WILD [Wild Island Game] Token

Unable to find manual contract audit (e.g. Certik, PeckShield, Solidity...)

Reentrancy in WildIslandGame._transfer(address,address,uint256) (#504-555):
External calls:
- swapAndLiquify(contractTokenBalance) (#536)
- uniswapV2Router.addLiquidityETH{value: BNBAmount}(address(this),tokenAmount,0,0,Wallet_Burn,block.timestamp) (#614-621)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#601-607)
External calls sending eth:
- swapAndLiquify(contractTokenBalance) (#536)
- wallet.transfer(amount) (#558)
- uniswapV2Router.addLiquidityETH{value: BNBAmount}(address(this),tokenAmount,0,0,Wallet_Burn,block.timestamp) (#614-621)
State variables written after the call(s):
- _tokenTransfer(from,to,amount,takeFee,isBuy) (#553)
- _tOwned[sender] = _tOwned[sender] - tAmount (#638)
- _tOwned[recipient] = _tOwned[recipient] + tAmount (#639)
- _tOwned[sender] = _tOwned[sender] - tAmount (#650)
- _tOwned[recipient] = _tOwned[recipient] + tTransferAmount (#651)
- _tOwned[address(this)] = _tOwned[address(this)] + buyFEE (#652)
- _tOwned[sender] = _tOwned[sender] - tAmount (#663)
- _tOwned[recipient] = _tOwned[recipient] + tTransferAmount_scope_0 (#664)
- _tOwned[address(this)] = _tOwned[address(this)] + sellFEE (#665)
- _tokenTransfer(from,to,amount,takeFee,isBuy) (#553)
- _tTotal = _tTotal - tAmount (#643)
- _tTotal = _tTotal - tTransferAmount (#656)
- _tTotal = _tTotal - tTransferAmount_scope_0 (#669)
- txCount ++ (#549)
Apply the check-effects-interactions pattern.

Additional information: link

Contract ownership is not renounced (belongs to a wallet)

Not a direct threat, but may indicate unreliable intentions of developer. Widespread names (e.g. Elon, King, Moon, Doge) are common among meme-tokens and scams. The allow to gain free hype and attract unexperienced investors.

Reentrancy in WildIslandGame._transfer(address,address,uint256) (#504-555):
External calls:
- swapAndLiquify(contractTokenBalance) (#536)
- wallet.transfer(amount) (#558)
External calls sending eth:
- swapAndLiquify(contractTokenBalance) (#536)
- wallet.transfer(amount) (#558)
- uniswapV2Router.addLiquidityETH{value: BNBAmount}(address(this),tokenAmount,0,0,Wallet_Burn,block.timestamp) (#614-621)
State variables written after the call(s):
- _tokenTransfer(from,to,amount,takeFee,isBuy) (#553)
- _tOwned[sender] = _tOwned[sender] - tAmount (#638)
- _tOwned[recipient] = _tOwned[recipient] + tAmount (#639)
- _tOwned[sender] = _tOwned[sender] - tAmount (#650)
- _tOwned[recipient] = _tOwned[recipient] + tTransferAmount (#651)
- _tOwned[address(this)] = _tOwned[address(this)] + buyFEE (#652)
- _tOwned[sender] = _tOwned[sender] - tAmount (#663)
- _tOwned[recipient] = _tOwned[recipient] + tTransferAmount_scope_0 (#664)
- _tOwned[address(this)] = _tOwned[address(this)] + sellFEE (#665)
- _tokenTransfer(from,to,amount,takeFee,isBuy) (#553)
- _tTotal = _tTotal - tAmount (#643)
- _tTotal = _tTotal - tTransferAmount (#656)
- _tTotal = _tTotal - tTransferAmount_scope_0 (#669)
- txCount ++ (#549)
Event emitted after the call(s):
- Transfer(sender,recipient,tAmount) (#640)
- _tokenTransfer(from,to,amount,takeFee,isBuy) (#553)
- Transfer(sender,recipient,tTransferAmount) (#653)
- _tokenTransfer(from,to,amount,takeFee,isBuy) (#553)
- Transfer(sender,recipient,tTransferAmount_scope_0) (#666)
- _tokenTransfer(from,to,amount,takeFee,isBuy) (#553)
Reentrancy in WildIslandGame.transferFrom(address,address,uint256) (#472-476):
External calls:
- _transfer(sender,recipient,amount) (#473)
- wallet.transfer(amount) (#558)
External calls sending eth:
- _transfer(sender,recipient,amount) (#473)
- wallet.transfer(amount) (#558)
- uniswapV2Router.addLiquidityETH{value: BNBAmount}(address(this),tokenAmount,0,0,Wallet_Burn,block.timestamp) (#614-621)
State variables written after the call(s):
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#474)
- _allowances[theOwner][theSpender] = amount (#499)
Event emitted after the call(s):
- Approval(theOwner,theSpender,amount) (#500)
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#474)
Apply the check-effects-interactions pattern.

