RTT [RestoreTruth] Token

RestoreTruthToken.addLiquidity(uint256,uint256) (#1205-1220) sends eth to arbitrary user
Dangerous calls:
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1211-1218)
Ensure that an arbitrary user cannot withdraw unauthorized funds.

Additional information: link

Reentrancy in RestoreTruthToken._transfer(address,address,uint256) (#1087-1159):
External calls:
- swapAndLiquify(_liquidityFee) (#1132)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1211-1218)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1173-1179)
- swapAndSendRewards(operationsWallet,_operationsFee) (#1133)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(recipient),block.timestamp) (#1194-1200)
- swapAndSendRewards(miscellaneousWallet,_miscFee) (#1134)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(recipient),block.timestamp) (#1194-1200)
- swapAndSendRewards(vaultWallet,_vaultFee.div(2)) (#1136)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(recipient),block.timestamp) (#1194-1200)
External calls sending eth:
- swapAndLiquify(_liquidityFee) (#1132)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1211-1218)
State variables written after the call(s):
- super._transfer(address(this),vaultWallet,_vaultFee.div(2)) (#1137)
- _balances[sender] = _balances[sender].sub(amount,ERC20: transfer amount exceeds balance) (#851)
- _balances[recipient] = _balances[recipient].add(amount) (#852)
- super._transfer(from,address(this),fees) (#1154)
- _balances[sender] = _balances[sender].sub(amount,ERC20: transfer amount exceeds balance) (#851)
- _balances[recipient] = _balances[recipient].add(amount) (#852)
- super._transfer(from,to,amount) (#1157)
- _balances[sender] = _balances[sender].sub(amount,ERC20: transfer amount exceeds balance) (#851)
- _balances[recipient] = _balances[recipient].add(amount) (#852)
- swapping = false (#1139)
Apply the check-effects-interactions pattern.

Additional information: link

Unable to verify that contract auditor is trusted: Certik, Quantstamp, Hacken, Solidity, Paladinsec, Openzeppelin, Verichains

Combination 1: Reentrancy vulnerabilities + Functions that send Ether to arbitraty destination. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.

RestoreTruthToken.addLiquidity(uint256,uint256) (#1205-1220) ignores return value by uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1211-1218)
Ensure that all the return values of the function calls are used.

Additional information: link

RestoreTruthToken.setLiquidityFee(uint256) (#1047-1050) should emit an event for:
- liquidityFee = value (#1048)
- totalFees = (liquidityFee).add(operationsFee).add(vaultFee).add(miscFee) (#1049)
RestoreTruthToken.setAllFees(uint256,uint256,uint256,uint256) (#1052-1058) should emit an event for:
- liquidityFee = liquidity (#1053)
- operationsFee = operations (#1054)
- vaultFee = vault (#1055)
- miscFee = misc (#1056)
- totalFees = (liquidityFee).add(operationsFee).add(vaultFee).add(miscFee) (#1057)
RestoreTruthToken.setminimumTokensBeforeSwap(uint256) (#1254-1256) should emit an event for:
- minimumTokensBeforeSwap = _new (#1255)
RestoreTruthToken.setMaxTxAmount(uint256) (#1258-1261) should emit an event for:
- _maxTxAmount = maxTxAmount (#1260)
Emit an event for critical parameter changes.

Additional information: link

RestoreTruthToken.updateUniswapV2Router(address)._uniswapV2Pair (#1027-1028) lacks a zero-check on :
- uniswapV2Pair = _uniswapV2Pair (#1029)
RestoreTruthToken.setAllWallets(address,address,address).operation (#1060) lacks a zero-check on :
- operationsWallet = operation (#1061)
RestoreTruthToken.setAllWallets(address,address,address).vault (#1060) lacks a zero-check on :
- vaultWallet = vault (#1062)
RestoreTruthToken.setAllWallets(address,address,address).misc (#1060) lacks a zero-check on :
- miscellaneousWallet = misc (#1063)
Check that the address is not zero.

