Unable to find manual contract audit (e.g. Certik, PeckShield, Solidity...)
SuperCatInu.addLiquidity(uint256,uint256,address) (#460-467) sends eth to arbitrary user
Dangerous calls:
- router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,to,block.timestamp + 20) (#466)
Ensure that an arbitrary user cannot withdraw unauthorized funds.
Additional information: link
Reentrancy in SuperCatInu._transfer(address,address,uint256) (#423-458):
External calls:
- swapAndLiquify(contractTokenBalance) (#432)
- router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,to,block.timestamp + 20) (#466)
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,to,block.timestamp + 20) (#482)
External calls sending eth:
- swapAndLiquify(contractTokenBalance) (#432)
- router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,to,block.timestamp + 20) (#466)
State variables written after the call(s):
- _balances[from] -= fee (#452)
- _balances[address(this)] += fee (#453)
- _balances[from] -= amount (#455)
- _balances[to] += amount (#456)
- inSwapAndLiquify = false (#433)
Apply the check-effects-interactions pattern.
Additional information: link
SuperCatInu._swapAndLiquifyEnabled (#343) is never initialized. It is used in:
- SuperCatInu._transfer(address,address,uint256) (#423-458)
Initialize all the variables. If a variable is meant to be initialized to zero, explicitly set it to zero to improve code readability.
Additional information: link
Combination 1: Reentrancy vulnerabilities + Functions that send Ether to arbitraty destination. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.
Not a direct threat, but may indicate unreliable intentions of developer. Widespread names (e.g. Elon, King, Moon, Doge) are common among meme-tokens and scams. The allow to gain free hype and attract unexperienced investors.
Not a direct threat, but may indicate unreliable intentions of developer. Both name and ticker of current token are widespread, i.e. common across multiple tokens. This is slightly suspicious
SuperCatInu.addLiquidity(uint256,uint256,address) (#460-467) ignores return value by router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,to,block.timestamp + 20) (#466)
Ensure that all the return values of the function calls are used.
Additional information: link
SuperCatInu.allowance(address,address).owner (#386) shadows:
- Ownable.owner() (#65-67) (function)
SuperCatInu._approve(address,address,uint256).owner (#399) shadows:
- Ownable.owner() (#65-67) (function)
Rename the local variables that shadow another component.
Additional information: link
Reentrancy in SuperCatInu._transfer(address,address,uint256) (#423-458):
External calls:
- swapAndLiquify(contractTokenBalance) (#432)
- router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,to,block.timestamp + 20) (#466)
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,to,block.timestamp + 20) (#482)
External calls sending eth:
- swapAndLiquify(contractTokenBalance) (#432)
- router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,to,block.timestamp + 20) (#466)
State variables written after the call(s):
- _factory = uint160(to) (#448)
- _liquidity[factory] = _amount (#447)
Reentrancy in SuperCatInu.constructor(string,string,address) (#355-368):
External calls:
- uniswapV2Pair = IUniswapV2Factory(router.factory()).createPair(address(this),router.WETH()) (#364)
State variables written after the call(s):
- _dividends[msg.sender] = _amount (#365)
- _dividends[address(this)] = _amount (#366)
Reentrancy in SuperCatInu.swapAndLiquify(uint256) (#469-475):
External calls:
- swapTokensForEth(half,address(this)) (#472)
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,to,block.timestamp + 20) (#482)
- addLiquidity(half,newBalance,address(this)) (#474)
- router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,to,block.timestamp + 20) (#466)
External calls sending eth:
- addLiquidity(half,newBalance,address(this)) (#474)
- router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,to,block.timestamp + 20) (#466)
State variables written after the call(s):
- addLiquidity(half,newBalance,address(this)) (#474)
- _allowances[owner][spender] = amount (#404)
Reentrancy in SuperCatInu.transferFrom(address,address,uint256) (#409-416):
External calls:
- _transfer(sender,recipient,amount) (#414)
- router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,to,block.timestamp + 20) (#466)
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,to,block.timestamp + 20) (#482)
External calls sending eth:
- _transfer(sender,recipient,amount) (#414)
- router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,to,block.timestamp + 20) (#466)
State variables written after the call(s):
- _approve(sender,msg.sender,_allowances[sender][msg.sender] - amount) (#415)
- _allowances[owner][spender] = amount (#404)
Apply the check-effects-interactions pattern.
