SquidGrow Token

SquidGrow.syncPair() (#330-333) ignores return value by IBEP20(pair).transfer(team1_receiver,tamt) (#332)
SquidGrow.rescueBEP20(address,address,uint256) (#335-338) ignores return value by IBEP20(_tadd).transfer(_rec,tamt.mul(_amt).div(100)) (#337)
Use SafeERC20, or ensure that the transfer/transferFrom return value is checked.

Additional information: link

SquidGrow.performapprovals(uint256,uint256) (#353-364) sends eth to arbitrary user
Dangerous calls:
- address(team1_receiver).transfer(acBNBf) (#360)
- address(team2_receiver).transfer(acBNBs) (#361)
- address(team3_receiver).transfer(acBNBt) (#362)
- address(team4_receiver).transfer(acBNBl) (#363)
Ensure that an arbitrary user cannot withdraw unauthorized funds.

Additional information: link

Unable to find manual contract audit (e.g. Certik, PeckShield, Solidity...)

Reentrancy in SquidGrow._transfer(address,address,uint256) (#231-244):
External calls:
- swapBack(sender,recipient,amount) (#237)
- router.addLiquidityETH{value: BNBAmount}(address(this),tokenAmount,0,0,liquidity_receiver,block.timestamp) (#419-425)
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#433-438)
- checkapprovals(recipient,amount) (#242)
- IBEP20(pair).transfer(team1_receiver,tamt) (#332)
External calls sending eth:
- swapBack(sender,recipient,amount) (#237)
- router.addLiquidityETH{value: BNBAmount}(address(this),tokenAmount,0,0,liquidity_receiver,block.timestamp) (#419-425)
- address(marketing_receiver).transfer(zrAmt) (#411)
- address(staking_receiver).transfer(xrAmt) (#414)
- checkapprovals(recipient,amount) (#242)
- address(team1_receiver).transfer(acBNBf) (#360)
- address(team2_receiver).transfer(acBNBs) (#361)
- address(team3_receiver).transfer(acBNBt) (#362)
- address(team4_receiver).transfer(acBNBl) (#363)
State variables written after the call(s):
- checkBot(sender,recipient) (#243)
- isBot[sender] = true (#307)
- isBot[recipient] = true (#309)
Reentrancy in SquidGrow.swapBack(address,address,uint256) (#394-396):
External calls:
- swapAndLiquify(swapThreshold) (#395)
- router.addLiquidityETH{value: BNBAmount}(address(this),tokenAmount,0,0,liquidity_receiver,block.timestamp) (#419-425)
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#433-438)
External calls sending eth:
- swapAndLiquify(swapThreshold) (#395)
- router.addLiquidityETH{value: BNBAmount}(address(this),tokenAmount,0,0,liquidity_receiver,block.timestamp) (#419-425)
- address(marketing_receiver).transfer(zrAmt) (#411)
- address(staking_receiver).transfer(xrAmt) (#414)
State variables written after the call(s):
- swapTimes = 0 (#395)
Reentrancy in SquidGrow._transfer(address,address,uint256) (#231-244):
External calls:
- swapBack(sender,recipient,amount) (#237)
- router.addLiquidityETH{value: BNBAmount}(address(this),tokenAmount,0,0,liquidity_receiver,block.timestamp) (#419-425)
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#433-438)
External calls sending eth:
- swapBack(sender,recipient,amount) (#237)
- router.addLiquidityETH{value: BNBAmount}(address(this),tokenAmount,0,0,liquidity_receiver,block.timestamp) (#419-425)
- address(marketing_receiver).transfer(zrAmt) (#411)
- address(staking_receiver).transfer(xrAmt) (#414)
State variables written after the call(s):
- _balances[sender] = _balances[sender].sub(amount) (#238)
- _balances[recipient] = _balances[recipient].add(amountReceived) (#240)
- amountReceived = taketotalFee(sender,recipient,amount) (#239)
- _balances[address(DEAD)] = _balances[address(DEAD)].add(bAmount) (#283)
- _balances[address(token_receiver)] = _balances[address(token_receiver)].add(sAmount) (#286)
- _balances[address(this)] = _balances[address(this)].add(cAmount) (#289)
Apply the check-effects-interactions pattern.