Additional information: link

Reentrancy in RestoreTruthToken._transfer(address,address,uint256) (#1087-1159):
External calls:
- swapAndLiquify(_liquidityFee) (#1132)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1211-1218)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1173-1179)
- swapAndSendRewards(operationsWallet,_operationsFee) (#1133)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(recipient),block.timestamp) (#1194-1200)
External calls sending eth:
- swapAndLiquify(_liquidityFee) (#1132)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1211-1218)
State variables written after the call(s):
- swapAndSendRewards(operationsWallet,_operationsFee) (#1133)
- _allowances[owner][spender] = amount (#917)
Reentrancy in RestoreTruthToken._transfer(address,address,uint256) (#1087-1159):
External calls:
- swapAndLiquify(_liquidityFee) (#1132)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1211-1218)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1173-1179)
- swapAndSendRewards(operationsWallet,_operationsFee) (#1133)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(recipient),block.timestamp) (#1194-1200)
- swapAndSendRewards(miscellaneousWallet,_miscFee) (#1134)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(recipient),block.timestamp) (#1194-1200)
External calls sending eth:
- swapAndLiquify(_liquidityFee) (#1132)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1211-1218)
State variables written after the call(s):
- swapAndSendRewards(miscellaneousWallet,_miscFee) (#1134)
- _allowances[owner][spender] = amount (#917)
Reentrancy in RestoreTruthToken._transfer(address,address,uint256) (#1087-1159):
External calls:
- swapAndLiquify(_liquidityFee) (#1132)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1211-1218)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1173-1179)
- swapAndSendRewards(operationsWallet,_operationsFee) (#1133)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(recipient),block.timestamp) (#1194-1200)
- swapAndSendRewards(miscellaneousWallet,_miscFee) (#1134)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(recipient),block.timestamp) (#1194-1200)
- swapAndSendRewards(vaultWallet,_vaultFee.div(2)) (#1136)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(recipient),block.timestamp) (#1194-1200)
External calls sending eth:
- swapAndLiquify(_liquidityFee) (#1132)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1211-1218)
State variables written after the call(s):
- swapAndSendRewards(vaultWallet,_vaultFee.div(2)) (#1136)
- _allowances[owner][spender] = amount (#917)
Reentrancy in RestoreTruthToken.constructor() (#987-1012):
External calls:
- _uniswapV2Pair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#995-996)
State variables written after the call(s):
- _mint(msg.sender,8367668134 * (10 ** 18)) (#1009)
- _balances[account] = _balances[account].add(amount) (#871)
- excludeFromFees(address(this),true) (#1003)
- _isExcludedFromFees[account] = excluded (#1034)
- transferOwnership(msg.sender) (#1010)
- _owner = newOwner (#409)
- _mint(msg.sender,8367668134 * (10 ** 18)) (#1009)
- _totalSupply = _totalSupply.add(amount) (#870)
- _setAutomatedMarketMakerPair(_uniswapV2Pair,true) (#1000)
- automatedMarketMakerPairs[pair] = value (#1075)
- uniswapV2Pair = _uniswapV2Pair (#998)
- uniswapV2Router = _uniswapV2Router (#997)
Reentrancy in RestoreTruthToken.swapAndLiquify(uint256) (#1222-1243):
External calls:
- swapTokensForEth(half) (#1234)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1173-1179)
- addLiquidity(otherHalf,newBalance) (#1240)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1211-1218)
External calls sending eth:
- addLiquidity(otherHalf,newBalance) (#1240)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1211-1218)
State variables written after the call(s):
- addLiquidity(otherHalf,newBalance) (#1240)
- _allowances[owner][spender] = amount (#917)
Reentrancy in RestoreTruthToken.updateUniswapV2Router(address) (#1023-1030):
External calls:
- _uniswapV2Pair = IUniswapV2Factory(uniswapV2Router.factory()).createPair(address(this),uniswapV2Router.WETH()) (#1027-1028)
State variables written after the call(s):
- uniswapV2Pair = _uniswapV2Pair (#1029)
Apply the check-effects-interactions pattern.

