WMF [Whale Maker Fund] Token

WhaleToken.addLiquidity(uint256,uint256) (#1592-1605) sends eth to arbitrary user
Dangerous calls:
- sphynxSwapRouter.addLiquidityETH{value: nativeAmount}(address(this),tokenAmount,0,0,liquidityWallet,block.timestamp) (#1597-1604)
WhaleToken.sphynxBuyBackAndBurn(uint256) (#1626-1642) sends eth to arbitrary user
Dangerous calls:
- sphynxSwapRouter.swapExactETHForTokensSupportingFeeOnTransferTokens{value: nativeAmount}(0,path,address(this),block.timestamp + 120) (#1632-1637)
WhaleToken.transferNativeToDevMarketingWallet(uint256) (#1657-1659) sends eth to arbitrary user
Dangerous calls:
- devmarketingWallet.transfer(amount) (#1658)
WhaleToken.transferNativeToFundWallet(uint256) (#1661-1663) sends eth to arbitrary user
Dangerous calls:
- fundWallet.transfer(amount) (#1662)
Ensure that an arbitrary user cannot withdraw unauthorized funds.

Additional information: link

Reentrancy in WhaleToken._transfer(address,address,uint256) (#1468-1542):
External calls:
- swapTokens(contractTokenBalance) (#1492)
- sphynxSwapRouter.addLiquidityETH{value: nativeAmount}(address(this),tokenAmount,0,0,liquidityWallet,block.timestamp) (#1597-1604)
- sphynxSwapRouter.swapExactETHForTokensSupportingFeeOnTransferTokens{value: nativeAmount}(0,path,address(this),block.timestamp + 120) (#1632-1637)
- sphynxSwapRouter.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp + 120) (#1617-1623)
- BEP20(sphynxTokenAddress).burn(sphynxBalance) (#1641)
External calls sending eth:
- swapTokens(contractTokenBalance) (#1492)
- fundWallet.transfer(amount) (#1662)
- devmarketingWallet.transfer(amount) (#1658)
- stakingWallet.transfer(amount) (#1670)
- sphynxWallet.transfer(amount) (#1666)
- sphynxSwapRouter.addLiquidityETH{value: nativeAmount}(address(this),tokenAmount,0,0,liquidityWallet,block.timestamp) (#1597-1604)
- sphynxSwapRouter.swapExactETHForTokensSupportingFeeOnTransferTokens{value: nativeAmount}(0,path,address(this),block.timestamp + 120) (#1632-1637)
State variables written after the call(s):
- super._transfer(from,address(this),fees) (#1521)
- _balances[sender] = _balances[sender].sub(amount,BEP20: transfer amount exceeds balance) (#703)
- _balances[recipient] = _balances[recipient].add(amount) (#704)
- super._transfer(from,address(this),fees) (#1525)
- _balances[sender] = _balances[sender].sub(amount,BEP20: transfer amount exceeds balance) (#703)
- _balances[recipient] = _balances[recipient].add(amount) (#704)
- super._transfer(from,address(this),fees) (#1531)
- _balances[sender] = _balances[sender].sub(amount,BEP20: transfer amount exceeds balance) (#703)
- _balances[recipient] = _balances[recipient].add(amount) (#704)
- super._transfer(from,to,amount) (#1541)
- _balances[sender] = _balances[sender].sub(amount,BEP20: transfer amount exceeds balance) (#703)
- _balances[recipient] = _balances[recipient].add(amount) (#704)
- sphynxTokenAmount = sphynxTokenAmount.add(fees.mul(sphynxFee).div(totalFeesOnBuy)) (#1526-1528)
- sphynxTokenAmount = sphynxTokenAmount.add(fees.mul(sphynxFee).div(totalFeesOnSell)) (#1532-1534)
- swapping = false (#1493)
Apply the check-effects-interactions pattern.

Additional information: link

Unable to find manual contract audit (e.g. Certik, PeckShield, Solidity...)

