Unable to find manual contract audit (e.g. Certik, PeckShield, Solidity...)
WhaleKing.addLiquidity(uint256,uint256) (#3292-3305) sends eth to arbitrary user
Dangerous calls:
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (#3297-3304)
Ensure that an arbitrary user cannot withdraw unauthorized funds.
Additional information: link
Reentrancy in WhaleKing._transfer(address,address,uint256) (#3131-3219):
External calls:
- swapAndSendToFee(marketingTokens) (#3160)
- IERC20(rewardToken).transfer(_marketingWalletAddress,newBalance) (#3230)
- uniswapV2Router.swapExactTokensForTokensSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#3283-3289)
- swapAndLiquify(swapTokens) (#3165)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (#3297-3304)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#3265-3271)
- swapAndSendDividends(sellTokens) (#3168)
- success = IERC20(rewardToken).transfer(address(dividendTracker),dividends) (#3310-3313)
- dividendTracker.distributeCAKEDividends(dividends) (#3316)
- uniswapV2Router.swapExactTokensForTokensSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#3283-3289)
External calls sending eth:
- swapAndLiquify(swapTokens) (#3165)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (#3297-3304)
State variables written after the call(s):
- super._transfer(from,address(this),fees) (#3189)
- _balances[sender] = senderBalance - amount (#439)
- _balances[recipient] += amount (#441)
- super._transfer(from,to,amount) (#3192)
- _balances[sender] = senderBalance - amount (#439)
- _balances[recipient] += amount (#441)
- swapping = false (#3170)
Reentrancy in WhaleKing._transfer(address,address,uint256) (#3131-3219):
External calls:
- swapAndSendToFee(marketingTokens) (#3160)
- IERC20(rewardToken).transfer(_marketingWalletAddress,newBalance) (#3230)
- uniswapV2Router.swapExactTokensForTokensSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#3283-3289)
- swapAndLiquify(swapTokens) (#3165)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (#3297-3304)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#3265-3271)
- swapAndSendDividends(sellTokens) (#3168)
- success = IERC20(rewardToken).transfer(address(dividendTracker),dividends) (#3310-3313)
- dividendTracker.distributeCAKEDividends(dividends) (#3316)
- uniswapV2Router.swapExactTokensForTokensSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#3283-3289)
- dividendTracker.setBalance(address(from),balanceOf(from)) (#3194-3196)
- dividendTracker.setBalance(address(to),balanceOf(to)) (#3197)
- dividendTracker.process(gas) (#3202-3215)
External calls sending eth:
- swapAndLiquify(swapTokens) (#3165)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (#3297-3304)
State variables written after the call(s):
- launchedAt = block.number (#3218)
Apply the check-effects-interactions pattern.
Additional information: link
ERC20Upgradeable.__gap (#1854) shadows:
- ContextUpgradeable.__gap (#1436)
OwnableUpgradeable.__gap (#1940) shadows:
- ContextUpgradeable.__gap (#1436)
Remove the state variable shadowing.
Additional information: link
WhaleKing.swapAndSendToFee(uint256) (#3221-3231) ignores return value by IERC20(rewardToken).transfer(_marketingWalletAddress,newBalance) (#3230)
Use SafeERC20, or ensure that the transfer/transferFrom return value is checked.
Additional information: link
Too many vulnerabilities (Unchecked transfer, Reentrancy vulnerability, etc.). High risk of a scam. DYOR & manual audit are advised.
WhaleKing._transfer(address,address,uint256) (#3131-3219) uses a dangerous strict equality:
- launchedAt == 0 && to == uniswapV2Pair (#3218)
Don't use strict equality to determine if an account has enough Ether or tokens.
Additional information: link
Combination 1: Reentrancy vulnerabilities + Functions that send Ether to arbitraty destination. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.
Combination 2: Unchecked transfer + Functions that send Ether to arbitraty destination. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.
Combination 3: Reentrancy vulnerabilities + Unchecked transfer vulnerability. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.
Reentrancy in DividendPayingToken._withdrawDividendOfUser(address) (#2340-2366):
External calls:
- success = IERC20(rewardToken).transfer(user,_withdrawableDividend) (#2350-2353)
State variables written after the call(s):
- withdrawnDividends[user] = withdrawnDividends[user].sub(_withdrawableDividend) (#2356-2358)
Reentrancy in WhaleKing.updateDividendTracker(address) (#2907-2932):
External calls:
- newDividendTracker.excludeFromDividends(address(newDividendTracker)) (#2922)
- newDividendTracker.excludeFromDividends(address(this)) (#2923)
- newDividendTracker.excludeFromDividends(owner()) (#2924)
- newDividendTracker.excludeFromDividends(address(0xdead)) (#2925)
- newDividendTracker.excludeFromDividends(address(0)) (#2926)
- newDividendTracker.excludeFromDividends(address(uniswapV2Router)) (#2927)
State variables written after the call(s):
- dividendTracker = newDividendTracker (#2931)
Apply the check-effects-interactions pattern.
