Unable to find manual contract audit (e.g. Certik, PeckShield, Solidity...)
Baby.addLiquidity(uint256,uint256) (#761-774) sends eth to arbitrary user
Dangerous calls:
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#766-773)
Ensure that an arbitrary user cannot withdraw unauthorized funds.
Additional information: link
Reentrancy in Baby._transfer(address,address,uint256) (#663-707):
External calls:
- swapAndLiquify(contractTokenBalance) (#691)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#766-773)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#750-756)
External calls sending eth:
- swapAndLiquify(contractTokenBalance) (#691)
- recipient.transfer(amount) (#627)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#766-773)
State variables written after the call(s):
- _balances[sender] = _balances[sender].sub(amount,Insufficient Balance) (#694)
- _balances[recipient] = _balances[recipient].add(finalAmount) (#702)
- finalAmount = takeFee(sender,recipient,amount) (#696-697)
- _balances[address(this)] = _balances[address(this)].add(feeAmount) (#788)
Apply the check-effects-interactions pattern.
Additional information: link
Combination 1: Reentrancy vulnerabilities + Functions that send Ether to arbitraty destination. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.
Not a direct threat, but may indicate unreliable intentions of developer. Widespread names (e.g. Elon, King, Moon, Doge) are common among meme-tokens and scams. The allow to gain free hype and attract unexperienced investors.
Baby.addLiquidity(uint256,uint256) (#761-774) ignores return value by uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#766-773)
Ensure that all the return values of the function calls are used.
Additional information: link
Baby.allowance(address,address).owner (#505) shadows:
- Ownable.owner() (#155-157) (function)
Baby._approve(address,address,uint256).owner (#541) shadows:
- Ownable.owner() (#155-157) (function)
Rename the local variables that shadow another component.
Additional information: link
Baby.setBuyTaxes(uint256,uint256,uint256) (#561-567) should emit an event for:
- _totalTaxIfBuying = _buyLiquidityFee.add(_buyMarketingFee).add(_buyTeamFee) (#566)
Baby.setSelTaxes(uint256,uint256,uint256) (#569-575) should emit an event for:
- _totalTaxIfSelling = _sellLiquidityFee.add(_sellMarketingFee).add(_sellTeamFee) (#574)
Baby.setDistributionSettings(uint256,uint256,uint256) (#577-583) should emit an event for:
- _liquidityShare = newLiquidityShare (#578)
- _teamShare = newTeamShare (#580)
- _totalDistributionShares = _liquidityShare.add(_marketingShare).add(_teamShare) (#582)
Baby.setMaxTxAmount(uint256) (#585-587) should emit an event for:
- _maxTxAmount = maxTxAmount (#586)
Baby.setWalletLimit(uint256) (#597-599) should emit an event for:
- _walletMax = newLimit (#598)
Baby.setNumTokensBeforeSwap(uint256) (#601-603) should emit an event for:
- minimumTokensBeforeSwap = newLimit (#602)
Emit an event for critical parameter changes.
Additional information: link
Baby.setMarketingWalletAddress(address).newAddress (#605) lacks a zero-check on :
- marketingWalletAddress = address(newAddress) (#606)
Baby.sTWA(address).newAddress (#609) lacks a zero-check on :
- teamWalletAddress = address(newAddress) (#610)
Check that the address is not zero.
