SIMS [METASIMS] Token

Reentrancy in MetaToken._transfer(address,address,uint256) (#760-818):
External calls:
- pinkAntiBot.onPreTransferCheck(sender,recipient,amount) (#765)
- _executeSwap(contractTokenBalance) (#782)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokens,0,path,address(this),block.timestamp) (#909-919)
External calls sending eth:
- _executeSwap(contractTokenBalance) (#782)
- address(devWallet).transfer(nativeDev) (#894)
- address(marketingWallet).transfer(nativeMarketing) (#897)
- address(gameWallet).transfer(nativeGame) (#900)
State variables written after the call(s):
- _executeTransfer(sender,address(this),fees) (#813)
- _balances[sender] = senderBalance - amount (#825)
- _balances[recipient] += amount (#826)
- _executeTransfer(sender,recipient,amount) (#817)
- _balances[sender] = senderBalance - amount (#825)
- _balances[recipient] += amount (#826)
- swapping = false (#784)
Apply the check-effects-interactions pattern.

Additional information: link

Unable to verify that contract auditor is trusted: Certik, Quantstamp, Hacken, Solidity, Paladinsec, Openzeppelin, Verichains

MetaToken._executeSwap(uint256) (#853-902) uses a dangerous strict equality:
- nativeBalance == 0 || nativeBalance < swapNativeMinimum (#884)
Don't use strict equality to determine if an account has enough Ether or tokens.

Additional information: link

Variable IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountADesired (#12) is too similar to IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountBDesired (#13)
Prevent variables from having similar names.

Additional information: link

MetaToken.constructor() (#605-626) uses literals with too many digits:
- _mint(owner(),100000000 * (10 ** 18)) (#620)
MetaToken.slitherConstructorVariables() (#566-922) uses literals with too many digits:
- swapTokensAtAmount = 500000 * (10 ** 18) (#589)
MetaToken.slitherConstructorVariables() (#566-922) uses literals with too many digits:
- swapNativeMinimum = 1000000000000000 (#591)
Use: Ether suffix, Time suffix, or The scientific notation

Additional information: link

MetaToken._name (#568) should be constant
MetaToken._symbol (#569) should be constant
MetaToken.swapNativeMinimum (#591) should be constant
MetaToken.swapTokensAtAmount (#589) should be constant
Add the constant attributes to state variables that never change.

Additional information: link

MetaToken.allowance(address,address).owner (#726) shadows:
- Ownable.owner() (#232-234) (function)
MetaToken._approve(address,address,uint256).owner (#830) shadows:
- Ownable.owner() (#232-234) (function)
Rename the local variables that shadow another component.

Additional information: link

Address.isContract(address) (#370-380) uses assembly
- INLINE ASM (#376-378)
Address._verifyCallResult(bool,bytes,string) (#533-553) uses assembly
- INLINE ASM (#545-548)
Do not use evm assembly.

Additional information: link

Low level call in Address.sendValue(address,uint256) (#398-403):
- (success) = recipient.call{value: amount}() (#401)
Low level call in Address.functionCallWithValue(address,bytes,uint256,string) (#466-477):
- (success,returndata) = target.call{value: value}(data) (#475)
Low level call in Address.functionStaticCall(address,bytes,string) (#495-504):
- (success,returndata) = target.staticcall(data) (#502)
Low level call in Address.functionDelegateCall(address,bytes,string) (#522-531):
- (success,returndata) = target.delegatecall(data) (#529)
Avoid low-level calls. Check the call success. If the call is meant for a contract, check for code existence

Additional information: link

MetaToken._transfer(address,address,uint256).takeFee (#787) is a local variable never initialized
MetaToken._transfer(address,address,uint256).fees (#802) is a local variable never initialized
MetaToken._executeSwap(uint256).marketingFeeBPS (#860) is a local variable never initialized
MetaToken._executeSwap(uint256).devFeeBPS (#859) is a local variable never initialized
MetaToken._executeSwap(uint256).totalFeeBPS (#862) is a local variable never initialized
Initialize all the variables. If a variable is meant to be initialized to zero, explicitly set it to zero to improve code readability.