Additional information: link
WhaleKing._transfer(address,address,uint256).iterations (#3203) is a local variable never initialized
WhaleKing._transfer(address,address,uint256).claims (#3204) is a local variable never initialized
WhaleKing._transfer(address,address,uint256).lastProcessedIndex (#3205) is a local variable never initialized
Initialize all the variables. If a variable is meant to be initialized to zero, explicitly set it to zero to improve code readability.
Additional information: link
WhaleKing.claim() (#3119-3121) ignores return value by dividendTracker.processAccount(address(msg.sender),false) (#3120)
WhaleKing._transfer(address,address,uint256) (#3131-3219) ignores return value by dividendTracker.process(gas) (#3202-3215)
WhaleKing.addLiquidity(uint256,uint256) (#3292-3305) ignores return value by uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (#3297-3304)
Ensure that all the return values of the function calls are used.
Additional information: link
DividendPayingToken.__DividendPayingToken_init(address,string,string)._name (#2311) shadows:
- ERC20Upgradeable._name (#1485) (state variable)
DividendPayingToken.__DividendPayingToken_init(address,string,string)._symbol (#2312) shadows:
- ERC20Upgradeable._symbol (#1486) (state variable)
DividendPayingToken.dividendOf(address)._owner (#2371) shadows:
- OwnableUpgradeable._owner (#1877) (state variable)
DividendPayingToken.withdrawableDividendOf(address)._owner (#2378) shadows:
- OwnableUpgradeable._owner (#1877) (state variable)
DividendPayingToken.withdrawnDividendOf(address)._owner (#2390) shadows:
- OwnableUpgradeable._owner (#1877) (state variable)
DividendPayingToken.accumulativeDividendOf(address)._owner (#2404) shadows:
- OwnableUpgradeable._owner (#1877) (state variable)
Rename the local variables that shadow another component.
Additional information: link
WhaleKing.setSwapTokensAtAmount(uint256) (#2903-2905) should emit an event for:
- swapTokensAtAmount = amount (#2904)
Emit an event for critical parameter changes.
Additional information: link
WhaleKing.constructor(string,string,address,address).marketingWalletAddress_ (#2849) lacks a zero-check on :
- _marketingWalletAddress = marketingWalletAddress_ (#2852)
WhaleKing.updateUniswapV2Router(address)._uniswapV2Pair (#2941-2942) lacks a zero-check on :
- uniswapV2Pair = _uniswapV2Pair (#2943)
WhaleKing.setMarketingWallet(address).wallet (#2967) lacks a zero-check on :
- _marketingWalletAddress = wallet (#2968)
Check that the address is not zero.
Additional information: link
DividendPayingToken._withdrawDividendOfUser(address) (#2340-2366) has external calls inside a loop: success = IERC20(rewardToken).transfer(user,_withdrawableDividend) (#2350-2353)
Favor pull over push strategy for external calls.
Additional information: link
Variable 'WhaleKing._transfer(address,address,uint256).lastProcessedIndex (#3205)' in WhaleKing._transfer(address,address,uint256) (#3131-3219) potentially used before declaration: ProcessedDividendTracker(iterations,claims,lastProcessedIndex,true,gas,tx.origin) (#3207-3214)
Variable 'WhaleKing._transfer(address,address,uint256).claims (#3204)' in WhaleKing._transfer(address,address,uint256) (#3131-3219) potentially used before declaration: ProcessedDividendTracker(iterations,claims,lastProcessedIndex,true,gas,tx.origin) (#3207-3214)
Variable 'WhaleKing._transfer(address,address,uint256).iterations (#3203)' in WhaleKing._transfer(address,address,uint256) (#3131-3219) potentially used before declaration: ProcessedDividendTracker(iterations,claims,lastProcessedIndex,true,gas,tx.origin) (#3207-3214)
Move all variable declarations prior to any usage of the variable, and ensure that reaching a variable declaration does not depend on some conditional if it is used unconditionally.
