SHINO [ShinobiVerse] Token

ShinobiVerse.swapBNBForTokensToBusd(uint256) (#752-767) sends eth to arbitrary user
Dangerous calls:
- uniswapV2Router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: amount}(0,path,address(this),block.timestamp.add(300)) (#759-764)
ShinobiVerse.addLiquidity(uint256,uint256) (#770-783) sends eth to arbitrary user
Dangerous calls:
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#775-782)
Ensure that an arbitrary user cannot withdraw unauthorized funds.

Additional information: link

Reentrancy in ShinobiVerse._transfer(address,address,uint256) (#628-694):
External calls:
- addLiquidityToToken(liquidityToken) (#665)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#775-782)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#740-746)
- swapTokens(marketingAndDevelopmentToken) (#667)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#740-746)
External calls sending eth:
- addLiquidityToToken(liquidityToken) (#665)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#775-782)
State variables written after the call(s):
- swapTokens(marketingAndDevelopmentToken) (#667)
- inSwapAndLiquify = true (#485)
- inSwapAndLiquify = false (#487)
Reentrancy in ShinobiVerse._transfer(address,address,uint256) (#628-694):
External calls:
- addLiquidityToToken(liquidityToken) (#665)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#775-782)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#740-746)
- swapTokens(marketingAndDevelopmentToken) (#667)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#740-746)
- SwapAndLiquifyBNBtoBusd(bnbBalbusd) (#671)
- uniswapV2Router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: amount}(0,path,address(this),block.timestamp.add(300)) (#759-764)
- require(bool)(IERC20(busdAddress).transfer(marketingAddress,marketingFunds)) (#1053)
- require(bool)(IERC20(busdAddress).transfer(developmentAddress,developmentFunds)) (#1054)
External calls sending eth:
- addLiquidityToToken(liquidityToken) (#665)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#775-782)
- SwapAndLiquifyBNBtoBusd(bnbBalbusd) (#671)
- uniswapV2Router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: amount}(0,path,address(this),block.timestamp.add(300)) (#759-764)
State variables written after the call(s):
- SwapAndLiquifyBNBtoBusd(bnbBalbusd) (#671)
- inSwapAndLiquify = true (#485)
- inSwapAndLiquify = false (#487)
Reentrancy in ShinobiVerse._transfer(address,address,uint256) (#628-694):
External calls:
- addLiquidityToToken(liquidityToken) (#665)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#775-782)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#740-746)
- swapTokens(marketingAndDevelopmentToken) (#667)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#740-746)
- SwapAndLiquifyBNBtoBusd(bnbBalbusd) (#671)
- uniswapV2Router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: amount}(0,path,address(this),block.timestamp.add(300)) (#759-764)
- require(bool)(IERC20(busdAddress).transfer(marketingAddress,marketingFunds)) (#1053)
- require(bool)(IERC20(busdAddress).transfer(developmentAddress,developmentFunds)) (#1054)
- require(bool)(IERC20(address(this)).transfer(vaultRewardAddress,rewardToken)) (#674)
External calls sending eth:
- addLiquidityToToken(liquidityToken) (#665)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#775-782)
- SwapAndLiquifyBNBtoBusd(bnbBalbusd) (#671)
- uniswapV2Router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: amount}(0,path,address(this),block.timestamp.add(300)) (#759-764)
State variables written after the call(s):
- _tokenTransfer(from,to,amount) (#690)
- _rOwned[vaultRewardAddress] = _rOwned[vaultRewardAddress].add(rVault) (#900)
- _rOwned[address(address(this))] = _rOwned[address(address(this))].add(rLiquidity) (#891)
- _rOwned[sender] = _rOwned[sender].sub(rAmount) (#809)
- _rOwned[sender] = _rOwned[sender].sub(rAmount) (#799)
- _rOwned[sender] = _rOwned[sender].sub(rAmount) (#832)
- _rOwned[sender] = _rOwned[sender].sub(rAmount) (#821)
- _rOwned[recipient] = _rOwned[recipient].add(rTransferAmount) (#800)
- _rOwned[recipient] = _rOwned[recipient].add(rTransferAmount) (#822)
- _rOwned[recipient] = _rOwned[recipient].add(rTransferAmount) (#811)
- _rOwned[recipient] = _rOwned[recipient].add(rTransferAmount) (#834)
- _tokenTransfer(from,to,amount) (#690)
- _rTotal = _rTotal.sub(rFee) (#842)
- _tokenTransfer(from,to,amount) (#690)
- _tOwned[vaultRewardAddress] = _tOwned[vaultRewardAddress].add(tVault) (#902)
- _tOwned[address(address(this))] = _tOwned[address(address(this))].add(tLiquidity) (#893)
- _tOwned[sender] = _tOwned[sender].sub(tAmount) (#831)
- _tOwned[sender] = _tOwned[sender].sub(tAmount) (#820)
- _tOwned[recipient] = _tOwned[recipient].add(tTransferAmount) (#810)
- _tOwned[recipient] = _tOwned[recipient].add(tTransferAmount) (#833)
Apply the check-effects-interactions pattern.