Additional information: link

MetaToken.setBuyMarketingFeeBPS(uint256) (#664-669) should emit an event for:
- buyTotalFeeBPS -= buyMarketingFeeBPS (#666)
- buyMarketingFeeBPS = bps (#667)
- buyTotalFeeBPS += buyMarketingFeeBPS (#668)
MetaToken.setBuyDevFeeBPS(uint256) (#671-676) should emit an event for:
- buyTotalFeeBPS -= buyDevFeeBPS (#673)
- buyDevFeeBPS = bps (#674)
- buyTotalFeeBPS += buyDevFeeBPS (#675)
MetaToken.setBuyGameFeeBPS(uint256) (#678-683) should emit an event for:
- buyTotalFeeBPS -= buyGameFeeBPS (#680)
- buyGameFeeBPS = bps (#681)
- buyTotalFeeBPS += buyGameFeeBPS (#682)
MetaToken.setSellMarketingFeeBPS(uint256) (#685-690) should emit an event for:
- sellTotalFeeBPS -= sellMarketingFeeBPS (#687)
- sellMarketingFeeBPS = bps (#688)
- sellTotalFeeBPS += sellMarketingFeeBPS (#689)
MetaToken.setSellDevFeeBPS(uint256) (#692-697) should emit an event for:
- sellTotalFeeBPS -= sellDevFeeBPS (#694)
- sellDevFeeBPS = bps (#695)
- sellTotalFeeBPS += sellDevFeeBPS (#696)
MetaToken.setSellGameFeeBPS(uint256) (#699-704) should emit an event for:
- sellTotalFeeBPS -= sellGameFeeBPS (#701)
- sellGameFeeBPS = bps (#702)
- sellTotalFeeBPS += sellGameFeeBPS (#703)
Emit an event for critical parameter changes.

Additional information: link

MetaToken.setDevWallet(address)._address (#632) lacks a zero-check on :
- devWallet = _address (#633)
MetaToken.setMarketingWallet(address)._address (#636) lacks a zero-check on :
- marketingWallet = _address (#637)
MetaToken.setGameWallet(address)._address (#640) lacks a zero-check on :
- gameWallet = _address (#641)
Check that the address is not zero.

Additional information: link

Reentrancy in MetaToken._transfer(address,address,uint256) (#760-818):
External calls:
- pinkAntiBot.onPreTransferCheck(sender,recipient,amount) (#765)
State variables written after the call(s):
- swapping = true (#781)
Reentrancy in MetaToken._transfer(address,address,uint256) (#760-818):
External calls:
- pinkAntiBot.onPreTransferCheck(sender,recipient,amount) (#765)
- _executeSwap(contractTokenBalance) (#782)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokens,0,path,address(this),block.timestamp) (#909-919)
External calls sending eth:
- _executeSwap(contractTokenBalance) (#782)
- address(devWallet).transfer(nativeDev) (#894)
- address(marketingWallet).transfer(nativeMarketing) (#897)
- address(gameWallet).transfer(nativeGame) (#900)
State variables written after the call(s):
- _executeSwap(contractTokenBalance) (#782)
- _allowances[owner][spender] = amount (#833)
- lastSwapTime = block.timestamp (#783)
Reentrancy in MetaToken.constructor() (#605-626):
External calls:
- _uniswapV2Pair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#609-610)
State variables written after the call(s):
- _mint(owner(),100000000 * (10 ** 18)) (#620)
- _balances[account] += amount (#840)
- excludeFromFees(owner(),true) (#616)
- _isExcludedFromFees[account] = excluded (#657)
- excludeFromFees(address(this),true) (#617)
- _isExcludedFromFees[account] = excluded (#657)
- _mint(owner(),100000000 * (10 ** 18)) (#620)
- _totalSupply += amount (#839)
- pinkAntiBot = IPinkAntiBot(0x8EFDb3b642eb2a20607ffe0A56CFefF6a95Df002) (#623)
- uniswapV2Pair = _uniswapV2Pair (#613)
- uniswapV2Router = _uniswapV2Router (#612)
Reentrancy in MetaToken.constructor() (#605-626):
External calls:
- _uniswapV2Pair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#609-610)
- pinkAntiBot.setTokenOwner(msg.sender) (#624)
State variables written after the call(s):
- antiBotEnabled = true (#625)
Reentrancy in MetaToken.transferFrom(address,address,uint256) (#752-758):
External calls:
- _transfer(sender,recipient,amount) (#753)
- pinkAntiBot.onPreTransferCheck(sender,recipient,amount) (#765)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokens,0,path,address(this),block.timestamp) (#909-919)
External calls sending eth:
- _transfer(sender,recipient,amount) (#753)
- address(devWallet).transfer(nativeDev) (#894)
- address(marketingWallet).transfer(nativeMarketing) (#897)
- address(gameWallet).transfer(nativeGame) (#900)
State variables written after the call(s):
- _approve(sender,_msgSender(),currentAllowance - amount) (#756)
- _allowances[owner][spender] = amount (#833)
Apply the check-effects-interactions pattern.

