SPIRALSTOKEN.addLiquidity(uint256,uint256) (#796-809) sends eth to arbitrary user
Dangerous calls:
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,deadAddress,block.timestamp) (#801-808)
Ensure that an arbitrary user cannot withdraw unauthorized funds.
Additional information: link
Reentrancy in SPIRALSTOKEN._transfer(address,address,uint256) (#689-743):
External calls:
- swapAndLiquify(contractTokenBalance) (#717)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,deadAddress,block.timestamp) (#801-808)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#785-791)
External calls sending eth:
- swapAndLiquify(contractTokenBalance) (#717)
- recipient.transfer(amount) (#637)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,deadAddress,block.timestamp) (#801-808)
State variables written after the call(s):
- _balances[sender] = _balances[sender].sub(amount,Insufficient Balance) (#720)
- finalAmount = takeFee(sender,recipient,amount) (#731)
- _balances[address(this)] = _balances[address(this)].add(feeAmount) (#823)
- _balances[recipient] = _balances[recipient].add(finalAmount) (#737)
- addBot(recipient) (#728)
- _isbclisted[recipient] = true (#678)
Apply the check-effects-interactions pattern.
Additional information: link
Unable to find manual contract audit (e.g. Certik, PeckShield, Solidity...)
Combination 1: Reentrancy vulnerabilities + Functions that send Ether to arbitraty destination. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.
Contract ownership is not renounced (belongs to a wallet)
SPIRALSTOKEN._transfer(address,address,uint256) (#689-743) performs a multiplication on the result of a division:
-_sellReserveFeeAmount = amount.div(100).mul(_sellReserveFee) (#702)
Consider ordering multiplication before division.
Additional information: link
SPIRALSTOKEN.addLiquidity(uint256,uint256) (#796-809) ignores return value by uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,deadAddress,block.timestamp) (#801-808)
Ensure that all the return values of the function calls are used.
Additional information: link
SPIRALSTOKEN.allowance(address,address).owner (#523) shadows:
- Ownable.owner() (#151-153) (function)
SPIRALSTOKEN._approve(address,address,uint256).owner (#546) shadows:
- Ownable.owner() (#151-153) (function)
Rename the local variables that shadow another component.
Additional information: link
SPIRALSTOKEN.setBuyTaxes(uint256,uint256,uint256) (#571-577) should emit an event for:
- _totalTaxIfBuying = _buyLiquidityFee.add(_buyMarketingFee).add(_buyTeamFee) (#576)
SPIRALSTOKEN.setSellTaxes(uint256,uint256,uint256) (#579-585) should emit an event for:
- _totalTaxIfSelling = _sellLiquidityFee.add(_sellMarketingFee).add(_sellTeamFee) (#584)
SPIRALSTOKEN.setDistributionSettings(uint256,uint256,uint256) (#587-593) should emit an event for:
- _liquidityShare = newLiquidityShare (#588)
- _teamShare = newTeamShare (#590)
- _totalDistributionShares = _liquidityShare.add(_marketingShare).add(_teamShare) (#592)
SPIRALSTOKEN.setMaxTxAmount(uint256) (#595-597) should emit an event for:
- _maxTxAmount = maxTxAmount (#596)
SPIRALSTOKEN.setWalletLimit(uint256) (#607-609) should emit an event for:
- _walletMax = newLimit (#608)
SPIRALSTOKEN.setNumTokensBeforeSwap(uint256) (#611-613) should emit an event for:
- minimumTokensBeforeSwap = newLimit (#612)
SPIRALSTOKEN.setKillBlock(uint256) (#681-683) should emit an event for:
- killblock = num (#682)
Emit an event for critical parameter changes.
Additional information: link
SPIRALSTOKEN.setMarketingWalletAddress(address).newAddress (#615) lacks a zero-check on :
- marketingWalletAddress = address(newAddress) (#616)
SPIRALSTOKEN.setTeamWalletAddress(address).newAddress (#619) lacks a zero-check on :
- teamWalletAddress = address(newAddress) (#620)
Check that the address is not zero.
