s):
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#884-891)
- _allowances[owner][spender] = amount (#1356)
Reentrancy in EverRise._transfer(address,address,uint256) (#1360-1466):
External calls:
- swapTokens(contractTokenBalance) (#1402)
- IERC20(tokenAddress).approve(address(uniswapV2Router),tokenAmount) (#1549)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,toAddress,block.timestamp) (#1552-1558)
- tokensReceived = buyBackTokens(nextBuybackAmount) (#1417)
- amounts = uniswapV2Router.swapExactETHForTokens{value: amount}(0,path,toAddress,block.timestamp.add(300)) (#1574-1581)
- distributeStakingRewards(tokensReceived) (#1419)
- stakeToken.createRewards(address(this),amount) (#1638)
- stakeToken.deliver(amount) (#1639)
External calls sending eth:
- swapTokens(contractTokenBalance) (#1402)
- recipient.transfer(amount) (#1776)
- tokensReceived = buyBackTokens(nextBuybackAmount) (#1417)
- amounts = uniswapV2Router.swapExactETHForTokens{value: amount}(0,path,toAddress,block.timestamp.add(300)) (#1574-1581)
State variables written after the call(s):
- _tokenTransfer(from,to,amount,takeFee) (#1465)
- _holders = holdersAfter (#1755)
- _holders = holdersAfter (#1680)
- _holders = holdersAfter_scope_1 (#1688)
- _tokenTransfer(from,to,amount,takeFee) (#1465)
- _previousLiquidityFee = liquidityFee (#1764)
- _clearTransferIfNeeded() (#1459)
- lastTransfer = TransferDetails(0,0,0,address(0),address(0)) (#1499-1505)
- _recordPotentialLiquidityAddTransaction(to) (#1462)
- lastTransfer = TransferDetails(balance0,balance1,uint32(block.number),to,tx.origin) (#1486-1492)
- totalBuyVolume = totalBuyVolume.add(amount) (#1441)
- totalSellVolume = totalSellVolume.add(amount) (#1431)
- totalVolume = totalVolume.add(amount) (#1444)
Apply the check-effects-interactions pattern.
Additional information: link
Reentrancy in EverRise._transfer(address,address,uint256) (#1360-1466):
External calls:
- swapTokens(contractTokenBalance) (#1402)
- IERC20(tokenAddress).approve(address(uniswapV2Router),tokenAmount) (#1549)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,toAddress,block.timestamp) (#1552-1558)
- tokensReceived = buyBackTokens(nextBuybackAmount) (#1417)
- amounts = uniswapV2Router.swapExactETHForTokens{value: amount}(0,path,toAddress,block.timestamp.add(300)) (#1574-1581)
- distributeStakingRewards(tokensReceived) (#1419)
- stakeToken.createRewards(address(this),amount) (#1638)
- stakeToken.deliver(amount) (#1639)
External calls sending eth:
- swapTokens(contractTokenBalance) (#1402)
- recipient.transfer(amount) (#1776)
- tokensReceived = buyBackTokens(nextBuybackAmount) (#1417)
- amounts = uniswapV2Router.swapExactETHForTokens{value: amount}(0,path,toAddress,block.timestamp.add(300)) (#1574-1581)
Event emitted after the call(s):
- BuyBackAndRewardStakers(amount) (#1641)
- distributeStakingRewards(tokensReceived) (#1419)
- HoldersDecreased(holdersBefore_scope_0,holdersAfter_scope_1) (#1690)
- _tokenTransfer(from,to,amount,takeFee) (#1465)
- HoldersIncreased(holdersBefore,holdersAfter) (#1757)
- _tokenTransfer(from,to,amount,takeFee) (#1465)
- HoldersIncreased(holdersBefore,holdersAfter) (#1682)
- _tokenTransfer(from,to,amount,takeFee) (#1465)
- StakingDecreased(tAmount) (#1702)
- _tokenTransfer(from,to,amount,takeFee) (#1465)
- StakingIncreased(tTransferAmount) (#1699)
- _tokenTransfer(from,to,amount,takeFee) (#1465)
- Transfer(sender,recipient,tTransferAmount) (#1694)
- _tokenTransfer(from,to,amount,takeFee) (#1465)
Reentrancy in EverRise.swapETHForTokensNoFee(address,address,uint256) (#1563-1585):