Additional information: link

Variable IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountADesired (#211) is too similar to IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountBDesired (#212)
Variable WildIslandGame.swapAndLiquify(uint256).tokens_to_D (#571) is too similar to WildIslandGame.swapAndLiquify(uint256).tokens_to_M (#570)
Prevent variables from having similar names.

Additional information: link

WildIslandGame.MAX (#372) is never used in WildIslandGame (#341-678)
WildIslandGame._previousMaxWalletToken (#390) is never used in WildIslandGame (#341-678)
WildIslandGame._previousMaxTxAmount (#393) is never used in WildIslandGame (#341-678)
Remove unused state variables.

Additional information: link

WildIslandGame.swapAndLiquify(uint256) (#563-593) performs a multiplication on the result of a division:
-split_M = Percent_Marketing * 100 / (Percent_AutoLP + Percent_Marketing + Percent_Dev) (#578)
-BNB_M = BNB_Total * split_M / 100 (#579)
WildIslandGame.swapAndLiquify(uint256) (#563-593) performs a multiplication on the result of a division:
-split_D = Percent_Dev * 100 / (Percent_AutoLP + Percent_Marketing + Percent_Dev) (#581)
-BNB_D = BNB_Total * split_D / 100 (#582)
Consider ordering multiplication before division.

Additional information: link

WildIslandGame._transfer(address,address,uint256).isBuy (#540) is a local variable never initialized
Initialize all the variables. If a variable is meant to be initialized to zero, explicitly set it to zero to improve code readability.

Additional information: link

WildIslandGame.addLiquidity(uint256,uint256) (#611-622) ignores return value by uniswapV2Router.addLiquidityETH{value: BNBAmount}(address(this),tokenAmount,0,0,Wallet_Burn,block.timestamp) (#614-621)
Ensure that all the return values of the function calls are used.

Additional information: link

Reentrancy in WildIslandGame.constructor() (#415-436):
External calls:
- uniswapV2Pair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#425-426)
State variables written after the call(s):
- _isExcludedFromFee[owner()] = true (#429)
- _isExcludedFromFee[address(this)] = true (#430)
- _isExcludedFromFee[Wallet_Marketing] = true (#431)
- _isExcludedFromFee[Wallet_Burn] = true (#432)
- uniswapV2Router = _uniswapV2Router (#427)
Reentrancy in WildIslandGame.swapAndLiquify(uint256) (#563-593):
External calls:
- swapTokensForBNB(tokens_to_LP_Half + tokens_to_M + tokens_to_D) (#575)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#601-607)
- addLiquidity(tokens_to_LP_Half,(BNB_Total - BNB_M - BNB_D)) (#585)
- uniswapV2Router.addLiquidityETH{value: BNBAmount}(address(this),tokenAmount,0,0,Wallet_Burn,block.timestamp) (#614-621)
External calls sending eth:
- addLiquidity(tokens_to_LP_Half,(BNB_Total - BNB_M - BNB_D)) (#585)
- uniswapV2Router.addLiquidityETH{value: BNBAmount}(address(this),tokenAmount,0,0,Wallet_Burn,block.timestamp) (#614-621)
State variables written after the call(s):
- addLiquidity(tokens_to_LP_Half,(BNB_Total - BNB_M - BNB_D)) (#585)
- _allowances[theOwner][theSpender] = amount (#499)
Reentrancy in WildIslandGame.transferFrom(address,address,uint256) (#472-476):
External calls:
- _transfer(sender,recipient,amount) (#473)
- uniswapV2Router.addLiquidityETH{value: BNBAmount}(address(this),tokenAmount,0,0,Wallet_Burn,block.timestamp) (#614-621)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#601-607)
External calls sending eth:
- _transfer(sender,recipient,amount) (#473)
- wallet.transfer(amount) (#558)
- uniswapV2Router.addLiquidityETH{value: BNBAmount}(address(this),tokenAmount,0,0,Wallet_Burn,block.timestamp) (#614-621)
State variables written after the call(s):
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#474)
- _allowances[theOwner][theSpender] = amount (#499)
Apply the check-effects-interactions pattern.