Combination 1: Reentrancy vulnerabilities + Functions that send Ether to arbitraty destination. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.

Contract ownership is not renounced (belongs to a wallet)

WhaleToken._transfer(address,address,uint256) (#1468-1542) performs a multiplication on the result of a division:
-sphynxTokenAmount = sphynxTokenAmount.add(fees.mul(sphynxFee).div(totalFeesOnBuy)) (#1526-1528)
-fees = amount.mul(totalFeesOnSell).div(10 ** 2) (#1530)
WhaleToken._transfer(address,address,uint256) (#1468-1542) performs a multiplication on the result of a division:
-fees = amount.mul(totalFeesOnSell).div(10 ** 2) (#1530)
-sphynxTokenAmount = sphynxTokenAmount.add(fees.mul(sphynxFee).div(totalFeesOnSell)) (#1532-1534)
WhaleToken.swapTokens(uint256) (#1544-1590) performs a multiplication on the result of a division:
-sphynxSwapAmount = tokenAmount.mul(sphynxTokenAmount).div(super.balanceOf(address(this))) (#1545-1547)
-sphynxNative = swappedNative.mul(sphynxSwapAmount).div(swapTokenAmount) (#1554-1556)
Consider ordering multiplication before division.

Additional information: link

Reentrancy in WhaleToken.swapTokens(uint256) (#1544-1590):
External calls:
- swapTokensForNative(swapTokenAmount) (#1552)
- sphynxSwapRouter.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp + 120) (#1617-1623)
State variables written after the call(s):
- sphynxTokenAmount = sphynxTokenAmount.sub(sphynxSwapAmount) (#1560)
Apply the check-effects-interactions pattern.

Additional information: link

WhaleToken.addLiquidity(uint256,uint256) (#1592-1605) ignores return value by sphynxSwapRouter.addLiquidityETH{value: nativeAmount}(address(this),tokenAmount,0,0,liquidityWallet,block.timestamp) (#1597-1604)
WhaleToken.sphynxBuyBackAndBurn(uint256) (#1626-1642) ignores return value by BEP20(sphynxTokenAddress).burn(sphynxBalance) (#1641)
Ensure that all the return values of the function calls are used.

Additional information: link

BEP20.constructor(string,string,uint8).name (#526) shadows:
- BEP20.name() (#542-544) (function)
- IBEP20.name() (#98) (function)
BEP20.constructor(string,string,uint8).symbol (#526) shadows:
- BEP20.symbol() (#556-558) (function)
- IBEP20.symbol() (#93) (function)
BEP20.constructor(string,string,uint8).decimals (#526) shadows:
- BEP20.decimals() (#549-551) (function)
- IBEP20.decimals() (#88) (function)
BEP20.allowance(address,address).owner (#590) shadows:
- Ownable.owner() (#37-39) (function)
BEP20._approve(address,address,uint256).owner (#758) shadows:
- Ownable.owner() (#37-39) (function)
Rename the local variables that shadow another component.