Additional information: link

Unable to verify that contract auditor is trusted: Certik, Quantstamp, Hacken, Solidity, Paladinsec, Openzeppelin, Verichains

Contract ownership is not renounced (belongs to a wallet)

Combination 1: Reentrancy vulnerabilities + Functions that send Ether to arbitraty destination. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.

ShinobiVerse.allowance(address,address).owner (#533) shadows:
- Ownable.owner() (#154-156) (function)
ShinobiVerse._approve(address,address,uint256).owner (#620) shadows:
- Ownable.owner() (#154-156) (function)
Rename the local variables that shadow another component.

Additional information: link

ShinobiVerse.setPairAddress(address).newPair (#586) lacks a zero-check on :
- uniswapV2Pair = newPair (#587)
ShinobiVerse.setMarketingAddress(address)._marketingAddress (#948) lacks a zero-check on :
- marketingAddress = address(_marketingAddress) (#949)
ShinobiVerse.setDevelopmentAddress(address)._developmentAddress (#953) lacks a zero-check on :
- developmentAddress = address(_developmentAddress) (#954)
ShinobiVerse.setVaultAddress(address)._vaultAddress (#958) lacks a zero-check on :
- vaultRewardAddress = address(_vaultAddress) (#959)
ShinobiVerse.setBusdAddress(address)._newBusd (#968) lacks a zero-check on :
- busdAddress = address(_newBusd) (#969)
Check that the address is not zero.

Additional information: link

Reentrancy in ShinobiVerse._transfer(address,address,uint256) (#628-694):
External calls:
- addLiquidityToToken(liquidityToken) (#665)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#775-782)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#740-746)
- swapTokens(marketingAndDevelopmentToken) (#667)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#740-746)
External calls sending eth:
- addLiquidityToToken(liquidityToken) (#665)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#775-782)
State variables written after the call(s):
- swapTokens(marketingAndDevelopmentToken) (#667)
- _allowances[owner][spender] = amount (#624)
Reentrancy in ShinobiVerse._transfer(address,address,uint256) (#628-694):
External calls:
- addLiquidityToToken(liquidityToken) (#665)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#775-782)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#740-746)
- swapTokens(marketingAndDevelopmentToken) (#667)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#740-746)
- SwapAndLiquifyBNBtoBusd(bnbBalbusd) (#671)
- uniswapV2Router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: amount}(0,path,address(this),block.timestamp.add(300)) (#759-764)
- require(bool)(IERC20(busdAddress).transfer(marketingAddress,marketingFunds)) (#1053)
- require(bool)(IERC20(busdAddress).transfer(developmentAddress,developmentFunds)) (#1054)
- require(bool)(IERC20(address(this)).transfer(vaultRewardAddress,rewardToken)) (#674)
External calls sending eth:
- addLiquidityToToken(liquidityToken) (#665)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#775-782)
- SwapAndLiquifyBNBtoBusd(bnbBalbusd) (#671)
- uniswapV2Router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: amount}(0,path,address(this),block.timestamp.add(300)) (#759-764)
State variables written after the call(s):
- _tokenTransfer(from,to,amount) (#690)
- _tFeeTotal = _tFeeTotal.add(tFee) (#843)
- setSellFee() (#686)
- _tempAllSwapableFees = _sellAllSwapableFees (#716)
- removeAllFee() (#688)
- _tempAllSwapableFees = 0 (#701)
- restoreAllFee() (#692)
- _tempAllSwapableFees = _buyAllSwapableFees (#708)
- setSellFee() (#686)
- _tempTaxFee = _sellTaxFee (#714)
- removeAllFee() (#688)
- _tempTaxFee = 0 (#699)
- restoreAllFee() (#692)
- _tempTaxFee = _buyTaxFee (#706)
- setSellFee() (#686)
- _tempVaultFee = _sellVaultFee (#715)
- removeAllFee() (#688)
- _tempVaultFee = 0 (#700)
- restoreAllFee() (#692)
- _tempVaultFee = _buyVaultFee (#707)
Reentrancy in ShinobiVerse.addLiquidityToToken(uint256) (#1060-1081):
External calls:
- swapTokensForBNB(half) (#1072)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#740-746)
- addLiquidity(otherHalf,newBalance) (#1078)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#775-782)
External calls sending eth:
- addLiquidity(otherHalf,newBalance) (#1078)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#775-782)
State variables written after the call(s):
- addLiquidity(otherHalf,newBalance) (#1078)
- _allowances[owner][spender] = amount (#624)
Reentrancy in ShinobiVerse.changeRouterVersion(address) (#1006-1019):
External calls:
- _pair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#1011-1012)
State variables written after the call(s):
- uniswapV2Pair = _pair (#1015)
- uniswapV2Router = _uniswapV2Router (#1018)
Reentrancy in ShinobiVerse.constructor() (#490-504):
External calls:
- uniswapV2Pair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#494-495)
State variables written after the call(s):
- _isExcludedFromFee[owner()] = true (#498)
- _isExcludedFromFee[address(address(this))] = true (#499)
- _isExcludedFromFee[marketingAddress] = true (#500)
- _isExcludedFromFee[vaultRewardAddress] = true (#501)
- _isExcludedFromFee[developmentAddress] = true (#502)
- uniswapV2Router = _uniswapV2Router (#496)
Reentrancy in ShinobiVerse.setRouterAddressAndCreatePair(address) (#573-577):
External calls:
- uniswapV2Pair = IUniswapV2Factory(_newPancakeRouter.factory()).createPair(address(this),_newPancakeRouter.WETH()) (#575)
State variables written after the call(s):
- uniswapV2Router = _newPancakeRouter (#576)
Reentrancy in ShinobiVerse.transferFrom(address,address,uint256) (#542-546):
External calls:
- _transfer(sender,recipient,amount) (#543)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#775-782)
- uniswapV2Router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: amount}(0,path,address(this),block.timestamp.add(300)) (#759-764)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#740-746)
- require(bool)(IERC20(busdAddress).transfer(marketingAddress,marketingFunds)) (#1053)
- require(bool)(IERC20(busdAddress).transfer(developmentAddress,developmentFunds)) (#1054)
- require(bool)(IERC20(address(this)).transfer(vaultRewardAddress,rewardToken)) (#674)
External calls sending eth:
- _transfer(sender,recipient,amount) (#543)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#775-782)
- uniswapV2Router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: amount}(0,path,address(this),block.timestamp.add(300)) (#759-764)
State variables written after the call(s):
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#544)
- _allowances[owner][spender] = amount (#624)
Apply the check-effects-interactions pattern.

