Unable to find manual contract audit (e.g. Certik, PeckShield, Solidity...)
WEINIBEAR.addLiquidity(uint256,uint256) (#737-750) sends eth to arbitrary user
Dangerous calls:
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#742-749)
Ensure that an arbitrary user cannot withdraw unauthorized funds.
Additional information: link
Reentrancy in WEINIBEAR._transfer(address,address,uint256) (#646-684):
External calls:
- swapAndLiquify(contractTokenBalance) (#668)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#742-749)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#726-732)
External calls sending eth:
- swapAndLiquify(contractTokenBalance) (#668)
- recipient.transfer(amount) (#610)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#742-749)
State variables written after the call(s):
- _balances[sender] = _balances[sender].sub(amount,Insufficient Balance) (#671)
- _balances[recipient] = _balances[recipient].add(finalAmount) (#679)
- finalAmount = takeFee(sender,recipient,amount) (#673-674)
- _balances[address(this)] = _balances[address(this)].add(feeAmount) (#764)
Apply the check-effects-interactions pattern.
Additional information: link
Combination 1: Reentrancy vulnerabilities + Functions that send Ether to arbitraty destination. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.
Contract ticker (WEI NI BEAR) contains non-alphanumeric characters.
Not a direct threat, but may indicate unreliable intentions of developer. Non-alphanumeric chars (,.;!#*&") are extremely rare among low risk tokens.
WEINIBEAR.addLiquidity(uint256,uint256) (#737-750) ignores return value by uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#742-749)
Ensure that all the return values of the function calls are used.
Additional information: link
WEINIBEAR.allowance(address,address).owner (#501) shadows:
- Ownable.owner() (#152-154) (function)
WEINIBEAR._approve(address,address,uint256).owner (#524) shadows:
- Ownable.owner() (#152-154) (function)
Rename the local variables that shadow another component.
Additional information: link
WEINIBEAR.setBuyTaxes(uint256,uint256,uint256) (#544-550) should emit an event for:
- _totalTaxIfBuying = _buyLiquidityFee.add(_buyMarketingFee).add(_buyTeamFee) (#549)
WEINIBEAR.setSelTaxes(uint256,uint256,uint256) (#552-558) should emit an event for:
- _totalTaxIfSelling = _sellLiquidityFee.add(_sellMarketingFee).add(_sellTeamFee) (#557)
WEINIBEAR.setDistributionSettings(uint256,uint256,uint256) (#560-566) should emit an event for:
- _liquidityShare = newLiquidityShare (#561)
- _teamShare = newTeamShare (#563)
- _totalDistributionShares = _liquidityShare.add(_marketingShare).add(_teamShare) (#565)
WEINIBEAR.setMaxTxAmount(uint256) (#568-570) should emit an event for:
- _maxTxAmount = maxTxAmount (#569)
WEINIBEAR.setWalletLimit(uint256) (#580-582) should emit an event for:
- _walletMax = newLimit (#581)
WEINIBEAR.setNumTokensBeforeSwap(uint256) (#584-586) should emit an event for:
- minimumTokensBeforeSwap = newLimit (#585)
Emit an event for critical parameter changes.
Additional information: link
WEINIBEAR.setMarketingWalletAddress(address).newAddress (#588) lacks a zero-check on :
- marketingWalletAddress = address(newAddress) (#589)
WEINIBEAR.setTeamWalletAddress(address).newAddress (#592) lacks a zero-check on :
- teamWalletAddress = address(newAddress) (#593)
Check that the address is not zero.