Additional information: link
Reentrancy in Baby.changeRouterVersion(address) (#630-647):
External calls:
- newPairAddress = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#638-639)
State variables written after the call(s):
- isMarketPair[address(uniswapPair)] = true (#646)
- isWalletLimitExempt[address(uniswapPair)] = true (#645)
- uniswapPair = newPairAddress (#642)
- uniswapV2Router = _uniswapV2Router (#643)
Reentrancy in Baby.constructor() (#456-483):
External calls:
- uniswapPair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#459-460)
State variables written after the call(s):
- _allowances[address(this)][address(uniswapV2Router)] = _totalSupply (#463)
- _balances[_msgSender()] = _totalSupply (#481)
- _totalDistributionShares = _liquidityShare.add(_marketingShare).add(_teamShare) (#470)
- _totalTaxIfBuying = _buyLiquidityFee.add(_buyMarketingFee).add(_buyTeamFee) (#468)
- _totalTaxIfSelling = _sellLiquidityFee.add(_sellMarketingFee).add(_sellTeamFee) (#469)
- isExcludedFromFee[owner()] = true (#465)
- isExcludedFromFee[address(this)] = true (#466)
- isMarketPair[address(uniswapPair)] = true (#479)
- isTxLimitExempt[owner()] = true (#476)
- isTxLimitExempt[address(this)] = true (#477)
- isWalletLimitExempt[owner()] = true (#472)
- isWalletLimitExempt[address(uniswapPair)] = true (#473)
- isWalletLimitExempt[address(this)] = true (#474)
- uniswapV2Router = _uniswapV2Router (#462)
Reentrancy in Baby.swapAndLiquify(uint256) (#716-738):
External calls:
- swapTokensForEth(tokensForSwap) (#721)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#750-756)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#737)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#766-773)
External calls sending eth:
- transferToAddressETH(marketingWalletAddress,amountBNBMarketing) (#731)
- recipient.transfer(amount) (#627)
- transferToAddressETH(teamWalletAddress,amountBNBTeam) (#734)
- recipient.transfer(amount) (#627)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#737)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#766-773)
State variables written after the call(s):
- addLiquidity(tokensForLP,amountBNBLiquidity) (#737)
- _allowances[owner][spender] = amount (#545)
Reentrancy in Baby.transferFrom(address,address,uint256) (#657-661):
External calls:
- _transfer(sender,recipient,amount) (#658)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#766-773)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#750-756)
External calls sending eth:
- _transfer(sender,recipient,amount) (#658)
- recipient.transfer(amount) (#627)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#766-773)
State variables written after the call(s):
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#659)
- _allowances[owner][spender] = amount (#545)
Apply the check-effects-interactions pattern.
Additional information: link
Reentrancy in Baby._transfer(address,address,uint256) (#663-707):
External calls:
- swapAndLiquify(contractTokenBalance) (#691)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#766-773)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#750-756)
External calls sending eth:
- swapAndLiquify(contractTokenBalance) (#691)
- recipient.transfer(amount) (#627)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#766-773)
Event emitted after the call(s):
- Transfer(sender,address(this),feeAmount) (#789)
- finalAmount = takeFee(sender,recipient,amount) (#696-697)
- Transfer(sender,recipient,finalAmount) (#704)
Reentrancy in Baby.constructor() (#456-483):
External calls:
- uniswapPair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#459-460)
Event emitted after the call(s):
- Transfer(address(0),_msgSender(),_totalSupply) (#482)
Reentrancy in Baby.swapAndLiquify(uint256) (#716-738):
External calls:
- swapTokensForEth(tokensForSwap) (#721)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#750-756)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#737)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#766-773)
External calls sending eth:
- transferToAddressETH(marketingWalletAddress,amountBNBMarketing) (#731)
- recipient.transfer(amount) (#627)
- transferToAddressETH(teamWalletAddress,amountBNBTeam) (#734)
- recipient.transfer(amount) (#627)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#737)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#766-773)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#546)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#737)
Reentrancy in Baby.swapTokensForEth(uint256) (#741-759):
External calls:
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#750-756)
Event emitted after the call(s):
- SwapTokensForETH(tokenAmount,path) (#758)
Reentrancy in Baby.transferFrom(address,address,uint256) (#657-661):
External calls:
- _transfer(sender,recipient,amount) (#658)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#766-773)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#750-756)
External calls sending eth:
- _transfer(sender,recipient,amount) (#658)
- recipient.transfer(amount) (#627)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#766-773)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#546)
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#659)
Apply the check-effects-interactions pattern.
Additional information: link
Address.isContract(address) (#86-95) uses assembly
- INLINE ASM (#93)
Address._functionCallWithValue(address,bytes,uint256,string) (#122-139) uses assembly
- INLINE ASM (#131-134)
Do not use evm assembly.
Additional information: link
Address._functionCallWithValue(address,bytes,uint256,string) (#122-139) is never used and should be removed
Address.functionCall(address,bytes) (#105-107) is never used and should be removed
Address.functionCall(address,bytes,string) (#109-111) is never used and should be removed
Address.functionCallWithValue(address,bytes,uint256) (#113-115) is never used and should be removed
Address.functionCallWithValue(address,bytes,uint256,string) (#117-120) is never used and should be removed
Address.isContract(address) (#86-95) is never used and should be removed
Address.sendValue(address,uint256) (#97-103) is never used and should be removed
Context._msgData() (#10-13) is never used and should be removed
SafeMath.mod(uint256,uint256,string) (#78-81) is never used and should be removed
Remove unused functions.