External calls:
- amounts = uniswapV2Router.swapExactETHForTokens{value: amount}(0,path,toAddress,block.timestamp.add(300)) (#1574-1581)
Event emitted after the call(s):
- SwapETHForTokens(amount,path) (#1583)
Reentrancy in EverRise.swapTokensForTokens(address,address,address,uint256) (#1610-1634):
External calls:
- IERC20(fromTokenAddress).approve(address(uniswapV2Router),tokenAmount) (#1622)
- uniswapV2Router.swapExactTokensForTokensSupportingFeeOnTransferTokens(tokenAmount,0,path,toAddress,block.timestamp.add(120)) (#1625-1631)
Event emitted after the call(s):
- SwapTokensForTokens(tokenAmount,path) (#1633)
Reentrancy in EverRise.swapTokensForEth(address,address,uint256) (#1539-1561):
External calls:
- IERC20(tokenAddress).approve(address(uniswapV2Router),tokenAmount) (#1549)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,toAddress,block.timestamp) (#1552-1558)
Event emitted after the call(s):
- SwapTokensForETH(tokenAmount,path) (#1560)
Reentrancy in EverRise.distributeStakingRewards(uint256) (#1636-1643):
External calls:
- stakeToken.createRewards(address(this),amount) (#1638)
- stakeToken.deliver(amount) (#1639)
Event emitted after the call(s):
- BuyBackAndRewardStakers(amount) (#1641)
Reentrancy in EverRise.transferFromWithPermit(address,address,uint256,uint256,uint8,bytes32,bytes32) (#895-915):
External calls:
- _transfer(sender,recipient,amount) (#905)
- stakeToken.createRewards(address(this),amount) (#1638)
- stakeToken.deliver(amount) (#1639)
- IERC20(tokenAddress).approve(address(uniswapV2Router),tokenAmount) (#1549)
- amounts = uniswapV2Router.swapExactETHForTokens{value: amount}(0,path,toAddress,block.timestamp.add(300)) (#1574-1581)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,toAddress,block.timestamp) (#1552-1558)
External calls sending eth:
- _transfer(sender,recipient,amount) (#905)
- recipient.transfer(amount) (#1776)
- amounts = uniswapV2Router.swapExactETHForTokens{value: amount}(0,path,toAddress,block.timestamp.add(300)) (#1574-1581)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#1357)
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#906-913)
Reentrancy in EverRise._transfer(address,address,uint256) (#1360-1466):
External calls:
- swapTokens(contractTokenBalance) (#1402)
- IERC20(tokenAddress).approve(address(uniswapV2Router),tokenAmount) (#1549)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,toAddress,block.timestamp) (#1552-1558)
- tokensReceived = buyBackTokens(nextBuybackAmount) (#1417)
- amounts = uniswapV2Router.swapExactETHForTokens{value: amount}(0,path,toAddress,block.timestamp.add(300)) (#1574-1581)
External calls sending eth:
- swapTokens(contractTokenBalance) (#1402)
- recipient.transfer(amount) (#1776)
- tokensReceived = buyBackTokens(nextBuybackAmount) (#1417)
- amounts = uniswapV2Router.swapExactETHForTokens{value: amount}(0,path,toAddress,block.timestamp.add(300)) (#1574-1581)
Event emitted after the call(s):
- SwapETHForTokens(amount,path) (#1583)
- tokensReceived = buyBackTokens(nextBuybackAmount) (#1417)
Reentrancy in EverRise.swapETHForTokens(address,address,uint256) (#1587-1608):
External calls:
- uniswapV2Router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: amount}(0,path,toAddress,block.timestamp.add(300)) (#1598-1605)
Event emitted after the call(s):
- SwapETHForTokens(amount,path) (#1607)
Reentrancy in EverRise.manualBuyback(uint256,uint256) (#946-962):
External calls:
- tokensReceived = swapETHForTokensNoFee(address(this),stakingAddress,value) (#954-958)