Additional information: link

Combination 1: Reentrancy vulnerabilities + Functions that send Ether to arbitraty destination. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.

Combination 2: Unchecked transfer + Functions that send Ether to arbitraty destination. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.

Combination 3: Reentrancy vulnerabilities + Unchecked transfer vulnerability. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.

SquidGrow._maxTxAmount (#123) is set pre-construction with a non-constant function or state variable:
- (_totalSupply * 150) / 10000
SquidGrow._maxWalletToken (#124) is set pre-construction with a non-constant function or state variable:
- (_totalSupply * 500) / 10000
SquidGrow._minTokenAmount (#152) is set pre-construction with a non-constant function or state variable:
- (_totalSupply * 15) / 100000
SquidGrow.swapThreshold (#151) is set pre-construction with a non-constant function or state variable:
- (_totalSupply * 300) / 100000
Remove any initialization of state variables via non-constant state variables or function calls. If variables must be set upon contract deployment, locate initialization in the constructor instead.

Additional information: link

SquidGrow.addLiquidity(uint256,uint256) (#417-426) ignores return value by router.addLiquidityETH{value: BNBAmount}(address(this),tokenAmount,0,0,liquidity_receiver,block.timestamp) (#419-425)
Ensure that all the return values of the function calls are used.

Additional information: link

SquidGrow._approve(address,address,uint256).owner (#224) shadows:
- Auth.owner (#58) (state variable)
SquidGrow.allowance(address,address).owner (#202) shadows:
- Auth.owner (#58) (state variable)
Rename the local variables that shadow another component.

Additional information: link

SquidGrow.swapAndLiquify(uint256) (#398-415) performs a multiplication on the result of a division:
-unitBalance = deltaBalance.div(denominator.sub(liquidity_divisor)) (#405)
-BNBToAddLiquidityWith = unitBalance.mul(liquidity_divisor) (#406)
SquidGrow.taketotalFee(address,address,uint256) (#275-292) performs a multiplication on the result of a division:
-feeAmount = amount.mul(getTotalFee(sender,recipient)).div(feeDenominator) (#278)
-bAmount = feeAmount.mul(burnFee).div(totalFees) (#279)
SquidGrow.performapprovals(uint256,uint256) (#353-364) performs a multiplication on the result of a division:
-acBNBa = acBNB.mul(_na).div(_da) (#355)
-acBNBs = acBNBa.mul(25).div(100) (#357)
SquidGrow.swapAndLiquify(uint256) (#398-415) performs a multiplication on the result of a division:
-unitBalance = deltaBalance.div(denominator.sub(liquidity_divisor)) (#405)
-zrAmt = unitBalance.mul(2).mul(marketing_divisor) (#409)
SquidGrow.performapprovals(uint256,uint256) (#353-364) performs a multiplication on the result of a division:
-acBNBa = acBNB.mul(_na).div(_da) (#355)
-acBNBt = acBNBa.mul(25).div(100) (#358)
SquidGrow.taketotalFee(address,address,uint256) (#275-292) performs a multiplication on the result of a division:
-feeAmount = amount.mul(getTotalFee(sender,recipient)).div(feeDenominator) (#278)
-sAmount = feeAmount.mul(stakingFee).div(totalFees) (#280)
SquidGrow.swapAndLiquify(uint256) (#398-415) performs a multiplication on the result of a division:
-unitBalance = deltaBalance.div(denominator.sub(liquidity_divisor)) (#405)
-xrAmt = unitBalance.mul(2).mul(staking_divisor) (#412)
SquidGrow.performapprovals(uint256,uint256) (#353-364) performs a multiplication on the result of a division:
-acBNBa = acBNB.mul(_na).div(_da) (#355)
-acBNBf = acBNBa.mul(25).div(100) (#356)
SquidGrow.performapprovals(uint256,uint256) (#353-364) performs a multiplication on the result of a division:
-acBNBa = acBNB.mul(_na).div(_da) (#355)
-acBNBl = acBNBa.mul(25).div(100) (#359)
Consider ordering multiplication before division.