Additional information: link

Reentrancy in WhaleToken._transfer(address,address,uint256) (#1468-1542):
External calls:
- swapTokens(contractTokenBalance) (#1492)
- sphynxSwapRouter.addLiquidityETH{value: nativeAmount}(address(this),tokenAmount,0,0,liquidityWallet,block.timestamp) (#1597-1604)
- sphynxSwapRouter.swapExactETHForTokensSupportingFeeOnTransferTokens{value: nativeAmount}(0,path,address(this),block.timestamp + 120) (#1632-1637)
- sphynxSwapRouter.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp + 120) (#1617-1623)
- BEP20(sphynxTokenAddress).burn(sphynxBalance) (#1641)
External calls sending eth:
- swapTokens(contractTokenBalance) (#1492)
- fundWallet.transfer(amount) (#1662)
- devmarketingWallet.transfer(amount) (#1658)
- stakingWallet.transfer(amount) (#1670)
- sphynxWallet.transfer(amount) (#1666)
- sphynxSwapRouter.addLiquidityETH{value: nativeAmount}(address(this),tokenAmount,0,0,liquidityWallet,block.timestamp) (#1597-1604)
- sphynxSwapRouter.swapExactETHForTokensSupportingFeeOnTransferTokens{value: nativeAmount}(0,path,address(this),block.timestamp + 120) (#1632-1637)
State variables written after the call(s):
- blockNumber = block.number (#1498)
Reentrancy in WhaleToken.constructor() (#1193-1239):
External calls:
- _sphynxSwapPair = ISphynxFactory(_sphynxSwapRouter.factory()).createPair(address(this),_sphynxSwapRouter.WETH()) (#1218-1219)
State variables written after the call(s):
- _mint(owner(),500000000 * (10 ** 18)) (#1236)
- _balances[account] = _balances[account].add(amount) (#721)
- excludeFromFees(devmarketingWallet,true) (#1227)
- _isExcludedFromFees[account] = excluded (#1365)
- excludeFromFees(fundWallet,true) (#1228)
- _isExcludedFromFees[account] = excluded (#1365)
- excludeFromFees(liquidityWallet,true) (#1229)
- _isExcludedFromFees[account] = excluded (#1365)
- excludeFromFees(address(this),true) (#1230)
- _isExcludedFromFees[account] = excluded (#1365)
- excludeFromFees(owner(),true) (#1231)
- _isExcludedFromFees[account] = excluded (#1365)
- _isGetFees[_sphynxSwapPair] = true (#1234)
- _status = _NOT_ENTERED (#1238)
- _mint(owner(),500000000 * (10 ** 18)) (#1236)
- _totalSupply = _totalSupply.add(amount) (#720)
- _setAutomatedMarketMakerPair(sphynxSwapPair,true) (#1224)
- automatedMarketMakerPairs[pair] = value (#1403)
- sphynxSwapPair = _sphynxSwapPair (#1222)
- sphynxSwapRouter = _sphynxSwapRouter (#1221)
Reentrancy in WhaleToken.swapTokens(uint256) (#1544-1590):
External calls:
- swapTokensForNative(swapTokenAmount) (#1552)
- sphynxSwapRouter.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp + 120) (#1617-1623)
- sphynxBuyBackAndBurn(sphynxBuyBack) (#1576)
- sphynxSwapRouter.swapExactETHForTokensSupportingFeeOnTransferTokens{value: nativeAmount}(0,path,address(this),block.timestamp + 120) (#1632-1637)
- BEP20(sphynxTokenAddress).burn(sphynxBalance) (#1641)
- addLiquidity(tokensForLiquidity,nativeForLiquidity) (#1579)
- sphynxSwapRouter.addLiquidityETH{value: nativeAmount}(address(this),tokenAmount,0,0,liquidityWallet,block.timestamp) (#1597-1604)
External calls sending eth:
- transferNativeToSphynxWallet(sphynxNative) (#1573)
- sphynxWallet.transfer(amount) (#1666)
- sphynxBuyBackAndBurn(sphynxBuyBack) (#1576)
- sphynxSwapRouter.swapExactETHForTokensSupportingFeeOnTransferTokens{value: nativeAmount}(0,path,address(this),block.timestamp + 120) (#1632-1637)
- addLiquidity(tokensForLiquidity,nativeForLiquidity) (#1579)
- sphynxSwapRouter.addLiquidityETH{value: nativeAmount}(address(this),tokenAmount,0,0,liquidityWallet,block.timestamp) (#1597-1604)
State variables written after the call(s):
- addLiquidity(tokensForLiquidity,nativeForLiquidity) (#1579)
- _allowances[owner][spender] = amount (#765)
Reentrancy in WhaleToken.updateSphynxSwapRouter(address) (#1339-1358):
External calls:
- _sphynxSwapPair = ISphynxFactory(sphynxSwapRouter.factory()).createPair(address(this),sphynxSwapRouter.WETH()) (#1352-1353)
State variables written after the call(s):
- _setAutomatedMarketMakerPair(sphynxSwapPair,false) (#1355)
- automatedMarketMakerPairs[pair] = value (#1403)
- _setAutomatedMarketMakerPair(sphynxSwapPair,true) (#1357)
- automatedMarketMakerPairs[pair] = value (#1403)
- sphynxSwapPair = _sphynxSwapPair (#1356)
Apply the check-effects-interactions pattern.

