Unable to find manual contract audit (e.g. Certik, PeckShield, Solidity...)
SpacesToken.addLiquidity(uint256,uint256) (#2116-2126) sends eth to arbitrary user
Dangerous calls:
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (#2118-2125)
Ensure that an arbitrary user cannot withdraw unauthorized funds.
Additional information: link
Reentrancy in SpacesToken._transfer(address,address,uint256) (#1954-2054):
External calls:
- swapAndSendToFee(marketingTokens) (#2000)
- IERC20(rewardToken).transfer(_marketingWalletAddress,newBalance) (#2065)
- uniswapV2Router.swapExactTokensForTokensSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#2107-2113)
- swapAndLiquify(swapTokens) (#2005)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (#2118-2125)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#2090-2096)
- swapAndSendDividends(sellTokens) (#2008)
- success = IERC20(rewardToken).transfer(address(dividendTracker),dividends) (#2131-2134)
- dividendTracker.distributeCAKEDividends(dividends) (#2137)
- uniswapV2Router.swapExactTokensForTokensSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#2107-2113)
External calls sending eth:
- swapAndLiquify(swapTokens) (#2005)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (#2118-2125)
State variables written after the call(s):
- super._transfer(from,address(this),fees) (#2026)
- _balances[sender] = senderBalance - amount (#134)
- _balances[recipient] += amount (#136)
- super._transfer(from,to,amount) (#2029)
- _balances[sender] = senderBalance - amount (#134)
- _balances[recipient] += amount (#136)
- swapping = false (#2010)
Apply the check-effects-interactions pattern.
Additional information: link
ERC20Upgradeable.__gap (#840) shadows:
- ContextUpgradeable.__gap (#678)
OwnableUpgradeable.__gap (#880) shadows:
- ContextUpgradeable.__gap (#678)
Remove the state variable shadowing.
Additional information: link
SpacesToken.swapAndSendToFee(uint256) (#2056-2066) ignores return value by IERC20(rewardToken).transfer(_marketingWalletAddress,newBalance) (#2065)
Use SafeERC20, or ensure that the transfer/transferFrom return value is checked.
Additional information: link
Too many vulnerabilities (Unchecked transfer, Reentrancy vulnerability, etc.). High risk of a scam. DYOR & manual audit are advised.
Combination 1: Reentrancy vulnerabilities + Functions that send Ether to arbitraty destination. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.
Combination 2: Unchecked transfer + Functions that send Ether to arbitraty destination. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.
Combination 3: Reentrancy vulnerabilities + Unchecked transfer vulnerability. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.
Reentrancy in DividendPayingToken._withdrawDividendOfUser(address) (#1128-1154):
External calls:
- success = IERC20(rewardToken).transfer(user,_withdrawableDividend) (#1138-1141)
State variables written after the call(s):
- withdrawnDividends[user] = withdrawnDividends[user].sub(_withdrawableDividend) (#1144-1146)
Reentrancy in SpacesToken.updateDividendTracker(address) (#1677-1700):
External calls:
- newDividendTracker.excludeFromDividends(address(newDividendTracker)) (#1692)
- newDividendTracker.excludeFromDividends(address(this)) (#1693)
- newDividendTracker.excludeFromDividends(owner()) (#1694)
- newDividendTracker.excludeFromDividends(address(uniswapV2Router)) (#1695)
State variables written after the call(s):
- dividendTracker = newDividendTracker (#1699)
Apply the check-effects-interactions pattern.
Additional information: link
SpacesToken._transfer(address,address,uint256).claims (#2041) is a local variable never initialized
SpacesToken._transfer(address,address,uint256).iterations (#2040) is a local variable never initialized
SpacesToken._transfer(address,address,uint256).lastProcessedIndex (#2042) is a local variable never initialized
Initialize all the variables. If a variable is meant to be initialized to zero, explicitly set it to zero to improve code readability.
Additional information: link
SpacesToken.claim() (#1918-1920) ignores return value by dividendTracker.processAccount(address(msg.sender),false) (#1919)
SpacesToken._transfer(address,address,uint256) (#1954-2054) ignores return value by dividendTracker.process(gas) (#2039-2052)
SpacesToken.addLiquidity(uint256,uint256) (#2116-2126) ignores return value by uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (#2118-2125)
Ensure that all the return values of the function calls are used.
Additional information: link
DividendPayingToken.__DividendPayingToken_init(address,string,string)._name (#1103) shadows:
- ERC20Upgradeable._name (#688) (state variable)
DividendPayingToken.__DividendPayingToken_init(address,string,string)._symbol (#1104) shadows:
- ERC20Upgradeable._symbol (#689) (state variable)
DividendPayingToken.dividendOf(address)._owner (#1156) shadows:
- OwnableUpgradeable._owner (#844) (state variable)
DividendPayingToken.withdrawableDividendOf(address)._owner (#1160) shadows:
- OwnableUpgradeable._owner (#844) (state variable)
DividendPayingToken.withdrawnDividendOf(address)._owner (#1169) shadows:
- OwnableUpgradeable._owner (#844) (state variable)
DividendPayingToken.accumulativeDividendOf(address)._owner (#1178) shadows:
- OwnableUpgradeable._owner (#844) (state variable)
Rename the local variables that shadow another component.