Additional information: link

Reentrancy in ShinobiVerse.SwapAndLiquifyBNBtoBusd(uint256) (#1042-1057):
External calls:
- swapBNBForTokensToBusd(bnbLiquifyAmount) (#1045)
- uniswapV2Router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: amount}(0,path,address(this),block.timestamp.add(300)) (#759-764)
- require(bool)(IERC20(busdAddress).transfer(marketingAddress,marketingFunds)) (#1053)
- require(bool)(IERC20(busdAddress).transfer(developmentAddress,developmentFunds)) (#1054)
External calls sending eth:
- swapBNBForTokensToBusd(bnbLiquifyAmount) (#1045)
- uniswapV2Router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: amount}(0,path,address(this),block.timestamp.add(300)) (#759-764)
Event emitted after the call(s):
- SwapAndLiquifyBNB(bnbLiquifyAmount,newTokenBalance,bnbLiquifyAmount) (#1056)
Reentrancy in ShinobiVerse._transfer(address,address,uint256) (#628-694):
External calls:
- addLiquidityToToken(liquidityToken) (#665)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#775-782)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#740-746)
- swapTokens(marketingAndDevelopmentToken) (#667)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#740-746)
External calls sending eth:
- addLiquidityToToken(liquidityToken) (#665)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#775-782)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#625)
- swapTokens(marketingAndDevelopmentToken) (#667)
- SwapTokensForBNB(tokenAmount,path) (#748)
- swapTokens(marketingAndDevelopmentToken) (#667)
Reentrancy in ShinobiVerse._transfer(address,address,uint256) (#628-694):
External calls:
- addLiquidityToToken(liquidityToken) (#665)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#775-782)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#740-746)
- swapTokens(marketingAndDevelopmentToken) (#667)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#740-746)
- SwapAndLiquifyBNBtoBusd(bnbBalbusd) (#671)
- uniswapV2Router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: amount}(0,path,address(this),block.timestamp.add(300)) (#759-764)
- require(bool)(IERC20(busdAddress).transfer(marketingAddress,marketingFunds)) (#1053)
- require(bool)(IERC20(busdAddress).transfer(developmentAddress,developmentFunds)) (#1054)
External calls sending eth:
- addLiquidityToToken(liquidityToken) (#665)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#775-782)
- SwapAndLiquifyBNBtoBusd(bnbBalbusd) (#671)
- uniswapV2Router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: amount}(0,path,address(this),block.timestamp.add(300)) (#759-764)
Event emitted after the call(s):
- SwapAndLiquifyBNB(bnbLiquifyAmount,newTokenBalance,bnbLiquifyAmount) (#1056)
- SwapAndLiquifyBNBtoBusd(bnbBalbusd) (#671)
- SwapBNBForTokens(amount,path) (#766)
- SwapAndLiquifyBNBtoBusd(bnbBalbusd) (#671)
Reentrancy in ShinobiVerse._transfer(address,address,uint256) (#628-694):
External calls:
- addLiquidityToToken(liquidityToken) (#665)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#775-782)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#740-746)
- swapTokens(marketingAndDevelopmentToken) (#667)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#740-746)
- SwapAndLiquifyBNBtoBusd(bnbBalbusd) (#671)
- uniswapV2Router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: amount}(0,path,address(this),block.timestamp.add(300)) (#759-764)
- require(bool)(IERC20(busdAddress).transfer(marketingAddress,marketingFunds)) (#1053)
- require(bool)(IERC20(busdAddress).transfer(developmentAddress,developmentFunds)) (#1054)
- require(bool)(IERC20(address(this)).transfer(vaultRewardAddress,rewardToken)) (#674)
External calls sending eth:
- addLiquidityToToken(liquidityToken) (#665)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#775-782)
- SwapAndLiquifyBNBtoBusd(bnbBalbusd) (#671)
- uniswapV2Router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: amount}(0,path,address(this),block.timestamp.add(300)) (#759-764)
Event emitted after the call(s):
- Transfer(sender,recipient,tTransferAmount) (#804)
- _tokenTransfer(from,to,amount) (#690)
- Transfer(sender,recipient,tTransferAmount) (#815)