Additional information: link
Reentrancy in WhaleKing._transfer(address,address,uint256) (#3131-3219):
External calls:
- swapAndSendToFee(marketingTokens) (#3160)
- IERC20(rewardToken).transfer(_marketingWalletAddress,newBalance) (#3230)
- uniswapV2Router.swapExactTokensForTokensSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#3283-3289)
- swapAndLiquify(swapTokens) (#3165)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (#3297-3304)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#3265-3271)
External calls sending eth:
- swapAndLiquify(swapTokens) (#3165)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (#3297-3304)
State variables written after the call(s):
- swapAndLiquify(swapTokens) (#3165)
- _allowances[owner][spender] = amount (#518)
Reentrancy in WhaleKing._transfer(address,address,uint256) (#3131-3219):
External calls:
- swapAndSendToFee(marketingTokens) (#3160)
- IERC20(rewardToken).transfer(_marketingWalletAddress,newBalance) (#3230)
- uniswapV2Router.swapExactTokensForTokensSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#3283-3289)
- swapAndLiquify(swapTokens) (#3165)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (#3297-3304)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#3265-3271)
- swapAndSendDividends(sellTokens) (#3168)
- success = IERC20(rewardToken).transfer(address(dividendTracker),dividends) (#3310-3313)
- dividendTracker.distributeCAKEDividends(dividends) (#3316)
- uniswapV2Router.swapExactTokensForTokensSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#3283-3289)
External calls sending eth:
- swapAndLiquify(swapTokens) (#3165)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (#3297-3304)
State variables written after the call(s):
- swapAndSendDividends(sellTokens) (#3168)
- _allowances[owner][spender] = amount (#518)
Reentrancy in WhaleKing.constructor(string,string,address,address) (#2846-2899):
External calls:
- dividendTracker.initialize(rewardToken,MININUM_TOKEN_BALANCE_FOR_DIVIDENDS) (#2867-2870)
- _uniswapV2Pair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#2874-2875)
State variables written after the call(s):
- uniswapV2Pair = _uniswapV2Pair (#2877)
- uniswapV2Router = _uniswapV2Router (#2876)
Reentrancy in WhaleKing.constructor(string,string,address,address) (#2846-2899):
External calls:
- dividendTracker.initialize(rewardToken,MININUM_TOKEN_BALANCE_FOR_DIVIDENDS) (#2867-2870)
- _uniswapV2Pair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#2874-2875)
- _setAutomatedMarketMakerPair(_uniswapV2Pair,true) (#2878)
- dividendTracker.excludeFromDividends(pair) (#2991)
- dividendTracker.excludeFromDividends(address(dividendTracker)) (#2881)
- dividendTracker.excludeFromDividends(address(this)) (#2882)
- dividendTracker.excludeFromDividends(owner()) (#2883)
- dividendTracker.excludeFromDividends(address(0xdead)) (#2884)
- dividendTracker.excludeFromDividends(address(0)) (#2885)
- dividendTracker.excludeFromDividends(address(_uniswapV2Router)) (#2886)
State variables written after the call(s):
- _mint(owner(),TOTALSUPPLY) (#2896)
- _balances[account] += amount (#463)
- excludeFromFees(owner(),true) (#2889)
- _isExcludedFromFees[account] = excluded (#2951)
- excludeFromFees(_marketingWalletAddress,true) (#2890)
- _isExcludedFromFees[account] = excluded (#2951)
- excludeFromFees(address(this),true) (#2891)
- _isExcludedFromFees[account] = excluded (#2951)
- _mint(owner(),TOTALSUPPLY) (#2896)
- _totalSupply += amount (#462)
Reentrancy in BABYTOKENDividendTracker.processAccount(address,bool) (#2726-2740):
External calls:
- amount = _withdrawDividendOfUser(account) (#2731)
- success = IERC20(rewardToken).transfer(user,_withdrawableDividend) (#2350-2353)
State variables written after the call(s):
- lastClaimTimes[account] = block.timestamp (#2734)
Reentrancy in WhaleKing.swapAndLiquify(uint256) (#3233-3254):
External calls:
- swapTokensForEth(half) (#3245)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#3265-3271)
- addLiquidity(otherHalf,newBalance) (#3251)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (#3297-3304)
External calls sending eth:
- addLiquidity(otherHalf,newBalance) (#3251)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (#3297-3304)
State variables written after the call(s):
- addLiquidity(otherHalf,newBalance) (#3251)
- _allowances[owner][spender] = amount (#518)
Reentrancy in WhaleKing.updateUniswapV2Router(address) (#2934-2944):
External calls:
- _uniswapV2Pair = IUniswapV2Factory(uniswapV2Router.factory()).createPair(address(this),uniswapV2Router.WETH()) (#2941-2942)
State variables written after the call(s):
- uniswapV2Pair = _uniswapV2Pair (#2943)
Apply the check-effects-interactions pattern.
