Unable to find manual contract audit (e.g. Certik, PeckShield, Solidity...)
Reentrancy in word._transfer(address,address,uint256) (#614-652):
External calls:
- swapAndLiquify(contractTokenBalance) (#636)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#706-713)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#693-699)
External calls sending eth:
- swapAndLiquify(contractTokenBalance) (#636)
- recipient.transfer(amount) (#580)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#706-713)
State variables written after the call(s):
- _balances[sender] = _balances[sender].sub(amount,Insufficient Balance) (#639)
- _balances[recipient] = _balances[recipient].add(finalAmount) (#647)
- finalAmount = takeFee(sender,recipient,amount) (#641-642)
- _balances[address(this)] = _balances[address(this)].add(feeAmount) (#728)
Apply the check-effects-interactions pattern.
Additional information: link
word.addLiquidity(uint256,uint256) (#704-714) sends eth to arbitrary user
Dangerous calls:
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#706-713)
Ensure that an arbitrary user cannot withdraw unauthorized funds.
Additional information: link
Combination 1: Reentrancy vulnerabilities + Functions that send Ether to arbitraty destination. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.
waiveOwnership() should be declared external:
- Ownable.waiveOwnership() (#135-138)
transferOwnership(address) should be declared external:
- Ownable.transferOwnership(address) (#140-144)
getTime() should be declared external:
- Ownable.getTime() (#146-148)
name() should be declared external:
- word.name() (#448-450)
symbol() should be declared external:
- word.symbol() (#452-454)
decimals() should be declared external:
- word.decimals() (#456-458)
totalSupply() should be declared external:
- word.totalSupply() (#460-462)
allowance(address,address) should be declared external:
- word.allowance(address,address) (#468-470)
increaseAllowance(address,uint256) should be declared external:
- word.increaseAllowance(address,uint256) (#472-475)
decreaseAllowance(address,uint256) should be declared external:
- word.decreaseAllowance(address,uint256) (#477-480)
minimumTokensBeforeSwapAmount() should be declared external:
- word.minimumTokensBeforeSwapAmount() (#482-484)
approve(address,uint256) should be declared external:
- word.approve(address,uint256) (#486-489)
setMarketPairStatus(address,bool) should be declared external:
- word.setMarketPairStatus(address,bool) (#499-501)
setIsExcludedFromFee(address,bool) should be declared external:
- word.setIsExcludedFromFee(address,bool) (#507-509)
setSwapAndLiquifyEnabled(bool,uint256,address) should be declared external:
- word.setSwapAndLiquifyEnabled(bool,uint256,address) (#564-569)
setSwapAndLiquifyByLimitOnly(bool) should be declared external:
- word.setSwapAndLiquifyByLimitOnly(bool) (#571-573)
getCirculatingSupply() should be declared external:
- word.getCirculatingSupply() (#575-577)
changeRouterVersion(address) should be declared external:
- word.changeRouterVersion(address) (#583-600)
transfer(address,uint256) should be declared external:
- word.transfer(address,uint256) (#603-606)
transferFrom(address,address,uint256) should be declared external:
- word.transferFrom(address,address,uint256) (#608-612)
Use the external attribute for functions never called from the contract.
Additional information: link
word.addLiquidity(uint256,uint256) (#704-714) ignores return value by uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#706-713)
Ensure that all the return values of the function calls are used.
Additional information: link
word.allowance(address,address).owner (#468) shadows:
- Ownable.owner() (#128-130) (function)
word._approve(address,address,uint256).owner (#491) shadows:
- Ownable.owner() (#128-130) (function)
Rename the local variables that shadow another component.
Additional information: link
word.setBuyTaxes(uint256,uint256,uint256) (#511-517) should emit an event for:
- _totalTaxIfBuying = _buyLiquidityFee.add(_buyMarketingFee).add(_buyTeamFee) (#516)
word.setDistributionSettings(uint256,uint256,uint256) (#528-534) should emit an event for:
- _liquidityShare = newLiquidityShare (#529)
- _teamShare = newTeamShare (#531)
- _totalDistributionShares = _liquidityShare.add(_marketingShare).add(_teamShare) (#533)
word.setMaxTxAmount(uint256) (#536-538) should emit an event for:
- _maxTxAmount = maxTxAmount (#537)
word.setWalletLimit(uint256) (#548-550) should emit an event for:
- _walletMax = newLimit (#549)
word.setNumTokensBeforeSwap(uint256) (#552-554) should emit an event for:
- minimumTokensBeforeSwap = newLimit (#553)
Emit an event for critical parameter changes.