Additional information: link
Reentrancy in SPIRALSTOKEN.changeRouterVersion(address) (#640-657):
External calls:
- newPairAddress = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#648-649)
State variables written after the call(s):
- isMarketPair[address(uniswapPair)] = true (#656)
- isWalletLimitExempt[address(uniswapPair)] = true (#655)
- uniswapPair = newPairAddress (#652)
- uniswapV2Router = _uniswapV2Router (#653)
Reentrancy in SPIRALSTOKEN.constructor() (#473-501):
External calls:
- uniswapPair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#477-478)
State variables written after the call(s):
- _allowances[address(this)][address(uniswapV2Router)] = _totalSupply (#481)
- _balances[_msgSender()] = _totalSupply (#499)
- _totalDistributionShares = _liquidityShare.add(_marketingShare).add(_teamShare) (#488)
- _totalTaxIfBuying = _buyLiquidityFee.add(_buyMarketingFee).add(_buyTeamFee) (#486)
- _totalTaxIfSelling = _sellLiquidityFee.add(_sellMarketingFee).add(_sellTeamFee) (#487)
- isExcludedFromFee[owner()] = true (#483)
- isExcludedFromFee[address(this)] = true (#484)
- isMarketPair[address(uniswapPair)] = true (#497)
- isTxLimitExempt[owner()] = true (#494)
- isTxLimitExempt[address(this)] = true (#495)
- isWalletLimitExempt[owner()] = true (#490)
- isWalletLimitExempt[address(uniswapPair)] = true (#491)
- isWalletLimitExempt[address(this)] = true (#492)
- uniswapV2Router = _uniswapV2Router (#480)
Reentrancy in SPIRALSTOKEN.swapAndLiquify(uint256) (#752-774):
External calls:
- swapTokensForEth(tokensForSwap) (#757)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#785-791)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#773)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,deadAddress,block.timestamp) (#801-808)
External calls sending eth:
- transferToAddressETH(marketingWalletAddress,amountBNBMarketing) (#767)
- recipient.transfer(amount) (#637)
- transferToAddressETH(teamWalletAddress,amountBNBTeam) (#770)
- recipient.transfer(amount) (#637)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#773)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,deadAddress,block.timestamp) (#801-808)
State variables written after the call(s):
- addLiquidity(tokensForLP,amountBNBLiquidity) (#773)
- _allowances[owner][spender] = amount (#550)
Reentrancy in SPIRALSTOKEN.transferFrom(address,address,uint256) (#667-671):
External calls:
- _transfer(sender,recipient,amount) (#668)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,deadAddress,block.timestamp) (#801-808)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#785-791)
External calls sending eth:
- _transfer(sender,recipient,amount) (#668)
- recipient.transfer(amount) (#637)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,deadAddress,block.timestamp) (#801-808)
State variables written after the call(s):
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#669)
- _allowances[owner][spender] = amount (#550)
Apply the check-effects-interactions pattern.
Additional information: link
Reentrancy in SPIRALSTOKEN._transfer(address,address,uint256) (#689-743):
External calls:
- swapAndLiquify(contractTokenBalance) (#717)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,deadAddress,block.timestamp) (#801-808)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#785-791)
External calls sending eth:
- swapAndLiquify(contractTokenBalance) (#717)
- recipient.transfer(amount) (#637)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,deadAddress,block.timestamp) (#801-808)
Event emitted after the call(s):
- Transfer(sender,address(this),feeAmount) (#824)
- finalAmount = takeFee(sender,recipient,amount) (#731)
- Transfer(sender,recipient,finalAmount) (#739)
Reentrancy in SPIRALSTOKEN.constructor() (#473-501):
External calls:
- uniswapPair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#477-478)
Event emitted after the call(s):
- Transfer(address(0),_msgSender(),_totalSupply) (#500)
Reentrancy in SPIRALSTOKEN.swapAndLiquify(uint256) (#752-774):
External calls:
- swapTokensForEth(tokensForSwap) (#757)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#785-791)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#773)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,deadAddress,block.timestamp) (#801-808)
External calls sending eth:
- transferToAddressETH(marketingWalletAddress,amountBNBMarketing) (#767)
- recipient.transfer(amount) (#637)
- transferToAddressETH(teamWalletAddress,amountBNBTeam) (#770)
- recipient.transfer(amount) (#637)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#773)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,deadAddress,block.timestamp) (#801-808)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#551)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#773)
Reentrancy in SPIRALSTOKEN.swapTokensForEth(uint256) (#776-794):
External calls:
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#785-791)
Event emitted after the call(s):
- SwapTokensForETH(tokenAmount,path) (#793)
Reentrancy in SPIRALSTOKEN.transferFrom(address,address,uint256) (#667-671):
External calls:
- _transfer(sender,recipient,amount) (#668)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,deadAddress,block.timestamp) (#801-808)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#785-791)
External calls sending eth:
- _transfer(sender,recipient,amount) (#668)
- recipient.transfer(amount) (#637)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,deadAddress,block.timestamp) (#801-808)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#551)
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#669)
Apply the check-effects-interactions pattern.
