Unable to find manual contract audit (e.g. Certik, PeckShield, Solidity...)
TiktokToEarn.collectBNB() (#523-525) sends eth to arbitrary user
Dangerous calls:
- address(owner()).transfer(address(this).balance) (#524)
Ensure that an arbitrary user cannot withdraw unauthorized funds.
Additional information: link
TiktokToEarn.collect(address) (#505-507) ignores return value by IBEP20(contractAddr).transfer(owner(),IBEP20(contractAddr).balanceOf(address(this))) (#506)
Use SafeERC20, or ensure that the transfer/transferFrom return value is checked.
Additional information: link
Combination 2: Unchecked transfer + Functions that send Ether to arbitraty destination. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.
Context._msgData() (#116-119) is never used and should be removed
SafeMath.div(uint256,uint256) (#215-217) is never used and should be removed
SafeMath.div(uint256,uint256,string) (#230-237) is never used and should be removed
SafeMath.mod(uint256,uint256) (#250-252) is never used and should be removed
SafeMath.mod(uint256,uint256,string) (#265-268) is never used and should be removed
SafeMath.mul(uint256,uint256) (#190-202) is never used and should be removed
SafeMath.sub(uint256,uint256) (#161-163) is never used and should be removed
TiktokToEarn._burn(address,uint256) (#578-584) is never used and should be removed
TiktokToEarn._burnFrom(address,uint256) (#592-595) is never used and should be removed
TiktokToEarn._mint(address,uint256) (#559-565) is never used and should be removed
Remove unused functions.
Additional information: link
Pragma version^0.8.0 (#4) allows old versions
Deploy with any of the following Solidity versions: 0.5.16 - 0.5.17, 0.6.11 - 0.6.12, 0.7.5 - 0.7.6 Use a simple pragma version that allows any of these versions. Consider using the latest version of Solidity for testing.
Additional information: link
Redundant expression "this (#117)" inContext (#107-120)
Remove redundant statements if they congest code but offer no value.
Additional information: link
renounceOwnership() should be declared external:
- Ownable.renounceOwnership() (#319-322)
transferOwnership(address) should be declared external:
- Ownable.transferOwnership(address) (#328-330)
getOwner() should be declared external:
- TiktokToEarn.getOwner() (#366-368)
increaseAllowance(address,uint256) should be declared external:
- TiktokToEarn.increaseAllowance(address,uint256) (#467-470)
decreaseAllowance(address,uint256) should be declared external:
- TiktokToEarn.decreaseAllowance(address,uint256) (#486-489)
collect(address) should be declared external:
- TiktokToEarn.collect(address) (#505-507)
collectBNB() should be declared external:
- TiktokToEarn.collectBNB() (#523-525)
Use the external attribute for functions never called from the contract.
Additional information: link
TiktokToEarn.allowance(address,address).owner (#421) shadows:
- Ownable.owner() (#300-302) (function)
TiktokToEarn._approve(address,address,uint256).owner (#610) shadows:
- Ownable.owner() (#300-302) (function)
Rename the local variables that shadow another component.
Additional information: link
Unable to find website, listings and other project-related information
Young tokens have high risks of scam / price dump / death
Token has no active CoinGecko listing / rank
Token has no active CoinMarketCap listing / rank
Unable to find Telegram and Twitter accounts