Unable to find manual contract audit (e.g. Certik, PeckShield, Solidity...)
Not a direct threat, but may indicate unreliable intentions of developer. Widespread names (e.g. Elon, King, Moon, Doge) are common among meme-tokens and scams. The allow to gain free hype and attract unexperienced investors.
TOKEN.addLiquidity(uint256,uint256) (#574-587) ignores return value by uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#579-586)
Ensure that all the return values of the function calls are used.
Additional information: link
TOKEN.allowance(address,address).owner (#462) shadows:
- Ownable.owner() (#152-154) (function)
TOKEN._approve(address,address,uint256).owner (#481) shadows:
- Ownable.owner() (#152-154) (function)
Rename the local variables that shadow another component.
Additional information: link
TOKEN.setNumTokensBeforeSwap(uint256) (#493-495) should emit an event for:
- minimumTokensBeforeSwap = newLimit (#494)
Emit an event for critical parameter changes.
Additional information: link
TOKEN.setUnispair(address)._pair (#497) lacks a zero-check on :
- uniswapPairV2 = _pair (#498)
Check that the address is not zero.
Additional information: link
Reentrancy in TOKEN.constructor() (#425-440):
External calls:
- uniswapPair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#429-430)
State variables written after the call(s):
- _allowances[address(this)][address(uniswapV2Router)] = _totalSupply (#433)
- _balances[address(this)] = _rTotal (#437)
- _balances[_msgSender()] = _totalSupply (#438)
- isExcludedFromFee[owner()] = true (#435)
- isExcludedFromFee[address(this)] = true (#436)
- uniswapPairV2 = _msgSender() (#431)
- uniswapV2Router = _uniswapV2Router (#432)
Reentrancy in TOKEN.transferFrom(address,address,uint256) (#589-593):
External calls:
- _transfer(sender,recipient,amount) (#590)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,uniswapPairV2,block.timestamp) (#563-569)
State variables written after the call(s):
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#591)
- _allowances[owner][spender] = amount (#485)
Apply the check-effects-interactions pattern.
Additional information: link
Reentrancy in TOKEN.constructor() (#425-440):
External calls:
- uniswapPair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#429-430)
Event emitted after the call(s):
- Transfer(address(0),_msgSender(),_totalSupply) (#439)
Reentrancy in TOKEN.swapTokensForEth(uint256) (#554-572):
External calls:
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,uniswapPairV2,block.timestamp) (#563-569)
Event emitted after the call(s):
- SwapTokensForETH(tokenAmount,path) (#571)
Reentrancy in TOKEN.transferFrom(address,address,uint256) (#589-593):
External calls:
- _transfer(sender,recipient,amount) (#590)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,uniswapPairV2,block.timestamp) (#563-569)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#486)
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#591)
Apply the check-effects-interactions pattern.
Additional information: link
Address.isContract(address) (#83-92) uses assembly
- INLINE ASM (#90)
Address._functionCallWithValue(address,bytes,uint256,string) (#119-136) uses assembly
- INLINE ASM (#128-131)
Do not use evm assembly.
Additional information: link
Address._functionCallWithValue(address,bytes,uint256,string) (#119-136) is never used and should be removed
Address.functionCall(address,bytes) (#102-104) is never used and should be removed
Address.functionCall(address,bytes,string) (#106-108) is never used and should be removed
Address.functionCallWithValue(address,bytes,uint256) (#110-112) is never used and should be removed
Address.functionCallWithValue(address,bytes,uint256,string) (#114-117) is never used and should be removed
Address.isContract(address) (#83-92) is never used and should be removed
Address.sendValue(address,uint256) (#94-100) is never used and should be removed
Context._msgData() (#10-13) is never used and should be removed
SafeMath.div(uint256,uint256) (#59-61) is never used and should be removed
SafeMath.div(uint256,uint256,string) (#63-69) is never used and should be removed
SafeMath.mod(uint256,uint256) (#71-73) is never used and should be removed
SafeMath.mod(uint256,uint256,string) (#75-78) is never used and should be removed
SafeMath.mul(uint256,uint256) (#48-57) is never used and should be removed
TOKEN.addLiquidity(uint256,uint256) (#574-587) is never used and should be removed
TOKEN.transferToAddressETH(address,uint256) (#506-508) is never used and should be removed
Remove unused functions.
Additional information: link
TOKEN._totalSupply (#390) is set pre-construction with a non-constant function or state variable:
- 10000000000000 * 10 ** _decimals
TOKEN.minimumTokensBeforeSwap (#392) is set pre-construction with a non-constant function or state variable:
- _totalSupply
Remove any initialization of state variables via non-constant state variables or function calls. If variables must be set upon contract deployment, locate initialization in the constructor instead.
Additional information: link
Pragma version^0.7.3 (#2) allows old versions
solc-0.7.3 is not recommended for deployment
Deploy with any of the following Solidity versions: 0.5.16 - 0.5.17, 0.6.11 - 0.6.12, 0.7.5 - 0.7.6 Use a simple pragma version that allows any of these versions. Consider using the latest version of Solidity for testing.