- amounts = uniswapV2Router.swapExactETHForTokens{value: amount}(0,path,toAddress,block.timestamp.add(300)) (#1574-1581)
- distributeStakingRewards(tokensReceived) (#961)
- stakeToken.createRewards(address(this),amount) (#1638)
- stakeToken.deliver(amount) (#1639)
External calls sending eth:
- tokensReceived = swapETHForTokensNoFee(address(this),stakingAddress,value) (#954-958)
- amounts = uniswapV2Router.swapExactETHForTokens{value: amount}(0,path,toAddress,block.timestamp.add(300)) (#1574-1581)
Event emitted after the call(s):
- BuyBackAndRewardStakers(amount) (#1641)
- distributeStakingRewards(tokensReceived) (#961)
Reentrancy in EverRise.transferFrom(address,address,uint256) (#878-893):
External calls:
- _transfer(sender,recipient,amount) (#883)
- stakeToken.createRewards(address(this),amount) (#1638)
- stakeToken.deliver(amount) (#1639)
- IERC20(tokenAddress).approve(address(uniswapV2Router),tokenAmount) (#1549)
- amounts = uniswapV2Router.swapExactETHForTokens{value: amount}(0,path,toAddress,block.timestamp.add(300)) (#1574-1581)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,toAddress,block.timestamp) (#1552-1558)
External calls sending eth:
- _transfer(sender,recipient,amount) (#883)
- recipient.transfer(amount) (#1776)
- amounts = uniswapV2Router.swapExactETHForTokens{value: amount}(0,path,toAddress,block.timestamp.add(300)) (#1574-1581)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#1357)
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#884-891)
Apply the check-effects-interactions pattern.
Additional information: link
EverRise.distributeStakingRewards(uint256) (#1636-1643) uses timestamp for comparisons
Dangerous comparisons:
- amount > 0 (#1637)
EverRise._transfer(address,address,uint256) (#1360-1466) uses timestamp for comparisons
Dangerous comparisons:
- require(bool,string)(amount <= _maxTxAmount || isIgnoredAddress || ! _isTradingEnabled,Transfer amount exceeds the maxTxAmount) (#1377-1378)
- require(bool,string)(_isTradingEnabled || isIgnoredAddress || (from != _pair && to != _pair),Trading is not enabled) (#1381-1382)
- _isTradingEnabled && inTradingStartCoolDown() && ! isIgnoredAddress && notInSwapAndLiquify (#1385)
- contractAction = _isTradingEnabled && notInSwapAndLiquify && swapAndLiquifyEnabled && to == _pair (#1393-1396)
EverRise.maxTxAmount() (#1233-1240) uses timestamp for comparisons
Dangerous comparisons:
- isTradingEnabled() && inTradingStartCoolDown() (#1234)
EverRise.isTradingEnabled() (#1334-1337) uses timestamp for comparisons
Dangerous comparisons:
- tradingStart < block.timestamp (#1336)
EverRise.setTradingEnabled(uint256,uint256) (#1096-1116) uses timestamp for comparisons
Dangerous comparisons:
- require(bool,string)(tradingStart == MAX && tradingStartCooldown == MAX,Trading has already started) (#1101)
EverRise.permit(address,address,uint256,uint256,uint8,bytes32,bytes32) (#1706-1744) uses timestamp for comparisons
Dangerous comparisons:
- require(bool,string)(deadline >= block.timestamp,EverRise: EXPIRED) (#1715)
EverRise.inTradingStartCoolDown() (#1339-1342) uses timestamp for comparisons
Dangerous comparisons:
- tradingStartCooldown >= block.timestamp (#1341)
Avoid relying on block.timestamp.
Additional information: link
EverRise._previousLiquidityFee (#666) is set pre-construction with a non-constant function or state variable:
- liquidityFee
Remove any initialization of state variables via non-constant state variables or function calls. If variables must be set upon contract deployment, locate initialization in the constructor instead.