Additional information: link
word.setMarketingWalletAddress(address).newAddress (#556) lacks a zero-check on :
- marketingWalletAddress = address(newAddress) (#557)
word.setTeamWalletAddress(address).newAddress (#560) lacks a zero-check on :
- teamWalletAddress = address(newAddress) (#561)
Check that the address is not zero.
Additional information: link
Reentrancy in word.changeRouterVersion(address) (#583-600):
External calls:
- newPairAddress = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#591-592)
State variables written after the call(s):
- isMarketPair[address(uniswapPair)] = true (#599)
- isWalletLimitExempt[address(uniswapPair)] = true (#598)
- uniswapPair = newPairAddress (#595)
- uniswapV2Router = _uniswapV2Router (#596)
Reentrancy in word.constructor() (#417-446):
External calls:
- uniswapPair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#420-421)
State variables written after the call(s):
- _allowances[address(this)][address(uniswapV2Router)] = _totalSupply (#424)
- _balances[_msgSender()] = _totalSupply (#444)
- _totalDistributionShares = _liquidityShare.add(_marketingShare).add(_teamShare) (#431)
- _totalTaxIfBuying = _buyLiquidityFee.add(_buyMarketingFee).add(_buyTeamFee) (#429)
- _totalTaxIfSelling = _sellLiquidityFee.add(_sellMarketingFee).add(_sellTeamFee) (#430)
- isExcludedFromFee[owner()] = true (#426)
- isExcludedFromFee[address(this)] = true (#427)
- isMarketPair[address(uniswapPair)] = true (#439)
- isTxLimitExempt[owner()] = true (#437)
- isTxLimitExempt[address(this)] = true (#438)
- isWalletLimitExempt[owner()] = true (#433)
- isWalletLimitExempt[address(uniswapPair)] = true (#434)
- isWalletLimitExempt[address(this)] = true (#435)
- marketingWalletAddress = address(address(0xB0F55960eD354D05445502cD0F61Ed58f8d6DbBF)) (#442)
- teamWalletAddress = address(address(0xB0F55960eD354D05445502cD0F61Ed58f8d6DbBF)) (#441)
- uniswapV2Router = _uniswapV2Router (#423)
Reentrancy in word.swapAndLiquify(uint256) (#661-683):
External calls:
- swapTokensForEth(tokensForSwap) (#666)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#693-699)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#682)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#706-713)
External calls sending eth:
- transferToAddressETH(marketingWalletAddress,amountBNBMarketing) (#676)
- recipient.transfer(amount) (#580)
- transferToAddressETH(teamWalletAddress,amountBNBTeam) (#679)
- recipient.transfer(amount) (#580)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#682)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#706-713)
State variables written after the call(s):
- addLiquidity(tokensForLP,amountBNBLiquidity) (#682)
- _allowances[owner][spender] = amount (#495)
Reentrancy in word.transferFrom(address,address,uint256) (#608-612):
External calls:
- _transfer(sender,recipient,amount) (#609)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#706-713)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#693-699)
External calls sending eth:
- _transfer(sender,recipient,amount) (#609)
- recipient.transfer(amount) (#580)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#706-713)
State variables written after the call(s):
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#610)
- _allowances[owner][spender] = amount (#495)
Apply the check-effects-interactions pattern.
