Reentrancy in VCOIN._transfer(address,address,uint256) (#585-623):
External calls:
- swapAndLiquify(contractTokenBalance) (#607)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#681-688)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#665-671)
External calls sending eth:
- swapAndLiquify(contractTokenBalance) (#607)
- recipient.transfer(amount) (#567)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#681-688)
State variables written after the call(s):
- _balances[sender] = _balances[sender].sub(amount,Insufficient Balance) (#610)
- _balances[recipient] = _balances[recipient].add(finalAmount) (#618)
- finalAmount = takeFee(sender,recipient,amount) (#612-613)
- _balances[address(this)] = _balances[address(this)].add(feeAmount) (#703)
Apply the check-effects-interactions pattern.
Additional information: link
Unable to find manual contract audit (e.g. Certik, PeckShield, Solidity...)
Contract ownership is not renounced (belongs to a wallet)
VCOIN.addLiquidity(uint256,uint256) (#676-689) ignores return value by uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#681-688)
Ensure that all the return values of the function calls are used.
Additional information: link
VCOIN.allowance(address,address).owner (#494) shadows:
- Ownable.owner() (#152-154) (function)
VCOIN._approve(address,address,uint256).owner (#517) shadows:
- Ownable.owner() (#152-154) (function)
Rename the local variables that shadow another component.
Additional information: link
VCOIN.setSellTaxes(uint256,uint256,uint256) (#537-543) should emit an event for:
- _totalTaxIfSelling = _sellLiquidityFee.add(_sellMarketingFee).add(_sellTeamFee) (#542)
VCOIN.setMaxTxAmount(uint256) (#545-547) should emit an event for:
- _maxTxAmount = maxTxAmount (#546)
VCOIN.setBuyTaxes(uint256,uint256,uint256) (#529-535) should emit an event for:
- _totalTaxIfBuying = _buyLiquidityFee.add(_buyMarketingFee).add(_buyTeamFee) (#534)
VCOIN.setWalletLimit(uint256) (#553-555) should emit an event for:
- _walletMax = newLimit (#554)
Emit an event for critical parameter changes.
Additional information: link
Reentrancy in VCOIN.transferFrom(address,address,uint256) (#579-583):
External calls:
- _transfer(sender,recipient,amount) (#580)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#681-688)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#665-671)
External calls sending eth:
- _transfer(sender,recipient,amount) (#580)
- recipient.transfer(amount) (#567)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#681-688)
State variables written after the call(s):
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#581)
- _allowances[owner][spender] = amount (#521)
Reentrancy in VCOIN.swapAndLiquify(uint256) (#632-654):
External calls:
- swapTokensForEth(tokensForSwap) (#637)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#665-671)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#653)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#681-688)
External calls sending eth:
- transferToAddressETH(marketingWalletAddress,amountBNBMarketing) (#647)
- recipient.transfer(amount) (#567)
- transferToAddressETH(teamWalletAddress,amountBNBTeam) (#650)
- recipient.transfer(amount) (#567)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#653)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#681-688)
State variables written after the call(s):
- addLiquidity(tokensForLP,amountBNBLiquidity) (#653)
- _allowances[owner][spender] = amount (#521)
Apply the check-effects-interactions pattern.
Additional information: link
Reentrancy in VCOIN.swapTokensForEth(uint256) (#656-674):
External calls:
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#665-671)
Event emitted after the call(s):
- SwapTokensForETH(tokenAmount,path) (#673)
Reentrancy in VCOIN._transfer(address,address,uint256) (#585-623):
External calls:
- swapAndLiquify(contractTokenBalance) (#607)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#681-688)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#665-671)
External calls sending eth:
- swapAndLiquify(contractTokenBalance) (#607)
- recipient.transfer(amount) (#567)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#681-688)
Event emitted after the call(s):
- Transfer(sender,address(this),feeAmount) (#704)
- finalAmount = takeFee(sender,recipient,amount) (#612-613)
- Transfer(sender,recipient,finalAmount) (#620)
Reentrancy in VCOIN.transferFrom(address,address,uint256) (#579-583):
External calls:
- _transfer(sender,recipient,amount) (#580)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#681-688)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#665-671)
External calls sending eth:
- _transfer(sender,recipient,amount) (#580)
- recipient.transfer(amount) (#567)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#681-688)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#522)
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#581)
Reentrancy in VCOIN.swapAndLiquify(uint256) (#632-654):
External calls:
- swapTokensForEth(tokensForSwap) (#637)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#665-671)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#653)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#681-688)
External calls sending eth:
- transferToAddressETH(marketingWalletAddress,amountBNBMarketing) (#647)
- recipient.transfer(amount) (#567)
- transferToAddressETH(teamWalletAddress,amountBNBTeam) (#650)
- recipient.transfer(amount) (#567)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#653)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#681-688)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#522)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#653)
Apply the check-effects-interactions pattern.
