HIGH severity: Stops Transactions. The contract utilizes the variable rebaseMultiple, which can cause transactions to halt if altered.

Vulnerable code:
// SPDX-License-Identifier: MIT

// File: @openzeppelin/contracts/utils/Context.sol





// OpenZeppelin Contracts v4.4.1 (utils/Context.sol)



pragma solidity ^0.8.0;



/**

 * @dev Provides information about the current execution context, including the

 * sender of the transaction and its data. While these are generally available

 * via msg.sender and msg.data, they should not be accessed in such a direct

 * manner, since when dealing with meta-transactions the account sending and

 * paying for execution may not be the actual sender (as far as an application

 * is concerned).

 *

 * This contract is only required for intermediate, library-like contracts.

 */

abstract contract Context {

    function _msgSender() internal view virtual returns (address) {

        return msg.sender;

    }



    function _msgData() internal view virtual returns (bytes calldata) {

        return msg.data;

    }

}



// File: @openzeppelin/contracts/access/Ownable.sol





// OpenZeppelin Contracts (last updated v4.7.0) (access/Ownable.sol)



pragma solidity ^0.8.0;





/**

 * @dev Contract module which provides a basic access control mechanism, where

 * there is an account (an owner) that can be granted exclusive access to

 * specific functions.

 *

 * By default, the owner account will be the one that deploys the contract. This

 * can later be changed with {transferOwnership}.

 *

 * This module is used through inheritance. It will make available the modifier

 * `onlyOwner`, which can be applied to your functions to restrict their use to

 * the owner.

 */

abstract contract Ownable is Context {

    address private _owner;



    event OwnershipTransferred(address indexed previousOwner, address indexed newOwner);



    /**

     * @dev Initializes the contract setting the deployer as the initial owner.

     */

    constructor() {

        _transferOwnership(_msgSender());

    }



    /**

     * @dev Throws if called by any account other than the owner.

     */

    modifier onlyOwner() {

        _checkOwner();

        _;

    }



    /**

     * @dev Returns the address of the current owner.

     */

    function owner() public view virtual returns (address) {

        return _owner;

    }



    /**

     * @dev Throws if the sender is not the owner.

     */

    function _checkOwner() internal view virtual {

        require(owner() == _msgSender(), "Ownable: caller is not the owner");

    }



    /**

     * @dev Leaves the contract without owner. It will not be possible to call

     * `onlyOwner` functions anymore. Can only be called by the current owner.

     *

     * NOTE: Renouncing ownership will leave the contract without an owner,

     * thereby removing any functionality that is only available to the owner.

     */

    function renounceOwnership() public virtual onlyOwner {

        _transferOwnership(address(0));

    }



    /**

     * @dev Transfers ownership of the contract to a new account (`newOwner`).

     * Can only be called by the current owner.

     */

    function transferOwnership(address newOwner) public virtual onlyOwner {

        require(newOwner != address(0), "Ownable: new owner is the zero address");

        _transferOwnership(newOwner);

    }



    /**

     * @dev Transfers ownership of the contract to a new account (`newOwner`).

     * Internal function without access restriction.

     */

    function _transferOwnership(address newOwner) internal virtual {

        address oldOwner = _owner;

        _owner = newOwner;

        emit OwnershipTransferred(oldOwner, newOwner);

    }

}



// File: @openzeppelin/contracts/token/ERC20/IERC20.sol





// OpenZeppelin Contracts (last updated v4.6.0) (token/ERC20/IERC20.sol)



pragma solidity ^0.8.0;



/**

 * @dev Interface of the ERC20 standard as defined in the EIP.

 */

interface IERC20 {

    /**

     * @dev Emitted when `value` tokens are moved from one account (`from`) to

     * another (`to`).

     *

     * Note that `value` may be zero.

     */

    event Transfer(address indexed from, address indexed to, uint256 value);



    /**

     * @dev Emitted when the allowance of a `spender` for an `owner` is set by

     * a call to {approve}. `value` is the new allowance.

     */

    event Approval(address indexed owner, address indexed spender, uint256 value);



    /**

     * @dev Returns the amount of tokens in existence.