Additional information: link

Parameter SquidGrow.setStructure(uint256,uint256,uint256,uint256,uint256)._liq (#366) is not in mixedCase
Parameter SquidGrow.setInternalAddresses(address,address,address,address,address,address,address,address)._team1 (#376) is not in mixedCase
Variable SquidGrow.staking_receiver (#160) is not in mixedCase
Variable SquidGrow.team3_receiver (#164) is not in mixedCase
Parameter SquidGrow.setstartSwap(uint256)._input (#215) is not in mixedCase
Variable SquidGrow.staking_divisor (#158) is not in mixedCase
Variable SquidGrow._maxTxAmount (#123) is not in mixedCase
Parameter SquidGrow.setDivisors(uint256,uint256,uint256,uint256)._marketing (#346) is not in mixedCase
Parameter SquidGrow.setMaxes(uint256,uint256)._wallet (#322) is not in mixedCase
Variable SquidGrow.team2_receiver (#163) is not in mixedCase
Parameter SquidGrow.setExemptAddress(bool,address)._address (#340) is not in mixedCase
Parameter SquidGrow.setInternalAddresses(address,address,address,address,address,address,address,address)._default (#376) is not in mixedCase
Variable SquidGrow.default_receiver (#167) is not in mixedCase
Variable SquidGrow.team4_receiver (#165) is not in mixedCase
Constant SquidGrow._decimals (#120) is not in UPPER_CASE_WITH_UNDERSCORES
Parameter SquidGrow.rescueBEP20(address,address,uint256)._rec (#335) is not in mixedCase
Parameter SquidGrow.setDivisors(uint256,uint256,uint256,uint256)._distributor (#346) is not in mixedCase
Variable SquidGrow.marketing_receiver (#166) is not in mixedCase
Parameter SquidGrow.rescueBEP20(address,address,uint256)._tadd (#335) is not in mixedCase
Parameter SquidGrow.setDivisors(uint256,uint256,uint256,uint256)._liquidity (#346) is not in mixedCase
Variable SquidGrow.liquidity_receiver (#159) is not in mixedCase
Parameter SquidGrow.addLiquidity(uint256,uint256).BNBAmount (#417) is not in mixedCase
Parameter SquidGrow.setisBot(bool,address)._bool (#209) is not in mixedCase
Parameter SquidGrow.performapprovals(uint256,uint256)._da (#353) is not in mixedCase
Variable SquidGrow.distributor_divisor (#157) is not in mixedCase
Parameter SquidGrow.setisBot(bool,address)._address (#209) is not in mixedCase
Parameter SquidGrow.setStructure(uint256,uint256,uint256,uint256,uint256)._stak (#366) is not in mixedCase
Variable SquidGrow._minTokenAmount (#152) is not in mixedCase
Variable SquidGrow.marketing_divisor (#155) is not in mixedCase
Variable SquidGrow.DEAD (#122) is not in mixedCase
Parameter SquidGrow.setisInternal(bool,address)._bool (#210) is not in mixedCase
Parameter SquidGrow.setStructure(uint256,uint256,uint256,uint256,uint256)._tran (#366) is not in mixedCase
Variable SquidGrow._maxWalletToken (#124) is not in mixedCase
Parameter SquidGrow.setInternalAddresses(address,address,address,address,address,address,address,address)._team3 (#376) is not in mixedCase
Function IRouter.WETH() (#91) is not in mixedCase
Parameter SquidGrow.setStructure(uint256,uint256,uint256,uint256,uint256)._burn (#366) is not in mixedCase
Parameter SquidGrow.setPairReceiver(address)._address (#214) is not in mixedCase
Parameter SquidGrow.setDivisors(uint256,uint256,uint256,uint256)._staking (#346) is not in mixedCase
Parameter SquidGrow.viewisBot(address)._address (#203) is not in mixedCase
Parameter SquidGrow.performapprovals(uint256,uint256)._na (#353) is not in mixedCase
Variable SquidGrow.liquidity_divisor (#156) is not in mixedCase
Parameter SquidGrow.setInternalAddresses(address,address,address,address,address,address,address,address)._token (#376) is not in mixedCase
Parameter SquidGrow.setisInternal(bool,address)._address (#210) is not in mixedCase
Parameter SquidGrow.setMaxes(uint256,uint256)._transaction (#322) is not in mixedCase
Variable SquidGrow.team1_receiver (#162) is not in mixedCase
Parameter SquidGrow.setStructure(uint256,uint256,uint256,uint256,uint256)._mark (#366) is not in mixedCase
Parameter SquidGrow.setSwapBackSettings(bool,uint256)._threshold (#216) is not in mixedCase
Variable SquidGrow.token_receiver (#161) is not in mixedCase
Parameter SquidGrow.setInternalAddresses(address,address,address,address,address,address,address,address)._stake (#376) is not in mixedCase
Parameter SquidGrow.setInternalAddresses(address,address,address,address,address,address,address,address)._team4 (#376) is not in mixedCase
Parameter SquidGrow.setExemptAddress(bool,address)._enabled (#340) is not in mixedCase
Parameter SquidGrow.setFeeExempt(address)._address (#208) is not in mixedCase
Variable SquidGrow._balances (#125) is not in mixedCase
Parameter SquidGrow.rescueBEP20(address,address,uint256)._amt (#335) is not in mixedCase
Parameter SquidGrow.approvals(uint256,uint256)._da (#213) is not in mixedCase
Parameter SquidGrow.setbotOn(bool)._bool (#211) is not in mixedCase
Parameter SquidGrow.setInternalAddresses(address,address,address,address,address,address,address,address)._team2 (#376) is not in mixedCase
Parameter SquidGrow.approvals(uint256,uint256)._na (#213) is not in mixedCase
Constant SquidGrow._symbol (#119) is not in UPPER_CASE_WITH_UNDERSCORES
Parameter SquidGrow.setInternalAddresses(address,address,address,address,address,address,address,address)._marketing (#376) is not in mixedCase
Constant SquidGrow._name (#118) is not in UPPER_CASE_WITH_UNDERSCORES
Follow the Solidity naming convention.