Additional information: link
Reentrancy in word._transfer(address,address,uint256) (#614-652):
External calls:
- swapAndLiquify(contractTokenBalance) (#636)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#706-713)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#693-699)
External calls sending eth:
- swapAndLiquify(contractTokenBalance) (#636)
- recipient.transfer(amount) (#580)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#706-713)
Event emitted after the call(s):
- Transfer(sender,address(this),feeAmount) (#729)
- finalAmount = takeFee(sender,recipient,amount) (#641-642)
- Transfer(sender,recipient,finalAmount) (#649)
Reentrancy in word.constructor() (#417-446):
External calls:
- uniswapPair = IUniswapV2Factory(_uniswapV2Router.factory()).createPair(address(this),_uniswapV2Router.WETH()) (#420-421)
Event emitted after the call(s):
- Transfer(address(0),_msgSender(),_totalSupply) (#445)
Reentrancy in word.swapAndLiquify(uint256) (#661-683):
External calls:
- swapTokensForEth(tokensForSwap) (#666)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#693-699)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#682)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#706-713)
External calls sending eth:
- transferToAddressETH(marketingWalletAddress,amountBNBMarketing) (#676)
- recipient.transfer(amount) (#580)
- transferToAddressETH(teamWalletAddress,amountBNBTeam) (#679)
- recipient.transfer(amount) (#580)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#682)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#706-713)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#496)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#682)
Reentrancy in word.swapTokensForEth(uint256) (#686-702):
External calls:
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#693-699)
Event emitted after the call(s):
- SwapTokensForETH(tokenAmount,path) (#701)
Reentrancy in word.transferFrom(address,address,uint256) (#608-612):
External calls:
- _transfer(sender,recipient,amount) (#609)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#706-713)
- uniswapV2Router.swapExactTokensForETHSupportingFeeOnTransferTokens(tokenAmount,0,path,address(this),block.timestamp) (#693-699)
External calls sending eth:
- _transfer(sender,recipient,amount) (#609)
- recipient.transfer(amount) (#580)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#706-713)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#496)
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#610)
Apply the check-effects-interactions pattern.
Additional information: link
Address.isContract(address) (#77-82) uses assembly
- INLINE ASM (#80)
Address._functionCallWithValue(address,bytes,uint256,string) (#97-113) uses assembly
- INLINE ASM (#105-108)
Do not use evm assembly.
Additional information: link
Address._functionCallWithValue(address,bytes,uint256,string) (#97-113) is never used and should be removed
Address.functionCall(address,bytes) (#88-90) is never used and should be removed
Address.functionCall(address,bytes,string) (#91-93) is never used and should be removed
Address.functionCallWithValue(address,bytes,uint256) (#94-96) is never used and should be removed
Address.functionCallWithValue(address,bytes,uint256,string) (#115-118) is never used and should be removed
Address.isContract(address) (#77-82) is never used and should be removed
Address.sendValue(address,uint256) (#83-87) is never used and should be removed
Context._msgData() (#7-10) is never used and should be removed
SafeMath.mod(uint256,uint256) (#65-67) is never used and should be removed
SafeMath.mod(uint256,uint256,string) (#69-72) is never used and should be removed
Remove unused functions.
Additional information: link
word._totalSupply (#381) is set pre-construction with a non-constant function or state variable:
- 1000000000000 * 10 ** _decimals
word._maxTxAmount (#382) is set pre-construction with a non-constant function or state variable:
- 1000000000000 * 10 ** _decimals
word._walletMax (#383) is set pre-construction with a non-constant function or state variable:
- 1000000000000 * 10 ** _decimals
word.minimumTokensBeforeSwap (#384) is set pre-construction with a non-constant function or state variable:
- 10000 * 10 ** _decimals
Remove any initialization of state variables via non-constant state variables or function calls. If variables must be set upon contract deployment, locate initialization in the constructor instead.
Additional information: link
Low level call in Address.sendValue(address,uint256) (#83-87):
- (success) = recipient.call{value: amount}() (#85)
Low level call in Address._functionCallWithValue(address,bytes,uint256,string) (#97-113):
- (success,returndata) = target.call{value: weiValue}(data) (#99)
Avoid low-level calls. Check the call success. If the call is meant for a contract, check for code existence
Additional information: link
Function IUniswapV2Pair.DOMAIN_SEPARATOR() (#182) is not in mixedCase
Function IUniswapV2Pair.PERMIT_TYPEHASH() (#183) is not in mixedCase
Function IUniswapV2Pair.MINIMUM_LIQUIDITY() (#199) is not in mixedCase
Function IUniswapV2Router01.WETH() (#217) is not in mixedCase
Contract word (#348-736) is not in CapWords
Parameter word.setSwapAndLiquifyEnabled(bool,uint256,address)._enabled (#564) is not in mixedCase
Variable word._balances (#357) is not in mixedCase
Variable word._buyLiquidityFee (#365) is not in mixedCase
Variable word._buyMarketingFee (#366) is not in mixedCase
Variable word._buyTeamFee (#367) is not in mixedCase
Variable word._sellLiquidityFee (#369) is not in mixedCase
Variable word._sellMarketingFee (#370) is not in mixedCase
Variable word._sellTeamFee (#371) is not in mixedCase
Variable word._liquidityShare (#373) is not in mixedCase
Variable word._marketingShare (#374) is not in mixedCase
Variable word._teamShare (#375) is not in mixedCase
Variable word._totalTaxIfBuying (#377) is not in mixedCase
Variable word._totalTaxIfSelling (#378) is not in mixedCase
Variable word._totalDistributionShares (#379) is not in mixedCase
Variable word._maxTxAmount (#382) is not in mixedCase
Variable word._walletMax (#383) is not in mixedCase
Follow the Solidity naming convention.