Additional information: link
SpacesToken.setSwapTokensAtAmount(uint256) (#1673-1675) should emit an event for:
- swapTokensAtAmount = amount (#1674)
SpacesToken.setTokenRewardsFee(uint256) (#1739-1744) should emit an event for:
- totalFees = tokenRewardsFee.add(liquidityFee).add(marketingFee) (#1742)
SpacesToken.setLiquiditFee(uint256) (#1746-1751) should emit an event for:
- liquidityFee = value (#1748)
- totalFees = tokenRewardsFee.add(liquidityFee).add(marketingFee) (#1749)
SpacesToken.setMarketingFee(uint256) (#1753-1758) should emit an event for:
- marketingFee = value (#1755)
- totalFees = tokenRewardsFee.add(liquidityFee).add(marketingFee) (#1756)
Emit an event for critical parameter changes.
Additional information: link
SpacesToken.constructor(string,string,uint256,address[4],uint256[3],uint256,address,uint256)._uniswapV2Pair (#1644-1645) lacks a zero-check on :
- uniswapV2Pair = _uniswapV2Pair (#1647)
SpacesToken.constructor(string,string,uint256,address[4],uint256[3],uint256,address,uint256).serviceFeeReceiver_ (#1609) lacks a zero-check on :
- address(serviceFeeReceiver_).transfer(serviceFee_) (#1668)
SpacesToken.updateUniswapV2Router(address)._uniswapV2Pair (#1709-1710) lacks a zero-check on :
- uniswapV2Pair = _uniswapV2Pair (#1711)
SpacesToken.setMarketingWallet(address).wallet (#1735) lacks a zero-check on :
- _marketingWalletAddress = wallet (#1736)
Check that the address is not zero.
Additional information: link
DividendPayingToken._withdrawDividendOfUser(address) (#1128-1154) has external calls inside a loop: success = IERC20(rewardToken).transfer(user,_withdrawableDividend) (#1138-1141)
Favor pull over push strategy for external calls.
Additional information: link
Variable 'SpacesToken._transfer(address,address,uint256).iterations (#2040)' in SpacesToken._transfer(address,address,uint256) (#1954-2054) potentially used before declaration: ProcessedDividendTracker(iterations,claims,lastProcessedIndex,true,gas,tx.origin) (#2044-2051)
Variable 'SpacesToken._transfer(address,address,uint256).lastProcessedIndex (#2042)' in SpacesToken._transfer(address,address,uint256) (#1954-2054) potentially used before declaration: ProcessedDividendTracker(iterations,claims,lastProcessedIndex,true,gas,tx.origin) (#2044-2051)
Variable 'SpacesToken._transfer(address,address,uint256).claims (#2041)' in SpacesToken._transfer(address,address,uint256) (#1954-2054) potentially used before declaration: ProcessedDividendTracker(iterations,claims,lastProcessedIndex,true,gas,tx.origin) (#2044-2051)
Move all variable declarations prior to any usage of the variable, and ensure that reaching a variable declaration does not depend on some conditional if it is used unconditionally.