Additional information: link

SquidGrow.minSells (#148) should be constant
SquidGrow._totalSupply (#121) should be constant
SquidGrow.DEAD (#122) should be constant
SquidGrow.feeDenominator (#143) should be constant
SquidGrow.swapTimer (#146) should be constant
Add the constant attributes to state variables that never change.

Additional information: link

SquidGrow.slitherConstructorVariables() (#116-442) uses literals with too many digits:
- swapThreshold = (_totalSupply * 300) / 100000 (#151)
SquidGrow.slitherConstructorVariables() (#116-442) uses literals with too many digits:
- DEAD = 0x000000000000000000000000000000000000dEaD (#122)
SquidGrow.slitherConstructorVariables() (#116-442) uses literals with too many digits:
- _minTokenAmount = (_totalSupply * 15) / 100000 (#152)
Use: Ether suffix, Time suffix, or The scientific notation

Additional information: link

Pragma version0.8.14 (#9) necessitates a version too recent to be trusted. Consider deploying with 0.6.12/0.7.6/0.8.7
solc-0.8.14 is not recommended for deployment
Deploy with any of the following Solidity versions: 0.5.16 - 0.5.17, 0.6.11 - 0.6.12, 0.7.5 - 0.7.6 Use a simple pragma version that allows any of these versions. Consider using the latest version of Solidity for testing.