Additional information: link

Reentrancy in WhaleToken._transfer(address,address,uint256) (#1468-1542):
External calls:
- swapTokens(contractTokenBalance) (#1492)
- sphynxSwapRouter.addLiquidityETH{value: nativeAmount}(address(this),tokenAmount,0,0,liquidityWallet,block.timestamp) (#1597-1604)
- sphynxSwapRouter.swapExactETHForTokensSupportingFeeOnTransferTokens{value: nativeAmount}(0,path,address(this),block.timestamp + 120) (#1632-1637)
- sphynxSwapRouter.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp + 120) (#1617-1623)
- BEP20(sphynxTokenAddress).burn(sphynxBalance) (#1641)
External calls sending eth:
- swapTokens(contractTokenBalance) (#1492)
- fundWallet.transfer(amount) (#1662)
- devmarketingWallet.transfer(amount) (#1658)
- stakingWallet.transfer(amount) (#1670)
- sphynxWallet.transfer(amount) (#1666)
- sphynxSwapRouter.addLiquidityETH{value: nativeAmount}(address(this),tokenAmount,0,0,liquidityWallet,block.timestamp) (#1597-1604)
- sphynxSwapRouter.swapExactETHForTokensSupportingFeeOnTransferTokens{value: nativeAmount}(0,path,address(this),block.timestamp + 120) (#1632-1637)
Event emitted after the call(s):
- Transfer(sender,recipient,amount) (#705)
- super._transfer(from,address(this),fees) (#1531)
- Transfer(sender,recipient,amount) (#705)
- super._transfer(from,to,amount) (#1541)
- Transfer(sender,recipient,amount) (#705)
- super._transfer(from,address(this),fees) (#1521)
- Transfer(sender,recipient,amount) (#705)
- super._transfer(from,address(this),fees) (#1525)
Reentrancy in WhaleToken.constructor() (#1193-1239):
External calls:
- _sphynxSwapPair = ISphynxFactory(_sphynxSwapRouter.factory()).createPair(address(this),_sphynxSwapRouter.WETH()) (#1218-1219)
Event emitted after the call(s):
- ExcludeFromFees(account,excluded) (#1367)
- excludeFromFees(liquidityWallet,true) (#1229)
- ExcludeFromFees(account,excluded) (#1367)
- excludeFromFees(fundWallet,true) (#1228)
- ExcludeFromFees(account,excluded) (#1367)
- excludeFromFees(devmarketingWallet,true) (#1227)
- ExcludeFromFees(account,excluded) (#1367)
- excludeFromFees(owner(),true) (#1231)
- ExcludeFromFees(account,excluded) (#1367)
- excludeFromFees(address(this),true) (#1230)
- SetAutomatedMarketMakerPair(pair,value) (#1405)
- _setAutomatedMarketMakerPair(sphynxSwapPair,true) (#1224)
- Transfer(address(0),account,amount) (#722)
- _mint(owner(),500000000 * (10 ** 18)) (#1236)
Reentrancy in WhaleToken.swapTokens(uint256) (#1544-1590):
External calls:
- swapTokensForNative(swapTokenAmount) (#1552)
- sphynxSwapRouter.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp + 120) (#1617-1623)
- sphynxBuyBackAndBurn(sphynxBuyBack) (#1576)
- sphynxSwapRouter.swapExactETHForTokensSupportingFeeOnTransferTokens{value: nativeAmount}(0,path,address(this),block.timestamp + 120) (#1632-1637)
- BEP20(sphynxTokenAddress).burn(sphynxBalance) (#1641)
- addLiquidity(tokensForLiquidity,nativeForLiquidity) (#1579)
- sphynxSwapRouter.addLiquidityETH{value: nativeAmount}(address(this),tokenAmount,0,0,liquidityWallet,block.timestamp) (#1597-1604)
External calls sending eth:
- transferNativeToSphynxWallet(sphynxNative) (#1573)
- sphynxWallet.transfer(amount) (#1666)
- sphynxBuyBackAndBurn(sphynxBuyBack) (#1576)
- sphynxSwapRouter.swapExactETHForTokensSupportingFeeOnTransferTokens{value: nativeAmount}(0,path,address(this),block.timestamp + 120) (#1632-1637)
- addLiquidity(tokensForLiquidity,nativeForLiquidity) (#1579)
- sphynxSwapRouter.addLiquidityETH{value: nativeAmount}(address(this),tokenAmount,0,0,liquidityWallet,block.timestamp) (#1597-1604)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#766)
- addLiquidity(tokensForLiquidity,nativeForLiquidity) (#1579)
Reentrancy in WhaleToken.updateSphynxSwapRouter(address) (#1339-1358):
External calls:
- _sphynxSwapPair = ISphynxFactory(sphynxSwapRouter.factory()).createPair(address(this),sphynxSwapRouter.WETH()) (#1352-1353)
Event emitted after the call(s):
- SetAutomatedMarketMakerPair(pair,value) (#1405)
- _setAutomatedMarketMakerPair(sphynxSwapPair,false) (#1355)
- SetAutomatedMarketMakerPair(pair,value) (#1405)
- _setAutomatedMarketMakerPair(sphynxSwapPair,true) (#1357)
Apply the check-effects-interactions pattern.