Additional information: link

Reentrancy in RestoreTruthToken._transfer(address,address,uint256) (#1087-1159):
External calls:
- swapAndLiquify(_liquidityFee) (#1132)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1211-1218)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1173-1179)
- swapAndSendRewards(operationsWallet,_operationsFee) (#1133)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(recipient),block.timestamp) (#1194-1200)
External calls sending eth:
- swapAndLiquify(_liquidityFee) (#1132)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1211-1218)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#918)
- swapAndSendRewards(operationsWallet,_operationsFee) (#1133)
Reentrancy in RestoreTruthToken._transfer(address,address,uint256) (#1087-1159):
External calls:
- swapAndLiquify(_liquidityFee) (#1132)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1211-1218)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1173-1179)
- swapAndSendRewards(operationsWallet,_operationsFee) (#1133)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(recipient),block.timestamp) (#1194-1200)
- swapAndSendRewards(miscellaneousWallet,_miscFee) (#1134)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(recipient),block.timestamp) (#1194-1200)
External calls sending eth:
- swapAndLiquify(_liquidityFee) (#1132)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1211-1218)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#918)
- swapAndSendRewards(miscellaneousWallet,_miscFee) (#1134)
Reentrancy in RestoreTruthToken._transfer(address,address,uint256) (#1087-1159):
External calls:
- swapAndLiquify(_liquidityFee) (#1132)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1211-1218)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1173-1179)
- swapAndSendRewards(operationsWallet,_operationsFee) (#1133)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(recipient),block.timestamp) (#1194-1200)
- swapAndSendRewards(miscellaneousWallet,_miscFee) (#1134)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(recipient),block.timestamp) (#1194-1200)
- swapAndSendRewards(vaultWallet,_vaultFee.div(2)) (#1136)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(recipient),block.timestamp) (#1194-1200)
External calls sending eth:
- swapAndLiquify(_liquidityFee) (#1132)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1211-1218)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#918)
- swapAndSendRewards(vaultWallet,_vaultFee.div(2)) (#1136)
- Transfer(sender,recipient,amount) (#853)
- super._transfer(from,address(this),fees) (#1154)
- Transfer(sender,recipient,amount) (#853)
- super._transfer(from,to,amount) (#1157)
- Transfer(sender,recipient,amount) (#853)
- super._transfer(address(this),vaultWallet,_vaultFee.div(2)) (#1137)
Reentrancy in RestoreTruthToken.constructor() (#987-1012):
External calls:
- _uniswapV2Pair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#995-996)
Event emitted after the call(s):
- ExcludeFromFees(account,excluded) (#1036)
- excludeFromFees(address(this),true) (#1003)
- OwnershipTransferred(_owner,newOwner) (#408)
- transferOwnership(msg.sender) (#1010)
- SetAutomatedMarketMakerPair(pair,value) (#1080)
- _setAutomatedMarketMakerPair(_uniswapV2Pair,true) (#1000)
- Transfer(address(0),account,amount) (#872)
- _mint(msg.sender,8367668134 * (10 ** 18)) (#1009)
Reentrancy in RestoreTruthToken.swapAndLiquify(uint256) (#1222-1243):
External calls:
- swapTokensForEth(half) (#1234)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#1173-1179)
- addLiquidity(otherHalf,newBalance) (#1240)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1211-1218)
External calls sending eth:
- addLiquidity(otherHalf,newBalance) (#1240)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#1211-1218)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#918)
- addLiquidity(otherHalf,newBalance) (#1240)
- SwapandLiquify(half,newBalance,otherHalf) (#1242)
Apply the check-effects-interactions pattern.

Additional information: link

Context._msgData() (#19-22) is never used and should be removed
ERC20._burn(address,uint256) (#886-894) is never used and should be removed
SafeMath.mod(uint256,uint256) (#535-537) is never used and should be removed
SafeMath.mod(uint256,uint256,string) (#551-554) is never used and should be removed
SafeMathInt.abs(int256) (#637-640) is never used and should be removed
SafeMathInt.add(int256,int256) (#628-632) is never used and should be removed
SafeMathInt.div(int256,int256) (#608-614) is never used and should be removed
SafeMathInt.mul(int256,int256) (#596-603) is never used and should be removed
SafeMathInt.sub(int256,int256) (#619-623) is never used and should be removed
SafeMathInt.toUint256Safe(int256) (#643-646) is never used and should be removed
SafeMathUint.toInt256Safe(uint256) (#656-660) is never used and should be removed
Remove unused functions.

Additional information: link

RestoreTruthToken.totalFees (#961) is set pre-construction with a non-constant function or state variable:
- (liquidityFee).add(operationsFee).add(vaultFee).add(miscFee)
Remove any initialization of state variables via non-constant state variables or function calls. If variables must be set upon contract deployment, locate initialization in the constructor instead.

Additional information: link

solc-0.8.11 is not recommended for deployment
Deploy with any of the following Solidity versions: 0.5.16 - 0.5.17, 0.6.11 - 0.6.12, 0.7.5 - 0.7.6 Use a simple pragma version that allows any of these versions. Consider using the latest version of Solidity for testing.