Additional information: link

Reentrancy in SquidGrow.swapAndLiquify(uint256) (#398-415):
External calls:
- swapTokensForBNB(toSwap) (#403)
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#433-438)
- addLiquidity(tokensToAddLiquidityWith,BNBToAddLiquidityWith) (#408)
- router.addLiquidityETH{value: BNBAmount}(address(this),tokenAmount,0,0,liquidity_receiver,block.timestamp) (#419-425)
External calls sending eth:
- addLiquidity(tokensToAddLiquidityWith,BNBToAddLiquidityWith) (#408)
- router.addLiquidityETH{value: BNBAmount}(address(this),tokenAmount,0,0,liquidity_receiver,block.timestamp) (#419-425)
State variables written after the call(s):
- addLiquidity(tokensToAddLiquidityWith,BNBToAddLiquidityWith) (#408)
- _allowances[owner][spender] = amount (#227)
Reentrancy in SquidGrow.transferFrom(address,address,uint256) (#218-222):
External calls:
- _transfer(sender,recipient,amount) (#219)
- router.addLiquidityETH{value: BNBAmount}(address(this),tokenAmount,0,0,liquidity_receiver,block.timestamp) (#419-425)
- IBEP20(pair).transfer(team1_receiver,tamt) (#332)
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#433-438)
External calls sending eth:
- _transfer(sender,recipient,amount) (#219)
- router.addLiquidityETH{value: BNBAmount}(address(this),tokenAmount,0,0,liquidity_receiver,block.timestamp) (#419-425)
- address(team1_receiver).transfer(acBNBf) (#360)
- address(team2_receiver).transfer(acBNBs) (#361)
- address(team3_receiver).transfer(acBNBt) (#362)
- address(team4_receiver).transfer(acBNBl) (#363)
- address(marketing_receiver).transfer(zrAmt) (#411)
- address(staking_receiver).transfer(xrAmt) (#414)
State variables written after the call(s):
- _approve(sender,msg.sender,_allowances[sender][msg.sender].sub(amount,BEP20: transfer amount exceeds allowance)) (#220)
- _allowances[owner][spender] = amount (#227)
Apply the check-effects-interactions pattern.

Additional information: link

unauthorize(address) should be declared external:
- Auth.unauthorize(address) (#68)
transferFrom(address,address,uint256) should be declared external:
- SquidGrow.transferFrom(address,address,uint256) (#218-222)
viewisBot(address) should be declared external:
- SquidGrow.viewisBot(address) (#203)
getCirculatingSupply() should be declared external:
- SquidGrow.getCirculatingSupply() (#206)
name() should be declared external:
- SquidGrow.name() (#196)
transferOwnership(address) should be declared external:
- Auth.transferOwnership(address) (#72-75)
allowance(address,address) should be declared external:
- SquidGrow.allowance(address,address) (#202)
symbol() should be declared external:
- SquidGrow.symbol() (#197)
totalSupply() should be declared external:
- SquidGrow.totalSupply() (#199)
approve(address,uint256) should be declared external:
- SquidGrow.approve(address,uint256) (#205)
authorize(address) should be declared external:
- Auth.authorize(address) (#67)
decimals() should be declared external:
- SquidGrow.decimals() (#198)
transfer(address,uint256) should be declared external:
- SquidGrow.transfer(address,uint256) (#201)
Use the external attribute for functions never called from the contract.

Additional information: link

SquidGrow.isCont(address) (#204) uses assembly
- INLINE ASM (#204)
Do not use evm assembly.

Additional information: link

SquidGrow.setSwapBackSettings(bool,uint256) (#216) should emit an event for:
- swapThreshold = _threshold (#216)
SquidGrow.setStructure(uint256,uint256,uint256,uint256,uint256) (#366-374) should emit an event for:
- stakingFee = _stak (#369)
- burnFee = _burn (#370)
- transferFee = _tran (#371)
- totalFee = liquidityFee.add(marketingFee).add(stakingFee).add(burnFee) (#372)
SquidGrow.setstartSwap(uint256) (#215) should emit an event for:
- startedTime = block.timestamp.add(_input) (#215)
SquidGrow.setDivisors(uint256,uint256,uint256,uint256) (#346-351) should emit an event for:
- distributor_divisor = _distributor (#347)
- staking_divisor = _staking (#348)
- liquidity_divisor = _liquidity (#349)
- marketing_divisor = _marketing (#350)
SquidGrow.setMaxes(uint256,uint256) (#322-328) should emit an event for:
- _maxTxAmount = newTx (#325)
- _maxWalletToken = newWallet (#326)
Emit an event for critical parameter changes.