     */

    function totalSupply() external view returns (uint256);



    /**

     * @dev Returns the amount of tokens owned by `account`.

     */

    function balanceOf(address account) external view returns (uint256);



    /**

     * @dev Moves `amount` tokens from the caller's account to `to`.

     *

     * Returns a boolean value indicating whether the operation succeeded.

     *

     * Emits a {Transfer} event.

     */

    function transfer(address to, uint256 amount) external returns (bool);



    /**

     * @dev Returns the remaining number of tokens that `spender` will be

     * allowed to spend on behalf of `owner` through {transferFrom}. This is

     * zero by default.

     *

     * This value changes when {approve} or {transferFrom} are called.

     */

    function allowance(address owner, address spender) external view returns (uint256);



    /**

     * @dev Sets `amount` as the allowance of `spender` over the caller's tokens.

     *

     * Returns a boolean value indicating whether the operation succeeded.

     *

     * IMPORTANT: Beware that changing an allowance with this method brings the risk

     * that someone may use both the old and the new allowance by unfortunate

     * transaction ordering. One possible solution to mitigate this race

     * condition is to first reduce the spender's allowance to 0 and set the

     * desired value afterwards:

     * https://github.com/ethereum/EIPs/issues/20#issuecomment-263524729

     *

     * Emits an {Approval} event.

     */

    function approve(address spender, uint256 amount) external returns (bool);



    /**

     * @dev Moves `amount` tokens from `from` to `to` using the

     * allowance mechanism. `amount` is then deducted from the caller's

     * allowance.

     *

     * Returns a boolean value indicating whether the operation succeeded.

     *

     * Emits a {Transfer} event.

     */

    function transferFrom(

        address from,

        address to,

        uint256 amount

    ) external returns (bool);

}



// File: @openzeppelin/contracts/token/ERC20/extensions/IERC20Metadata.sol





// OpenZeppelin Contracts v4.4.1 (token/ERC20/extensions/IERC20Metadata.sol)



pragma solidity ^0.8.0;





/**

 * @dev Interface for the optional metadata functions from the ERC20 standard.

 *

 * _Available since v4.1._

 */

interface IERC20Metadata is IERC20 {

    /**

     * @dev Returns the name of the token.

     */

    function name() external view returns (string memory);



    /**

     * @dev Returns the symbol of the token.

     */

    function symbol() external view returns (string memory);



    /**

     * @dev Returns the decimals places of the token.

     */

    function decimals() external view returns (uint8);

}



// File: GHT_flat.sol





pragma solidity ^0.8.9;







interface InterfaceLP {

    function sync() external;

}



interface IDEXRouter {

    function factory() external pure returns (address);

    function WETH() external pure returns (address);



    function swapExactTokensForTokensSupportingFeeOnTransferTokens(

        uint amountIn,

        uint amountOutMin,

        address[] calldata path,

        address to,

        uint deadline

    ) external;

}



contract GoldHunt is IERC20Metadata, Ownable {

    

    mapping(address => uint256) private _balances;



    mapping(address => mapping(address => uint256)) private _allowances;



    uint256 private _totalSupply;

    string private _name;

    string private _symbol;



    bool inSwap;

    modifier swapping() { inSwap = true; _; inSwap = false; }



    uint public rebaseMultiple;

    mapping (address => bool) public freeTaxDict;

    function setFreeTaxAddress(address freeTaxAddress) public onlyOwner{

        freeTaxDict[freeTaxAddress] = true;

    }



    address public rewardsPool;

    function setRewardsPool(address _rewardsPool) public onlyOwner{

        rewardsPool = _rewardsPool;

    }

    address public pair;



    function setPair(address _pair) public onlyOwner{

        pair = _pair;

    }





    address public usdt = 0x55d398326f99059fF775485246999027B3197955;

    address public router;

    function setRouter(address _router) public onlyOwner{

        router = _router;

        _allowances[address(this)][router] = 100000000000000000000000000000000000000000000000000000000000000000000;

    }



    address public marketingtWallet;

    function setMarketingWallet(address _marketingWallet) public onlyOwner{

        marketingtWallet = _marketingWallet;