Additional information: link
Reentrancy in WhaleKing._setAutomatedMarketMakerPair(address,bool) (#2983-2995):
External calls:
- dividendTracker.excludeFromDividends(pair) (#2991)
Event emitted after the call(s):
- SetAutomatedMarketMakerPair(pair,value) (#2994)
Reentrancy in WhaleKing._transfer(address,address,uint256) (#3131-3219):
External calls:
- swapAndSendToFee(marketingTokens) (#3160)
- IERC20(rewardToken).transfer(_marketingWalletAddress,newBalance) (#3230)
- uniswapV2Router.swapExactTokensForTokensSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#3283-3289)
- swapAndLiquify(swapTokens) (#3165)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (#3297-3304)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#3265-3271)
External calls sending eth:
- swapAndLiquify(swapTokens) (#3165)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (#3297-3304)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#519)
- swapAndLiquify(swapTokens) (#3165)
- SwapAndLiquify(half,newBalance,otherHalf) (#3253)
- swapAndLiquify(swapTokens) (#3165)
Reentrancy in WhaleKing._transfer(address,address,uint256) (#3131-3219):
External calls:
- swapAndSendToFee(marketingTokens) (#3160)
- IERC20(rewardToken).transfer(_marketingWalletAddress,newBalance) (#3230)
- uniswapV2Router.swapExactTokensForTokensSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#3283-3289)
- swapAndLiquify(swapTokens) (#3165)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (#3297-3304)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#3265-3271)
- swapAndSendDividends(sellTokens) (#3168)
- success = IERC20(rewardToken).transfer(address(dividendTracker),dividends) (#3310-3313)
- dividendTracker.distributeCAKEDividends(dividends) (#3316)
- uniswapV2Router.swapExactTokensForTokensSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#3283-3289)
External calls sending eth:
- swapAndLiquify(swapTokens) (#3165)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (#3297-3304)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#519)
- swapAndSendDividends(sellTokens) (#3168)
- SendDividends(tokens,dividends) (#3317)
- swapAndSendDividends(sellTokens) (#3168)
- Transfer(sender,recipient,amount) (#443)
- super._transfer(from,to,amount) (#3192)
- Transfer(sender,recipient,amount) (#443)
- super._transfer(from,address(this),fees) (#3189)
Reentrancy in WhaleKing._transfer(address,address,uint256) (#3131-3219):
External calls:
- swapAndSendToFee(marketingTokens) (#3160)
- IERC20(rewardToken).transfer(_marketingWalletAddress,newBalance) (#3230)
- uniswapV2Router.swapExactTokensForTokensSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#3283-3289)
- swapAndLiquify(swapTokens) (#3165)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (#3297-3304)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#3265-3271)
- swapAndSendDividends(sellTokens) (#3168)
- success = IERC20(rewardToken).transfer(address(dividendTracker),dividends) (#3310-3313)
- dividendTracker.distributeCAKEDividends(dividends) (#3316)
- uniswapV2Router.swapExactTokensForTokensSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#3283-3289)
- dividendTracker.setBalance(address(from),balanceOf(from)) (#3194-3196)
- dividendTracker.setBalance(address(to),balanceOf(to)) (#3197)
- dividendTracker.process(gas) (#3202-3215)
External calls sending eth:
- swapAndLiquify(swapTokens) (#3165)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (#3297-3304)
Event emitted after the call(s):
- ProcessedDividendTracker(iterations,claims,lastProcessedIndex,true,gas,tx.origin) (#3207-3214)
Reentrancy in WhaleKing.constructor(string,string,address,address) (#2846-2899):
External calls:
- dividendTracker.initialize(rewardToken,MININUM_TOKEN_BALANCE_FOR_DIVIDENDS) (#2867-2870)
- _uniswapV2Pair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#2874-2875)
- _setAutomatedMarketMakerPair(_uniswapV2Pair,true) (#2878)
- dividendTracker.excludeFromDividends(pair) (#2991)
Event emitted after the call(s):
- SetAutomatedMarketMakerPair(pair,value) (#2994)
- _setAutomatedMarketMakerPair(_uniswapV2Pair,true) (#2878)
Reentrancy in WhaleKing.constructor(string,string,address,address) (#2846-2899):
External calls:
- dividendTracker.initialize(rewardToken,MININUM_TOKEN_BALANCE_FOR_DIVIDENDS) (#2867-2870)
- _uniswapV2Pair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#2874-2875)
- _setAutomatedMarketMakerPair(_uniswapV2Pair,true) (#2878)
- dividendTracker.excludeFromDividends(pair) (#2991)
- dividendTracker.excludeFromDividends(address(dividendTracker)) (#2881)
- dividendTracker.excludeFromDividends(address(this)) (#2882)
- dividendTracker.excludeFromDividends(owner()) (#2883)
- dividendTracker.excludeFromDividends(address(0xdead)) (#2884)
- dividendTracker.excludeFromDividends(address(0)) (#2885)
- dividendTracker.excludeFromDividends(address(_uniswapV2Router)) (#2886)
Event emitted after the call(s):
- ExcludeFromFees(account,excluded) (#2953)
- excludeFromFees(address(this),true) (#2891)
- ExcludeFromFees(account,excluded) (#2953)
- excludeFromFees(_marketingWalletAddress,true) (#2890)
- ExcludeFromFees(account,excluded) (#2953)
- excludeFromFees(owner(),true) (#2889)
- TokenCreated(owner(),address(this),TokenType.baby,VERSION) (#2898)
- Transfer(address(0),account,amount) (#464)
- _mint(owner(),TOTALSUPPLY) (#2896)
Reentrancy in BABYTOKENDividendTracker.processAccount(address,bool) (#2726-2740):
External calls:
- amount = _withdrawDividendOfUser(account) (#2731)
- success = IERC20(rewardToken).transfer(user,_withdrawableDividend) (#2350-2353)
Event emitted after the call(s):
- Claim(account,amount,automatic) (#2735)
Reentrancy in WhaleKing.processDividendTracker(uint256) (#3103-3117):
External calls:
- (iterations,claims,lastProcessedIndex) = dividendTracker.process(gas) (#3104-3108)
Event emitted after the call(s):
- ProcessedDividendTracker(iterations,claims,lastProcessedIndex,false,gas,tx.origin) (#3109-3116)
Reentrancy in WhaleKing.swapAndLiquify(uint256) (#3233-3254):
External calls:
- swapTokensForEth(half) (#3245)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#3265-3271)
- addLiquidity(otherHalf,newBalance) (#3251)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (#3297-3304)
External calls sending eth:
- addLiquidity(otherHalf,newBalance) (#3251)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,address(0),block.timestamp) (#3297-3304)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#519)
- addLiquidity(otherHalf,newBalance) (#3251)
- SwapAndLiquify(half,newBalance,otherHalf) (#3253)
Reentrancy in WhaleKing.swapAndSendDividends(uint256) (#3307-3319):
External calls:
- swapTokensForCake(tokens) (#3308)
- uniswapV2Router.swapExactTokensForTokensSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#3283-3289)
- success = IERC20(rewardToken).transfer(address(dividendTracker),dividends) (#3310-3313)
- dividendTracker.distributeCAKEDividends(dividends) (#3316)
Event emitted after the call(s):
- SendDividends(tokens,dividends) (#3317)
Reentrancy in WhaleKing.updateDividendTracker(address) (#2907-2932):
External calls:
- newDividendTracker.excludeFromDividends(address(newDividendTracker)) (#2922)
- newDividendTracker.excludeFromDividends(address(this)) (#2923)
- newDividendTracker.excludeFromDividends(owner()) (#2924)
- newDividendTracker.excludeFromDividends(address(0xdead)) (#2925)
- newDividendTracker.excludeFromDividends(address(0)) (#2926)
- newDividendTracker.excludeFromDividends(address(uniswapV2Router)) (#2927)
Event emitted after the call(s):
- UpdateDividendTracker(newAddress,address(dividendTracker)) (#2929)
Apply the check-effects-interactions pattern.
Additional information: link
BABYTOKENDividendTracker.getAccount(address) (#2575-2622) uses timestamp for comparisons
Dangerous comparisons:
- nextClaimTime > block.timestamp (#2619-2621)
BABYTOKENDividendTracker.canAutoClaim(uint256) (#2647-2653) uses timestamp for comparisons
Dangerous comparisons:
- lastClaimTime > block.timestamp (#2648)
- block.timestamp.sub(lastClaimTime) >= claimWait (#2652)
Avoid relying on block.timestamp.
Additional information: link
Clones.clone(address) (#911-926) uses assembly
- INLINE ASM (#912-924)
Clones.cloneDeterministic(address,bytes32) (#935-953) uses assembly
- INLINE ASM (#939-951)
Clones.predictDeterministicAddress(address,bytes32,address) (#958-979) uses assembly
- INLINE ASM (#963-978)
Do not use evm assembly.