Additional information: link
Reentrancy in SpacesToken._transfer(address,address,uint256) (#1954-2054):
External calls:
- swapAndSendToFee(marketingTokens) (#2000)
- IERC20(rewardToken).transfer(_marketingWalletAddress,newBalance) (#2065)
- uniswapV2Router.swapExactTokensForTokensSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#2107-2113)
- swapAndLiquify(swapTokens) (#2005)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (#2118-2125)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#2090-2096)
External calls sending eth:
- swapAndLiquify(swapTokens) (#2005)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (#2118-2125)
State variables written after the call(s):
- swapAndLiquify(swapTokens) (#2005)
- _allowances[owner][spender] = amount (#180)
Reentrancy in SpacesToken._transfer(address,address,uint256) (#1954-2054):
External calls:
- swapAndSendToFee(marketingTokens) (#2000)
- IERC20(rewardToken).transfer(_marketingWalletAddress,newBalance) (#2065)
- uniswapV2Router.swapExactTokensForTokensSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#2107-2113)
- swapAndLiquify(swapTokens) (#2005)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (#2118-2125)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#2090-2096)
- swapAndSendDividends(sellTokens) (#2008)
- success = IERC20(rewardToken).transfer(address(dividendTracker),dividends) (#2131-2134)
- dividendTracker.distributeCAKEDividends(dividends) (#2137)
- uniswapV2Router.swapExactTokensForTokensSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#2107-2113)
External calls sending eth:
- swapAndLiquify(swapTokens) (#2005)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (#2118-2125)
State variables written after the call(s):
- swapAndSendDividends(sellTokens) (#2008)
- _allowances[owner][spender] = amount (#180)
Reentrancy in SpacesToken.constructor(string,string,uint256,address[4],uint256[3],uint256,address,uint256) (#1602-1669):
External calls:
- dividendTracker.initialize(rewardToken,minimumTokenBalanceForDividends_) (#1637-1640)
- _uniswapV2Pair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#1644-1645)
State variables written after the call(s):
- uniswapV2Pair = _uniswapV2Pair (#1647)
- uniswapV2Router = _uniswapV2Router (#1646)
Reentrancy in SpacesToken.constructor(string,string,uint256,address[4],uint256[3],uint256,address,uint256) (#1602-1669):
External calls:
- dividendTracker.initialize(rewardToken,minimumTokenBalanceForDividends_) (#1637-1640)
- _uniswapV2Pair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#1644-1645)
- _setAutomatedMarketMakerPair(_uniswapV2Pair,true) (#1648)
- dividendTracker.excludeFromDividends(pair) (#1780)
- dividendTracker.excludeFromDividends(address(dividendTracker)) (#1650)
- dividendTracker.excludeFromDividends(address(this)) (#1651)
- dividendTracker.excludeFromDividends(owner()) (#1652)
- dividendTracker.excludeFromDividends(address(0xdead)) (#1653)
- dividendTracker.excludeFromDividends(address(_uniswapV2Router)) (#1654)
State variables written after the call(s):
- excludeFromFees(owner(),true) (#1656)
- _isExcludedFromFees[account] = excluded (#1719)
- excludeFromFees(_marketingWalletAddress,true) (#1657)
- _isExcludedFromFees[account] = excluded (#1719)
- excludeFromFees(address(this),true) (#1658)
- _isExcludedFromFees[account] = excluded (#1719)
- excludeFromFees(address(0x7ee058420e5937496F5a2096f04caA7721cF70cc),true) (#1661)
- _isExcludedFromFees[account] = excluded (#1719)
Reentrancy in SpacesToken.constructor(string,string,uint256,address[4],uint256[3],uint256,address,uint256) (#1602-1669):
External calls:
- dividendTracker.initialize(rewardToken,minimumTokenBalanceForDividends_) (#1637-1640)
- _uniswapV2Pair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#1644-1645)
- _setAutomatedMarketMakerPair(_uniswapV2Pair,true) (#1648)
- dividendTracker.excludeFromDividends(pair) (#1780)
- dividendTracker.excludeFromDividends(address(dividendTracker)) (#1650)
- dividendTracker.excludeFromDividends(address(this)) (#1651)
- dividendTracker.excludeFromDividends(owner()) (#1652)
- dividendTracker.excludeFromDividends(address(0xdead)) (#1653)
- dividendTracker.excludeFromDividends(address(_uniswapV2Router)) (#1654)
- dividendTracker.excludeFromDividends(address(0x7ee058420e5937496F5a2096f04caA7721cF70cc)) (#1662)
State variables written after the call(s):
- _mint(owner(),totalSupply_) (#1664)
- _balances[account] += amount (#149)
- _mint(owner(),totalSupply_) (#1664)
- _totalSupply += amount (#148)
Reentrancy in SpacesTokenDividendTracker.processAccount(address,bool) (#1487-1501):
External calls:
- amount = _withdrawDividendOfUser(account) (#1492)
- success = IERC20(rewardToken).transfer(user,_withdrawableDividend) (#1138-1141)
State variables written after the call(s):
- lastClaimTimes[account] = block.timestamp (#1495)
Reentrancy in SpacesToken.swapAndLiquify(uint256) (#2068-2081):
External calls:
- swapTokensForEth(half) (#2074)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#2090-2096)
- addLiquidity(otherHalf,newBalance) (#2078)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (#2118-2125)
External calls sending eth:
- addLiquidity(otherHalf,newBalance) (#2078)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (#2118-2125)
State variables written after the call(s):
- addLiquidity(otherHalf,newBalance) (#2078)
- _allowances[owner][spender] = amount (#180)
Reentrancy in SpacesToken.updateUniswapV2Router(address) (#1702-1712):
External calls:
- _uniswapV2Pair = IUniswapV2Factory(uniswapV2Router.factory()).createPair(address(this),uniswapV2Router.WETH()) (#1709-1710)
State variables written after the call(s):
- uniswapV2Pair = _uniswapV2Pair (#1711)
Apply the check-effects-interactions pattern.