Additional information: link
Low level call in PairHelper.token(address,bytes) (#513-528):
- (success,data) = pair.staticcall(selector) (#521)
Avoid low-level calls. Check the call success. If the call is meant for a contract, check for code existence
Additional information: link
Constant EverRise._symbol (#652) is not in UPPER_CASE_WITH_UNDERSCORES
Constant EverRise._tTotal (#658) is not in UPPER_CASE_WITH_UNDERSCORES
Constant EverRise._tradeStartLiquidityFee (#669) is not in UPPER_CASE_WITH_UNDERSCORES
Parameter EverRise.setSwapAndLiquifyEnabled(bool)._enabled (#1329) is not in mixedCase
Parameter EverRise.setBusinessDevelopmentAddress(address)._businessDevelopmentAddress (#1118) is not in mixedCase
Parameter EverRise.setEverMigrateAddress(address)._everMigrateAddress (#1135) is not in mixedCase
Parameter EverRise.setStakingAddress(address)._stakingAddress (#1151) is not in mixedCase
Parameter EverRise.setNumTokensSellToAddToLiquidity(uint256)._minimumTokensBeforeSwap (#1048) is not in mixedCase
Constant EverRise._name (#651) is not in UPPER_CASE_WITH_UNDERSCORES
Function IUniswapV2Pair.PERMIT_TYPEHASH() (#209) is not in mixedCase
Function IUniswapV2Pair.MINIMUM_LIQUIDITY() (#211) is not in mixedCase
Parameter EverRise.calculateLiquidityFee(uint256)._amount (#1840) is not in mixedCase
Function IUniswapV2Pair.DOMAIN_SEPARATOR() (#178) is not in mixedCase
Constant EverRise._decimals (#654) is not in UPPER_CASE_WITH_UNDERSCORES
Parameter EverRise.setTradingEnabled(uint256,uint256)._tradeStartCoolDown (#1096) is not in mixedCase
Constant EverRise._decimalsShort (#656) is not in UPPER_CASE_WITH_UNDERSCORES
Constant PairHelper.token0Selector (#500-501) is not in UPPER_CASE_WITH_UNDERSCORES
Constant PairHelper.token1Selector (#502-503) is not in UPPER_CASE_WITH_UNDERSCORES
Parameter EverRise.setBuyBackEnabled(bool)._enabled (#1091) is not in mixedCase
Variable EverRise.DOMAIN_SEPARATOR (#711) is not in mixedCase
Function IUniswapV2Router01.WETH() (#354) is not in mixedCase
Parameter EverRise.setTradingEnabled(uint256,uint256)._tradeStartDelay (#1096) is not in mixedCase
Follow the Solidity naming convention.
Additional information: link
Reentrancy in EverRise.transferFrom(address,address,uint256) (#878-893):
External calls:
- _transfer(sender,recipient,amount) (#883)
- recipient.transfer(amount) (#1776)
External calls sending eth:
- _transfer(sender,recipient,amount) (#883)
- recipient.transfer(amount) (#1776)
- amounts = uniswapV2Router.swapExactETHForTokens{value: amount}(0,path,toAddress,block.timestamp.add(300)) (#1574-1581)
State variables written after the call(s):
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#884-891)
- _allowances[owner][spender] = amount (#1356)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#1357)
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#884-891)
Reentrancy in EverRise._transfer(address,address,uint256) (#1360-1466):
External calls:
- swapTokens(contractTokenBalance) (#1402)
- recipient.transfer(amount) (#1776)
External calls sending eth:
- swapTokens(contractTokenBalance) (#1402)
- recipient.transfer(amount) (#1776)
- tokensReceived = buyBackTokens(nextBuybackAmount) (#1417)
- amounts = uniswapV2Router.swapExactETHForTokens{value: amount}(0,path,toAddress,block.timestamp.add(300)) (#1574-1581)
State variables written after the call(s):
- _recordPotentialLiquidityAddTransaction(to) (#1462)
