SPY [Smarty Pay] Token

Token is flagged by TokenSniffer due to presence of exploit in contract code

Contract ownership is not renounced (belongs to a wallet)

SmartyPay.tokenSale(address) (#162-184) performs a multiplication on the result of a division:
-_price = _eth / sPrice (#168)
-_tkns = sChunk * _price (#169)
Consider ordering multiplication before division.

Additional information: link

SafeMath.div(uint256,uint256) (#24-27) is never used and should be removed
SafeMath.mul(uint256,uint256) (#20-23) is never used and should be removed
Remove unused functions.

Additional information: link

SmartyPay.startAirdrop(uint256,uint256,uint256,uint256) (#193-199) should emit an event for:
- aSBlock = _aSBlock (#194)
- aEBlock = _aEBlock (#195)
- aAmt = _aAmt (#196)
- aCap = _aCap (#197)
SmartyPay.startSale(uint256,uint256,uint256,uint256,uint256) (#200-207) should emit an event for:
- sSBlock = _sSBlock (#201)
- sEBlock = _sEBlock (#202)
- sChunk = _sChunk (#203)
- sPrice = _sPrice (#204)
- sCap = _sCap (#205)
Emit an event for critical parameter changes.

Additional information: link

Pragma version>=0.5.10 (#9) allows old versions
solc-0.5.10 is not recommended for deployment
Deploy with any of the following Solidity versions: 0.5.16 - 0.5.17, 0.6.11 - 0.6.12, 0.7.5 - 0.7.6 Use a simple pragma version that allows any of these versions. Consider using the latest version of Solidity for testing.

Additional information: link

Owned.transferOwnership(address)._newOwner (#61) lacks a zero-check on :
- newOwner = _newOwner (#62)
SmartyPay.clearETH()._owner (#209) lacks a zero-check on :
- _owner.transfer(address(this).balance) (#210)
Check that the address is not zero.

Additional information: link

TokenBEP20.constructor() (#83-90) uses literals with too many digits:
- _totalSupply = 100000000e0 (#87)
SmartyPay.getAirdrop(address) (#147-160) uses literals with too many digits:
- msg.sender != _refer && balanceOf(_refer) != 0 && _refer != 0x0000000000000000000000000000000000000000 (#151)
SmartyPay.tokenSale(address) (#162-184) uses literals with too many digits:
- msg.sender != _refer && balanceOf(_refer) != 0 && _refer != 0x0000000000000000000000000000000000000000 (#175)
Use: Ether suffix, Time suffix, or The scientific notation

Additional information: link

Parameter Owned.transferOwnership(address)._newOwner (#61) is not in mixedCase
Variable TokenBEP20._totalSupply (#78) is not in mixedCase
Parameter SmartyPay.getAirdrop(address)._refer (#147) is not in mixedCase
Parameter SmartyPay.tokenSale(address)._refer (#162) is not in mixedCase
Parameter SmartyPay.startAirdrop(uint256,uint256,uint256,uint256)._aSBlock (#193) is not in mixedCase
Parameter SmartyPay.startAirdrop(uint256,uint256,uint256,uint256)._aEBlock (#193) is not in mixedCase
Parameter SmartyPay.startAirdrop(uint256,uint256,uint256,uint256)._aAmt (#193) is not in mixedCase
Parameter SmartyPay.startAirdrop(uint256,uint256,uint256,uint256)._aCap (#193) is not in mixedCase
Parameter SmartyPay.startSale(uint256,uint256,uint256,uint256,uint256)._sSBlock (#200) is not in mixedCase
Parameter SmartyPay.startSale(uint256,uint256,uint256,uint256,uint256)._sEBlock (#200) is not in mixedCase
Parameter SmartyPay.startSale(uint256,uint256,uint256,uint256,uint256)._sChunk (#200) is not in mixedCase
Parameter SmartyPay.startSale(uint256,uint256,uint256,uint256,uint256)._sPrice (#200) is not in mixedCase
Parameter SmartyPay.startSale(uint256,uint256,uint256,uint256,uint256)._sCap (#200) is not in mixedCase
Follow the Solidity naming convention.

Additional information: link

totalSupply() should be declared external:
- BEP20Interface.totalSupply() (#31)
- TokenBEP20.totalSupply() (#92-94)
allowance(address,address) should be declared external:
- BEP20Interface.allowance(address,address) (#33)
- TokenBEP20.allowance(address,address) (#116-118)
transfer(address,uint256) should be declared external:
- BEP20Interface.transfer(address,uint256) (#34)
- TokenBEP20.transfer(address,uint256) (#98-103)
approve(address,uint256) should be declared external:
- BEP20Interface.approve(address,uint256) (#35)
- TokenBEP20.approve(address,uint256) (#104-108)
transferFrom(address,address,uint256) should be declared external:
- BEP20Interface.transferFrom(address,address,uint256) (#36)
- TokenBEP20.transferFrom(address,address,uint256) (#109-115)
receiveApproval(address,uint256,address,bytes) should be declared external:
- ApproveAndCallFallBack.receiveApproval(address,uint256,address,bytes) (#43)
transferOwnership(address) should be declared external:
- Owned.transferOwnership(address) (#61-63)
acceptOwnership() should be declared external:
- Owned.acceptOwnership() (#64-69)
approveAndCall(address,uint256,bytes) should be declared external:
- TokenBEP20.approveAndCall(address,uint256,bytes) (#119-124)
getAirdrop(address) should be declared external:
- SmartyPay.getAirdrop(address) (#147-160)
tokenSale(address) should be declared external:
- SmartyPay.tokenSale(address) (#162-184)
viewAirdrop() should be declared external:
- SmartyPay.viewAirdrop() (#186-188)
viewSale() should be declared external:
- SmartyPay.viewSale() (#189-191)
startAirdrop(uint256,uint256,uint256,uint256) should be declared external:
- SmartyPay.startAirdrop(uint256,uint256,uint256,uint256) (#193-199)
startSale(uint256,uint256,uint256,uint256,uint256) should be declared external:
- SmartyPay.startSale(uint256,uint256,uint256,uint256,uint256) (#200-207)
clearETH() should be declared external:
- SmartyPay.clearETH() (#208-211)
Use the external attribute for functions never called from the contract.

Additional information: link

Token is deployed only at one blockchain

BscScan page for the token does not contain additional info: website, socials, description, etc.

Additional information: link

Token was delisted from CoinHunt

Additional information: link

Unable to find audit link on the website

Unable to find code repository for the project

Token is not listed at Mobula.Finance

Additional information: link

Token has relatively low CoinGecko rank