- _tokenTransfer(from,to,amount) (#690)
- Transfer(sender,recipient,tTransferAmount) (#826)
- _tokenTransfer(from,to,amount) (#690)
- Transfer(sender,recipient,tTransferAmount) (#838)
- _tokenTransfer(from,to,amount) (#690)
Reentrancy in ShinobiVerse.addLiquidityToToken(uint256) (#1060-1081):
External calls:
- swapTokensForBNB(half) (#1072)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#740-746)
- addLiquidity(otherHalf,newBalance) (#1078)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#775-782)
External calls sending eth:
- addLiquidity(otherHalf,newBalance) (#1078)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#775-782)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#625)
- addLiquidity(otherHalf,newBalance) (#1078)
- SwapAndLiquifyTokens(half,newBalance,otherHalf) (#1080)
Reentrancy in ShinobiVerse.constructor() (#490-504):
External calls:
- uniswapV2Pair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#494-495)
Event emitted after the call(s):
- Transfer(address(0),owner(),_tTotal) (#503)
Reentrancy in ShinobiVerse.swapBNBForTokensToBusd(uint256) (#752-767):
External calls:
- uniswapV2Router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: amount}(0,path,address(this),block.timestamp.add(300)) (#759-764)
Event emitted after the call(s):
- SwapBNBForTokens(amount,path) (#766)
Reentrancy in ShinobiVerse.swapTokensForBNB(uint256) (#731-749):
External calls:
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#740-746)
Event emitted after the call(s):
- SwapTokensForBNB(tokenAmount,path) (#748)
Reentrancy in ShinobiVerse.transferFrom(address,address,uint256) (#542-546):
External calls:
- _transfer(sender,recipient,amount) (#543)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#775-782)
- uniswapV2Router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: amount}(0,path,address(this),block.timestamp.add(300)) (#759-764)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#740-746)
- require(bool)(IERC20(busdAddress).transfer(marketingAddress,marketingFunds)) (#1053)
- require(bool)(IERC20(busdAddress).transfer(developmentAddress,developmentFunds)) (#1054)
- require(bool)(IERC20(address(this)).transfer(vaultRewardAddress,rewardToken)) (#674)
External calls sending eth:
- _transfer(sender,recipient,amount) (#543)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#775-782)
- uniswapV2Router.swapExactETHForTokensSupportingFeeOnTransferTokens{value: amount}(0,path,address(this),block.timestamp.add(300)) (#759-764)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#625)
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#544)
Apply the check-effects-interactions pattern.

Additional information: link

Ownable.unlock() (#189-194) uses timestamp for comparisons
Dangerous comparisons:
- require(bool,string)(block.timestamp > _lockTime,Contract is locked until 7 days) (#191)
Avoid relying on block.timestamp.

Additional information: link

Address.isContract(address) (#84-93) uses assembly
- INLINE ASM (#91)
Address._functionCallWithValue(address,bytes,uint256,string) (#121-138) uses assembly
- INLINE ASM (#130-133)
Do not use evm assembly.

Additional information: link

Address._functionCallWithValue(address,bytes,uint256,string) (#121-138) is never used and should be removed
Address.functionCall(address,bytes) (#104-106) is never used and should be removed
Address.functionCall(address,bytes,string) (#108-110) is never used and should be removed
Address.functionCallWithValue(address,bytes,uint256) (#112-114) is never used and should be removed
Address.functionCallWithValue(address,bytes,uint256,string) (#116-119) is never used and should be removed
Address.isContract(address) (#84-93) is never used and should be removed
Address.sendValue(address,uint256) (#95-101) is never used and should be removed
Context._msgData() (#9-12) is never used and should be removed
SafeMath.mod(uint256,uint256) (#72-74) is never used and should be removed
SafeMath.mod(uint256,uint256,string) (#76-79) is never used and should be removed
ShinobiVerse.transferToAddressBNB(address,uint256) (#1002-1004) is never used and should be removed
Remove unused functions.