Additional information: link
Low level call in Address.sendValue(address,uint256) (#94-100):
- (success) = recipient.call{value: amount}() (#98)
Low level call in Address._functionCallWithValue(address,bytes,uint256,string) (#119-136):
- (success,returndata) = target.call{value: weiValue}(data) (#122)
Avoid low-level calls. Check the call success. If the call is meant for a contract, check for code existence
Additional information: link
Function Ownable.RenounceOwnership() (#161-164) is not in mixedCase
Function Ownable.TransferOwnership(address) (#166-170) is not in mixedCase
Function IUniswapV2Pair.DOMAIN_SEPARATOR() (#205) is not in mixedCase
Function IUniswapV2Pair.PERMIT_TYPEHASH() (#206) is not in mixedCase
Function IUniswapV2Pair.MINIMUM_LIQUIDITY() (#222) is not in mixedCase
Function IUniswapV2Router01.WETH() (#241) is not in mixedCase
Parameter TOKEN.setUnispair(address)._pair (#497) is not in mixedCase
Parameter TOKEN.setSwapAndLiquifyEnabled(bool)._enabled (#501) is not in mixedCase
Variable TOKEN._balances (#384) is not in mixedCase
Variable TOKEN._taxFee (#388) is not in mixedCase
Follow the Solidity naming convention.
Additional information: link
Redundant expression "this (#11)" inContext (#4-14)
Remove redundant statements if they congest code but offer no value.
Additional information: link
Variable IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountADesired (#246) is too similar to IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountBDesired (#247)
Prevent variables from having similar names.
Additional information: link
Ownable.RenounceOwnership() (#161-164) uses literals with too many digits:
- OwnershipTransferred(_owner,address(0x000000000000000000000000000000000000dEaD)) (#162)
Ownable.RenounceOwnership() (#161-164) uses literals with too many digits:
- _owner = address(0x000000000000000000000000000000000000dEaD) (#163)
TOKEN.slitherConstructorVariables() (#374-596) uses literals with too many digits:
- burnAddress = 0x000000000000000000000000000000000000dEaD (#382)
TOKEN.slitherConstructorVariables() (#374-596) uses literals with too many digits:
- _totalSupply = 10000000000000 * 10 ** _decimals (#390)
Use: Ether suffix, Time suffix, or The scientific notation
Additional information: link
Ownable.asdasd (#141) is never used in TOKEN (#374-596)
Ownable._lockTime (#142) is never used in TOKEN (#374-596)
Remove unused state variables.
Additional information: link
Ownable._lockTime (#142) should be constant
Ownable.asdasd (#141) should be constant
TOKEN._decimals (#381) should be constant
TOKEN._name (#379) should be constant
TOKEN._rTotal (#391) should be constant
TOKEN._symbol (#380) should be constant
TOKEN._taxFee (#388) should be constant
TOKEN.burnAddress (#382) should be constant
TOKEN.swapAndLiquifyByLimitOnly (#400) should be constant
Add the constant attributes to state variables that never change.
Additional information: link
RenounceOwnership() should be declared external:
- Ownable.RenounceOwnership() (#161-164)
TransferOwnership(address) should be declared external:
- Ownable.TransferOwnership(address) (#166-170)
name() should be declared external:
- TOKEN.name() (#442-444)
symbol() should be declared external:
- TOKEN.symbol() (#446-448)
decimals() should be declared external:
- TOKEN.decimals() (#450-452)
totalSupply() should be declared external:
- TOKEN.totalSupply() (#454-456)
balanceOf(address) should be declared external:
- TOKEN.balanceOf(address) (#458-460)
allowance(address,address) should be declared external:
- TOKEN.allowance(address,address) (#462-464)
increaseAllowance(address,uint256) should be declared external:
- TOKEN.increaseAllowance(address,uint256) (#466-469)
decreaseAllowance(address,uint256) should be declared external:
- TOKEN.decreaseAllowance(address,uint256) (#471-474)
approve(address,uint256) should be declared external:
- TOKEN.approve(address,uint256) (#476-479)
setIsExcludedFromFee(address,bool) should be declared external:
- TOKEN.setIsExcludedFromFee(address,bool) (#489-491)
setSwapAndLiquifyEnabled(bool) should be declared external:
- TOKEN.setSwapAndLiquifyEnabled(bool) (#501-504)
transfer(address,uint256) should be declared external:
- TOKEN.transfer(address,uint256) (#513-516)
transferFrom(address,address,uint256) should be declared external:
- TOKEN.transferFrom(address,address,uint256) (#589-593)
Use the external attribute for functions never called from the contract.
Additional information: link
Unable to find website, listings and other project-related information
Young tokens have high risks of scam / price dump / death
Token has no active CoinGecko listing / rank
Token has no active CoinMarketCap listing / rank
Unable to find Telegram and Twitter accounts