Additional information: link

Reentrancy in WildIslandGame._transfer(address,address,uint256) (#504-555):
External calls:
- swapAndLiquify(contractTokenBalance) (#536)
- uniswapV2Router.addLiquidityETH{value: BNBAmount}(address(this),tokenAmount,0,0,Wallet_Burn,block.timestamp) (#614-621)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#601-607)
External calls sending eth:
- swapAndLiquify(contractTokenBalance) (#536)
- wallet.transfer(amount) (#558)
- uniswapV2Router.addLiquidityETH{value: BNBAmount}(address(this),tokenAmount,0,0,Wallet_Burn,block.timestamp) (#614-621)
Event emitted after the call(s):
- Transfer(sender,recipient,tAmount) (#640)
- _tokenTransfer(from,to,amount,takeFee,isBuy) (#553)
- Transfer(sender,recipient,tTransferAmount) (#653)
- _tokenTransfer(from,to,amount,takeFee,isBuy) (#553)
- Transfer(sender,recipient,tTransferAmount_scope_0) (#666)
- _tokenTransfer(from,to,amount,takeFee,isBuy) (#553)
Reentrancy in WildIslandGame.constructor() (#415-436):
External calls:
- uniswapV2Pair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#425-426)
Event emitted after the call(s):
- Transfer(address(0),owner(),_tTotal) (#434)
Reentrancy in WildIslandGame.swapAndLiquify(uint256) (#563-593):
External calls:
- swapTokensForBNB(tokens_to_LP_Half + tokens_to_M + tokens_to_D) (#575)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#601-607)
- addLiquidity(tokens_to_LP_Half,(BNB_Total - BNB_M - BNB_D)) (#585)
- uniswapV2Router.addLiquidityETH{value: BNBAmount}(address(this),tokenAmount,0,0,Wallet_Burn,block.timestamp) (#614-621)
External calls sending eth:
- addLiquidity(tokens_to_LP_Half,(BNB_Total - BNB_M - BNB_D)) (#585)
- uniswapV2Router.addLiquidityETH{value: BNBAmount}(address(this),tokenAmount,0,0,Wallet_Burn,block.timestamp) (#614-621)
Event emitted after the call(s):
- Approval(theOwner,theSpender,amount) (#500)
- addLiquidity(tokens_to_LP_Half,(BNB_Total - BNB_M - BNB_D)) (#585)
- SwapAndLiquify(tokens_to_LP_Half,(BNB_Total - BNB_M - BNB_D),tokens_to_LP_Half) (#586)
Reentrancy in WildIslandGame.transferFrom(address,address,uint256) (#472-476):
External calls:
- _transfer(sender,recipient,amount) (#473)
- uniswapV2Router.addLiquidityETH{value: BNBAmount}(address(this),tokenAmount,0,0,Wallet_Burn,block.timestamp) (#614-621)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#601-607)
External calls sending eth:
- _transfer(sender,recipient,amount) (#473)
- wallet.transfer(amount) (#558)
- uniswapV2Router.addLiquidityETH{value: BNBAmount}(address(this),tokenAmount,0,0,Wallet_Burn,block.timestamp) (#614-621)
Event emitted after the call(s):
- Approval(theOwner,theSpender,amount) (#500)
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#474)
Apply the check-effects-interactions pattern.

Additional information: link

Address.isContract(address) (#82-86) uses assembly
- INLINE ASM (#84)
Address._verifyCallResult(bool,bytes,string) (#134-147) uses assembly
- INLINE ASM (#139-142)
Do not use evm assembly.