Additional information: link
Redundant expression "this (#8)" inContext (#3-11)
Remove redundant statements if they congest code but offer no value.
Additional information: link
Reentrancy in word._transfer(address,address,uint256) (#614-652):
External calls:
- swapAndLiquify(contractTokenBalance) (#636)
- recipient.transfer(amount) (#580)
External calls sending eth:
- swapAndLiquify(contractTokenBalance) (#636)
- recipient.transfer(amount) (#580)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#706-713)
State variables written after the call(s):
- _balances[sender] = _balances[sender].sub(amount,Insufficient Balance) (#639)
- _balances[recipient] = _balances[recipient].add(finalAmount) (#647)
- finalAmount = takeFee(sender,recipient,amount) (#641-642)
- _balances[address(this)] = _balances[address(this)].add(feeAmount) (#728)
Event emitted after the call(s):
- Transfer(sender,address(this),feeAmount) (#729)
- finalAmount = takeFee(sender,recipient,amount) (#641-642)
- Transfer(sender,recipient,finalAmount) (#649)
Reentrancy in word.swapAndLiquify(uint256) (#661-683):
External calls:
- transferToAddressETH(marketingWalletAddress,amountBNBMarketing) (#676)
- recipient.transfer(amount) (#580)
- transferToAddressETH(teamWalletAddress,amountBNBTeam) (#679)
- recipient.transfer(amount) (#580)
External calls sending eth:
- transferToAddressETH(marketingWalletAddress,amountBNBMarketing) (#676)
- recipient.transfer(amount) (#580)
- transferToAddressETH(teamWalletAddress,amountBNBTeam) (#679)
- recipient.transfer(amount) (#580)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#682)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#706-713)
State variables written after the call(s):
- addLiquidity(tokensForLP,amountBNBLiquidity) (#682)
- _allowances[owner][spender] = amount (#495)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#496)
- addLiquidity(tokensForLP,amountBNBLiquidity) (#682)
Reentrancy in word.transferFrom(address,address,uint256) (#608-612):
External calls:
- _transfer(sender,recipient,amount) (#609)
- recipient.transfer(amount) (#580)
External calls sending eth:
- _transfer(sender,recipient,amount) (#609)
- recipient.transfer(amount) (#580)
- uniswapV2Router.addLiquidityETH{value: ethAmount}(address(this),tokenAmount,0,0,owner(),block.timestamp) (#706-713)
State variables written after the call(s):
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#610)
- _allowances[owner][spender] = amount (#495)
Event emitted after the call(s):
- Approval(owner,spender,amount) (#496)
- _approve(sender,_msgSender(),_allowances[sender][_msgSender()].sub(amount,ERC20: transfer amount exceeds allowance)) (#610)
Apply the check-effects-interactions pattern.
Additional information: link
Variable IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountADesired (#222) is too similar to IUniswapV2Router01.addLiquidity(address,address,uint256,uint256,uint256,uint256,address,uint256).amountBDesired (#223)
Prevent variables from having similar names.
Additional information: link
word.slitherConstructorVariables() (#348-736) uses literals with too many digits:
- deadAddress = 0x000000000000000000000000000000000000dEaD (#356)
word.slitherConstructorVariables() (#348-736) uses literals with too many digits:
- _totalSupply = 1000000000000 * 10 ** _decimals (#381)
word.slitherConstructorVariables() (#348-736) uses literals with too many digits:
- _maxTxAmount = 1000000000000 * 10 ** _decimals (#382)
word.slitherConstructorVariables() (#348-736) uses literals with too many digits:
- _walletMax = 1000000000000 * 10 ** _decimals (#383)
Use: Ether suffix, Time suffix, or The scientific notation
Additional information: link
word._decimals (#353) should be constant
word._name (#351) should be constant
word._symbol (#352) should be constant
Add the constant attributes to state variables that never change.
Additional information: link
Unable to find website, listings and other project-related information
Young tokens have high risks of scam / price dump / death
Token has no active CoinGecko listing / rank
Token has no active CoinMarketCap listing / rank
Unable to find Telegram and Twitter accounts