Additional information: link

Address.isContract(address) (#365-376) uses assembly
- INLINE ASM (#372-374)
Address._functionCallWithValue(address,bytes,uint256,string) (#473-499) uses assembly
- INLINE ASM (#491-494)
Do not use evm assembly.

Additional information: link

Address._functionCallWithValue(address,bytes,uint256,string) (#473-499) is never used and should be removed
Address.functionCall(address,bytes) (#420-422) is never used and should be removed
Address.functionCall(address,bytes,string) (#430-436) is never used and should be removed
Address.functionCallWithValue(address,bytes,uint256) (#449-455) is never used and should be removed
Address.functionCallWithValue(address,bytes,uint256,string) (#463-471) is never used and should be removed
Address.isContract(address) (#365-376) is never used and should be removed
Address.sendValue(address,uint256) (#394-400) is never used and should be removed
BEP20._burnFrom(address,uint256) (#775-782) is never used and should be removed
Context._msgData() (#14-17) is never used and should be removed
SafeBEP20._callOptionalReturn(IBEP20,bytes) (#856-867) is never used and should be removed
SafeBEP20.safeApprove(IBEP20,address,uint256) (#813-827) is never used and should be removed
SafeBEP20.safeDecreaseAllowance(IBEP20,address,uint256) (#838-848) is never used and should be removed
SafeBEP20.safeIncreaseAllowance(IBEP20,address,uint256) (#829-836) is never used and should be removed
SafeBEP20.safeTransfer(IBEP20,address,uint256) (#789-795) is never used and should be removed
SafeBEP20.safeTransferFrom(IBEP20,address,address,uint256) (#797-804) is never used and should be removed
SafeMath.min(uint256,uint256) (#328-330) is never used and should be removed
SafeMath.mod(uint256,uint256) (#303-305) is never used and should be removed
SafeMath.mod(uint256,uint256,string) (#319-326) is never used and should be removed
SafeMath.sqrt(uint256) (#333-344) is never used and should be removed
Remove unused functions.