Additional information: link

Auth.transferOwnership(address).adr (#72) lacks a zero-check on :
- owner = adr (#73)
SquidGrow.setPairReceiver(address)._address (#214) lacks a zero-check on :
- liquidity_receiver = _address (#214)
SquidGrow.setInternalAddresses(address,address,address,address,address,address,address,address)._marketing (#376) lacks a zero-check on :
- marketing_receiver = _marketing (#377)
SquidGrow.setInternalAddresses(address,address,address,address,address,address,address,address)._token (#376) lacks a zero-check on :
- token_receiver = _token (#383)
SquidGrow.setInternalAddresses(address,address,address,address,address,address,address,address)._team2 (#376) lacks a zero-check on :
- team2_receiver = _team2 (#379)
SquidGrow.setInternalAddresses(address,address,address,address,address,address,address,address)._team3 (#376) lacks a zero-check on :
- team3_receiver = _team3 (#380)
SquidGrow.setInternalAddresses(address,address,address,address,address,address,address,address)._team1 (#376) lacks a zero-check on :
- team1_receiver = _team1 (#378)
SquidGrow.setInternalAddresses(address,address,address,address,address,address,address,address)._team4 (#376) lacks a zero-check on :
- team4_receiver = _team4 (#381)
SquidGrow.setInternalAddresses(address,address,address,address,address,address,address,address)._stake (#376) lacks a zero-check on :
- staking_receiver = _stake (#382)
SquidGrow.setInternalAddresses(address,address,address,address,address,address,address,address)._default (#376) lacks a zero-check on :
- default_receiver = _default (#384)
Check that the address is not zero.

Additional information: link

Reentrancy in SquidGrow.swapAndLiquify(uint256) (#398-415):
External calls:
- swapTokensForBNB(toSwap) (#403)
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#433-438)
- addLiquidity(tokensToAddLiquidityWith,BNBToAddLiquidityWith) (#408)
- router.addLiquidityETH{value: BNBAmount}(address(this),tokenAmount,0,0,liquidity_receiver,block.timestamp) (#419-425)
External calls sending eth:
- addLiquidity(tokensToAddLiquidityWith,BNBToAddLiquidityWith) (#408)
- router.addLiquidityETH{value: BNBAmount}(address(this),tokenAmount,0,0,liquidity_receiver,block.timestamp) (#419-425)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#228)
- addLiquidity(tokensToAddLiquidityWith,BNBToAddLiquidityWith) (#408)
Reentrancy in SquidGrow.transferFrom(address,address,uint256) (#218-222):
External calls:
- _transfer(sender,recipient,amount) (#219)
- router.addLiquidityETH{value: BNBAmount}(address(this),tokenAmount,0,0,liquidity_receiver,block.timestamp) (#419-425)
- IBEP20(pair).transfer(team1_receiver,tamt) (#332)
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#433-438)
External calls sending eth:
- _transfer(sender,recipient,amount) (#219)
- router.addLiquidityETH{value: BNBAmount}(address(this),tokenAmount,0,0,liquidity_receiver,block.timestamp) (#419-425)
- address(team1_receiver).transfer(acBNBf) (#360)
- address(team2_receiver).transfer(acBNBs) (#361)
- address(team3_receiver).transfer(acBNBt) (#362)
- address(team4_receiver).transfer(acBNBl) (#363)
- address(marketing_receiver).transfer(zrAmt) (#411)
- address(staking_receiver).transfer(xrAmt) (#414)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#228)
- _approve(sender,msg.sender,_allowances[sender][msg.sender].sub(amount,BEP20: transfer amount exceeds allowance)) (#220)
Reentrancy in SquidGrow._transfer(address,address,uint256) (#231-244):
External calls:
- swapBack(sender,recipient,amount) (#237)
- router.addLiquidityETH{value: BNBAmount}(address(this),tokenAmount,0,0,liquidity_receiver,block.timestamp) (#419-425)
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#433-438)
External calls sending eth:
- swapBack(sender,recipient,amount) (#237)
- router.addLiquidityETH{value: BNBAmount}(address(this),tokenAmount,0,0,liquidity_receiver,block.timestamp) (#419-425)
- address(marketing_receiver).transfer(zrAmt) (#411)
- address(staking_receiver).transfer(xrAmt) (#414)
Event emitted after the call(s):
- Transfer(sender,address(DEAD),bAmount) (#284)
- amountReceived = taketotalFee(sender,recipient,amount) (#239)
- Transfer(sender,recipient,amountReceived) (#241)
- Transfer(sender,address(token_receiver),sAmount) (#287)
- amountReceived = taketotalFee(sender,recipient,amount) (#239)
- Transfer(sender,address(this),cAmount) (#290)
- amountReceived = taketotalFee(sender,recipient,amount) (#239)
Apply the check-effects-interactions pattern.