Additional information: link

Address._verifyCallResult(bool,bytes,string) (#134-147) is never used and should be removed
Address.functionCall(address,bytes) (#94-96) is never used and should be removed
Address.functionCall(address,bytes,string) (#98-100) is never used and should be removed
Address.functionCallWithValue(address,bytes,uint256) (#102-104) is never used and should be removed
Address.functionCallWithValue(address,bytes,uint256,string) (#106-111) is never used and should be removed
Address.functionDelegateCall(address,bytes) (#124-126) is never used and should be removed
Address.functionDelegateCall(address,bytes,string) (#128-132) is never used and should be removed
Address.functionStaticCall(address,bytes) (#113-115) is never used and should be removed
Address.functionStaticCall(address,bytes,string) (#117-121) is never used and should be removed
Address.isContract(address) (#82-86) is never used and should be removed
Address.sendValue(address,uint256) (#88-92) is never used and should be removed
Context._msgData() (#73-76) is never used and should be removed
SafeMath.div(uint256,uint256) (#47-49) is never used and should be removed
SafeMath.div(uint256,uint256,string) (#58-63) is never used and should be removed
SafeMath.mul(uint256,uint256) (#43-45) is never used and should be removed
SafeMath.sub(uint256,uint256) (#39-41) is never used and should be removed
WildIslandGame._getCurrentSupply() (#490-492) is never used and should be removed
Remove unused functions.

Additional information: link

WildIslandGame._maxWalletToken (#389) is set pre-construction with a non-constant function or state variable:
- _tTotal * 100 / 100
WildIslandGame._previousMaxWalletToken (#390) is set pre-construction with a non-constant function or state variable:
- _maxWalletToken
WildIslandGame._maxTxAmount (#392) is set pre-construction with a non-constant function or state variable:
- _tTotal * 100 / 100
WildIslandGame._previousMaxTxAmount (#393) is set pre-construction with a non-constant function or state variable:
- _maxTxAmount
Remove any initialization of state variables via non-constant state variables or function calls. If variables must be set upon contract deployment, locate initialization in the constructor instead.

Additional information: link

Pragma version0.8.10 (#18) necessitates a version too recent to be trusted. Consider deploying with 0.6.12/0.7.6/0.8.7
solc-0.8.10 is not recommended for deployment
Deploy with any of the following Solidity versions: 0.5.16 - 0.5.17, 0.6.11 - 0.6.12, 0.7.5 - 0.7.6 Use a simple pragma version that allows any of these versions. Consider using the latest version of Solidity for testing.

Additional information: link

Low level call in Address.sendValue(address,uint256) (#88-92):
- (success) = recipient.call{value: amount}() (#90)
Low level call in Address.functionCallWithValue(address,bytes,uint256,string) (#106-111):
- (success,returndata) = target.call{value: value}(data) (#109)
Low level call in Address.functionStaticCall(address,bytes,string) (#117-121):
- (success,returndata) = target.staticcall(data) (#119)
Low level call in Address.functionDelegateCall(address,bytes,string) (#128-132):
- (success,returndata) = target.delegatecall(data) (#130)
Avoid low-level calls. Check the call success. If the call is meant for a contract, check for code existence

Additional information: link

Redundant expression "this (#74)" inContext (#68-77)
Remove redundant statements if they congest code but offer no value.

Additional information: link

Function IUniswapV2Pair.DOMAIN_SEPARATOR() (#176) is not in mixedCase
Function IUniswapV2Pair.PERMIT_TYPEHASH() (#177) is not in mixedCase
Function IUniswapV2Pair.MINIMUM_LIQUIDITY() (#190) is not in mixedCase
Function IUniswapV2Router01.WETH() (#207) is not in mixedCase
Parameter WildIslandGame.addLiquidity(uint256,uint256).BNBAmount (#611) is not in mixedCase
Function WildIslandGame.remove_Random_Tokens(address,uint256) (#624-630) is not in mixedCase
Parameter WildIslandGame.remove_Random_Tokens(address,uint256).random_Token_Address (#624) is not in mixedCase
Parameter WildIslandGame.remove_Random_Tokens(address,uint256).percent_of_Tokens (#624) is not in mixedCase
Variable WildIslandGame._isExcludedFromFee (#365) is not in mixedCase
Variable WildIslandGame.Wallet_Marketing (#367) is not in mixedCase
Variable WildIslandGame.Wallet_Dev (#368) is not in mixedCase
Constant WildIslandGame.Wallet_Burn (#369) is not in UPPER_CASE_WITH_UNDERSCORES
Constant WildIslandGame._decimals (#373) is not in UPPER_CASE_WITH_UNDERSCORES
Constant WildIslandGame._name (#375) is not in UPPER_CASE_WITH_UNDERSCORES
Constant WildIslandGame._symbol (#376) is not in UPPER_CASE_WITH_UNDERSCORES
Variable WildIslandGame._Tax_On_Buy (#381) is not in mixedCase
Variable WildIslandGame._Tax_On_Sell (#382) is not in mixedCase
Variable WildIslandGame.Percent_Marketing (#384) is not in mixedCase
Variable WildIslandGame.Percent_Dev (#385) is not in mixedCase
Variable WildIslandGame.Percent_Burn (#386) is not in mixedCase
Variable WildIslandGame.Percent_AutoLP (#387) is not in mixedCase
Variable WildIslandGame._maxWalletToken (#389) is not in mixedCase
Variable WildIslandGame._maxTxAmount (#392) is not in mixedCase
Follow the Solidity naming convention.