Additional information: link

Reentrancy in MetaToken._transfer(address,address,uint256) (#760-818):
External calls:
- pinkAntiBot.onPreTransferCheck(sender,recipient,amount) (#765)
- _executeSwap(contractTokenBalance) (#782)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokens,0,path,address(this),block.timestamp) (#909-919)
External calls sending eth:
- _executeSwap(contractTokenBalance) (#782)
- address(devWallet).transfer(nativeDev) (#894)
- address(marketingWallet).transfer(nativeMarketing) (#897)
- address(gameWallet).transfer(nativeGame) (#900)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#834)
- _executeSwap(contractTokenBalance) (#782)
- Transfer(sender,recipient,amount) (#827)
- _executeTransfer(sender,recipient,amount) (#817)
- Transfer(sender,recipient,amount) (#827)
- _executeTransfer(sender,address(this),fees) (#813)
Reentrancy in MetaToken.constructor() (#605-626):
External calls:
- _uniswapV2Pair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#609-610)
Event emitted after the call(s):
- Transfer(address(0),account,amount) (#841)
- _mint(owner(),100000000 * (10 ** 18)) (#620)
Reentrancy in MetaToken.transferFrom(address,address,uint256) (#752-758):
External calls:
- _transfer(sender,recipient,amount) (#753)
- pinkAntiBot.onPreTransferCheck(sender,recipient,amount) (#765)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokens,0,path,address(this),block.timestamp) (#909-919)
External calls sending eth:
- _transfer(sender,recipient,amount) (#753)
- address(devWallet).transfer(nativeDev) (#894)
- address(marketingWallet).transfer(nativeMarketing) (#897)
- address(gameWallet).transfer(nativeGame) (#900)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#834)
- _approve(sender,_msgSender(),currentAllowance - amount) (#756)
Apply the check-effects-interactions pattern.

Additional information: link

Address._verifyCallResult(bool,bytes,string) (#533-553) is never used and should be removed
Address.functionCall(address,bytes) (#423-425) is never used and should be removed
Address.functionCall(address,bytes,string) (#433-439) is never used and should be removed
Address.functionCallWithValue(address,bytes,uint256) (#452-458) is never used and should be removed
Address.functionCallWithValue(address,bytes,uint256,string) (#466-477) is never used and should be removed
Address.functionDelegateCall(address,bytes) (#512-514) is never used and should be removed
Address.functionDelegateCall(address,bytes,string) (#522-531) is never used and should be removed
Address.functionStaticCall(address,bytes) (#485-487) is never used and should be removed
Address.functionStaticCall(address,bytes,string) (#495-504) is never used and should be removed
Address.isContract(address) (#370-380) is never used and should be removed
Address.sendValue(address,uint256) (#398-403) is never used and should be removed
Context._msgData() (#212-214) is never used and should be removed
MetaToken._burn(address,uint256) (#844-851) is never used and should be removed
Remove unused functions.

Additional information: link

Pragma version^0.8.9 (#3) necessitates a version too recent to be trusted. Consider deploying with 0.6.12/0.7.6/0.8.7
solc-0.8.9 is not recommended for deployment
Deploy with any of the following Solidity versions: 0.5.16 - 0.5.17, 0.6.11 - 0.6.12, 0.7.5 - 0.7.6 Use a simple pragma version that allows any of these versions. Consider using the latest version of Solidity for testing.

Additional information: link

Function IUniswapV2Router01.WETH() (#7) is not in mixedCase
Function IUniswapV2Pair.DOMAIN_SEPARATOR() (#171) is not in mixedCase
Function IUniswapV2Pair.PERMIT_TYPEHASH() (#172) is not in mixedCase
Function IUniswapV2Pair.MINIMUM_LIQUIDITY() (#189) is not in mixedCase
Parameter MetaToken.setDevWallet(address)._address (#632) is not in mixedCase
Parameter MetaToken.setMarketingWallet(address)._address (#636) is not in mixedCase
Parameter MetaToken.setGameWallet(address)._address (#640) is not in mixedCase
Parameter MetaToken.setSwapEnabled(bool)._enabled (#644) is not in mixedCase
Parameter MetaToken.setTaxEnabled(bool)._enabled (#648) is not in mixedCase
Parameter MetaToken.setAntiBotEnabled(bool)._enabled (#652) is not in mixedCase
Follow the Solidity naming convention.