Additional information: link
Reentrancy in SpacesToken._setAutomatedMarketMakerPair(address,bool) (#1772-1784):
External calls:
- dividendTracker.excludeFromDividends(pair) (#1780)
Event emitted after the call(s):
- SetAutomatedMarketMakerPair(pair,value) (#1783)
Reentrancy in SpacesToken._transfer(address,address,uint256) (#1954-2054):
External calls:
- swapAndSendToFee(marketingTokens) (#2000)
- IERC20(rewardToken).transfer(_marketingWalletAddress,newBalance) (#2065)
- uniswapV2Router.swapExactTokensForTokensSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#2107-2113)
- swapAndLiquify(swapTokens) (#2005)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (#2118-2125)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#2090-2096)
External calls sending eth:
- swapAndLiquify(swapTokens) (#2005)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (#2118-2125)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#181)
- swapAndLiquify(swapTokens) (#2005)
- SwapAndLiquify(half,newBalance,otherHalf) (#2080)
- swapAndLiquify(swapTokens) (#2005)
Reentrancy in SpacesToken._transfer(address,address,uint256) (#1954-2054):
External calls:
- swapAndSendToFee(marketingTokens) (#2000)
- IERC20(rewardToken).transfer(_marketingWalletAddress,newBalance) (#2065)
- uniswapV2Router.swapExactTokensForTokensSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#2107-2113)
- swapAndLiquify(swapTokens) (#2005)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (#2118-2125)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#2090-2096)
- swapAndSendDividends(sellTokens) (#2008)
- success = IERC20(rewardToken).transfer(address(dividendTracker),dividends) (#2131-2134)
- dividendTracker.distributeCAKEDividends(dividends) (#2137)
- uniswapV2Router.swapExactTokensForTokensSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#2107-2113)
External calls sending eth:
- swapAndLiquify(swapTokens) (#2005)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (#2118-2125)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#181)
- swapAndSendDividends(sellTokens) (#2008)
- SendDividends(tokens,dividends) (#2138)
- swapAndSendDividends(sellTokens) (#2008)
- Transfer(sender,recipient,amount) (#138)
- super._transfer(from,to,amount) (#2029)
- Transfer(sender,recipient,amount) (#138)
- super._transfer(from,address(this),fees) (#2026)
Reentrancy in SpacesToken._transfer(address,address,uint256) (#1954-2054):
External calls:
- swapAndSendToFee(marketingTokens) (#2000)
- IERC20(rewardToken).transfer(_marketingWalletAddress,newBalance) (#2065)
- uniswapV2Router.swapExactTokensForTokensSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#2107-2113)
- swapAndLiquify(swapTokens) (#2005)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (#2118-2125)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#2090-2096)
- swapAndSendDividends(sellTokens) (#2008)
- success = IERC20(rewardToken).transfer(address(dividendTracker),dividends) (#2131-2134)
- dividendTracker.distributeCAKEDividends(dividends) (#2137)
- uniswapV2Router.swapExactTokensForTokensSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#2107-2113)
- dividendTracker.setBalance(address(from),balanceOf(from)) (#2031-2033)
- dividendTracker.setBalance(address(to),balanceOf(to)) (#2034)
- dividendTracker.process(gas) (#2039-2052)
External calls sending eth:
- swapAndLiquify(swapTokens) (#2005)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (#2118-2125)
Event emitted after the call(s):
- ProcessedDividendTracker(iterations,claims,lastProcessedIndex,true,gas,tx.origin) (#2044-2051)
Reentrancy in SpacesToken.constructor(string,string,uint256,address[4],uint256[3],uint256,address,uint256) (#1602-1669):
External calls:
- dividendTracker.initialize(rewardToken,minimumTokenBalanceForDividends_) (#1637-1640)
- _uniswapV2Pair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#1644-1645)
- _setAutomatedMarketMakerPair(_uniswapV2Pair,true) (#1648)
- dividendTracker.excludeFromDividends(pair) (#1780)
Event emitted after the call(s):
- SetAutomatedMarketMakerPair(pair,value) (#1783)
- _setAutomatedMarketMakerPair(_uniswapV2Pair,true) (#1648)
Reentrancy in SpacesToken.constructor(string,string,uint256,address[4],uint256[3],uint256,address,uint256) (#1602-1669):
External calls:
- dividendTracker.initialize(rewardToken,minimumTokenBalanceForDividends_) (#1637-1640)
- _uniswapV2Pair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#1644-1645)
- _setAutomatedMarketMakerPair(_uniswapV2Pair,true) (#1648)
- dividendTracker.excludeFromDividends(pair) (#1780)
- dividendTracker.excludeFromDividends(address(dividendTracker)) (#1650)