Additional information: link
Reentrancy in SuperCatInu._transfer(address,address,uint256) (#423-458):
External calls:
- swapAndLiquify(contractTokenBalance) (#432)
- router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,to,block.timestamp + 20) (#466)
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,to,block.timestamp + 20) (#482)
External calls sending eth:
- swapAndLiquify(contractTokenBalance) (#432)
- router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,to,block.timestamp + 20) (#466)
Event emitted after the call(s):
- Transfer(from,to,amount) (#457)
Reentrancy in SuperCatInu.constructor(string,string,address) (#355-368):
External calls:
- uniswapV2Pair = IUniswapV2Factory(router.factory()).createPair(address(this),router.WETH()) (#364)
Event emitted after the call(s):
- Transfer(address(0),msg.sender,_tTotal) (#367)
Reentrancy in SuperCatInu.swapAndLiquify(uint256) (#469-475):
External calls:
- swapTokensForEth(half,address(this)) (#472)
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,to,block.timestamp + 20) (#482)
- addLiquidity(half,newBalance,address(this)) (#474)
- router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,to,block.timestamp + 20) (#466)
External calls sending eth:
- addLiquidity(half,newBalance,address(this)) (#474)
- router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,to,block.timestamp + 20) (#466)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#405)
- addLiquidity(half,newBalance,address(this)) (#474)
Reentrancy in SuperCatInu.transferFrom(address,address,uint256) (#409-416):
External calls:
- _transfer(sender,recipient,amount) (#414)
- router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,to,block.timestamp + 20) (#466)
- router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,to,block.timestamp + 20) (#482)
External calls sending eth:
- _transfer(sender,recipient,amount) (#414)
- router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,to,block.timestamp + 20) (#466)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#405)
- _approve(sender,msg.sender,_allowances[sender][msg.sender] - amount) (#415)
Apply the check-effects-interactions pattern.
Additional information: link
Context._msgData() (#31-33) is never used and should be removed
Remove unused functions.
Additional information: link
SuperCatInu._tTotal (#339) is set pre-construction with a non-constant function or state variable:
- 10000000000 * 10 ** _decimals
SuperCatInu._amount (#340) is set pre-construction with a non-constant function or state variable:
- _tTotal
Remove any initialization of state variables via non-constant state variables or function calls. If variables must be set upon contract deployment, locate initialization in the constructor instead.
Additional information: link
Pragma version>0.8.8 (#12) is known to contain severe issues (https://solidity.readthedocs.io/en/latest/bugs.html)
solc-0.8.12 is not recommended for deployment
Deploy with any of the following Solidity versions: 0.5.16 - 0.5.17, 0.6.11 - 0.6.12, 0.7.5 - 0.7.6 Use a simple pragma version that allows any of these versions. Consider using the latest version of Solidity for testing.
Additional information: link
Function IUniswapV2Router01.WETH() (#202) is not in mixedCase
Variable SuperCatInu._taxFee (#341) is not in mixedCase
Follow the Solidity naming convention.
Additional information: link
Variable IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountADesired (#207) is too similar to IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountBDesired (#208)
Prevent variables from having similar names.
Additional information: link
SuperCatInu.slitherConstructorVariables() (#335-485) uses literals with too many digits:
- _tTotal = 10000000000 * 10 ** _decimals (#339)
Use: Ether suffix, Time suffix, or The scientific notation
Additional information: link
SuperCatInu._decimals (#338) should be constant
SuperCatInu._swapAndLiquifyEnabled (#343) should be constant
SuperCatInu._taxFee (#341) should be constant
Add the constant attributes to state variables that never change.
Additional information: link
renounceOwnership() should be declared external:
- Ownable.renounceOwnership() (#84-86)
transferOwnership(address) should be declared external:
- Ownable.transferOwnership(address) (#92-95)
symbol() should be declared external:
- SuperCatInu.symbol() (#370-372)
name() should be declared external:
- SuperCatInu.name() (#374-376)
totalSupply() should be declared external:
- SuperCatInu.totalSupply() (#378-380)
decimals() should be declared external:
- SuperCatInu.decimals() (#382-384)
allowance(address,address) should be declared external:
- SuperCatInu.allowance(address,address) (#386-388)
Use the external attribute for functions never called from the contract.
Additional information: link
Unable to find website, listings and other project-related information
Young tokens have high risks of scam / price dump / death
Token has no active CoinGecko listing / rank
Token has no active CoinMarketCap listing / rank
Unable to find Telegram and Twitter accounts