Woj Finance

```solidity= pancakeRouter.addLiquidityETH{value: bnbAmount}( address(this), tokenAmount, 0, // Slippage is unavoidable 0, // Slippage is unavoidable owner(), block.timestamp ); ``` The `addLiquidity` function calls the `pancakeRouter.addLiquidityETH` function with the `to` address specified as `owner()` for acquiring the generated LP tokens from the `SafeMoon-BNB` pool. As a result, over time the `_owner` address will accumulate a significant portion of LP tokens. If the `_owner` is an EOA (Externally Owned Account), mishandling of its private key can have devastating consequences to the project as a whole.

All of the WOJ tokens are sent to the contract deployer when deploying the contract. This could be a centralization risk as the deployer can distribute WOJ tokens without obtaining the consensus of the community.

There should always be events emitted in the sensitive functions that are controlled by centralization roles.

The contract is serving as the underlying entity to interact with third party PancakeSwap protocols. The scope of the audit treats 3rd party entities as black boxes and assume their functional correctness. However, in the real world, 3rd parties can be compromised and this may lead to lost or stolen assets. In addition, upgrades of 3rd parties can possibly create severe impacts, such as increasing fees of 3rd parties, migrating to new LP pools, etc.