Additional information: link
Clones.cloneDeterministic(address,bytes32) (#935-953) is never used and should be removed
Clones.predictDeterministicAddress(address,bytes32) (#984-990) is never used and should be removed
Clones.predictDeterministicAddress(address,bytes32,address) (#958-979) is never used and should be removed
Context._msgData() (#159-161) is never used and should be removed
ContextUpgradeable.__Context_init() (#1422-1424) is never used and should be removed
ContextUpgradeable._msgData() (#1432-1434) is never used and should be removed
DividendPayingToken._transfer(address,address,uint256) (#2423-2438) is never used and should be removed
ERC20._burn(address,uint256) (#480-495) is never used and should be removed
ERC20Upgradeable._transfer(address,address,uint256) (#1715-1738) is never used and should be removed
SafeMath.div(uint256,uint256,string) (#850-859) is never used and should be removed
SafeMath.mod(uint256,uint256) (#810-812) is never used and should be removed
SafeMath.mod(uint256,uint256,string) (#876-885) is never used and should be removed
SafeMath.sub(uint256,uint256,string) (#827-836) is never used and should be removed
SafeMath.tryAdd(uint256,uint256) (#661-671) is never used and should be removed
SafeMath.tryDiv(uint256,uint256) (#715-724) is never used and should be removed
SafeMath.tryMod(uint256,uint256) (#731-740) is never used and should be removed
SafeMath.tryMul(uint256,uint256) (#694-708) is never used and should be removed
SafeMath.trySub(uint256,uint256) (#678-687) is never used and should be removed
SafeMathInt.abs(int256) (#2112-2115) is never used and should be removed
SafeMathInt.div(int256,int256) (#2083-2089) is never used and should be removed
SafeMathInt.mul(int256,int256) (#2071-2078) is never used and should be removed
Remove unused functions.
Additional information: link
Pragma version^0.8.11 (#23) necessitates a version too recent to be trusted. Consider deploying with 0.6.12/0.7.6/0.8.7
solc-0.8.11 is not recommended for deployment
Deploy with any of the following Solidity versions: 0.5.16 - 0.5.17, 0.6.11 - 0.6.12, 0.7.5 - 0.7.6 Use a simple pragma version that allows any of these versions. Consider using the latest version of Solidity for testing.
Additional information: link
Function IUniswapV2Router01.WETH() (#1034) is not in mixedCase
Function ContextUpgradeable.__Context_init() (#1422-1424) is not in mixedCase
Function ContextUpgradeable.__Context_init_unchained() (#1426) is not in mixedCase
Variable ContextUpgradeable.__gap (#1436) is not in mixedCase
Function ERC20Upgradeable.__ERC20_init(string,string) (#1497-1503) is not in mixedCase
Function ERC20Upgradeable.__ERC20_init_unchained(string,string) (#1505-1511) is not in mixedCase
Variable ERC20Upgradeable.__gap (#1854) is not in mixedCase
Function OwnableUpgradeable.__Ownable_init() (#1887-1890) is not in mixedCase
Function OwnableUpgradeable.__Ownable_init_unchained() (#1892-1894) is not in mixedCase
Variable OwnableUpgradeable.__gap (#1940) is not in mixedCase
Function IUniswapV2Pair.DOMAIN_SEPARATOR() (#1980) is not in mixedCase
Function IUniswapV2Pair.PERMIT_TYPEHASH() (#1982) is not in mixedCase
Function IUniswapV2Pair.MINIMUM_LIQUIDITY() (#2013) is not in mixedCase
Function DividendPayingToken.__DividendPayingToken_init(address,string,string) (#2309-2317) is not in mixedCase
Parameter DividendPayingToken.__DividendPayingToken_init(address,string,string)._rewardToken (#2310) is not in mixedCase
Parameter DividendPayingToken.__DividendPayingToken_init(address,string,string)._name (#2311) is not in mixedCase
Parameter DividendPayingToken.__DividendPayingToken_init(address,string,string)._symbol (#2312) is not in mixedCase
Parameter DividendPayingToken.dividendOf(address)._owner (#2371) is not in mixedCase
Parameter DividendPayingToken.withdrawableDividendOf(address)._owner (#2378) is not in mixedCase
Parameter DividendPayingToken.withdrawnDividendOf(address)._owner (#2390) is not in mixedCase
Parameter DividendPayingToken.accumulativeDividendOf(address)._owner (#2404) is not in mixedCase
Constant DividendPayingToken.magnitude (#2289) is not in UPPER_CASE_WITH_UNDERSCORES
Parameter BABYTOKENDividendTracker.getAccount(address)._account (#2575) is not in mixedCase
Constant WhaleKing.tokenRewardsFee (#2780) is not in UPPER_CASE_WITH_UNDERSCORES
Constant WhaleKing.liquidityFee (#2781) is not in UPPER_CASE_WITH_UNDERSCORES
Constant WhaleKing.marketingFee (#2782) is not in UPPER_CASE_WITH_UNDERSCORES
Variable WhaleKing._marketingWalletAddress (#2794) is not in mixedCase
Follow the Solidity naming convention.