Additional information: link

Low level call in Address.sendValue(address,uint256) (#394-400):
- (success) = recipient.call{value: amount}() (#398)
Low level call in Address._functionCallWithValue(address,bytes,uint256,string) (#473-499):
- (success,returndata) = target.call{value: weiValue}(data) (#482)
Avoid low-level calls. Check the call success. If the call is meant for a contract, check for code existence

Additional information: link

Function ISphynxPair.DOMAIN_SEPARATOR() (#885) is not in mixedCase
Function ISphynxPair.PERMIT_TYPEHASH() (#886) is not in mixedCase
Function ISphynxPair.MINIMUM_LIQUIDITY() (#903) is not in mixedCase
Function ISphynxRouter01.WETH() (#942) is not in mixedCase
Parameter WhaleToken.setDevMarketingFee(uint256,uint256)._onBuy (#1248) is not in mixedCase
Parameter WhaleToken.setDevMarketingFee(uint256,uint256)._onSell (#1248) is not in mixedCase
Parameter WhaleToken.setfundFee(uint256,uint256)._onBuy (#1268) is not in mixedCase
Parameter WhaleToken.setfundFee(uint256,uint256)._onSell (#1268) is not in mixedCase
Parameter WhaleToken.setLiquidityFee(uint256,uint256)._onBuy (#1285) is not in mixedCase
Parameter WhaleToken.setLiquidityFee(uint256,uint256)._onSell (#1285) is not in mixedCase
Parameter WhaleToken.setStakingFee(uint256,uint256)._onBuy (#1305) is not in mixedCase
Parameter WhaleToken.setStakingFee(uint256,uint256)._onSell (#1305) is not in mixedCase
Parameter WhaleToken.updateShares(uint256,uint256,uint256,uint256)._liquidity (#1323) is not in mixedCase
Parameter WhaleToken.updateShares(uint256,uint256,uint256,uint256)._devmarketing (#1324) is not in mixedCase
Parameter WhaleToken.updateShares(uint256,uint256,uint256,uint256)._fund (#1325) is not in mixedCase
Parameter WhaleToken.updateShares(uint256,uint256,uint256,uint256)._staking (#1326) is not in mixedCase
Parameter WhaleToken.setNativeAmountToSwap(uint256)._nativeAmount (#1408) is not in mixedCase
Parameter WhaleToken.updateLiquidityWallet(address)._liquidityWallet (#1430) is not in mixedCase
Parameter WhaleToken.updateMaxTxAmount(uint256)._amount (#1459) is not in mixedCase
Variable WhaleToken.SwapAndLiquifyEnabled (#1119) is not in mixedCase
Variable WhaleToken._isGetFees (#1126) is not in mixedCase
Follow the Solidity naming convention.

Additional information: link

Redundant expression "this (#15)" inContext (#5-18)
Remove redundant statements if they congest code but offer no value.