Additional information: link
Ownable.unlock() (#186-191) uses timestamp for comparisons
Dangerous comparisons:
- require(bool,string)(block.timestamp > _lockTime,Contract is locked until 7 days) (#188)
Avoid relying on block.timestamp.
Additional information: link
Address.isContract(address) (#83-91) uses assembly
- INLINE ASM (#89)
Address._functionCallWithValue(address,bytes,uint256,string) (#118-135) uses assembly
- INLINE ASM (#127-130)
Do not use evm assembly.
Additional information: link
Address._functionCallWithValue(address,bytes,uint256,string) (#118-135) is never used and should be removed
Address.functionCall(address,bytes) (#101-103) is never used and should be removed
Address.functionCall(address,bytes,string) (#105-107) is never used and should be removed
Address.functionCallWithValue(address,bytes,uint256) (#109-111) is never used and should be removed
Address.functionCallWithValue(address,bytes,uint256,string) (#113-116) is never used and should be removed
Address.isContract(address) (#83-91) is never used and should be removed
Address.sendValue(address,uint256) (#93-99) is never used and should be removed
Context._msgData() (#10-13) is never used and should be removed
SafeMath.mod(uint256,uint256) (#71-73) is never used and should be removed
SafeMath.mod(uint256,uint256,string) (#75-78) is never used and should be removed
Remove unused functions.
Additional information: link
SPIRALSTOKEN._totalSupply (#437) is set pre-construction with a non-constant function or state variable:
- 100000000 * 10 ** _decimals
SPIRALSTOKEN._maxTxAmount (#438) is set pre-construction with a non-constant function or state variable:
- 40000000 * 10 ** _decimals
SPIRALSTOKEN._walletMax (#439) is set pre-construction with a non-constant function or state variable:
- 40000000 * 10 ** _decimals
SPIRALSTOKEN.minimumTokensBeforeSwap (#440) is set pre-construction with a non-constant function or state variable:
- 100000000 * 5 ** _decimals
Remove any initialization of state variables via non-constant state variables or function calls. If variables must be set upon contract deployment, locate initialization in the constructor instead.
Additional information: link
Low level call in Address.sendValue(address,uint256) (#93-99):
- (success) = recipient.call{value: amount}() (#97)
Low level call in Address._functionCallWithValue(address,bytes,uint256,string) (#118-135):
- (success,returndata) = target.call{value: weiValue}(data) (#121)
Avoid low-level calls. Check the call success. If the call is meant for a contract, check for code existence
Additional information: link
Function IUniswapV2Pair.DOMAIN_SEPARATOR() (#225) is not in mixedCase
Function IUniswapV2Pair.PERMIT_TYPEHASH() (#226) is not in mixedCase
Function IUniswapV2Pair.MINIMUM_LIQUIDITY() (#242) is not in mixedCase
Function IUniswapV2Router01.WETH() (#261) is not in mixedCase
Function SPIRALSTOKEN.Launch() (#554-557) is not in mixedCase
Parameter SPIRALSTOKEN.setSwapAndLiquifyEnabled(bool)._enabled (#623) is not in mixedCase
Variable SPIRALSTOKEN._balances (#410) is not in mixedCase
Variable SPIRALSTOKEN._buyLiquidityFee (#419) is not in mixedCase
Variable SPIRALSTOKEN._buyMarketingFee (#420) is not in mixedCase
Variable SPIRALSTOKEN._buyTeamFee (#421) is not in mixedCase
Variable SPIRALSTOKEN._sellLiquidityFee (#423) is not in mixedCase
Variable SPIRALSTOKEN._sellMarketingFee (#424) is not in mixedCase
Variable SPIRALSTOKEN._sellTeamFee (#425) is not in mixedCase
Variable SPIRALSTOKEN._sellReserveFee (#427) is not in mixedCase
Variable SPIRALSTOKEN._liquidityShare (#429) is not in mixedCase
Variable SPIRALSTOKEN._marketingShare (#430) is not in mixedCase
Variable SPIRALSTOKEN._teamShare (#431) is not in mixedCase
Variable SPIRALSTOKEN._totalTaxIfBuying (#433) is not in mixedCase
Variable SPIRALSTOKEN._totalTaxIfSelling (#434) is not in mixedCase
Variable SPIRALSTOKEN._totalDistributionShares (#435) is not in mixedCase
Variable SPIRALSTOKEN._maxTxAmount (#438) is not in mixedCase
Variable SPIRALSTOKEN._walletMax (#439) is not in mixedCase
Follow the Solidity naming convention.
