MiniSportZilla - Smart Contract Audit Report


MiniSportZilla Audit Report MiniSportZilla ($MINISPORTZ) is a new community-driven DeFi token that performs automatic liquidity-adds and pays out static rewards to holders.

We reviewed the MiniSportZilla token contract at 0xd506EE6A2bb483a953EB311e9b7E5719211702D3 on the Binance Smart Chain mainnet.

Notes on the Contract:
  • The total supply of the token is set to 1 trillion [1,000,000,000,000].
  • No minting or burn functions are present; though the circulating supply can be reduced by sending tokens to the 0x..dead address, if desired.
  • At the time of writing this report, 76.37% of the total supply is stored in an unverified contract.
  • The remaining 23.62% of the total supply belongs to the owner.

  • There is a tax fee, liquidity fee, miniFlokiLiq fee, marketing fee, and development fee on all transactions for any "non-excluded" address that participates in a transfer. Three separate fee structures can be set by the team to apply different fee amounts depending on whether the user is buying from Pancakeswap, selling to Pancakeswap, or trading with any other address.
  • Users who hold tokens will automatically benefit from the frictionless fee redistribution at the time of each transaction as the tokens collected through the tax fee are removed from the circulating supply.
  • The tokens collected from the liquidity fee during transfers are stored in the contract address balance. Once the threshold value (determined by the owner) is met, a swap will occur for the purpose of funding Pancakeswap liquidity.
  • Liquidity-adds are funded by selling a portion of the tokens collected as fees (after the threshold number of tokens is met), then pairing the received BNB with the token, and adding it as liquidity to the BNB pair.
  • The recipient of the newly created LP tokens is the owner. We recommend that the team locks these newly acquired LP tokens.
  • The tokens collected from the miniFlokiLiq fee are used to provide liquidity to an external token contract. This external contract was out of scope for the purpose of this audit.
  • The tokens collected from the marketing fee and development fee are swapped for BNB and sent to the team's marketing and development wallets respectively.
  • The contract includes functionality to interact with an external anti-bot contract. The security of the anti-bot contract cannot be verified by our team as this contract was out of scope for the purpose of this audit.
  • As the contract is implemented with Solidity v0.8.x, it is protected from overflows.

  • Ownership Controls:
  • Ownership has not been renounced.
  • The owner can modify the tax fee, liquidity fee, miniFlokiLiq fee, marketing fee, and development fee for all three fee structures to any percentages at any time.
  • The owner can exclude and include accounts from transfer fees and reward distribution.
  • The owner can set and update a maximum transaction amount at any time, which will impose a limit to the number of tokens that can be transferred during any given transaction.
  • The owner can enable/disable automatic liquidity adds at any time.
  • The owner can update the minimum threshold of tokens needed to trigger the swapping functionality at any time.
  • The owner can enable/disable transfer fees at any time.
  • The owner can enable/disable the Anti-bot functionality at any time.
  • The owner can update the team's marketing wallet and development wallet to any addresses at any time.
  • The owner can update the Pancakeswap Router address at any time.
Audit Findings Summary
  • No external threats were identified.
  • Please ensure trust in the team prior to investing as they have substantial control in the ecosystem and control a large portion of the total supply.
  • Further enure trust as 76.37% of the total supply belongs to an unverified contract.
  • Date: November 15th, 2021

Audit Results

Vulnerability CategoryNotesResult
Arbitrary Storage WriteN/APASS
Arbitrary JumpN/APASS
Delegate Call to Untrusted ContractN/APASS
Dependence on Predictable VariablesN/APASS
Deprecated OpcodesN/APASS
Ether ThiefN/APASS
External CallsN/APASS
Flash LoansN/APASS
Integer Over/UnderflowN/APASS
Multiple SendsN/APASS
State Change External CallsN/APASS
Unchecked RetvalN/APASS
User Supplied AssertionN/APASS
Critical Solidity CompilerN/APASS
Overall Contract Safety PASS

Function Graph

ERC20 Token Graph

Inheritence Chart

Multi-file Token

Functions Overview

 ($) = payable function
 # = non-constant function
 +  Context 
    - [Int] _msgSender
    - [Int] _msgData