Additional information: link

ShinobiVerse._buyAllSwapableFees (#437) is set pre-construction with a non-constant function or state variable:
- _buyRewardFee + _buyLiquidityFee + _buyMarketingFee + _buyDevelopmentFee
ShinobiVerse._sellAllSwapableFees (#446) is set pre-construction with a non-constant function or state variable:
- _sellRewardFee + _sellLiquidityFee + _sellMarketingFee + _sellDevelopmentFee
Remove any initialization of state variables via non-constant state variables or function calls. If variables must be set upon contract deployment, locate initialization in the constructor instead.

Additional information: link

Function IUniswapV2Pair.DOMAIN_SEPARATOR() (#228) is not in mixedCase
Function IUniswapV2Pair.PERMIT_TYPEHASH() (#229) is not in mixedCase
Function IUniswapV2Pair.MINIMUM_LIQUIDITY() (#245) is not in mixedCase
Function IUniswapV2Router01.WETH() (#264) is not in mixedCase
Parameter ShinobiVerse.enableNoTransferFee(bool)._enable (#721) is not in mixedCase
Parameter ShinobiVerse.calculateTaxFee(uint256)._amount (#905) is not in mixedCase
Parameter ShinobiVerse.calculateVaultFee(uint256)._amount (#910) is not in mixedCase
Parameter ShinobiVerse.calculateAllSwapableFees(uint256)._amount (#915) is not in mixedCase
Parameter ShinobiVerse.setMinTokensToSell(uint256)._minimumTokensBeforeSwap (#944) is not in mixedCase
Parameter ShinobiVerse.setMarketingAddress(address)._marketingAddress (#948) is not in mixedCase
Parameter ShinobiVerse.setDevelopmentAddress(address)._developmentAddress (#953) is not in mixedCase
Parameter ShinobiVerse.setVaultAddress(address)._vaultAddress (#958) is not in mixedCase
Parameter ShinobiVerse.setSwapAndLiquifyEnabled(bool)._enabled (#963) is not in mixedCase
Parameter ShinobiVerse.setBusdAddress(address)._newBusd (#968) is not in mixedCase
Parameter ShinobiVerse.changeRouterVersion(address)._router (#1006) is not in mixedCase
Parameter ShinobiVerse.transferForeignToken(address,address)._token (#1025) is not in mixedCase
Parameter ShinobiVerse.transferForeignToken(address,address)._to (#1025) is not in mixedCase
Function ShinobiVerse.SwapAndLiquifyBNBtoBusd(uint256) (#1042-1057) is not in mixedCase
Function ShinobiVerse.SweepStuck(uint256) (#1083-1085) is not in mixedCase
Parameter ShinobiVerse.SweepStuck(uint256)._amount (#1083) is not in mixedCase
Constant ShinobiVerse._tTotal (#418) is not in UPPER_CASE_WITH_UNDERSCORES
Constant ShinobiVerse._name (#422) is not in UPPER_CASE_WITH_UNDERSCORES
Constant ShinobiVerse._symbol (#423) is not in UPPER_CASE_WITH_UNDERSCORES
Constant ShinobiVerse._decimals (#424) is not in UPPER_CASE_WITH_UNDERSCORES
Variable ShinobiVerse._buyRewardFee (#433) is not in mixedCase
Variable ShinobiVerse._buyLiquidityFee (#434) is not in mixedCase
Variable ShinobiVerse._buyMarketingFee (#435) is not in mixedCase
Variable ShinobiVerse._buyDevelopmentFee (#436) is not in mixedCase
Variable ShinobiVerse._buyAllSwapableFees (#437) is not in mixedCase
Variable ShinobiVerse._sellRewardFee (#442) is not in mixedCase
Variable ShinobiVerse._sellLiquidityFee (#443) is not in mixedCase
Variable ShinobiVerse._sellMarketingFee (#444) is not in mixedCase
Variable ShinobiVerse._sellDevelopmentFee (#445) is not in mixedCase
Variable ShinobiVerse._sellAllSwapableFees (#446) is not in mixedCase
Variable ShinobiVerse._bMaxTxAmount (#449) is not in mixedCase
Variable ShinobiVerse._sMaxTxAmount (#450) is not in mixedCase
Follow the Solidity naming convention.