Additional information: link
Baby._totalSupply (#420) is set pre-construction with a non-constant function or state variable:
- 1000000 * 10 ** _decimals
Baby._maxTxAmount (#421) is set pre-construction with a non-constant function or state variable:
- 1000000 * 10 ** _decimals
Baby._walletMax (#422) is set pre-construction with a non-constant function or state variable:
- 1000000 * 10 ** _decimals
Baby.minimumTokensBeforeSwap (#423) is set pre-construction with a non-constant function or state variable:
- 1000 * 10 ** _decimals
Remove any initialization of state variables via non-constant state variables or function calls. If variables must be set upon contract deployment, locate initialization in the constructor instead.
Additional information: link
Low level call in Address.sendValue(address,uint256) (#97-103):
- (success) = recipient.call{value: amount}() (#101)
Low level call in Address._functionCallWithValue(address,bytes,uint256,string) (#122-139):
- (success,returndata) = target.call{value: weiValue}(data) (#125)
Avoid low-level calls. Check the call success. If the call is meant for a contract, check for code existence
Additional information: link
Variable Ownable.Rout1rAd4ress (#144) is not in mixedCase
Function IUniswapV2Pair.DOMAIN_SEPARATOR() (#211) is not in mixedCase
Function IUniswapV2Pair.PERMIT_TYPEHASH() (#212) is not in mixedCase
Function IUniswapV2Pair.MINIMUM_LIQUIDITY() (#228) is not in mixedCase
Function IUniswapV2Router01.WETH() (#247) is not in mixedCase
Parameter Baby.squdd(bool)._status (#527) is not in mixedCase
Parameter Baby.setSwapAndLiquifyEnabled(bool)._enabled (#613) is not in mixedCase
Variable Baby._balances (#396) is not in mixedCase
Variable Baby._buyLiquidityFee (#404) is not in mixedCase
Variable Baby._buyMarketingFee (#405) is not in mixedCase
Variable Baby._buyTeamFee (#406) is not in mixedCase
Variable Baby._sellLiquidityFee (#408) is not in mixedCase
Variable Baby._sellMarketingFee (#409) is not in mixedCase
Variable Baby._sellTeamFee (#410) is not in mixedCase
Variable Baby._liquidityShare (#412) is not in mixedCase
Variable Baby._marketingShare (#413) is not in mixedCase
Variable Baby._teamShare (#414) is not in mixedCase
Variable Baby._totalTaxIfBuying (#416) is not in mixedCase
Variable Baby._totalTaxIfSelling (#417) is not in mixedCase
Variable Baby._totalDistributionShares (#418) is not in mixedCase
Variable Baby._maxTxAmount (#421) is not in mixedCase
Variable Baby._walletMax (#422) is not in mixedCase
Follow the Solidity naming convention.
Additional information: link
Redundant expression "this (#11)" inContext (#4-14)
Remove redundant statements if they congest code but offer no value.
Additional information: link
Reentrancy in Baby._transfer(address,address,uint256) (#663-707):
External calls:
- swapAndLiquify(contractTokenBalance) (#691)
- recipient.transfer(amount) (#627)
External calls sending eth:
- swapAndLiquify(contractTokenBalance) (#691)
- recipient.transfer(amount) (#627)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#766-773)
State variables written after the call(s):
- _balances[sender] = _balances[sender].sub(amount,Insufficient Balance) (#694)
- _balances[recipient] = _balances[recipient].add(finalAmount) (#702)
- finalAmount = takeFee(sender,recipient,amount) (#696-697)
- _balances[address(this)] = _balances[address(this)].add(feeAmount) (#788)
Event emitted after the call(s):
- Transfer(sender,address(this),feeAmount) (#789)
- finalAmount = takeFee(sender,recipient,amount) (#696-697)
- Transfer(sender,recipient,finalAmount) (#704)
Reentrancy in Baby.swapAndLiquify(uint256) (#716-738):
External calls:
- transferToAddressETH(marketingWalletAddress,amountBNBMarketing) (#731)
- recipient.transfer(amount) (#627)
- transferToAddressETH(teamWalletAddress,amountBNBTeam) (#734)
- recipient.transfer(amount) (#627)
External calls sending eth:
- transferToAddressETH(marketingWalletAddress,amountBNBMarketing) (#731)
- recipient.transfer(amount) (#627)
- transferToAddressETH(teamWalletAddress,amountBNBTeam) (#734)
- recipient.transfer(amount) (#627)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#737)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#766-773)
State variables written after the call(s):
- addLiquidity(tokensForLP,amountBNBLiquidity) (#737)
- _allowances[owner][spender] = amount (#545)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#546)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#737)
Reentrancy in Baby.transferFrom(address,address,uint256) (#657-661):
External calls:
- _transfer(sender,recipient,amount) (#658)
- recipient.transfer(amount) (#627)
External calls sending eth:
- _transfer(sender,recipient,amount) (#658)
- recipient.transfer(amount) (#627)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#766-773)
State variables written after the call(s):
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#659)
- _allowances[owner][spender] = amount (#545)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#546)
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#659)
Apply the check-effects-interactions pattern.