Additional information: link
Reentrancy in WEINIBEAR.changeRouterVersion(address) (#613-630):
External calls:
- newPairAddress = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#621-622)
State variables written after the call(s):
- isMarketPair[address(uniswapPair)] = true (#629)
- isWalletLimitExempt[address(uniswapPair)] = true (#628)
- uniswapPair = newPairAddress (#625)
- uniswapV2Router = _uniswapV2Router (#626)
Reentrancy in WEINIBEAR.constructor() (#451-479):
External calls:
- uniswapPair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#455-456)
State variables written after the call(s):
- _allowances[address(this)][address(uniswapV2Router)] = _totalSupply (#459)
- _balances[_msgSender()] = _totalSupply (#477)
- _totalDistributionShares = _liquidityShare.add(_marketingShare).add(_teamShare) (#466)
- _totalTaxIfBuying = _buyLiquidityFee.add(_buyMarketingFee).add(_buyTeamFee) (#464)
- _totalTaxIfSelling = _sellLiquidityFee.add(_sellMarketingFee).add(_sellTeamFee) (#465)
- isExcludedFromFee[owner()] = true (#461)
- isExcludedFromFee[address(this)] = true (#462)
- isMarketPair[address(uniswapPair)] = true (#475)
- isTxLimitExempt[owner()] = true (#472)
- isTxLimitExempt[address(this)] = true (#473)
- isWalletLimitExempt[owner()] = true (#468)
- isWalletLimitExempt[address(uniswapPair)] = true (#469)
- isWalletLimitExempt[address(this)] = true (#470)
- uniswapV2Router = _uniswapV2Router (#458)
Reentrancy in WEINIBEAR.swapAndLiquify(uint256) (#693-715):
External calls:
- swapTokensForEth(tokensForSwap) (#698)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#726-732)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#714)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#742-749)
External calls sending eth:
- transferToAddressETH(marketingWalletAddress,amountBNBMarketing) (#708)
- recipient.transfer(amount) (#610)
- transferToAddressETH(teamWalletAddress,amountBNBTeam) (#711)
- recipient.transfer(amount) (#610)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#714)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#742-749)
State variables written after the call(s):
- addLiquidity(tokensForLP,amountBNBLiquidity) (#714)
- _allowances[owner][spender] = amount (#528)
Reentrancy in WEINIBEAR.transferFrom(address,address,uint256) (#640-644):
External calls:
- _transfer(sender,recipient,amount) (#641)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#742-749)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#726-732)
External calls sending eth:
- _transfer(sender,recipient,amount) (#641)
- recipient.transfer(amount) (#610)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#742-749)
State variables written after the call(s):
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#642)
- _allowances[owner][spender] = amount (#528)
Apply the check-effects-interactions pattern.
Additional information: link
Reentrancy in WEINIBEAR._transfer(address,address,uint256) (#646-684):
External calls:
- swapAndLiquify(contractTokenBalance) (#668)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#742-749)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#726-732)
External calls sending eth:
- swapAndLiquify(contractTokenBalance) (#668)
- recipient.transfer(amount) (#610)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#742-749)
Event emitted after the call(s):
- Transfer(sender,address(this),feeAmount) (#765)
- finalAmount = takeFee(sender,recipient,amount) (#673-674)
- Transfer(sender,recipient,finalAmount) (#681)
Reentrancy in WEINIBEAR.constructor() (#451-479):
External calls:
- uniswapPair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#455-456)
Event emitted after the call(s):
- Transfer(address(0),_msgSender(),_totalSupply) (#478)
Reentrancy in WEINIBEAR.swapAndLiquify(uint256) (#693-715):
External calls:
- swapTokensForEth(tokensForSwap) (#698)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#726-732)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#714)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#742-749)
External calls sending eth:
- transferToAddressETH(marketingWalletAddress,amountBNBMarketing) (#708)
- recipient.transfer(amount) (#610)
- transferToAddressETH(teamWalletAddress,amountBNBTeam) (#711)
- recipient.transfer(amount) (#610)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#714)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#742-749)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#529)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#714)
Reentrancy in WEINIBEAR.swapTokensForEth(uint256) (#717-735):
External calls:
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#726-732)
Event emitted after the call(s):
- SwapTokensForETH(tokenAmount,path) (#734)
Reentrancy in WEINIBEAR.transferFrom(address,address,uint256) (#640-644):
External calls:
- _transfer(sender,recipient,amount) (#641)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#742-749)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#726-732)
External calls sending eth:
- _transfer(sender,recipient,amount) (#641)
- recipient.transfer(amount) (#610)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#742-749)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#529)
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#642)
Apply the check-effects-interactions pattern.
Additional information: link
Address.isContract(address) (#83-92) uses assembly
- INLINE ASM (#90)
Address._functionCallWithValue(address,bytes,uint256,string) (#119-136) uses assembly
- INLINE ASM (#128-131)
Do not use evm assembly.
Additional information: link
Address._functionCallWithValue(address,bytes,uint256,string) (#119-136) is never used and should be removed
Address.functionCall(address,bytes) (#102-104) is never used and should be removed
Address.functionCall(address,bytes,string) (#106-108) is never used and should be removed
Address.functionCallWithValue(address,bytes,uint256) (#110-112) is never used and should be removed
Address.functionCallWithValue(address,bytes,uint256,string) (#114-117) is never used and should be removed
Address.isContract(address) (#83-92) is never used and should be removed
Address.sendValue(address,uint256) (#94-100) is never used and should be removed
Context._msgData() (#10-13) is never used and should be removed
SafeMath.mod(uint256,uint256) (#71-73) is never used and should be removed
SafeMath.mod(uint256,uint256,string) (#75-78) is never used and should be removed
Remove unused functions.