Additional information: link
Variable IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountADesired (#1039) is too similar to IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountBDesired (#1040)
Variable DividendPayingToken._withdrawDividendOfUser(address)._withdrawableDividend (#2344) is too similar to BABYTOKENDividendTracker.getAccount(address).withdrawableDividends (#2582)
Variable DividendPayingToken.__DividendPayingToken_init(address,string,string)._rewardToken (#2310) is too similar to BABYTOKENDividendTracker.initialize(address,uint256).rewardToken_ (#2502)
Variable WhaleKing._marketingWalletAddress (#2794) is too similar to WhaleKing.constructor(string,string,address,address).marketingWalletAddress_ (#2849)
Prevent variables from having similar names.
Additional information: link
Clones.clone(address) (#911-926) uses literals with too many digits:
- mstore(uint256,uint256)(ptr_clone_asm_0,0x3d602d80600a3d3981f3363d3d373d3d3d363d73000000000000000000000000) (#914-917)
Clones.clone(address) (#911-926) uses literals with too many digits:
- mstore(uint256,uint256)(ptr_clone_asm_0 + 0x28,0x5af43d82803e903d91602b57fd5bf30000000000000000000000000000000000) (#919-922)
Clones.cloneDeterministic(address,bytes32) (#935-953) uses literals with too many digits:
- mstore(uint256,uint256)(ptr_cloneDeterministic_asm_0,0x3d602d80600a3d3981f3363d3d373d3d3d363d73000000000000000000000000) (#941-944)
Clones.cloneDeterministic(address,bytes32) (#935-953) uses literals with too many digits:
- mstore(uint256,uint256)(ptr_cloneDeterministic_asm_0 + 0x28,0x5af43d82803e903d91602b57fd5bf30000000000000000000000000000000000) (#946-949)
Clones.predictDeterministicAddress(address,bytes32,address) (#958-979) uses literals with too many digits:
- mstore(uint256,uint256)(ptr_predictDeterministicAddress_asm_0,0x3d602d80600a3d3981f3363d3d373d3d3d363d73000000000000000000000000) (#965-968)
Clones.predictDeterministicAddress(address,bytes32,address) (#958-979) uses literals with too many digits:
- mstore(uint256,uint256)(ptr_predictDeterministicAddress_asm_0 + 0x28,0x5af43d82803e903d91602b57fd5bf3ff00000000000000000000000000000000) (#970-973)
WhaleKing.constructor(string,string,address,address) (#2846-2899) uses literals with too many digits:
- gasForProcessing = 300000 (#2862)
WhaleKing.updateGasForProcessing(uint256) (#2997-3008) uses literals with too many digits:
- require(bool,string)(newValue >= 200000 && newValue <= 500000,BABYTOKEN: gasForProcessing must be between 200,000 and 500,000) (#2998-3001)
Use: Ether suffix, Time suffix, or The scientific notation
Additional information: link
SafeMathInt.MAX_INT256 (#2066) is never used in SafeMathInt (#2064-2121)
OwnableUpgradeable.__gap (#1940) is never used in BABYTOKENDividendTracker (#2477-2741)
Remove unused state variables.
Additional information: link
WhaleKing.rewardToken (#2791) should be constant
WhaleKing.routerAddress (#2793) should be constant
Add the constant attributes to state variables that never change.