Additional information: link

WildIslandGame.slitherConstructorConstantVariables() (#341-678) uses literals with too many digits:
- Wallet_Burn = address(0x000000000000000000000000000000000000dEaD) (#369)
Use: Ether suffix, Time suffix, or The scientific notation

Additional information: link

WildIslandGame.Percent_AutoLP (#387) should be constant
WildIslandGame.Percent_Burn (#386) should be constant
WildIslandGame.Percent_Dev (#385) should be constant
WildIslandGame.Percent_Marketing (#384) should be constant
WildIslandGame.Wallet_Dev (#368) should be constant
WildIslandGame.Wallet_Marketing (#367) should be constant
WildIslandGame._Tax_On_Buy (#381) should be constant
WildIslandGame._Tax_On_Sell (#382) should be constant
WildIslandGame.swapAndLiquifyEnabled (#399) should be constant
WildIslandGame.swapTrigger (#379) should be constant
Add the constant attributes to state variables that never change.

Additional information: link

renounceOwnership() should be declared external:
- WildIslandGame.renounceOwnership() (#358-361)
name() should be declared external:
- WildIslandGame.name() (#438-440)
symbol() should be declared external:
- WildIslandGame.symbol() (#442-444)
decimals() should be declared external:
- WildIslandGame.decimals() (#446-448)
totalSupply() should be declared external:
- WildIslandGame.totalSupply() (#450-452)
transfer(address,uint256) should be declared external:
- WildIslandGame.transfer(address,uint256) (#458-461)
allowance(address,address) should be declared external:
- WildIslandGame.allowance(address,address) (#463-465)
approve(address,uint256) should be declared external:
- WildIslandGame.approve(address,uint256) (#467-470)
transferFrom(address,address,uint256) should be declared external:
- WildIslandGame.transferFrom(address,address,uint256) (#472-476)
increaseAllowance(address,uint256) should be declared external:
- WildIslandGame.increaseAllowance(address,uint256) (#478-481)
decreaseAllowance(address,uint256) should be declared external:
- WildIslandGame.decreaseAllowance(address,uint256) (#483-486)
remove_Random_Tokens(address,uint256) should be declared external:
- WildIslandGame.remove_Random_Tokens(address,uint256) (#624-630)
Use the external attribute for functions never called from the contract.

Additional information: link

Average 30d PancakeSwap liquidity is less than $100. Token is either dead or inactive.

Average 30d number of PancakeSwap swaps is less than 1. Token is either dead or inactive.

Average 30d PancakeSwap volume is less than $100. Token is either dead or inactive.

Number of Binance Smart Chain (BSC) token holders is less than 100. Token is either dead or inactive. Ignore for presale.

Contract has 10% buy tax and 9% sell tax.
Taxes are low but contract ownership is not renounced. Token has a high risk of becoming a honeypot.

Token is deployed only at one blockchain

Unable to crawl data from the website

BscScan page for the token does not contain additional info: website, socials, description, etc.

Additional information: link

Unable to find token contract audit

Unable to verify token contract address on the website

Token is not listed at Mobula.Finance

Additional information: link

Unable to find audit link on the website

Unable to find whitepaper link on the website

Unable to find token on CoinHunt

Additional information: link

Unable to find code repository for the project

Token is marked as scam (rug pull, honeypot, phishing, etc.)

Additional information: link

Young tokens have high risks of scam / price dump / death

Young tokens have high risks of price dump / death

Token has relatively low CoinGecko rank

Token has relatively low CoinMarketCap rank

Young tokens have high risks of price dump / death