- dividendTracker.excludeFromDividends(address(this)) (#1651)
- dividendTracker.excludeFromDividends(owner()) (#1652)
- dividendTracker.excludeFromDividends(address(0xdead)) (#1653)
- dividendTracker.excludeFromDividends(address(_uniswapV2Router)) (#1654)
Event emitted after the call(s):
- ExcludeFromFees(account,excluded) (#1721)
- excludeFromFees(_marketingWalletAddress,true) (#1657)
- ExcludeFromFees(account,excluded) (#1721)
- excludeFromFees(owner(),true) (#1656)
- ExcludeFromFees(account,excluded) (#1721)
- excludeFromFees(address(0x7ee058420e5937496F5a2096f04caA7721cF70cc),true) (#1661)
- ExcludeFromFees(account,excluded) (#1721)
- excludeFromFees(address(this),true) (#1658)
Reentrancy in SpacesToken.constructor(string,string,uint256,address[4],uint256[3],uint256,address,uint256) (#1602-1669):
External calls:
- dividendTracker.initialize(rewardToken,minimumTokenBalanceForDividends_) (#1637-1640)
- _uniswapV2Pair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#1644-1645)
- _setAutomatedMarketMakerPair(_uniswapV2Pair,true) (#1648)
- dividendTracker.excludeFromDividends(pair) (#1780)
- dividendTracker.excludeFromDividends(address(dividendTracker)) (#1650)
- dividendTracker.excludeFromDividends(address(this)) (#1651)
- dividendTracker.excludeFromDividends(owner()) (#1652)
- dividendTracker.excludeFromDividends(address(0xdead)) (#1653)
- dividendTracker.excludeFromDividends(address(_uniswapV2Router)) (#1654)
- dividendTracker.excludeFromDividends(address(0x7ee058420e5937496F5a2096f04caA7721cF70cc)) (#1662)
Event emitted after the call(s):
- TokenCreated(owner(),address(this),TokenType.baby,VERSION) (#1666)
- Transfer(address(0),account,amount) (#150)
- _mint(owner(),totalSupply_) (#1664)
Reentrancy in SpacesTokenDividendTracker.processAccount(address,bool) (#1487-1501):
External calls:
- amount = _withdrawDividendOfUser(account) (#1492)
- success = IERC20(rewardToken).transfer(user,_withdrawableDividend) (#1138-1141)
Event emitted after the call(s):
- Claim(account,amount,automatic) (#1496)
Reentrancy in SpacesToken.processDividendTracker(uint256) (#1902-1916):
External calls:
- (iterations,claims,lastProcessedIndex) = dividendTracker.process(gas) (#1903-1907)
Event emitted after the call(s):
- ProcessedDividendTracker(iterations,claims,lastProcessedIndex,false,gas,tx.origin) (#1908-1915)
Reentrancy in SpacesToken.swapAndLiquify(uint256) (#2068-2081):
External calls:
- swapTokensForEth(half) (#2074)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#2090-2096)
- addLiquidity(otherHalf,newBalance) (#2078)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (#2118-2125)
External calls sending eth:
- addLiquidity(otherHalf,newBalance) (#2078)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (#2118-2125)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#181)
- addLiquidity(otherHalf,newBalance) (#2078)
- SwapAndLiquify(half,newBalance,otherHalf) (#2080)
Reentrancy in SpacesToken.swapAndSendDividends(uint256) (#2128-2140):
External calls:
- swapTokensForCake(tokens) (#2129)
- uniswapV2Router.swapExactTokensForTokensSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#2107-2113)
- success = IERC20(rewardToken).transfer(address(dividendTracker),dividends) (#2131-2134)
- dividendTracker.distributeCAKEDividends(dividends) (#2137)
Event emitted after the call(s):
- SendDividends(tokens,dividends) (#2138)
Reentrancy in SpacesToken.updateDividendTracker(address) (#1677-1700):
External calls:
- newDividendTracker.excludeFromDividends(address(newDividendTracker)) (#1692)
- newDividendTracker.excludeFromDividends(address(this)) (#1693)
- newDividendTracker.excludeFromDividends(owner()) (#1694)
- newDividendTracker.excludeFromDividends(address(uniswapV2Router)) (#1695)
Event emitted after the call(s):
- UpdateDividendTracker(newAddress,address(dividendTracker)) (#1697)
Apply the check-effects-interactions pattern.
Additional information: link
SpacesTokenDividendTracker.getAccount(address) (#1336-1383) uses timestamp for comparisons
Dangerous comparisons:
- nextClaimTime > block.timestamp (#1380-1382)
SpacesTokenDividendTracker.canAutoClaim(uint256) (#1408-1414) uses timestamp for comparisons
Dangerous comparisons:
- lastClaimTime > block.timestamp (#1409)
- block.timestamp.sub(lastClaimTime) >= claimWait (#1413)
SpacesToken._transfer(address,address,uint256) (#1954-2054) uses timestamp for comparisons
Dangerous comparisons:
- amount > _allowedMaxTxn && block.timestamp < launchtime + (60 * 15) (#1965)
- block.timestamp < launchtime + (60 * 5) (#1967)
- block.timestamp < launchtime + (60 * 10) (#1969)
- block.timestamp < launchtime + (60 * 15) (#1971)
Avoid relying on block.timestamp.