Additional information: link
name() should be declared external:
- ERC20.name() (#224-226)
symbol() should be declared external:
- ERC20.symbol() (#232-234)
decimals() should be declared external:
- ERC20.decimals() (#249-251)
totalSupply() should be declared external:
- ERC20.totalSupply() (#256-258)
transfer(address,uint256) should be declared external:
- ERC20.transfer(address,uint256) (#281-289)
allowance(address,address) should be declared external:
- ERC20.allowance(address,address) (#294-302)
approve(address,uint256) should be declared external:
- ERC20.approve(address,uint256) (#311-319)
transferFrom(address,address,uint256) should be declared external:
- ERC20.transferFrom(address,address,uint256) (#334-351)
increaseAllowance(address,uint256) should be declared external:
- ERC20.increaseAllowance(address,uint256) (#365-376)
decreaseAllowance(address,uint256) should be declared external:
- ERC20.decreaseAllowance(address,uint256) (#392-407)
renounceOwnership() should be declared external:
- Ownable.renounceOwnership() (#618-620)
transferOwnership(address) should be declared external:
- Ownable.transferOwnership(address) (#626-632)
name() should be declared external:
- ERC20Upgradeable.name() (#1516-1518)
symbol() should be declared external:
- ERC20Upgradeable.symbol() (#1524-1526)
decimals() should be declared external:
- ERC20Upgradeable.decimals() (#1541-1543)
transfer(address,uint256) should be declared external:
- ERC20Upgradeable.transfer(address,uint256) (#1573-1581)
allowance(address,address) should be declared external:
- ERC20Upgradeable.allowance(address,address) (#1586-1594)
approve(address,uint256) should be declared external:
- ERC20Upgradeable.approve(address,uint256) (#1603-1611)
transferFrom(address,address,uint256) should be declared external:
- ERC20Upgradeable.transferFrom(address,address,uint256) (#1626-1643)
increaseAllowance(address,uint256) should be declared external:
- ERC20Upgradeable.increaseAllowance(address,uint256) (#1657-1668)
decreaseAllowance(address,uint256) should be declared external:
- ERC20Upgradeable.decreaseAllowance(address,uint256) (#1684-1699)
renounceOwnership() should be declared external:
- OwnableUpgradeable.renounceOwnership() (#1918-1920)
transferOwnership(address) should be declared external:
- OwnableUpgradeable.transferOwnership(address) (#1926-1932)
get(IterableMapping.Map,address) should be declared external:
- IterableMapping.get(IterableMapping.Map,address) (#2152-2154)
getIndexOfKey(IterableMapping.Map,address) should be declared external:
- IterableMapping.getIndexOfKey(IterableMapping.Map,address) (#2156-2165)
getKeyAtIndex(IterableMapping.Map,uint256) should be declared external:
- IterableMapping.getKeyAtIndex(IterableMapping.Map,uint256) (#2167-2173)
size(IterableMapping.Map) should be declared external:
- IterableMapping.size(IterableMapping.Map) (#2175-2177)
distributeCAKEDividends(uint256) should be declared external:
- DividendPayingToken.distributeCAKEDividends(uint256) (#2319-2330)
withdrawDividend() should be declared external:
- BABYTOKENDividendTracker.withdrawDividend() (#2522-2527)
- DividendPayingToken.withdrawDividend() (#2334-2336)
dividendOf(address) should be declared external:
- DividendPayingToken.dividendOf(address) (#2371-2373)
withdrawnDividendOf(address) should be declared external:
- DividendPayingToken.withdrawnDividendOf(address) (#2390-2397)
isExcludedFromDividends(address) should be declared external:
- BABYTOKENDividendTracker.isExcludedFromDividends(address) (#2539-2545)
getAccountAtIndex(uint256) should be declared external:
- BABYTOKENDividendTracker.getAccountAtIndex(uint256) (#2624-2645)
process(uint256) should be declared external:
- BABYTOKENDividendTracker.process(uint256) (#2672-2724)
updateDividendTracker(address) should be declared external:
- WhaleKing.updateDividendTracker(address) (#2907-2932)
updateUniswapV2Router(address) should be declared external:
- WhaleKing.updateUniswapV2Router(address) (#2934-2944)
excludeMultipleAccountsFromFees(address[],bool) should be declared external:
- WhaleKing.excludeMultipleAccountsFromFees(address[],bool) (#2956-2965)
setAutomatedMarketMakerPair(address,bool) should be declared external:
- WhaleKing.setAutomatedMarketMakerPair(address,bool) (#2971-2981)
updateGasForProcessing(uint256) should be declared external:
- WhaleKing.updateGasForProcessing(uint256) (#2997-3008)
isExcludedFromFees(address) should be declared external:
- WhaleKing.isExcludedFromFees(address) (#3037-3039)
withdrawableDividendOf(address) should be declared external:
- WhaleKing.withdrawableDividendOf(address) (#3041-3047)
dividendTokenBalanceOf(address) should be declared external:
- WhaleKing.dividendTokenBalanceOf(address) (#3049-3055)
isExcludedFromDividends(address) should be declared external:
- WhaleKing.isExcludedFromDividends(address) (#3061-3067)
Use the external attribute for functions never called from the contract.
Additional information: link
Unable to find website, listings and other project-related information
Young tokens have high risks of scam / price dump / death
Token has no active CoinGecko listing / rank
Token has no active CoinMarketCap listing / rank
Unable to find Telegram and Twitter accounts