Additional information: link

Variable IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountADesired (#269) is too similar to IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountBDesired (#270)
Variable ShinobiVerse._bMaxTxAmount (#449) is too similar to ShinobiVerse._sMaxTxAmount (#450)
Variable ShinobiVerse.setBuyMaxTxAmount(uint256).bMaxTxAmount (#934) is too similar to ShinobiVerse.setSellMaxTxAmount(uint256).sMaxTxAmount (#939)
Variable ShinobiVerse._transferFromExcluded(address,address,uint256).rTransferAmount (#819) is too similar to ShinobiVerse._transferToExcluded(address,address,uint256).tTransferAmount (#808)
Variable ShinobiVerse._transferFromExcluded(address,address,uint256).rTransferAmount (#819) is too similar to ShinobiVerse._transferFromExcluded(address,address,uint256).tTransferAmount (#819)
Variable ShinobiVerse._transferFromExcluded(address,address,uint256).rTransferAmount (#819) is too similar to ShinobiVerse._getValues(uint256).tTransferAmount (#847)
Variable ShinobiVerse._transferStandard(address,address,uint256).rTransferAmount (#798) is too similar to ShinobiVerse._transferStandard(address,address,uint256).tTransferAmount (#798)
Variable ShinobiVerse._transferFromExcluded(address,address,uint256).rTransferAmount (#819) is too similar to ShinobiVerse._getTValues(uint256).tTransferAmount (#856)
Variable ShinobiVerse._getRValues(uint256,uint256,uint256,uint256,uint256).rTransferAmount (#865) is too similar to ShinobiVerse._transferStandard(address,address,uint256).tTransferAmount (#798)
Variable ShinobiVerse._transferBothExcluded(address,address,uint256).rTransferAmount (#830) is too similar to ShinobiVerse._transferStandard(address,address,uint256).tTransferAmount (#798)
Variable ShinobiVerse._getRValues(uint256,uint256,uint256,uint256,uint256).rTransferAmount (#865) is too similar to ShinobiVerse._transferToExcluded(address,address,uint256).tTransferAmount (#808)
Variable ShinobiVerse._getRValues(uint256,uint256,uint256,uint256,uint256).rTransferAmount (#865) is too similar to ShinobiVerse._transferFromExcluded(address,address,uint256).tTransferAmount (#819)
Variable ShinobiVerse._getRValues(uint256,uint256,uint256,uint256,uint256).rTransferAmount (#865) is too similar to ShinobiVerse._getValues(uint256).tTransferAmount (#847)
Variable ShinobiVerse._getRValues(uint256,uint256,uint256,uint256,uint256).rTransferAmount (#865) is too similar to ShinobiVerse._getTValues(uint256).tTransferAmount (#856)
Variable ShinobiVerse._transferToExcluded(address,address,uint256).rTransferAmount (#808) is too similar to ShinobiVerse._transferToExcluded(address,address,uint256).tTransferAmount (#808)
Variable ShinobiVerse._transferToExcluded(address,address,uint256).rTransferAmount (#808) is too similar to ShinobiVerse._transferStandard(address,address,uint256).tTransferAmount (#798)
Variable ShinobiVerse._getValues(uint256).rTransferAmount (#848) is too similar to ShinobiVerse._transferStandard(address,address,uint256).tTransferAmount (#798)
Variable ShinobiVerse._transferFromExcluded(address,address,uint256).rTransferAmount (#819) is too similar to ShinobiVerse._transferStandard(address,address,uint256).tTransferAmount (#798)
Variable ShinobiVerse._getValues(uint256).rTransferAmount (#848) is too similar to ShinobiVerse._transferBothExcluded(address,address,uint256).tTransferAmount (#830)
Variable ShinobiVerse._transferStandard(address,address,uint256).rTransferAmount (#798) is too similar to ShinobiVerse._transferFromExcluded(address,address,uint256).tTransferAmount (#819)
Variable ShinobiVerse._transferToExcluded(address,address,uint256).rTransferAmount (#808) is too similar to ShinobiVerse._transferFromExcluded(address,address,uint256).tTransferAmount (#819)
Variable ShinobiVerse._getValues(uint256).rTransferAmount (#848) is too similar to ShinobiVerse._getTValues(uint256).tTransferAmount (#856)
Variable ShinobiVerse._transferBothExcluded(address,address,uint256).rTransferAmount (#830) is too similar to ShinobiVerse._transferFromExcluded(address,address,uint256).tTransferAmount (#819)
Variable ShinobiVerse._transferStandard(address,address,uint256).rTransferAmount (#798) is too similar to ShinobiVerse._transferBothExcluded(address,address,uint256).tTransferAmount (#830)
Variable ShinobiVerse._transferToExcluded(address,address,uint256).rTransferAmount (#808) is too similar to ShinobiVerse._transferBothExcluded(address,address,uint256).tTransferAmount (#830)
Variable ShinobiVerse._getRValues(uint256,uint256,uint256,uint256,uint256).rTransferAmount (#865) is too similar to ShinobiVerse._transferBothExcluded(address,address,uint256).tTransferAmount (#830)
Variable ShinobiVerse._transferFromExcluded(address,address,uint256).rTransferAmount (#819) is too similar to ShinobiVerse._transferBothExcluded(address,address,uint256).tTransferAmount (#830)
Variable ShinobiVerse._getValues(uint256).rTransferAmount (#848) is too similar to ShinobiVerse._transferToExcluded(address,address,uint256).tTransferAmount (#808)
Variable ShinobiVerse._transferBothExcluded(address,address,uint256).rTransferAmount (#830) is too similar to ShinobiVerse._transferBothExcluded(address,address,uint256).tTransferAmount (#830)
Variable ShinobiVerse._transferStandard(address,address,uint256).rTransferAmount (#798) is too similar to ShinobiVerse._getTValues(uint256).tTransferAmount (#856)
Variable ShinobiVerse._getValues(uint256).rTransferAmount (#848) is too similar to ShinobiVerse._getValues(uint256).tTransferAmount (#847)
Variable ShinobiVerse._transferToExcluded(address,address,uint256).rTransferAmount (#808) is too similar to ShinobiVerse._getTValues(uint256).tTransferAmount (#856)
Variable ShinobiVerse._transferBothExcluded(address,address,uint256).rTransferAmount (#830) is too similar to ShinobiVerse._getTValues(uint256).tTransferAmount (#856)
Variable ShinobiVerse._transferStandard(address,address,uint256).rTransferAmount (#798) is too similar to ShinobiVerse._transferToExcluded(address,address,uint256).tTransferAmount (#808)
Variable ShinobiVerse._transferStandard(address,address,uint256).rTransferAmount (#798) is too similar to ShinobiVerse._getValues(uint256).tTransferAmount (#847)
Variable ShinobiVerse._transferToExcluded(address,address,uint256).rTransferAmount (#808) is too similar to ShinobiVerse._getValues(uint256).tTransferAmount (#847)
Variable ShinobiVerse._transferBothExcluded(address,address,uint256).rTransferAmount (#830) is too similar to ShinobiVerse._transferToExcluded(address,address,uint256).tTransferAmount (#808)
Variable ShinobiVerse._transferBothExcluded(address,address,uint256).rTransferAmount (#830) is too similar to ShinobiVerse._getValues(uint256).tTransferAmount (#847)
Variable ShinobiVerse._getValues(uint256).rTransferAmount (#848) is too similar to ShinobiVerse._transferFromExcluded(address,address,uint256).tTransferAmount (#819)
Prevent variables from having similar names.