Additional information: link
Clones.clone(address) (#326-335) uses assembly
- INLINE ASM (#327-333)
Clones.cloneDeterministic(address,bytes32) (#337-346) uses assembly
- INLINE ASM (#338-344)
Clones.predictDeterministicAddress(address,bytes32,address) (#348-363) uses assembly
- INLINE ASM (#353-362)
Do not use evm assembly.
Additional information: link
SpacesToken.openTrading(address[],address[],address[],uint256) (#1930-1951) compares to a boolean constant:
-tradingEnabled == false (#1945)
Remove the equality to the boolean constant.
Additional information: link
Clones.cloneDeterministic(address,bytes32) (#337-346) is never used and should be removed
Clones.predictDeterministicAddress(address,bytes32) (#365-371) is never used and should be removed
Clones.predictDeterministicAddress(address,bytes32,address) (#348-363) is never used and should be removed
Context._msgData() (#52-54) is never used and should be removed
ContextUpgradeable.__Context_init() (#665-667) is never used and should be removed
ContextUpgradeable._msgData() (#675-677) is never used and should be removed
DividendPayingToken._transfer(address,address,uint256) (#1192-1207) is never used and should be removed
ERC20._burn(address,uint256) (#155-170) is never used and should be removed
ERC20Upgradeable._transfer(address,address,uint256) (#766-786) is never used and should be removed
SafeMath.div(uint256,uint256,string) (#301-310) is never used and should be removed
SafeMath.mod(uint256,uint256) (#286-288) is never used and should be removed
SafeMath.mod(uint256,uint256,string) (#312-321) is never used and should be removed
SafeMath.sub(uint256,uint256,string) (#290-299) is never used and should be removed
SafeMath.tryAdd(uint256,uint256) (#232-238) is never used and should be removed
SafeMath.tryDiv(uint256,uint256) (#256-261) is never used and should be removed
SafeMath.tryMod(uint256,uint256) (#263-268) is never used and should be removed
SafeMath.tryMul(uint256,uint256) (#247-254) is never used and should be removed
SafeMath.trySub(uint256,uint256) (#240-245) is never used and should be removed
SafeMathInt.abs(int256) (#963-966) is never used and should be removed
SafeMathInt.div(int256,int256) (#946-949) is never used and should be removed
SafeMathInt.mul(int256,int256) (#938-944) is never used and should be removed
Remove unused functions.
Additional information: link
Function IUniswapV2Router01.WETH() (#407) is not in mixedCase
Function ContextUpgradeable.__Context_init() (#665-667) is not in mixedCase
Function ContextUpgradeable.__Context_init_unchained() (#669-670) is not in mixedCase
Variable ContextUpgradeable.__gap (#678) is not in mixedCase
Function ERC20Upgradeable.__ERC20_init(string,string) (#691-694) is not in mixedCase
Function ERC20Upgradeable.__ERC20_init_unchained(string,string) (#696-699) is not in mixedCase
Variable ERC20Upgradeable.__gap (#840) is not in mixedCase
Function OwnableUpgradeable.__Ownable_init() (#848-851) is not in mixedCase
Function OwnableUpgradeable.__Ownable_init_unchained() (#853-855) is not in mixedCase
Variable OwnableUpgradeable.__gap (#880) is not in mixedCase
Function IUniswapV2Pair.DOMAIN_SEPARATOR() (#898) is not in mixedCase
Function IUniswapV2Pair.PERMIT_TYPEHASH() (#899) is not in mixedCase
Function IUniswapV2Pair.MINIMUM_LIQUIDITY() (#916) is not in mixedCase
Function DividendPayingToken.__DividendPayingToken_init(address,string,string) (#1101-1109) is not in mixedCase
Parameter DividendPayingToken.__DividendPayingToken_init(address,string,string)._rewardToken (#1102) is not in mixedCase
Parameter DividendPayingToken.__DividendPayingToken_init(address,string,string)._name (#1103) is not in mixedCase
Parameter DividendPayingToken.__DividendPayingToken_init(address,string,string)._symbol (#1104) is not in mixedCase
Parameter DividendPayingToken.dividendOf(address)._owner (#1156) is not in mixedCase
Parameter DividendPayingToken.withdrawableDividendOf(address)._owner (#1160) is not in mixedCase
Parameter DividendPayingToken.withdrawnDividendOf(address)._owner (#1169) is not in mixedCase
Parameter DividendPayingToken.accumulativeDividendOf(address)._owner (#1178) is not in mixedCase
Constant DividendPayingToken.magnitude (#1092) is not in UPPER_CASE_WITH_UNDERSCORES
Parameter SpacesTokenDividendTracker.getAccount(address)._account (#1336) is not in mixedCase
Variable SpacesToken._allowedMaxTxn (#1541) is not in mixedCase
Variable SpacesToken._marketingWalletAddress (#1543) is not in mixedCase
Follow the Solidity naming convention.