Additional information: link
Redundant expression "this (#11)" inContext (#4-14)
Remove redundant statements if they congest code but offer no value.
Additional information: link
Reentrancy in SPIRALSTOKEN._transfer(address,address,uint256) (#689-743):
External calls:
- swapAndLiquify(contractTokenBalance) (#717)
- recipient.transfer(amount) (#637)
External calls sending eth:
- swapAndLiquify(contractTokenBalance) (#717)
- recipient.transfer(amount) (#637)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,deadAddress,block.timestamp) (#801-808)
State variables written after the call(s):
- _balances[sender] = _balances[sender].sub(amount,Insufficient Balance) (#720)
- finalAmount = takeFee(sender,recipient,amount) (#731)
- _balances[address(this)] = _balances[address(this)].add(feeAmount) (#823)
- _balances[recipient] = _balances[recipient].add(finalAmount) (#737)
- addBot(recipient) (#728)
- _isbclisted[recipient] = true (#678)
Event emitted after the call(s):
- Transfer(sender,address(this),feeAmount) (#824)
- finalAmount = takeFee(sender,recipient,amount) (#731)
- Transfer(sender,recipient,finalAmount) (#739)
Reentrancy in SPIRALSTOKEN.swapAndLiquify(uint256) (#752-774):
External calls:
- transferToAddressETH(marketingWalletAddress,amountBNBMarketing) (#767)
- recipient.transfer(amount) (#637)
- transferToAddressETH(teamWalletAddress,amountBNBTeam) (#770)
- recipient.transfer(amount) (#637)
External calls sending eth:
- transferToAddressETH(marketingWalletAddress,amountBNBMarketing) (#767)
- recipient.transfer(amount) (#637)
- transferToAddressETH(teamWalletAddress,amountBNBTeam) (#770)
- recipient.transfer(amount) (#637)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#773)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,deadAddress,block.timestamp) (#801-808)
State variables written after the call(s):
- addLiquidity(tokensForLP,amountBNBLiquidity) (#773)
- _allowances[owner][spender] = amount (#550)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#551)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#773)
Reentrancy in SPIRALSTOKEN.transferFrom(address,address,uint256) (#667-671):
External calls:
- _transfer(sender,recipient,amount) (#668)
- recipient.transfer(amount) (#637)
External calls sending eth:
- _transfer(sender,recipient,amount) (#668)
- recipient.transfer(amount) (#637)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,deadAddress,block.timestamp) (#801-808)
State variables written after the call(s):
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#669)
- _allowances[owner][spender] = amount (#550)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#551)
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#669)
Apply the check-effects-interactions pattern.
Additional information: link
Variable IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountADesired (#266) is too similar to IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountBDesired (#267)
Prevent variables from having similar names.