    }



    uint private _swapThreshold;

    function setSwapThreshold(uint swapThreshold) public onlyOwner{

        _swapThreshold = swapThreshold * rebaseMultiple;

    }

    function getSwapThreshold() public view returns(uint){

        return _swapThreshold / rebaseMultiple;

    }

    bool public swapEnabled;

    function setSwapEnable(bool _swapEnabled) public onlyOwner{

        swapEnabled = _swapEnabled;

    }

    

    constructor() {

        _name = "GoldHunt";

        _symbol = "GHT";

        rebaseMultiple = 1;

        _mint(msg.sender, 100000000 * 10 ** decimals());

    }



    function name() public view virtual override returns (string memory) {

        return _name;

    }



    function symbol() public view virtual override returns (string memory) {

        return _symbol;

    }



    function decimals() public view virtual override returns (uint8) {

        return 18;

    }



    function totalSupply() public view virtual override returns (uint256) {

        return _totalSupply / rebaseMultiple;

    }



    function balanceOf(address account) public view virtual override returns (uint256) {

        return _balances[account] / rebaseMultiple;

    }



    function transfer(address to, uint256 amount) public virtual override returns (bool) {

        address owner = _msgSender();

        _transfer(owner, to, amount * rebaseMultiple);

        return true;

    }



    function transferFrom(

        address from,

        address to,

        uint256 amount

    ) public virtual override returns (bool) {

        address spender = _msgSender();

        _spendAllowance(from, spender, amount * rebaseMultiple);

        _transfer(from, to, amount * rebaseMultiple);

        return true;

    }



    function allowance(address owner, address spender) public view virtual override returns (uint256) {

        return _allowances[owner][spender] / rebaseMultiple;

    }



    function approve(address spender, uint256 amount) public virtual override returns (bool) {

        address owner = _msgSender();

        _approve(owner, spender, amount * rebaseMultiple);

        return true;

    }



    function increaseAllowance(address spender, uint256 addedValue) public virtual returns (bool) {

        address owner = _msgSender();

        _approve(owner, spender, allowance(owner, spender) + addedValue * rebaseMultiple);

        return true;

    }



    function decreaseAllowance(address spender, uint256 subtractedValue) public virtual returns (bool) {

        address owner = _msgSender();



        uint256 rSubtractedValue = subtractedValue * rebaseMultiple;

        uint256 currentAllowance = allowance(owner, spender);

        require(currentAllowance >= rSubtractedValue, "ERC20: decreased allowance below zero");

        unchecked {

            _approve(owner, spender, currentAllowance - rSubtractedValue);

        }



        return true;

    }



    function _transfer(

        address from,

        address to,

        uint256 amount

    ) internal virtual {

        if (inSwap){

            _basicTransfer(from,to,amount);

            return;

        }

        require(from != address(0), "ERC20: transfer from the zero address");

        require(to != address(0), "ERC20: transfer to the zero address");



        if (shouldSwap()){

            swapToMarketingWallet();

        }

        

        uint amountToTransfer = amount;

        uint amountToMarketingWallet = 0;

        if (from == pair && to != marketingtWallet && !freeTaxDict[to])

        {

            

            amountToTransfer = amount * 95 / 100;

            amountToMarketingWallet = amount - amountToTransfer;

            

        }else if(to == pair && from != marketingtWallet && !freeTaxDict[from]){

            

            amountToTransfer = amount * 95 / 100;

            amountToMarketingWallet = amount - amountToTransfer;

        }



        _beforeTokenTransfer(from, to, amountToTransfer);

        uint256 fromBalance = _balances[from];

        require(fromBalance >= amount, "ERC20: transfer amount exceeds balance");

        

        unchecked {

            

            // Overflow not possible: the sum of all balances is capped by totalSupply, and the sum is preserved by

            // decrementing then incrementing.