Additional information: link
Variable IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountADesired (#412) is too similar to IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountBDesired (#413)
Variable DividendPayingToken.__DividendPayingToken_init(address,string,string)._rewardToken (#1102) is too similar to SpacesTokenDividendTracker.initialize(address,uint256).rewardToken_ (#1263)
Variable DividendPayingToken._withdrawDividendOfUser(address)._withdrawableDividend (#1132) is too similar to SpacesTokenDividendTracker.getAccount(address).withdrawableDividends (#1343)
Variable SpacesToken._isAstronautHolderTierOne (#1554) is too similar to SpacesToken._isAstronautHolderTierTwo (#1555)
Variable ERC20._totalSupply (#60) is too similar to SpacesToken.constructor(string,string,uint256,address[4],uint256[3],uint256,address,uint256).totalSupply_ (#1605)
Prevent variables from having similar names.
Additional information: link
Clones.clone(address) (#326-335) uses literals with too many digits:
- mstore(uint256,uint256)(ptr_clone_asm_0,0x3d602d80600a3d3981f3363d3d373d3d3d363d73000000000000000000000000) (#329)
Clones.clone(address) (#326-335) uses literals with too many digits:
- mstore(uint256,uint256)(ptr_clone_asm_0 + 0x28,0x5af43d82803e903d91602b57fd5bf30000000000000000000000000000000000) (#331)
Clones.cloneDeterministic(address,bytes32) (#337-346) uses literals with too many digits:
- mstore(uint256,uint256)(ptr_cloneDeterministic_asm_0,0x3d602d80600a3d3981f3363d3d373d3d3d363d73000000000000000000000000) (#340)
Clones.cloneDeterministic(address,bytes32) (#337-346) uses literals with too many digits:
- mstore(uint256,uint256)(ptr_cloneDeterministic_asm_0 + 0x28,0x5af43d82803e903d91602b57fd5bf30000000000000000000000000000000000) (#342)
Clones.predictDeterministicAddress(address,bytes32,address) (#348-363) uses literals with too many digits:
- mstore(uint256,uint256)(ptr_predictDeterministicAddress_asm_0,0x3d602d80600a3d3981f3363d3d373d3d3d363d73000000000000000000000000) (#355)
Clones.predictDeterministicAddress(address,bytes32,address) (#348-363) uses literals with too many digits:
- mstore(uint256,uint256)(ptr_predictDeterministicAddress_asm_0 + 0x28,0x5af43d82803e903d91602b57fd5bf3ff00000000000000000000000000000000) (#357)
SpacesToken.constructor(string,string,uint256,address[4],uint256[3],uint256,address,uint256) (#1602-1669) uses literals with too many digits:
- gasForProcessing = 300000 (#1632)
SpacesToken.updateGasForProcessing(uint256) (#1786-1797) uses literals with too many digits:
- require(bool,string)(newValue >= 200000 && newValue <= 500000,SpacesToken: gasForProcessing must be between 200,000 and 500,000) (#1787-1790)
Use: Ether suffix, Time suffix, or The scientific notation
Additional information: link
SafeMathInt.MAX_INT256 (#936) is never used in SafeMathInt (#934-972)
OwnableUpgradeable.__gap (#880) is never used in SpacesTokenDividendTracker (#1238-1502)
Remove unused state variables.