Additional information: link

renounceOwnership() should be declared external:
- Ownable.renounceOwnership() (#163-166)
transferOwnership(address) should be declared external:
- Ownable.transferOwnership(address) (#168-172)
getUnlockTime() should be declared external:
- Ownable.getUnlockTime() (#174-176)
getTime() should be declared external:
- Ownable.getTime() (#178-180)
lock(uint256) should be declared external:
- Ownable.lock(uint256) (#182-187)
unlock() should be declared external:
- Ownable.unlock() (#189-194)
name() should be declared external:
- ShinobiVerse.name() (#507-509)
symbol() should be declared external:
- ShinobiVerse.symbol() (#511-513)
decimals() should be declared external:
- ShinobiVerse.decimals() (#515-517)
totalSupply() should be declared external:
- ShinobiVerse.totalSupply() (#519-521)
transfer(address,uint256) should be declared external:
- ShinobiVerse.transfer(address,uint256) (#528-531)
allowance(address,address) should be declared external:
- ShinobiVerse.allowance(address,address) (#533-535)
approve(address,uint256) should be declared external:
- ShinobiVerse.approve(address,uint256) (#537-540)
transferFrom(address,address,uint256) should be declared external:
- ShinobiVerse.transferFrom(address,address,uint256) (#542-546)
increaseAllowance(address,uint256) should be declared external:
- ShinobiVerse.increaseAllowance(address,uint256) (#548-551)
decreaseAllowance(address,uint256) should be declared external:
- ShinobiVerse.decreaseAllowance(address,uint256) (#553-556)
isExcludedFromReward(address) should be declared external:
- ShinobiVerse.isExcludedFromReward(address) (#558-560)
totalFees() should be declared external:
- ShinobiVerse.totalFees() (#562-564)
minimumTokensBeforeSwapAmount() should be declared external:
- ShinobiVerse.minimumTokensBeforeSwapAmount() (#566-568)
setRouterAddressAndCreatePair(address) should be declared external:
- ShinobiVerse.setRouterAddressAndCreatePair(address) (#573-577)
setRouterAddress(address) should be declared external:
- ShinobiVerse.setRouterAddress(address) (#580-583)
setPairAddress(address) should be declared external:
- ShinobiVerse.setPairAddress(address) (#586-588)
excludeFromReward(address) should be declared external:
- ShinobiVerse.excludeFromReward(address) (#597-605)
enableNoTransferFee(bool) should be declared external:
- ShinobiVerse.enableNoTransferFee(bool) (#721-724)
isExcludedFromFee(address) should be declared external:
- ShinobiVerse.isExcludedFromFee(address) (#921-923)
excludeFromFee(address) should be declared external:
- ShinobiVerse.excludeFromFee(address) (#925-927)
includeInFee(address) should be declared external:
- ShinobiVerse.includeInFee(address) (#929-931)
setSwapAndLiquifyEnabled(bool) should be declared external:
- ShinobiVerse.setSwapAndLiquifyEnabled(bool) (#963-966)
changeRouterVersion(address) should be declared external:
- ShinobiVerse.changeRouterVersion(address) (#1006-1019)
transferForeignToken(address,address) should be declared external:
- ShinobiVerse.transferForeignToken(address,address) (#1025-1029)
Use the external attribute for functions never called from the contract.