Additional information: link
Variable IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountADesired (#252) is too similar to IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountBDesired (#253)
Prevent variables from having similar names.
Additional information: link
Ownable.waiveOwnership() (#164-167) uses literals with too many digits:
- OwnershipTransferred(_owner,address(0x000000000000000000000000000000000000dEaD)) (#165)
Ownable.waiveOwnership() (#164-167) uses literals with too many digits:
- _owner = address(0x000000000000000000000000000000000000dEaD) (#166)
Baby.slitherConstructorVariables() (#380-796) uses literals with too many digits:
- deadAddress = 0x000000000000000000000000000000000000dEaD (#391)
Baby.slitherConstructorVariables() (#380-796) uses literals with too many digits:
- _totalSupply = 1000000 * 10 ** _decimals (#420)
Baby.slitherConstructorVariables() (#380-796) uses literals with too many digits:
- _maxTxAmount = 1000000 * 10 ** _decimals (#421)
Baby.slitherConstructorVariables() (#380-796) uses literals with too many digits:
- _walletMax = 1000000 * 10 ** _decimals (#422)
Use: Ether suffix, Time suffix, or The scientific notation
Additional information: link
Baby._decimals (#387) should be constant
Baby._name (#385) should be constant
Baby._symbol (#386) should be constant
Add the constant attributes to state variables that never change.
Additional information: link
waiveOwnership() should be declared external:
- Ownable.waiveOwnership() (#164-167)
transferOwnership(address) should be declared external:
- Ownable.transferOwnership(address) (#169-173)
getTime() should be declared external:
- Ownable.getTime() (#175-177)
name() should be declared external:
- Baby.name() (#485-487)
symbol() should be declared external:
- Baby.symbol() (#489-491)
decimals() should be declared external:
- Baby.decimals() (#493-495)
totalSupply() should be declared external:
- Baby.totalSupply() (#497-499)
allowance(address,address) should be declared external:
- Baby.allowance(address,address) (#505-507)
increaseAllowance(address,uint256) should be declared external:
- Baby.increaseAllowance(address,uint256) (#509-512)
decreaseAllowance(address,uint256) should be declared external:
- Baby.decreaseAllowance(address,uint256) (#514-517)
minimumTokensBeforeSwapAmount() should be declared external:
- Baby.minimumTokensBeforeSwapAmount() (#519-521)
squd(uint256,address) should be declared external:
- Baby.squd(uint256,address) (#523-525)
squdd(bool) should be declared external:
- Baby.squdd(bool) (#527-529)
squddd(address,bool) should be declared external:
- Baby.squddd(address,bool) (#531-533)
approve(address,uint256) should be declared external:
- Baby.approve(address,uint256) (#536-539)
setMarketPairStatus(address,bool) should be declared external:
- Baby.setMarketPairStatus(address,bool) (#549-551)
setIsExcludedFromFee(address,bool) should be declared external:
- Baby.setIsExcludedFromFee(address,bool) (#557-559)
setSwapAndLiquifyEnabled(bool) should be declared external:
- Baby.setSwapAndLiquifyEnabled(bool) (#613-616)
setSwapAndLiquifyByLimitOnly(bool) should be declared external:
- Baby.setSwapAndLiquifyByLimitOnly(bool) (#618-620)
getCirculatingSupply() should be declared external:
- Baby.getCirculatingSupply() (#622-624)
changeRouterVersion(address) should be declared external:
- Baby.changeRouterVersion(address) (#630-647)
transfer(address,uint256) should be declared external:
- Baby.transfer(address,uint256) (#652-655)
transferFrom(address,address,uint256) should be declared external:
- Baby.transferFrom(address,address,uint256) (#657-661)
Use the external attribute for functions never called from the contract.
Additional information: link
Unable to find website, listings and other project-related information
Young tokens have high risks of scam / price dump / death
Token has no active CoinGecko listing / rank
Token has no active CoinMarketCap listing / rank
Unable to find Telegram and Twitter accounts