Additional information: link
SPIRALSTOKEN.slitherConstructorVariables() (#394-831) uses literals with too many digits:
- deadAddress = 0x000000000000000000000000000000000000dEaD (#408)
SPIRALSTOKEN.slitherConstructorVariables() (#394-831) uses literals with too many digits:
- _totalSupply = 100000000 * 10 ** _decimals (#437)
SPIRALSTOKEN.slitherConstructorVariables() (#394-831) uses literals with too many digits:
- _maxTxAmount = 40000000 * 10 ** _decimals (#438)
SPIRALSTOKEN.slitherConstructorVariables() (#394-831) uses literals with too many digits:
- _walletMax = 40000000 * 10 ** _decimals (#439)
SPIRALSTOKEN.slitherConstructorVariables() (#394-831) uses literals with too many digits:
- minimumTokensBeforeSwap = 100000000 * 5 ** _decimals (#440)
Use: Ether suffix, Time suffix, or The scientific notation
Additional information: link
SPIRALSTOKEN._decimals (#401) should be constant
SPIRALSTOKEN._name (#399) should be constant
SPIRALSTOKEN._sellReserveFee (#427) should be constant
SPIRALSTOKEN._symbol (#400) should be constant
Add the constant attributes to state variables that never change.
Additional information: link
waiveOwnership() should be declared external:
- Ownable.waiveOwnership() (#160-163)
transferOwnership(address) should be declared external:
- Ownable.transferOwnership(address) (#165-169)
getUnlockTime() should be declared external:
- Ownable.getUnlockTime() (#171-173)
getTime() should be declared external:
- Ownable.getTime() (#175-177)
lock(uint256) should be declared external:
- Ownable.lock(uint256) (#179-184)
unlock() should be declared external:
- Ownable.unlock() (#186-191)
name() should be declared external:
- SPIRALSTOKEN.name() (#503-505)
symbol() should be declared external:
- SPIRALSTOKEN.symbol() (#507-509)
decimals() should be declared external:
- SPIRALSTOKEN.decimals() (#511-513)
totalSupply() should be declared external:
- SPIRALSTOKEN.totalSupply() (#515-517)
allowance(address,address) should be declared external:
- SPIRALSTOKEN.allowance(address,address) (#523-525)
increaseAllowance(address,uint256) should be declared external:
- SPIRALSTOKEN.increaseAllowance(address,uint256) (#527-530)
decreaseAllowance(address,uint256) should be declared external:
- SPIRALSTOKEN.decreaseAllowance(address,uint256) (#532-535)
minimumTokensBeforeSwapAmount() should be declared external:
- SPIRALSTOKEN.minimumTokensBeforeSwapAmount() (#537-539)
approve(address,uint256) should be declared external:
- SPIRALSTOKEN.approve(address,uint256) (#541-544)
Launch() should be declared external:
- SPIRALSTOKEN.Launch() (#554-557)
setMarketPairStatus(address,bool) should be declared external:
- SPIRALSTOKEN.setMarketPairStatus(address,bool) (#559-561)
setIsExcludedFromFee(address,bool) should be declared external:
- SPIRALSTOKEN.setIsExcludedFromFee(address,bool) (#567-569)
setSwapAndLiquifyEnabled(bool) should be declared external:
- SPIRALSTOKEN.setSwapAndLiquifyEnabled(bool) (#623-626)
setSwapAndLiquifyByLimitOnly(bool) should be declared external:
- SPIRALSTOKEN.setSwapAndLiquifyByLimitOnly(bool) (#628-630)
getCirculatingSupply() should be declared external:
- SPIRALSTOKEN.getCirculatingSupply() (#632-634)
changeRouterVersion(address) should be declared external:
- SPIRALSTOKEN.changeRouterVersion(address) (#640-657)
transfer(address,uint256) should be declared external:
- SPIRALSTOKEN.transfer(address,uint256) (#662-665)
transferFrom(address,address,uint256) should be declared external:
- SPIRALSTOKEN.transferFrom(address,address,uint256) (#667-671)
isbcList(address) should be declared external:
- SPIRALSTOKEN.isbcList(address) (#673-675)
setKillBlock(uint256) should be declared external:
- SPIRALSTOKEN.setKillBlock(uint256) (#681-683)
writebcList(address,bool) should be declared external:
- SPIRALSTOKEN.writebcList(address,bool) (#685-687)
Use the external attribute for functions never called from the contract.
Additional information: link
Contract ticker ($SPR) contains non-alphanumeric characters.
Not a direct threat, but may indicate unreliable intentions of developer. Non-alphanumeric chars (,.;!#*&") are extremely rare among low risk tokens.
Unable to find website, listings and other project-related information
Young tokens have high risks of scam / price dump / death
Token has no active CoinGecko listing / rank
Token has no active CoinMarketCap listing / rank
Unable to find Telegram and Twitter accounts