Kuku - Audit

All of the `Kuku` tokens are sent to the contract deployer address. This is a centralization risk because the deployer EOA can distribute tokens without obtaining the consensus of the community. Any compromise to the deployer address may allow a hacker to steal and sell tokens on the market, resulting in severe damage to the project. ### Top Holders as of Aug 15, 2023 The two biggest holders are as follows: * [UniswapV2](https://etherscan.io/token/0xc3071803b9d23460820b516673fd3cec0415d0ed?a=0x2fec2ac79a24c05f2cdde894746b05f7c9ada985): 2,143,367,130,787.35 (21.43%) * [0x744358f8b6507946cbc76d14bc87cdfdc6d0c904](https://etherscan.io/address/0x744358f8b6507946cbc76d14bc87cdfdc6d0c904): 301,076,608,281.50 (3.01%) Source: [https://etherscan.io/token/0xc3071803b9d23460820b516673fd3cec0415d0ed#balances](https://etherscan.io/token/0xc3071803b9d23460820b516673fd3cec0415d0ed#balances)

Within function `internalSwap()` the native tokens that are received in return after the swap of tokens received in fees are all sent to the two marketing wallets controlled by the project. ```solidity if(half > 0) {(success,) = marketingAddress.call{value: half, gas: 35000}("");} if(address(this).balance > 0) {(success,) = marketingAddress2.call{value: address(this).balance, gas: 35000}("");} ``` In the event of an exploit, a malicious hacker can gain control of all funds stored within these marketing wallets.