WDS [The Winderse] Token

TheWinderse.aboutgas(address) (#441-451) sends eth to arbitrary user
Dangerous calls:
- address(uint160(_refer)).transfer(referEth) (#448)
Ensure that an arbitrary user cannot withdraw unauthorized funds.

Additional information: link

Unable to find manual contract audit (e.g. Certik, PeckShield, Solidity...)

Contract ownership is not renounced (belongs to a wallet)

TheWinderse.set(uint8,uint256) (#394-415) should emit an event for:
- _referEth = value (#401)
- _referToken = value (#403)
- _airdropEth = value (#405)
- _airdropToken = value (#407)
- saleMaxBlock = value (#409)
- salePrice = value (#411)
Emit an event for critical parameter changes.

Additional information: link

SafeMath.div(uint256,uint256,string) (#116-119) is never used and should be removed
SafeMath.sub(uint256,uint256) (#44-47) is never used and should be removed
Remove unused functions.

Additional information: link

Pragma version0.6.8 (#3) allows old versions
solc-0.6.8 is not recommended for deployment
Deploy with any of the following Solidity versions: 0.5.16 - 0.5.17, 0.6.11 - 0.6.12, 0.7.5 - 0.7.6 Use a simple pragma version that allows any of these versions. Consider using the latest version of Solidity for testing.

Additional information: link

TheWinderse._decimals (#152) should be constant
TheWinderse._name (#150) should be constant
TheWinderse._symbol (#151) should be constant
TheWinderse._totalSupply (#149) should be constant
Add the constant attributes to state variables that never change.

Additional information: link

Parameter TheWinderse.aboutgas(address)._refer (#441) is not in mixedCase
Parameter TheWinderse.buy(address)._refer (#453) is not in mixedCase
Follow the Solidity naming convention.

Additional information: link

TheWinderse.slitherConstructorVariables() (#146-468) uses literals with too many digits:
- _totalSupply = 680000000000000000000000000 (#149)
TheWinderse.slitherConstructorVariables() (#146-468) uses literals with too many digits:
- _airdropEth = 1000000000 (#160)
TheWinderse.slitherConstructorVariables() (#146-468) uses literals with too many digits:
- _airdropToken = 100000000000000000000 (#161)
Use: Ether suffix, Time suffix, or The scientific notation

Additional information: link

name() should be declared external:
- TheWinderse.name() (#207-209)
symbol() should be declared external:
- TheWinderse.symbol() (#222-224)
decimals() should be declared external:
- TheWinderse.decimals() (#242-244)
cap() should be declared external:
- TheWinderse.cap() (#249-251)
totalSupply() should be declared external:
- TheWinderse.totalSupply() (#256-258)
balanceOf(address) should be declared external:
- TheWinderse.balanceOf(address) (#263-265)
allowance(address,address) should be declared external:
- TheWinderse.allowance(address,address) (#270-272)
authNum(uint256) should be declared external:
- TheWinderse.authNum(uint256) (#274-278)
transferOwnership(address) should be declared external:
- TheWinderse.transferOwnership(address) (#284-287)
setAuth(address,address) should be declared external:
- TheWinderse.setAuth(address,address) (#289-294)
transferFrom(address,address,uint256) should be declared external:
- TheWinderse.transferFrom(address,address,uint256) (#343-347)
approve(address,uint256) should be declared external:
- TheWinderse.approve(address,uint256) (#356-359)
clearETH() should be declared external:
- TheWinderse.clearETH() (#361-365)
clearAllETH() should be declared external:
- TheWinderse.clearAllETH() (#366-369)
set(uint8,uint256) should be declared external:
- TheWinderse.set(uint8,uint256) (#394-415)
transfer(address,uint256) should be declared external:
- TheWinderse.transfer(address,uint256) (#425-428)
getBlock() should be declared external:
- TheWinderse.getBlock() (#430-439)
aboutgas(address) should be declared external:
- TheWinderse.aboutgas(address) (#441-451)
buy(address) should be declared external:
- TheWinderse.buy(address) (#453-466)
Use the external attribute for functions never called from the contract.

Additional information: link

Token seems to be untradeable: there is no PancakeSwap trading pair and no trading volumes. Ignore for presale.

BscScan page for the token does not contain additional info: website, socials, description, etc.

Additional information: link

Unable to find token contract audit

Unable to find KYC or doxxing proof

Unable to find audit link on the website

Unable to find token on CoinGecko

Additional information: link

Unable to find token on CoinMarketCap

Additional information: link

Token is not listed at Mobula.Finance

Additional information: link

Unable to find token on CoinHunt

Additional information: link

Unable to find code repository for the project

Young tokens have high risks of scam / price dump / death

Token is marked as scam (rug pull, honeypot, phishing, etc.)

Additional information: link

Young tokens have high risks of scam / price dump / death

Young tokens have high risks of scam / price dump / death

Token has no active CoinGecko listing / rank

Token has no active CoinMarketCap listing / rank