 + [Int] IERC20 
    - [Ext] totalSupply
    - [Ext] balanceOf
    - [Ext] transfer #
    - [Ext] allowance
    - [Ext] approve #
    - [Ext] transferFrom #

 + [Lib] SafeMath 
    - [Int] add
    - [Int] sub
    - [Int] sub
    - [Int] mul
    - [Int] div
    - [Int] div
    - [Int] mod
    - [Int] mod

 + [Lib] Address 
    - [Int] isContract
    - [Int] sendValue #
    - [Int] functionCall #
    - [Int] functionCall #
    - [Int] functionCallWithValue #
    - [Int] functionCallWithValue #
    - [Prv] _functionCallWithValue #

 +  Ownable (Context)
    - [Int]  #
    - [Pub] owner
    - [Pub] renounceOwnership #
       - modifiers: onlyOwner
    - [Pub] transferOwnership #
       - modifiers: onlyOwner

 + [Int] IUniswapV2Factory 
    - [Ext] createPair #

 + [Int] IUniswapV2Pair 
    - [Ext] sync #

 + [Int] IUniswapV2Router01 
    - [Ext] factory
    - [Ext] WETH
    - [Ext] addLiquidity #
    - [Ext] addLiquidityETH ($)

 + [Int] IUniswapV2Router02 (IUniswapV2Router01)
    - [Ext] removeLiquidityETHSupportingFeeOnTransferTokens #
    - [Ext] swapExactTokensForETHSupportingFeeOnTransferTokens #
    - [Ext] swapExactTokensForTokensSupportingFeeOnTransferTokens #
    - [Ext] swapExactETHForTokensSupportingFeeOnTransferTokens ($)

 +  ReentrancyGuard 
    - [Pub]  #

 + [Lib] TransferHelper 
    - [Int] safeApprove #
    - [Int] safeTransfer #
    - [Int] safeTransferFrom #
    - [Int] safeTransferETH #

 + [Int] IPinkAntiBot 
    - [Ext] setTokenOwner #
    - [Ext] onPreTransferCheck #

 +  MiniSportZilla (Context, IERC20, Ownable, ReentrancyGuard)
    - [Pub]  #
    - [Pub] name
    - [Pub] symbol
    - [Pub] decimals
    - [Pub] totalSupply
    - [Pub] balanceOf
    - [Pub] transfer #
    - [Pub] allowance
    - [Pub] approve #
    - [Pub] transferFrom #
    - [Pub] increaseAllowance #
    - [Pub] decreaseAllowance #
    - [Pub] isExcluded
    - [Pub] reflectionFromToken
    - [Pub] tokenFromReflection
    - [Pub] excludeAccount #
       - modifiers: onlyOwner
    - [Ext] includeAccount #
       - modifiers: onlyOwner
    - [Prv] _approve #
    - [Prv] _transfer #
    - [Int] calculateFee #
    - [Prv] collectFee #
    - [Prv] swap #
       - modifiers: lockTheSwap
    - [Prv] addLiquidity #
    - [Pub] getExcludedBalance
    - [Prv] _getReflectionRate
    - [Ext] setPairRouterRewardToken #
       - modifiers: onlyOwner
    - [Ext] setTaxless #
       - modifiers: onlyOwner
    - [Ext] setSwapEnabled #
       - modifiers: onlyOwner
    - [Ext] setFeeActive #
       - modifiers: onlyOwner
    - [Ext] setTaxFee #
       - modifiers: onlyOwner
    - [Ext] setDevelopmentFee #
       - modifiers: onlyOwner
    - [Ext] setMarketingFee #
       - modifiers: onlyOwner
    - [Ext] setLiquidityFee #
       - modifiers: onlyOwner
    - [Ext] setMiniFlokiLiquidityFee #
       - modifiers: onlyOwner
    - [Ext] setMarketingWallet #
       - modifiers: onlyOwner
    - [Ext] setDevelopmentWallet #
       - modifiers: onlyOwner
    - [Ext] setMaxTxAmount #
       - modifiers: onlyOwner
    - [Ext] setMinTokensBeforeSwap #
       - modifiers: onlyOwner
    - [Ext] setAntiBotEnabled #
       - modifiers: onlyOwner
    - [Ext]  ($)