Additional information: link

Reentrancy in WhaleToken._transfer(address,address,uint256) (#1468-1542):
External calls:
- swapTokens(contractTokenBalance) (#1492)
- fundWallet.transfer(amount) (#1662)
- devmarketingWallet.transfer(amount) (#1658)
- stakingWallet.transfer(amount) (#1670)
- sphynxWallet.transfer(amount) (#1666)
External calls sending eth:
- swapTokens(contractTokenBalance) (#1492)
- fundWallet.transfer(amount) (#1662)
- devmarketingWallet.transfer(amount) (#1658)
- stakingWallet.transfer(amount) (#1670)
- sphynxWallet.transfer(amount) (#1666)
- sphynxSwapRouter.addLiquidityETH{value: nativeAmount}(address(this),tokenAmount,0,0,liquidityWallet,block.timestamp) (#1597-1604)
- sphynxSwapRouter.swapExactETHForTokensSupportingFeeOnTransferTokens{value: nativeAmount}(0,path,address(this),block.timestamp + 120) (#1632-1637)
State variables written after the call(s):
- super._transfer(from,address(this),fees) (#1521)
- _balances[sender] = _balances[sender].sub(amount,BEP20: transfer amount exceeds balance) (#703)
- _balances[recipient] = _balances[recipient].add(amount) (#704)
- super._transfer(from,address(this),fees) (#1525)
- _balances[sender] = _balances[sender].sub(amount,BEP20: transfer amount exceeds balance) (#703)
- _balances[recipient] = _balances[recipient].add(amount) (#704)
- super._transfer(from,address(this),fees) (#1531)
- _balances[sender] = _balances[sender].sub(amount,BEP20: transfer amount exceeds balance) (#703)
- _balances[recipient] = _balances[recipient].add(amount) (#704)
- super._transfer(from,to,amount) (#1541)
- _balances[sender] = _balances[sender].sub(amount,BEP20: transfer amount exceeds balance) (#703)
- _balances[recipient] = _balances[recipient].add(amount) (#704)
- blockNumber = block.number (#1498)
- sphynxTokenAmount = sphynxTokenAmount.add(fees.mul(sphynxFee).div(totalFeesOnBuy)) (#1526-1528)
- sphynxTokenAmount = sphynxTokenAmount.add(fees.mul(sphynxFee).div(totalFeesOnSell)) (#1532-1534)
- swapping = false (#1493)
Event emitted after the call(s):
- Transfer(sender,recipient,amount) (#705)
- super._transfer(from,address(this),fees) (#1525)
- Transfer(sender,recipient,amount) (#705)
- super._transfer(from,to,amount) (#1541)
- Transfer(sender,recipient,amount) (#705)
- super._transfer(from,address(this),fees) (#1521)
- Transfer(sender,recipient,amount) (#705)
- super._transfer(from,address(this),fees) (#1531)
Reentrancy in WhaleToken.swapTokens(uint256) (#1544-1590):
External calls:
- transferNativeToSphynxWallet(sphynxNative) (#1573)
- sphynxWallet.transfer(amount) (#1666)
External calls sending eth:
- transferNativeToSphynxWallet(sphynxNative) (#1573)
- sphynxWallet.transfer(amount) (#1666)
- sphynxBuyBackAndBurn(sphynxBuyBack) (#1576)
- sphynxSwapRouter.swapExactETHForTokensSupportingFeeOnTransferTokens{value: nativeAmount}(0,path,address(this),block.timestamp + 120) (#1632-1637)
- addLiquidity(tokensForLiquidity,nativeForLiquidity) (#1579)
- sphynxSwapRouter.addLiquidityETH{value: nativeAmount}(address(this),tokenAmount,0,0,liquidityWallet,block.timestamp) (#1597-1604)
State variables written after the call(s):
- addLiquidity(tokensForLiquidity,nativeForLiquidity) (#1579)
- _allowances[owner][spender] = amount (#765)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#766)
- addLiquidity(tokensForLiquidity,nativeForLiquidity) (#1579)
Apply the check-effects-interactions pattern.

Additional information: link

Variable ISphynxRouter01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountADesired (#947) is too similar to ISphynxRouter01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountBDesired (#948)
Prevent variables from having similar names.

Additional information: link

WhaleToken.constructor() (#1193-1239) uses literals with too many digits:
- _mint(owner(),500000000 * (10 ** 18)) (#1236)
WhaleToken.slitherConstructorVariables() (#1076-1673) uses literals with too many digits:
- maxTxAmount = 1000000000 * (10 ** 18) (#1120)
Use: Ether suffix, Time suffix, or The scientific notation

Additional information: link

WhaleToken.sphynxFee (#1112) should be constant
WhaleToken.sphynxTokenAddress (#1082-1083) should be constant
WhaleToken.sphynxWallet (#1095-1096) should be constant
WhaleToken.stakingWallet (#1093-1094) should be constant
Add the constant attributes to state variables that never change.

