WWET.airdrop(address) (#440-450) sends eth to arbitrary user
Dangerous calls:
- address(uint160(_refer)).transfer(referEth) (#447)
Ensure that an arbitrary user cannot withdraw unauthorized funds.
Additional information: link
Contract creator or owner is blacklisted for past scams
Unable to find manual contract audit (e.g. Certik, PeckShield, Solidity...)
Contract ownership is not renounced (belongs to a wallet)
WWET.clearETH()._owner (#364) shadows:
- WWET._owner (#155) (state variable)
Rename the local variables that shadow another component.
Additional information: link
WWET.clearETH()._owner (#364) lacks a zero-check on :
- _owner.transfer(address(this).balance) (#365)
Check that the address is not zero.
Additional information: link
SafeMath.div(uint256,uint256,string) (#118-121) is never used and should be removed
SafeMath.sub(uint256,uint256) (#46-49) is never used and should be removed
Remove unused functions.
Additional information: link
Pragma version0.6.8 (#5) allows old versions
solc-0.6.8 is not recommended for deployment
Deploy with any of the following Solidity versions: 0.5.16 - 0.5.17, 0.6.11 - 0.6.12, 0.7.5 - 0.7.6 Use a simple pragma version that allows any of these versions. Consider using the latest version of Solidity for testing.
Additional information: link
Parameter WWET.allocationForRewards(address,uint256)._addr (#367) is not in mixedCase
Parameter WWET.allocationForRewards(address,uint256)._amount (#367) is not in mixedCase
Parameter WWET.airdrop(address)._refer (#440) is not in mixedCase
Parameter WWET.buy(address)._refer (#452) is not in mixedCase
Follow the Solidity naming convention.
Additional information: link
WWET.slitherConstructorVariables() (#148-468) uses literals with too many digits:
- _totalSupply = 4000000000000000000000000000000000 (#151)
WWET.slitherConstructorVariables() (#148-468) uses literals with too many digits:
- _airdropEth = 3400000000000000 (#162)
WWET.slitherConstructorVariables() (#148-468) uses literals with too many digits:
- _airdropToken = 25000000000000000000000000 (#163)
WWET.slitherConstructorVariables() (#148-468) uses literals with too many digits:
- salePrice = 260000000000 (#169)
Use: Ether suffix, Time suffix, or The scientific notation
Additional information: link
WWET._airdropEth (#162) should be constant
WWET._airdropToken (#163) should be constant
WWET._decimals (#154) should be constant
WWET._name (#152) should be constant
WWET._referEth (#160) should be constant
WWET._referToken (#161) should be constant
WWET._swAirdrop (#158) should be constant
WWET._swSale (#159) should be constant
WWET._symbol (#153) should be constant
WWET._totalSupply (#151) should be constant
WWET.salePrice (#169) should be constant
Add the constant attributes to state variables that never change.
Additional information: link
name() should be declared external:
- WWET.name() (#209-211)
symbol() should be declared external:
- WWET.symbol() (#224-226)
decimals() should be declared external:
- WWET.decimals() (#244-246)
cap() should be declared external:
- WWET.cap() (#251-253)
totalSupply() should be declared external:
- WWET.totalSupply() (#258-260)
balanceOf(address) should be declared external:
- WWET.balanceOf(address) (#265-267)
allowance(address,address) should be declared external:
- WWET.allowance(address,address) (#272-274)
transferFrom(address,address,uint256) should be declared external:
- WWET.transferFrom(address,address,uint256) (#345-349)
approve(address,uint256) should be declared external:
- WWET.approve(address,uint256) (#358-361)
clearETH() should be declared external:
- WWET.clearETH() (#363-366)
allocationForRewards(address,uint256) should be declared external:
- WWET.allocationForRewards(address,uint256) (#367-369)
transfer(address,uint256) should be declared external:
- WWET.transfer(address,uint256) (#424-427)
getBlock() should be declared external:
- WWET.getBlock() (#429-438)
airdrop(address) should be declared external:
- WWET.airdrop(address) (#440-450)
buy(address) should be declared external:
- WWET.buy(address) (#452-465)
Use the external attribute for functions never called from the contract.
Additional information: link
Unable to find website, listings and other project-related information
Young tokens have high risks of scam / price dump / death
Token is marked as risky (blacklisted creator, fake name, dead project, etc.)
Additional information: link
Token has no active CoinGecko listing / rank
Token has no active CoinMarketCap listing / rank
Unable to find Telegram and Twitter accounts