Additional information: link

Reentrancy in MetaToken._transfer(address,address,uint256) (#760-818):
External calls:
- _executeSwap(contractTokenBalance) (#782)
- address(devWallet).transfer(nativeDev) (#894)
- address(marketingWallet).transfer(nativeMarketing) (#897)
- address(gameWallet).transfer(nativeGame) (#900)
State variables written after the call(s):
- _executeTransfer(sender,address(this),fees) (#813)
- _balances[sender] = senderBalance - amount (#825)
- _balances[recipient] += amount (#826)
- _executeTransfer(sender,recipient,amount) (#817)
- _balances[sender] = senderBalance - amount (#825)
- _balances[recipient] += amount (#826)
- lastSwapTime = block.timestamp (#783)
- swapping = false (#784)
Event emitted after the call(s):
- Transfer(sender,recipient,amount) (#827)
- _executeTransfer(sender,address(this),fees) (#813)
- Transfer(sender,recipient,amount) (#827)
- _executeTransfer(sender,recipient,amount) (#817)
Reentrancy in MetaToken.transferFrom(address,address,uint256) (#752-758):
External calls:
- _transfer(sender,recipient,amount) (#753)
- address(devWallet).transfer(nativeDev) (#894)
- address(marketingWallet).transfer(nativeMarketing) (#897)
- address(gameWallet).transfer(nativeGame) (#900)
State variables written after the call(s):
- _approve(sender,_msgSender(),currentAllowance - amount) (#756)
- _allowances[owner][spender] = amount (#833)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#834)
- _approve(sender,_msgSender(),currentAllowance - amount) (#756)
Apply the check-effects-interactions pattern.

Additional information: link

renounceOwnership() should be declared external:
- Ownable.renounceOwnership() (#251-253)
transferOwnership(address) should be declared external:
- Ownable.transferOwnership(address) (#259-262)
setDevWallet(address) should be declared external:
- MetaToken.setDevWallet(address) (#632-634)
setMarketingWallet(address) should be declared external:
- MetaToken.setMarketingWallet(address) (#636-638)
setGameWallet(address) should be declared external:
- MetaToken.setGameWallet(address) (#640-642)
isExcludedFromFees(address) should be declared external:
- MetaToken.isExcludedFromFees(address) (#660-662)
setBuyMarketingFeeBPS(uint256) should be declared external:
- MetaToken.setBuyMarketingFeeBPS(uint256) (#664-669)
setBuyDevFeeBPS(uint256) should be declared external:
- MetaToken.setBuyDevFeeBPS(uint256) (#671-676)
setBuyGameFeeBPS(uint256) should be declared external:
- MetaToken.setBuyGameFeeBPS(uint256) (#678-683)
setSellMarketingFeeBPS(uint256) should be declared external:
- MetaToken.setSellMarketingFeeBPS(uint256) (#685-690)
setSellDevFeeBPS(uint256) should be declared external:
- MetaToken.setSellDevFeeBPS(uint256) (#692-697)
setSellGameFeeBPS(uint256) should be declared external:
- MetaToken.setSellGameFeeBPS(uint256) (#699-704)
name() should be declared external:
- MetaToken.name() (#706-708)
symbol() should be declared external:
- MetaToken.symbol() (#710-712)
decimals() should be declared external:
- MetaToken.decimals() (#714-716)
totalSupply() should be declared external:
- MetaToken.totalSupply() (#718-720)
allowance(address,address) should be declared external:
- MetaToken.allowance(address,address) (#726-728)
approve(address,uint256) should be declared external:
- MetaToken.approve(address,uint256) (#730-733)
increaseAllowance(address,uint256) should be declared external:
- MetaToken.increaseAllowance(address,uint256) (#735-738)
decreaseAllowance(address,uint256) should be declared external:
- MetaToken.decreaseAllowance(address,uint256) (#740-745)
transfer(address,uint256) should be declared external:
- MetaToken.transfer(address,uint256) (#747-750)
transferFrom(address,address,uint256) should be declared external:
- MetaToken.transferFrom(address,address,uint256) (#752-758)
Use the external attribute for functions never called from the contract.

Additional information: link

Contract has 6% buy tax and 12% sell tax.
Taxes are high (over 10%) but contract ownership is renounced.

Token is deployed only at one blockchain

Unable to find website, listings and other project-related information

Young tokens have high risks of scam / price dump / death

Token has no active CoinGecko listing / rank

Token has no active CoinMarketCap listing / rank

Alexa traffic rank is relatively low

Additional information: link