Additional information: link
name() should be declared external:
- ERC20.name() (#67-69)
symbol() should be declared external:
- ERC20.symbol() (#70-72)
decimals() should be declared external:
- ERC20.decimals() (#73-75)
totalSupply() should be declared external:
- ERC20.totalSupply() (#76-78)
transfer(address,uint256) should be declared external:
- ERC20.transfer(address,uint256) (#82-85)
allowance(address,address) should be declared external:
- ERC20.allowance(address,address) (#86-88)
approve(address,uint256) should be declared external:
- ERC20.approve(address,uint256) (#89-92)
transferFrom(address,address,uint256) should be declared external:
- ERC20.transferFrom(address,address,uint256) (#93-107)
increaseAllowance(address,uint256) should be declared external:
- ERC20.increaseAllowance(address,uint256) (#108-111)
decreaseAllowance(address,uint256) should be declared external:
- ERC20.decreaseAllowance(address,uint256) (#112-120)
renounceOwnership() should be declared external:
- Ownable.renounceOwnership() (#215-217)
transferOwnership(address) should be declared external:
- Ownable.transferOwnership(address) (#219-222)
name() should be declared external:
- ERC20Upgradeable.name() (#701-703)
symbol() should be declared external:
- ERC20Upgradeable.symbol() (#705-707)
decimals() should be declared external:
- ERC20Upgradeable.decimals() (#709-711)
transfer(address,uint256) should be declared external:
- ERC20Upgradeable.transfer(address,uint256) (#721-724)
allowance(address,address) should be declared external:
- ERC20Upgradeable.allowance(address,address) (#726-728)
approve(address,uint256) should be declared external:
- ERC20Upgradeable.approve(address,uint256) (#730-733)
transferFrom(address,address,uint256) should be declared external:
- ERC20Upgradeable.transferFrom(address,address,uint256) (#735-749)
increaseAllowance(address,uint256) should be declared external:
- ERC20Upgradeable.increaseAllowance(address,uint256) (#751-754)
decreaseAllowance(address,uint256) should be declared external:
- ERC20Upgradeable.decreaseAllowance(address,uint256) (#756-764)
renounceOwnership() should be declared external:
- OwnableUpgradeable.renounceOwnership() (#866-868)
transferOwnership(address) should be declared external:
- OwnableUpgradeable.transferOwnership(address) (#870-873)
get(IterableMapping.Map,address) should be declared external:
- IterableMapping.get(IterableMapping.Map,address) (#990-992)
getIndexOfKey(IterableMapping.Map,address) should be declared external:
- IterableMapping.getIndexOfKey(IterableMapping.Map,address) (#994-1003)
getKeyAtIndex(IterableMapping.Map,uint256) should be declared external:
- IterableMapping.getKeyAtIndex(IterableMapping.Map,uint256) (#1005-1011)
size(IterableMapping.Map) should be declared external:
- IterableMapping.size(IterableMapping.Map) (#1013-1015)
distributeCAKEDividends(uint256) should be declared external:
- DividendPayingToken.distributeCAKEDividends(uint256) (#1111-1122)
withdrawDividend() should be declared external:
- DividendPayingToken.withdrawDividend() (#1124-1126)
- SpacesTokenDividendTracker.withdrawDividend() (#1283-1288)
dividendOf(address) should be declared external:
- DividendPayingToken.dividendOf(address) (#1156-1158)
withdrawnDividendOf(address) should be declared external:
- DividendPayingToken.withdrawnDividendOf(address) (#1169-1176)
isExcludedFromDividends(address) should be declared external:
- SpacesTokenDividendTracker.isExcludedFromDividends(address) (#1300-1306)
getAccountAtIndex(uint256) should be declared external:
- SpacesTokenDividendTracker.getAccountAtIndex(uint256) (#1385-1406)
process(uint256) should be declared external:
- SpacesTokenDividendTracker.process(uint256) (#1433-1485)
updateDividendTracker(address) should be declared external:
- SpacesToken.updateDividendTracker(address) (#1677-1700)
updateUniswapV2Router(address) should be declared external:
- SpacesToken.updateUniswapV2Router(address) (#1702-1712)
excludeMultipleAccountsFromFees(address[],bool) should be declared external:
- SpacesToken.excludeMultipleAccountsFromFees(address[],bool) (#1724-1733)
setAutomatedMarketMakerPair(address,bool) should be declared external:
- SpacesToken.setAutomatedMarketMakerPair(address,bool) (#1760-1770)
updateGasForProcessing(uint256) should be declared external:
- SpacesToken.updateGasForProcessing(uint256) (#1786-1797)
isExcludedFromFees(address) should be declared external:
- SpacesToken.isExcludedFromFees(address) (#1826-1828)
isAstronautHolderTierOne(address) should be declared external:
- SpacesToken.isAstronautHolderTierOne(address) (#1830-1832)
isAstronautHolderTierTwo(address) should be declared external:
- SpacesToken.isAstronautHolderTierTwo(address) (#1833-1835)
isAstronautHolderTierThree(address) should be declared external:
- SpacesToken.isAstronautHolderTierThree(address) (#1836-1838)
withdrawableDividendOf(address) should be declared external:
- SpacesToken.withdrawableDividendOf(address) (#1840-1846)
dividendTokenBalanceOf(address) should be declared external:
- SpacesToken.dividendTokenBalanceOf(address) (#1848-1854)
isExcludedFromDividends(address) should be declared external:
- SpacesToken.isExcludedFromDividends(address) (#1860-1866)
openTrading(address[],address[],address[],uint256) should be declared external:
- SpacesToken.openTrading(address[],address[],address[],uint256) (#1930-1951)
Use the external attribute for functions never called from the contract.
Additional information: link
Unable to find website, listings and other project-related information
Young tokens have high risks of scam / price dump / death
Token has no active CoinGecko listing / rank
Token has no active CoinMarketCap listing / rank
Unable to find Telegram and Twitter accounts