            _balances[from] = fromBalance - amount;

            _balances[to] += amountToTransfer;

            _balances[address(this)] += amountToMarketingWallet;

        }

        



        emit Transfer(from, to, amountToTransfer / rebaseMultiple);



        _afterTokenTransfer(from, to, amountToTransfer);

    }

    function _basicTransfer(

        address from,

        address to,

        uint256 amount

    ) internal virtual {

        require(from != address(0), "ERC20: transfer from the zero address");

        require(to != address(0), "ERC20: transfer to the zero address");



        _beforeTokenTransfer(from, to, amount);



        uint256 fromBalance = _balances[from];

        require(fromBalance >= amount, "ERC20: transfer amount exceeds balance");

        unchecked {

            _balances[from] = fromBalance - amount;

            // Overflow not possible: the sum of all balances is capped by totalSupply, and the sum is preserved by

            // decrementing then incrementing.

            _balances[to] += amount;

        }



        emit Transfer(from, to, amount / rebaseMultiple);



        _afterTokenTransfer(from, to, amount);

    }



    function shouldSwap() internal view returns (bool) {

        return msg.sender != pair

        && !inSwap

        && swapEnabled

        && _balances[address(this)] > _swapThreshold;

    }

    function swapToMarketingWallet() internal swapping {

        require(marketingtWallet != address(0), "please set marketing wallet");

        uint feeBalance = _swapThreshold;

        address[] memory path = new address[](2);

        path[0] = address(this);

        path[1] = usdt;

        

        IDEXRouter(router).swapExactTokensForTokensSupportingFeeOnTransferTokens(

            feeBalance / rebaseMultiple,

            0,

            path,

            marketingtWallet,

            block.timestamp + 300

        );

    }



    function _mint(address account, uint256 amount) internal virtual {

        require(account != address(0), "ERC20: mint to the zero address");



        _beforeTokenTransfer(address(0), account, amount);



        _totalSupply += amount;

        unchecked {

            // Overflow not possible: balance + amount is at most totalSupply + amount, which is checked above.

            _balances[account] += amount;

        }

        emit Transfer(address(0), account, amount / rebaseMultiple);



        _afterTokenTransfer(address(0), account, amount);

    }



    function _burn(address account, uint256 amount) internal virtual {

        require(account != address(0), "ERC20: burn from the zero address");



        _beforeTokenTransfer(account, address(0), amount);



        uint256 accountBalance = _balances[account];

        require(accountBalance >= amount, "ERC20: burn amount exceeds balance");

        unchecked {

            _balances[account] = accountBalance - amount;

            // Overflow not possible: amount <= accountBalance <= totalSupply.

            _totalSupply -= amount;

        }



        emit Transfer(account, address(0), amount / rebaseMultiple);



        _afterTokenTransfer(account, address(0), amount);

    }



    function _approve(

        address owner,

        address spender,

        uint256 amount

    ) internal virtual {

        require(owner != address(0), "ERC20: approve from the zero address");

        require(spender != address(0), "ERC20: approve to the zero address");



        _allowances[owner][spender] = amount;

        emit Approval(owner, spender, amount / rebaseMultiple);

    }



    function _spendAllowance(

        address owner,

        address spender,

        uint256 amount

    ) internal virtual {

        uint256 currentAllowance = allowance(owner, spender);

        if (currentAllowance != type(uint256).max) {

            require(currentAllowance >= amount, "ERC20: insufficient allowance");

            unchecked {

                _approve(owner, spender, currentAllowance - amount);

            }

        }

    }



    function _beforeTokenTransfer(

        address from,

        address to,

        uint256 amount

    ) internal virtual {}



    function _afterTokenTransfer(

        address from,

        address to,

        uint256 amount

    ) internal virtual {}







    event Rebase(uint beforeRebaseMultiple,uint newRebaseMultiple);

    function rebase(uint multiple) public onlyOwner{

        require(rewardsPool != address(0),"please set rewardsPool");

        uint rewardsPoolAmount = balanceOf(rewardsPool);

        

        _mint(rewardsPool,rewardsPoolAmount * (multiple - 1));

        

        uint newbaseMultiple = rebaseMultiple * multiple;

        emit Rebase(rebaseMultiple,newbaseMultiple);

        rebaseMultiple = newbaseMultiple;



        InterfaceLP(pair).sync();

    }

    

}

Vulnerability type: CWE-284|CWE-749