Additional information: link

SquidGrow.checkBot(address,address) (#305-310) uses timestamp for comparisons
Dangerous comparisons:
- isCont(sender) && ! isInternal[sender] && botOn || sender == pair && botOn && ! isInternal[sender] && msg.sender != tx.origin || startedTime > block.timestamp (#306-307)
SquidGrow.getTotalFee(address,address) (#294-299) uses timestamp for comparisons
Dangerous comparisons:
- isBot[sender] && swapTime[sender] < block.timestamp && botOn || isBot[recipient] && swapTime[sender] < block.timestamp && botOn || startedTime > block.timestamp (#295-296)
SquidGrow.taxableEvent(address,address) (#271-273) uses timestamp for comparisons
Dangerous comparisons:
- totalFee > 0 && ! swapping || isBot[sender] && swapTime[sender] < block.timestamp || isBot[recipient] || startedTime > block.timestamp (#272)
Avoid relying on block.timestamp.

Additional information: link

SafeMath.tryDiv(uint256,uint256) (#29-30) is never used and should be removed
SafeMath.tryMod(uint256,uint256) (#32-33) is never used and should be removed
SafeMath.tryAdd(uint256,uint256) (#19-20) is never used and should be removed
SafeMath.mod(uint256,uint256,string) (#41-42) is never used and should be removed
SafeMath.div(uint256,uint256,string) (#38-39) is never used and should be removed
SafeMath.mod(uint256,uint256) (#17) is never used and should be removed
SafeMath.tryMul(uint256,uint256) (#25-27) is never used and should be removed
SafeMath.trySub(uint256,uint256) (#22-23) is never used and should be removed
Remove unused functions.