Additional information: link
WEINIBEAR._totalSupply (#415) is set pre-construction with a non-constant function or state variable:
- 100000000000000 * 10 ** _decimals
WEINIBEAR._maxTxAmount (#416) is set pre-construction with a non-constant function or state variable:
- 100000000000000 * 10 ** _decimals
WEINIBEAR._walletMax (#417) is set pre-construction with a non-constant function or state variable:
- 100000000000000 * 10 ** _decimals
WEINIBEAR.minimumTokensBeforeSwap (#418) is set pre-construction with a non-constant function or state variable:
- 1 * 10 ** _decimals
Remove any initialization of state variables via non-constant state variables or function calls. If variables must be set upon contract deployment, locate initialization in the constructor instead.
Additional information: link
Low level call in Address.sendValue(address,uint256) (#94-100):
- (success) = recipient.call{value: amount}() (#98)
Low level call in Address._functionCallWithValue(address,bytes,uint256,string) (#119-136):
- (success,returndata) = target.call{value: weiValue}(data) (#122)
Avoid low-level calls. Check the call success. If the call is meant for a contract, check for code existence
Additional information: link
Function IUniswapV2Pair.DOMAIN_SEPARATOR() (#209) is not in mixedCase
Function IUniswapV2Pair.PERMIT_TYPEHASH() (#210) is not in mixedCase
Function IUniswapV2Pair.MINIMUM_LIQUIDITY() (#226) is not in mixedCase
Function IUniswapV2Router01.WETH() (#245) is not in mixedCase
Parameter WEINIBEAR.setSwapAndLiquifyEnabled(bool)._enabled (#596) is not in mixedCase
Variable WEINIBEAR._balances (#391) is not in mixedCase
Variable WEINIBEAR._buyLiquidityFee (#399) is not in mixedCase
Variable WEINIBEAR._buyMarketingFee (#400) is not in mixedCase
Variable WEINIBEAR._buyTeamFee (#401) is not in mixedCase
Variable WEINIBEAR._sellLiquidityFee (#403) is not in mixedCase
Variable WEINIBEAR._sellMarketingFee (#404) is not in mixedCase
Variable WEINIBEAR._sellTeamFee (#405) is not in mixedCase
Variable WEINIBEAR._liquidityShare (#407) is not in mixedCase
Variable WEINIBEAR._marketingShare (#408) is not in mixedCase
Variable WEINIBEAR._teamShare (#409) is not in mixedCase
Variable WEINIBEAR._totalTaxIfBuying (#411) is not in mixedCase
Variable WEINIBEAR._totalTaxIfSelling (#412) is not in mixedCase
Variable WEINIBEAR._totalDistributionShares (#413) is not in mixedCase
Variable WEINIBEAR._maxTxAmount (#416) is not in mixedCase
Variable WEINIBEAR._walletMax (#417) is not in mixedCase
Follow the Solidity naming convention.
Additional information: link
Redundant expression "this (#11)" inContext (#4-14)
Remove redundant statements if they congest code but offer no value.
Additional information: link
Reentrancy in WEINIBEAR._transfer(address,address,uint256) (#646-684):
External calls:
- swapAndLiquify(contractTokenBalance) (#668)
- recipient.transfer(amount) (#610)
External calls sending eth:
- swapAndLiquify(contractTokenBalance) (#668)
- recipient.transfer(amount) (#610)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#742-749)
State variables written after the call(s):
- _balances[sender] = _balances[sender].sub(amount,Insufficient Balance) (#671)
- _balances[recipient] = _balances[recipient].add(finalAmount) (#679)
- finalAmount = takeFee(sender,recipient,amount) (#673-674)
- _balances[address(this)] = _balances[address(this)].add(feeAmount) (#764)
Event emitted after the call(s):
- Transfer(sender,address(this),feeAmount) (#765)
- finalAmount = takeFee(sender,recipient,amount) (#673-674)
- Transfer(sender,recipient,finalAmount) (#681)
Reentrancy in WEINIBEAR.swapAndLiquify(uint256) (#693-715):
External calls:
- transferToAddressETH(marketingWalletAddress,amountBNBMarketing) (#708)
- recipient.transfer(amount) (#610)
- transferToAddressETH(teamWalletAddress,amountBNBTeam) (#711)
- recipient.transfer(amount) (#610)
External calls sending eth:
- transferToAddressETH(marketingWalletAddress,amountBNBMarketing) (#708)
- recipient.transfer(amount) (#610)
- transferToAddressETH(teamWalletAddress,amountBNBTeam) (#711)
- recipient.transfer(amount) (#610)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#714)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#742-749)
State variables written after the call(s):
- addLiquidity(tokensForLP,amountBNBLiquidity) (#714)
- _allowances[owner][spender] = amount (#528)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#529)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#714)
Reentrancy in WEINIBEAR.transferFrom(address,address,uint256) (#640-644):
External calls:
- _transfer(sender,recipient,amount) (#641)
- recipient.transfer(amount) (#610)
External calls sending eth:
- _transfer(sender,recipient,amount) (#641)
- recipient.transfer(amount) (#610)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#742-749)
State variables written after the call(s):
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#642)
- _allowances[owner][spender] = amount (#528)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#529)
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#642)
Apply the check-effects-interactions pattern.