Additional information: link

ShinobiVerse.addLiquidity(uint256,uint256) (#770-783) ignores return value by uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#775-782)
Ensure that all the return values of the function calls are used.

Additional information: link

ShinobiVerse.includeInReward(address) (#607-618) has costly operations inside a loop:
- _excluded.pop() (#614)
Use a local variable to hold the loop computation result.

Additional information: link

Redundant expression "this (#10)" inContext (#4-13)
Remove redundant statements if they congest code but offer no value.

Additional information: link

ShinobiVerse.slitherConstructorVariables() (#398-1088) uses literals with too many digits:
- minimumTokensBeforeSwap = 100000 * 10 ** 9 (#452)
Use: Ether suffix, Time suffix, or The scientific notation

Additional information: link

Pragma version0.8.13 (#2) necessitates a version too recent to be trusted. Consider deploying with 0.6.12/0.7.6/0.8.7
solc-0.8.13 is not recommended for deployment
Deploy with any of the following Solidity versions: 0.5.16 - 0.5.17, 0.6.11 - 0.6.12, 0.7.5 - 0.7.6 Use a simple pragma version that allows any of these versions. Consider using the latest version of Solidity for testing.

Additional information: link

Low level call in Address.sendValue(address,uint256) (#95-101):
- (success) = recipient.call{value: amount}() (#99)
Low level call in Address._functionCallWithValue(address,bytes,uint256,string) (#121-138):
- (success,returndata) = target.call{value: weiValue}(data) (#124)
Avoid low-level calls. Check the call success. If the call is meant for a contract, check for code existence

Additional information: link

ShinobiVerse.setBuyMaxTxAmount(uint256) (#934-937) should emit an event for:
- _bMaxTxAmount = bMaxTxAmount (#935)
ShinobiVerse.setSellMaxTxAmount(uint256) (#939-942) should emit an event for:
- _sMaxTxAmount = sMaxTxAmount (#940)
ShinobiVerse.setMinTokensToSell(uint256) (#944-946) should emit an event for:
- minimumTokensBeforeSwap = _minimumTokensBeforeSwap (#945)
ShinobiVerse.setAllBuyAndTxFees(uint256,uint256,uint256,uint256,uint256,uint256) (#972-984) should emit an event for:
- _buyTaxFee = taxFee (#975)
- _buyVaultFee = vaultFee (#976)
- _buyRewardFee = rewardFee (#977)
- _buyLiquidityFee = liquidityFee (#978)
- _buyMarketingFee = marketingFee (#979)
- _buyDevelopmentFee = developmentFee (#980)
- _buyAllSwapableFees = _buyRewardFee + _buyLiquidityFee + _buyMarketingFee + _buyDevelopmentFee (#981)
ShinobiVerse.setAllSellFees(uint256,uint256,uint256,uint256,uint256,uint256) (#987-999) should emit an event for:
- _sellTaxFee = taxFee (#990)
- _sellVaultFee = vaultFee (#991)
- _sellRewardFee = rewardFee (#992)
- _sellLiquidityFee = liquidityFee (#993)
- _sellMarketingFee = marketingFee (#994)
- _sellDevelopmentFee = developmentFee (#995)
- _sellAllSwapableFees = _sellRewardFee + _sellLiquidityFee + _sellMarketingFee + _sellDevelopmentFee (#996)
Emit an event for critical parameter changes.

Additional information: link

Contract has 6% buy tax and 6% sell tax.
Taxes are low but contract ownership is not renounced. Token has a high risk of becoming a honeypot.

Token is deployed only at one blockchain

Token has only one trading pair

BscScan page for the token does not contain additional info: website, socials, description, etc.

Additional information: link

Unable to find token on CoinGecko

Additional information: link

Unable to find audit link on the website

Token is not listed at Mobula.Finance

Additional information: link

Unable to find token on CoinHunt

Additional information: link

Young tokens have high risks of price dump / death

Token has no active CoinGecko listing / rank

Young tokens have high risks of price dump / death

Young tokens have high risks of price dump / death

Young tokens have high risks of price dump / death