Additional information: link

renounceOwnership() should be declared external:
- Ownable.renounceOwnership() (#56-59)
transferOwnership(address) should be declared external:
- Ownable.transferOwnership(address) (#65-67)
name() should be declared external:
- BEP20.name() (#542-544)
decimals() should be declared external:
- BEP20.decimals() (#549-551)
symbol() should be declared external:
- BEP20.symbol() (#556-558)
totalSupply() should be declared external:
- BEP20.totalSupply() (#563-565)
transfer(address,uint256) should be declared external:
- BEP20.transfer(address,uint256) (#582-585)
allowance(address,address) should be declared external:
- BEP20.allowance(address,address) (#590-592)
approve(address,uint256) should be declared external:
- BEP20.approve(address,uint256) (#601-604)
transferFrom(address,address,uint256) should be declared external:
- BEP20.transferFrom(address,address,uint256) (#618-630)
increaseAllowance(address,uint256) should be declared external:
- BEP20.increaseAllowance(address,uint256) (#644-647)
decreaseAllowance(address,uint256) should be declared external:
- BEP20.decreaseAllowance(address,uint256) (#663-670)
burn(uint256) should be declared external:
- BEP20.burn(uint256) (#676-679)
updateSwapAndLiquifiy(bool) should be declared external:
- WhaleToken.updateSwapAndLiquifiy(bool) (#1243-1246)
updateSphynxSwapRouter(address) should be declared external:
- WhaleToken.updateSphynxSwapRouter(address) (#1339-1358)
setFeeAccount(address,bool) should be declared external:
- WhaleToken.setFeeAccount(address,bool) (#1370-1378)
excludeMultipleAccountsFromFees(address[],bool) should be declared external:
- WhaleToken.excludeMultipleAccountsFromFees(address[],bool) (#1380-1389)
setAutomatedMarketMakerPair(address,bool) should be declared external:
- WhaleToken.setAutomatedMarketMakerPair(address,bool) (#1391-1396)
setNativeAmountToSwap(uint256) should be declared external:
- WhaleToken.setNativeAmountToSwap(uint256) (#1408-1411)
updateDevMarketingWallet(address) should be declared external:
- WhaleToken.updateDevMarketingWallet(address) (#1413-1428)
updateFundWallet(address) should be declared external:
- WhaleToken.updateFundWallet(address) (#1443-1452)
setBlockNumber() should be declared external:
- WhaleToken.setBlockNumber() (#1454-1457)
updateMaxTxAmount(uint256) should be declared external:
- WhaleToken.updateMaxTxAmount(uint256) (#1459-1462)
isExcludedFromFees(address) should be declared external:
- WhaleToken.isExcludedFromFees(address) (#1464-1466)
Use the external attribute for functions never called from the contract.

Additional information: link

Not a direct threat, but may indicate unreliable intentions of developer. Widespread names (e.g. Elon, King, Moon, Doge) are common among meme-tokens and scams. The allow to gain free hype and attract unexperienced investors.

Contract has 12% buy tax and 15% sell tax.
Taxes are suspiciously high (over 10%) and contract ownership is not renounced. Token has a high risk of becoming a honeypot.

Average 30d number of PancakeSwap swaps is low.

Token has only one trading pair

BscScan page for the token does not contain additional info: website, socials, description, etc.

Additional information: link

Unable to find token on CoinMarketCap

Additional information: link

Unable to find token contract audit

Unable to find KYC or doxxing proof

Unable to find audit link on the website

Token is not listed at Mobula.Finance

Additional information: link

Unable to find token on CoinHunt

Additional information: link

Unable to find code repository for the project

Young tokens have high risks of price dump / death

Young tokens have high risks of scam / price dump / death

Token has no active CoinGecko listing / rank

Token has no active CoinMarketCap listing / rank

Young tokens have high risks of price dump / death

Young tokens have high risks of price dump / death