Additional information: link
Variable IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountADesired (#250) is too similar to IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountBDesired (#251)
Prevent variables from having similar names.
Additional information: link
Ownable.waiveOwnership() (#161-164) uses literals with too many digits:
- OwnershipTransferred(_owner,address(0x000000000000000000000000000000000000dEaD)) (#162)
Ownable.waiveOwnership() (#161-164) uses literals with too many digits:
- _owner = address(0x000000000000000000000000000000000000dEaD) (#163)
WEINIBEAR.slitherConstructorVariables() (#378-772) uses literals with too many digits:
- deadAddress = 0x000000000000000000000000000000000000dEaD (#389)
WEINIBEAR.slitherConstructorVariables() (#378-772) uses literals with too many digits:
- _totalSupply = 100000000000000 * 10 ** _decimals (#415)
WEINIBEAR.slitherConstructorVariables() (#378-772) uses literals with too many digits:
- _maxTxAmount = 100000000000000 * 10 ** _decimals (#416)
WEINIBEAR.slitherConstructorVariables() (#378-772) uses literals with too many digits:
- _walletMax = 100000000000000 * 10 ** _decimals (#417)
Use: Ether suffix, Time suffix, or The scientific notation
Additional information: link
Ownable.asdasd (#141) is never used in WEINIBEAR (#378-772)
Ownable._lockTime (#142) is never used in WEINIBEAR (#378-772)
Remove unused state variables.
Additional information: link
Ownable._lockTime (#142) should be constant
Ownable.asdasd (#141) should be constant
WEINIBEAR._decimals (#385) should be constant
WEINIBEAR._name (#383) should be constant
WEINIBEAR._symbol (#384) should be constant
Add the constant attributes to state variables that never change.
Additional information: link
waiveOwnership() should be declared external:
- Ownable.waiveOwnership() (#161-164)
transferOwnership(address) should be declared external:
- Ownable.transferOwnership(address) (#166-170)
getTime() should be declared external:
- Ownable.getTime() (#172-174)
name() should be declared external:
- WEINIBEAR.name() (#481-483)
symbol() should be declared external:
- WEINIBEAR.symbol() (#485-487)
decimals() should be declared external:
- WEINIBEAR.decimals() (#489-491)
totalSupply() should be declared external:
- WEINIBEAR.totalSupply() (#493-495)
allowance(address,address) should be declared external:
- WEINIBEAR.allowance(address,address) (#501-503)
increaseAllowance(address,uint256) should be declared external:
- WEINIBEAR.increaseAllowance(address,uint256) (#505-508)
decreaseAllowance(address,uint256) should be declared external:
- WEINIBEAR.decreaseAllowance(address,uint256) (#510-513)
minimumTokensBeforeSwapAmount() should be declared external:
- WEINIBEAR.minimumTokensBeforeSwapAmount() (#515-517)
approve(address,uint256) should be declared external:
- WEINIBEAR.approve(address,uint256) (#519-522)
setMarketPairStatus(address,bool) should be declared external:
- WEINIBEAR.setMarketPairStatus(address,bool) (#532-534)
setIsExcludedFromFee(address,bool) should be declared external:
- WEINIBEAR.setIsExcludedFromFee(address,bool) (#540-542)
setSwapAndLiquifyEnabled(bool) should be declared external:
- WEINIBEAR.setSwapAndLiquifyEnabled(bool) (#596-599)
setSwapAndLiquifyByLimitOnly(bool) should be declared external:
- WEINIBEAR.setSwapAndLiquifyByLimitOnly(bool) (#601-603)
getCirculatingSupply() should be declared external:
- WEINIBEAR.getCirculatingSupply() (#605-607)
changeRouterVersion(address) should be declared external:
- WEINIBEAR.changeRouterVersion(address) (#613-630)
transfer(address,uint256) should be declared external:
- WEINIBEAR.transfer(address,uint256) (#635-638)
transferFrom(address,address,uint256) should be declared external:
- WEINIBEAR.transferFrom(address,address,uint256) (#640-644)
Use the external attribute for functions never called from the contract.
Additional information: link
Unable to find website, listings and other project-related information
Young tokens have high risks of scam / price dump / death
Token has no active CoinGecko listing / rank
Token has no active CoinMarketCap listing / rank
Unable to find Telegram and Twitter accounts