Additional information: link
Address.isContract(address) (#89-98) uses assembly
- INLINE ASM (#96)
Address._functionCallWithValue(address,bytes,uint256,string) (#125-142) uses assembly
- INLINE ASM (#134-137)
Do not use evm assembly.
Additional information: link
Address.sendValue(address,uint256) (#100-106) is never used and should be removed
Address.functionCallWithValue(address,bytes,uint256) (#116-118) is never used and should be removed
SafeMath.mod(uint256,uint256,string) (#81-84) is never used and should be removed
Address.functionCallWithValue(address,bytes,uint256,string) (#120-123) is never used and should be removed
Context._msgData() (#16-19) is never used and should be removed
SafeMath.mod(uint256,uint256) (#77-79) is never used and should be removed
Address._functionCallWithValue(address,bytes,uint256,string) (#125-142) is never used and should be removed
Address.isContract(address) (#89-98) is never used and should be removed
Address.functionCall(address,bytes,string) (#112-114) is never used and should be removed
Address.functionCall(address,bytes) (#108-110) is never used and should be removed
Remove unused functions.
Additional information: link
VCOIN._maxTxAmount (#403) is set pre-construction with a non-constant function or state variable:
- 500 * 10 ** _decimals
VCOIN._totalSupply (#402) is set pre-construction with a non-constant function or state variable:
- 100000 * 10 ** _decimals
VCOIN._walletMax (#404) is set pre-construction with a non-constant function or state variable:
- 1000 * 10 ** _decimals
Remove any initialization of state variables via non-constant state variables or function calls. If variables must be set upon contract deployment, locate initialization in the constructor instead.
Additional information: link
Low level call in Address._functionCallWithValue(address,bytes,uint256,string) (#125-142):
- (success,returndata) = target.call{value: weiValue}(data) (#128)
Low level call in Address.sendValue(address,uint256) (#100-106):
- (success) = recipient.call{value: amount}() (#104)
Avoid low-level calls. Check the call success. If the call is meant for a contract, check for code existence
Additional information: link
Variable VCOIN._sellMarketingFee (#391) is not in mixedCase
Variable VCOIN._totalDistributionShares (#400) is not in mixedCase
Variable VCOIN._buyMarketingFee (#387) is not in mixedCase
Variable VCOIN._totalTaxIfSelling (#399) is not in mixedCase
Function IUniswapV2Pair.PERMIT_TYPEHASH() (#197) is not in mixedCase
Variable VCOIN._buyTeamFee (#388) is not in mixedCase
Function IUniswapV2Pair.MINIMUM_LIQUIDITY() (#213) is not in mixedCase
Variable VCOIN._sellLiquidityFee (#390) is not in mixedCase
Variable VCOIN._maxTxAmount (#403) is not in mixedCase
Parameter VCOIN.setSwapAndLiquifyEnabled(bool)._enabled (#557) is not in mixedCase
Function IUniswapV2Pair.DOMAIN_SEPARATOR() (#196) is not in mixedCase
Variable VCOIN._teamShare (#396) is not in mixedCase
Variable VCOIN._marketingShare (#395) is not in mixedCase
Variable VCOIN._walletMax (#404) is not in mixedCase
Variable VCOIN._totalTaxIfBuying (#398) is not in mixedCase
Variable VCOIN._balances (#378) is not in mixedCase
Variable VCOIN._sellTeamFee (#392) is not in mixedCase
Function IUniswapV2Router01.WETH() (#232) is not in mixedCase
Variable VCOIN._liquidityShare (#394) is not in mixedCase
Variable VCOIN._buyLiquidityFee (#386) is not in mixedCase
Follow the Solidity naming convention.
Additional information: link
Redundant expression "this (#17)" inContext (#10-20)
Remove redundant statements if they congest code but offer no value.