Additional information: link

Function IUniswapV2Pair.DOMAIN_SEPARATOR() (#187) is not in mixedCase
Function IUniswapV2Pair.PERMIT_TYPEHASH() (#188) is not in mixedCase
Function IUniswapV2Pair.MINIMUM_LIQUIDITY() (#205) is not in mixedCase
Function IUniswapV2Router01.WETH() (#226) is not in mixedCase
Parameter RestoreTruthToken.transferContractToken(address,address,uint256)._token (#1245) is not in mixedCase
Parameter RestoreTruthToken.transferContractToken(address,address,uint256)._to (#1245) is not in mixedCase
Parameter RestoreTruthToken.transferContractToken(address,address,uint256)._quant (#1245) is not in mixedCase
Function RestoreTruthToken.Sweep() (#1249-1252) is not in mixedCase
Parameter RestoreTruthToken.setminimumTokensBeforeSwap(uint256)._new (#1254) is not in mixedCase
Variable RestoreTruthToken._maxTxAmount (#964) is not in mixedCase
Follow the Solidity naming convention.

Additional information: link

Redundant expression "this (#20)" inContext (#14-23)
Remove redundant statements if they congest code but offer no value.

Additional information: link

Variable IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountADesired (#231) is too similar to IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountBDesired (#232)
Prevent variables from having similar names.

Additional information: link

RestoreTruthToken.slitherConstructorVariables() (#942-1273) uses literals with too many digits:
- deadWallet = 0x000000000000000000000000000000000000dEaD (#952)
RestoreTruthToken.slitherConstructorVariables() (#942-1273) uses literals with too many digits:
- minimumTokensBeforeSwap = 1000000 * (10 ** 18) (#963)
RestoreTruthToken.slitherConstructorVariables() (#942-1273) uses literals with too many digits:
- _maxTxAmount = 10000000000 * (10 ** 18) (#964)
Use: Ether suffix, Time suffix, or The scientific notation

Additional information: link

SafeMathInt.MAX_INT256 (#591) is never used in SafeMathInt (#589-647)
Remove unused state variables.

Additional information: link

RestoreTruthToken.deadWallet (#952) should be constant
Add the constant attributes to state variables that never change.

Additional information: link

renounceOwnership() should be declared external:
- Ownable.renounceOwnership() (#397-400)
name() should be declared external:
- ERC20.name() (#693-695)
symbol() should be declared external:
- ERC20.symbol() (#701-703)
decimals() should be declared external:
- ERC20.decimals() (#718-720)
transfer(address,uint256) should be declared external:
- ERC20.transfer(address,uint256) (#744-747)
allowance(address,address) should be declared external:
- ERC20.allowance(address,address) (#752-754)
approve(address,uint256) should be declared external:
- ERC20.approve(address,uint256) (#763-766)
transferFrom(address,address,uint256) should be declared external:
- ERC20.transferFrom(address,address,uint256) (#781-789)
increaseAllowance(address,uint256) should be declared external:
- ERC20.increaseAllowance(address,uint256) (#803-806)
decreaseAllowance(address,uint256) should be declared external:
- ERC20.decreaseAllowance(address,uint256) (#822-825)
setSwapAndLiquifyEnabled(bool) should be declared external:
- RestoreTruthToken.setSwapAndLiquifyEnabled(bool) (#1018-1020)
updateUniswapV2Router(address) should be declared external:
- RestoreTruthToken.updateUniswapV2Router(address) (#1023-1030)
excludeMultipleAccountsFromFees(address[],bool) should be declared external:
- RestoreTruthToken.excludeMultipleAccountsFromFees(address[],bool) (#1039-1045)
setAutomatedMarketMakerPair(address,bool) should be declared external:
- RestoreTruthToken.setAutomatedMarketMakerPair(address,bool) (#1066-1070)
isExcludedFromFees(address) should be declared external:
- RestoreTruthToken.isExcludedFromFees(address) (#1083-1085)
transferContractToken(address,address,uint256) should be declared external:
- RestoreTruthToken.transferContractToken(address,address,uint256) (#1245-1247)
setminimumTokensBeforeSwap(uint256) should be declared external:
- RestoreTruthToken.setminimumTokensBeforeSwap(uint256) (#1254-1256)
multisend(address[],uint256[]) should be declared external:
- RestoreTruthToken.multisend(address[],uint256[]) (#1263-1270)
Use the external attribute for functions never called from the contract.

Additional information: link

Average 30d PancakeSwap liquidity is less than $100. Token is either dead or inactive.

Average 30d number of PancakeSwap swaps is less than 1. Token is either dead or inactive.

Contract has 10% buy tax and 10% sell tax.
Taxes are low and contract ownership is renounced.

Unable to find whitepaper link on the website

Unable to find token on CoinHunt

Additional information: link

Young tokens have high risks of scam / price dump / death

Young tokens have high risks of scam / price dump / death

Young tokens have high risks of scam / price dump / death

Young tokens have high risks of price dump / death

Young tokens have high risks of price dump / death

Token has relatively low CoinGecko rank