- _checkingTokens = _TRUE (#782)
- _checkingTokens = _FALSE (#786)
- _tokenTransfer(from,to,amount,takeFee) (#1465)
- _holders = holdersAfter (#1755)
- _holders = holdersAfter (#1680)
- _holders = holdersAfter_scope_1 (#1688)
- tokensReceived = buyBackTokens(nextBuybackAmount) (#1417)
- _inSwapAndLiquify = _TRUE (#773)
- _inSwapAndLiquify = _FALSE (#777)
- _tokenTransfer(from,to,amount,takeFee) (#1465)
- _previousLiquidityFee = liquidityFee (#1764)
- _tokenTransfer(from,to,amount,takeFee) (#1465)
- _tOwned[address(this)] = afterAmount (#1749)
- _tOwned[sender] = senderAfter (#1670)
- _tOwned[recipient] = recipientAfter (#1674)
- buyVolume = 0 (#1421)
- buyVolume = buyVolume.add(amount) (#1440)
- _clearTransferIfNeeded() (#1459)
- lastTransfer = TransferDetails(0,0,0,address(0),address(0)) (#1499-1505)
- _recordPotentialLiquidityAddTransaction(to) (#1462)
- lastTransfer = TransferDetails(balance0,balance1,uint32(block.number),to,tx.origin) (#1486-1492)
- _tokenTransfer(from,to,amount,takeFee) (#1465)
- liquidityFee = _previousLiquidityFee (#1770)
- liquidityFee = 0 (#1766)
- nextBuybackAmount = 0 (#1420)
- nextBuybackAmount = nextBuybackAmount.add(balance.div(100)) (#1435)
- sellVolume = 0 (#1422)
- sellVolume = sellVolume.add(amount) (#1430)
- totalBuyVolume = totalBuyVolume.add(amount) (#1441)
- totalSellVolume = totalSellVolume.add(amount) (#1431)
- totalVolume = totalVolume.add(amount) (#1444)
Event emitted after the call(s):
- BuyBackAndRewardStakers(amount) (#1641)
- distributeStakingRewards(tokensReceived) (#1419)
- HoldersDecreased(holdersBefore_scope_0,holdersAfter_scope_1) (#1690)
- _tokenTransfer(from,to,amount,takeFee) (#1465)
- HoldersIncreased(holdersBefore,holdersAfter) (#1757)
- _tokenTransfer(from,to,amount,takeFee) (#1465)
- HoldersIncreased(holdersBefore,holdersAfter) (#1682)
- _tokenTransfer(from,to,amount,takeFee) (#1465)
- StakingDecreased(tAmount) (#1702)
- _tokenTransfer(from,to,amount,takeFee) (#1465)
- StakingIncreased(tTransferAmount) (#1699)
- _tokenTransfer(from,to,amount,takeFee) (#1465)
- SwapETHForTokens(amount,path) (#1583)
- tokensReceived = buyBackTokens(nextBuybackAmount) (#1417)
- Transfer(sender,recipient,tTransferAmount) (#1694)
- _tokenTransfer(from,to,amount,takeFee) (#1465)
Reentrancy in EverRise.transferFromWithPermit(address,address,uint256,uint256,uint8,bytes32,bytes32) (#895-915):
External calls:
- _transfer(sender,recipient,amount) (#905)
- recipient.transfer(amount) (#1776)
External calls sending eth:
- _transfer(sender,recipient,amount) (#905)
- recipient.transfer(amount) (#1776)
- amounts = uniswapV2Router.swapExactETHForTokens{value: amount}(0,path,toAddress,block.timestamp.add(300)) (#1574-1581)
State variables written after the call(s):
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#906-913)
- _allowances[owner][spender] = amount (#1356)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#1357)
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#906-913)
Reentrancy in EverRise._transfer(address,address,uint256) (#1360-1466):
External calls:
- swapTokens(contractTokenBalance) (#1402)
- recipient.transfer(amount) (#1776)
State variables written after the call(s):
- nextBuybackAmount = address(this).balance (#1413)
Apply the check-effects-interactions pattern.
Additional information: link
Unable to find audit link on the website
Twitter account link seems to be invalid