Additional information: link
Reentrancy in VCOIN.transferFrom(address,address,uint256) (#579-583):
External calls:
- _transfer(sender,recipient,amount) (#580)
- recipient.transfer(amount) (#567)
External calls sending eth:
- _transfer(sender,recipient,amount) (#580)
- recipient.transfer(amount) (#567)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#681-688)
State variables written after the call(s):
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#581)
- _allowances[owner][spender] = amount (#521)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#522)
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#581)
Reentrancy in VCOIN.swapAndLiquify(uint256) (#632-654):
External calls:
- transferToAddressETH(marketingWalletAddress,amountBNBMarketing) (#647)
- recipient.transfer(amount) (#567)
- transferToAddressETH(teamWalletAddress,amountBNBTeam) (#650)
- recipient.transfer(amount) (#567)
External calls sending eth:
- transferToAddressETH(marketingWalletAddress,amountBNBMarketing) (#647)
- recipient.transfer(amount) (#567)
- transferToAddressETH(teamWalletAddress,amountBNBTeam) (#650)
- recipient.transfer(amount) (#567)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#653)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#681-688)
State variables written after the call(s):
- addLiquidity(tokensForLP,amountBNBLiquidity) (#653)
- _allowances[owner][spender] = amount (#521)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#522)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#653)
Reentrancy in VCOIN._transfer(address,address,uint256) (#585-623):
External calls:
- swapAndLiquify(contractTokenBalance) (#607)
- recipient.transfer(amount) (#567)
External calls sending eth:
- swapAndLiquify(contractTokenBalance) (#607)
- recipient.transfer(amount) (#567)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#681-688)
State variables written after the call(s):
- _balances[sender] = _balances[sender].sub(amount,Insufficient Balance) (#610)
- _balances[recipient] = _balances[recipient].add(finalAmount) (#618)
- finalAmount = takeFee(sender,recipient,amount) (#612-613)
- _balances[address(this)] = _balances[address(this)].add(feeAmount) (#703)
Event emitted after the call(s):
- Transfer(sender,address(this),feeAmount) (#704)
- finalAmount = takeFee(sender,recipient,amount) (#612-613)
- Transfer(sender,recipient,finalAmount) (#620)
Apply the check-effects-interactions pattern.
Additional information: link
Variable IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountADesired (#237) is too similar to IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountBDesired (#238)
Prevent variables from having similar names.
Additional information: link
VCOIN.slitherConstructorVariables() (#365-711) uses literals with too many digits:
- _totalSupply = 100000 * 10 ** _decimals (#402)
VCOIN.slitherConstructorVariables() (#365-711) uses literals with too many digits:
- deadAddress = 0x000000000000000000000000000000000000dEaD (#376)
Use: Ether suffix, Time suffix, or The scientific notation
Additional information: link
VCOIN.teamWalletAddress (#375) should be constant
VCOIN.swapAndLiquifyByLimitOnly (#412) should be constant
VCOIN._liquidityShare (#394) should be constant
VCOIN._decimals (#372) should be constant
VCOIN._marketingShare (#395) should be constant
VCOIN._teamShare (#396) should be constant
VCOIN.marketingWalletAddress (#374) should be constant
VCOIN._name (#370) should be constant
VCOIN.checkWalletLimit (#413) should be constant
VCOIN.minimumTokensBeforeSwap (#405) should be constant
VCOIN._symbol (#371) should be constant
Add the constant attributes to state variables that never change.
Additional information: link
increaseAllowance(address,uint256) should be declared external:
- VCOIN.increaseAllowance(address,uint256) (#498-501)
decimals() should be declared external:
- VCOIN.decimals() (#482-484)
totalSupply() should be declared external:
- VCOIN.totalSupply() (#486-488)
approve(address,uint256) should be declared external:
- VCOIN.approve(address,uint256) (#512-515)
getCirculatingSupply() should be declared external:
- VCOIN.getCirculatingSupply() (#562-564)
symbol() should be declared external:
- VCOIN.symbol() (#478-480)
renounceOwnership() should be declared external:
- Ownable.renounceOwnership() (#159-162)
setSwapAndLiquifyEnabled(bool) should be declared external:
- VCOIN.setSwapAndLiquifyEnabled(bool) (#557-560)
transfer(address,uint256) should be declared external:
- VCOIN.transfer(address,uint256) (#574-577)
allowance(address,address) should be declared external:
- VCOIN.allowance(address,address) (#494-496)
name() should be declared external:
- VCOIN.name() (#474-476)
transferFrom(address,address,uint256) should be declared external:
- VCOIN.transferFrom(address,address,uint256) (#579-583)
minimumTokensBeforeSwapAmount() should be declared external:
- VCOIN.minimumTokensBeforeSwapAmount() (#508-510)
decreaseAllowance(address,uint256) should be declared external:
- VCOIN.decreaseAllowance(address,uint256) (#503-506)
Use the external attribute for functions never called from the contract.
Additional information: link
Average 30d PancakeSwap liquidity is less than $100. Token is either dead or inactive.
Average 30d PancakeSwap volume is less than $100. Token is either dead or inactive.
Number of Binance Smart Chain (BSC) token holders is less than 100. Token is either dead or inactive. Ignore for presale.
Contract has 10% buy tax and 9% sell tax.
Taxes are low but contract ownership is not renounced. Token has a high risk of becoming a honeypot.
Average 30d number of PancakeSwap swaps is low.
Token is deployed only at one blockchain
Token has only one trading pair
Unable to find website, listings and other project-related information
Young tokens have high risks of scam / price dump / death
Token has no active CoinGecko listing / rank
Token has no active CoinMarketCap listing / rank
Unable to find Telegram and Twitter accounts