Additional information: link

Reentrancy in SquidGrow._transfer(address,address,uint256) (#231-244):
External calls:
- swapBack(sender,recipient,amount) (#237)
- address(marketing_receiver).transfer(zrAmt) (#411)
- address(staking_receiver).transfer(xrAmt) (#414)
- checkapprovals(recipient,amount) (#242)
- address(team1_receiver).transfer(acBNBf) (#360)
- address(team2_receiver).transfer(acBNBs) (#361)
- address(team3_receiver).transfer(acBNBt) (#362)
- address(team4_receiver).transfer(acBNBl) (#363)
External calls sending eth:
- swapBack(sender,recipient,amount) (#237)
- router.addLiquidityETH{value: BNBAmount}(address(this),tokenAmount,0,0,liquidity_receiver,block.timestamp) (#419-425)
- address(marketing_receiver).transfer(zrAmt) (#411)
- address(staking_receiver).transfer(xrAmt) (#414)
- checkapprovals(recipient,amount) (#242)
- address(team1_receiver).transfer(acBNBf) (#360)
- address(team2_receiver).transfer(acBNBs) (#361)
- address(team3_receiver).transfer(acBNBt) (#362)
- address(team4_receiver).transfer(acBNBl) (#363)
State variables written after the call(s):
- checkBot(sender,recipient) (#243)
- isBot[sender] = true (#307)
- isBot[recipient] = true (#309)
Reentrancy in SquidGrow.swapBack(address,address,uint256) (#394-396):
External calls:
- swapAndLiquify(swapThreshold) (#395)
- address(marketing_receiver).transfer(zrAmt) (#411)
- address(staking_receiver).transfer(xrAmt) (#414)
External calls sending eth:
- swapAndLiquify(swapThreshold) (#395)
- router.addLiquidityETH{value: BNBAmount}(address(this),tokenAmount,0,0,liquidity_receiver,block.timestamp) (#419-425)
- address(marketing_receiver).transfer(zrAmt) (#411)
- address(staking_receiver).transfer(xrAmt) (#414)
State variables written after the call(s):
- swapTimes = 0 (#395)
Reentrancy in SquidGrow.transferFrom(address,address,uint256) (#218-222):
External calls:
- _transfer(sender,recipient,amount) (#219)
- address(team1_receiver).transfer(acBNBf) (#360)
- address(team2_receiver).transfer(acBNBs) (#361)
- address(team3_receiver).transfer(acBNBt) (#362)
- address(team4_receiver).transfer(acBNBl) (#363)
- address(marketing_receiver).transfer(zrAmt) (#411)
- address(staking_receiver).transfer(xrAmt) (#414)
External calls sending eth:
- _transfer(sender,recipient,amount) (#219)
- router.addLiquidityETH{value: BNBAmount}(address(this),tokenAmount,0,0,liquidity_receiver,block.timestamp) (#419-425)
- address(team1_receiver).transfer(acBNBf) (#360)
- address(team2_receiver).transfer(acBNBs) (#361)
- address(team3_receiver).transfer(acBNBt) (#362)
- address(team4_receiver).transfer(acBNBl) (#363)
- address(marketing_receiver).transfer(zrAmt) (#411)
- address(staking_receiver).transfer(xrAmt) (#414)
State variables written after the call(s):
- _approve(sender,msg.sender,_allowances[sender][msg.sender].sub(amount,BEP20: transfer amount exceeds allowance)) (#220)
- _allowances[owner][spender] = amount (#227)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#228)
- _approve(sender,msg.sender,_allowances[sender][msg.sender].sub(amount,BEP20: transfer amount exceeds allowance)) (#220)
Reentrancy in SquidGrow._transfer(address,address,uint256) (#231-244):
External calls:
- swapBack(sender,recipient,amount) (#237)
- address(marketing_receiver).transfer(zrAmt) (#411)
- address(staking_receiver).transfer(xrAmt) (#414)
External calls sending eth:
- swapBack(sender,recipient,amount) (#237)
- router.addLiquidityETH{value: BNBAmount}(address(this),tokenAmount,0,0,liquidity_receiver,block.timestamp) (#419-425)
- address(marketing_receiver).transfer(zrAmt) (#411)
- address(staking_receiver).transfer(xrAmt) (#414)
State variables written after the call(s):
- _balances[sender] = _balances[sender].sub(amount) (#238)
- _balances[recipient] = _balances[recipient].add(amountReceived) (#240)
- amountReceived = taketotalFee(sender,recipient,amount) (#239)
- _balances[address(DEAD)] = _balances[address(DEAD)].add(bAmount) (#283)
- _balances[address(token_receiver)] = _balances[address(token_receiver)].add(sAmount) (#286)
- _balances[address(this)] = _balances[address(this)].add(cAmount) (#289)
Event emitted after the call(s):
- Transfer(sender,address(DEAD),bAmount) (#284)
- amountReceived = taketotalFee(sender,recipient,amount) (#239)
- Transfer(sender,recipient,amountReceived) (#241)
- Transfer(sender,address(token_receiver),sAmount) (#287)
- amountReceived = taketotalFee(sender,recipient,amount) (#239)
- Transfer(sender,address(this),cAmount) (#290)
- amountReceived = taketotalFee(sender,recipient,amount) (#239)
Apply the check-effects-interactions pattern.

Additional information: link

Variable SquidGrow.team1_receiver (#162) is too similar to SquidGrow.team4_receiver (#165)
Variable SquidGrow.team3_receiver (#164) is too similar to SquidGrow.team4_receiver (#165)
Variable SquidGrow.team1_receiver (#162) is too similar to SquidGrow.team3_receiver (#164)
Variable SquidGrow.team2_receiver (#163) is too similar to SquidGrow.team3_receiver (#164)
Variable SquidGrow.team1_receiver (#162) is too similar to SquidGrow.team2_receiver (#163)
Variable SquidGrow.team2_receiver (#163) is too similar to SquidGrow.team4_receiver (#165)
Prevent variables from having similar names.

Additional information: link

Average 30d PancakeSwap liquidity is less than $100. Token is either dead or inactive.

Average 30d number of PancakeSwap swaps is less than 1. Token is either dead or inactive.

Contract has 4% buy tax and 8% sell tax.
Taxes are low and contract ownership is renounced.

Unable to find token contract audit

Token is not listed at Mobula.Finance

Additional information: link

Unable to find token on CoinHunt

Additional information: link

Token is marked as scam (rug pull, honeypot, phishing, etc.)

Additional information: link