creation_sourcecode: /**
   *Submitted for verification at testnet.bscscan.com on 2024-02-12
  */
  
  // SPDX-License-Identifier: MIT
  pragma solidity ^0.8.20;
  
  library SafeMath {
      /**
       * @dev Returns the addition of two unsigned integers, with an overflow flag.
       *
       * _Available since v3.4._
       */
      function tryAdd(uint256 a, uint256 b) internal pure returns (bool, uint256) {
          uint256 c = a + b;
          if (c < a) return (false, 0);
          return (true, c);
      }
  
      /**
       * @dev Returns the substraction of two unsigned integers, with an overflow flag.
       *
       * _Available since v3.4._
       */
      function trySub(uint256 a, uint256 b) internal pure returns (bool, uint256) {
          if (b > a) return (false, 0);
          return (true, a - b);
      }
  
      /**
       * @dev Returns the multiplication of two unsigned integers, with an overflow flag.
       *
       * _Available since v3.4._
       */
      function tryMul(uint256 a, uint256 b) internal pure returns (bool, uint256) {
          // Gas optimization: this is cheaper than requiring 'a' not being zero, but the
          // benefit is lost if 'b' is also tested.
          // See: https://github.com/OpenZeppelin/openzeppelin-contracts/pull/522
          if (a == 0) return (true, 0);
          uint256 c = a * b;
          if (c / a != b) return (false, 0);
          return (true, c);
      }
  
      /**
       * @dev Returns the division of two unsigned integers, with a division by zero flag.
       *
       * _Available since v3.4._
       */
      function tryDiv(uint256 a, uint256 b) internal pure returns (bool, uint256) {
          if (b == 0) return (false, 0);
          return (true, a / b);
      }
  
      /**
       * @dev Returns the remainder of dividing two unsigned integers, with a division by zero flag.
       *
       * _Available since v3.4._
       */
      function tryMod(uint256 a, uint256 b) internal pure returns (bool, uint256) {
          if (b == 0) return (false, 0);
          return (true, a % b);
      }
  
      /**
       * @dev Returns the addition of two unsigned integers, reverting on
       * overflow.
       *
       * Counterpart to Solidity's `+` operator.
       *
       * Requirements:
       *
       * - Addition cannot overflow.
       */
      function add(uint256 a, uint256 b) internal pure returns (uint256) {
          uint256 c = a + b;
          require(c >= a, "SafeMath: addition overflow");
          return c;
      }
  
      /**
       * @dev Returns the subtraction of two unsigned integers, reverting on
       * overflow (when the result is negative).
       *
       * Counterpart to Solidity's `-` operator.
       *
       * Requirements:
       *
       * - Subtraction cannot overflow.
       */
      function sub(uint256 a, uint256 b) internal pure returns (uint256) {
          require(b <= a, "SafeMath: subtraction overflow");
          return a - b;
      }
  
      /**
       * @dev Returns the multiplication of two unsigned integers, reverting on
       * overflow.
       *
       * Counterpart to Solidity's `*` operator.
       *
       * Requirements:
       *
       * - Multiplication cannot overflow.
       */
      function mul(uint256 a, uint256 b) internal pure returns (uint256) {
          if (a == 0) return 0;
          uint256 c = a * b;
          require(c / a == b, "SafeMath: multiplication overflow");
          return c;
      }
  
      /**
       * @dev Returns the integer division of two unsigned integers, reverting on
       * division by zero. The result is rounded towards zero.
       *
       * Counterpart to Solidity's `/` operator. Note: this function uses a
       * `revert` opcode (which leaves remaining gas untouched) while Solidity
       * uses an invalid opcode to revert (consuming all remaining gas).
       *
       * Requirements:
       *
       * - The divisor cannot be zero.
       */
      function div(uint256 a, uint256 b) internal pure returns (uint256) {
          require(b > 0, "SafeMath: division by zero");
          return a / b;
      }
  
      /**
       * @dev Returns the remainder of dividing two unsigned integers. (unsigned integer modulo),
       * reverting when dividing by zero.
       *
       * Counterpart to Solidity's `%` operator. This function uses a `revert`
       * opcode (which leaves remaining gas untouched) while Solidity uses an
       * invalid opcode to revert (consuming all remaining gas).
       *
       * Requirements:
       *
       * - The divisor cannot be zero.
       */
      function mod(uint256 a, uint256 b) internal pure returns (uint256) {
          require(b > 0, "SafeMath: modulo by zero");
          return a % b;
      }
  
      /**
       * @dev Returns the subtraction of two unsigned integers, reverting with custom message on
       * overflow (when the result is negative).
       *
       * CAUTION: This function is deprecated because it requires allocating memory for the error
       * message unnecessarily. For custom revert reasons use {trySub}.
       *
       * Counterpart to Solidity's `-` operator.
       *
       * Requirements:
       *
       * - Subtraction cannot overflow.
       */
      function sub(uint256 a, uint256 b, string memory errorMessage) internal pure returns (uint256) {
          require(b <= a, errorMessage);
          return a - b;
      }
  
      /**
       * @dev Returns the integer division of two unsigned integers, reverting with custom message on
       * division by zero. The result is rounded towards zero.
       *
       * CAUTION: This function is deprecated because it requires allocating memory for the error
       * message unnecessarily. For custom revert reasons use {tryDiv}.
       *
       * Counterpart to Solidity's `/` operator. Note: this function uses a
       * `revert` opcode (which leaves remaining gas untouched) while Solidity
       * uses an invalid opcode to revert (consuming all remaining gas).
       *
       * Requirements:
       *
       * - The divisor cannot be zero.
       */
      function div(uint256 a, uint256 b, string memory errorMessage) internal pure returns (uint256) {
          require(b > 0, errorMessage);
          return a / b;
      }
  
      /**
       * @dev Returns the remainder of dividing two unsigned integers. (unsigned integer modulo),
       * reverting with custom message when dividing by zero.
       *
       * CAUTION: This function is deprecated because it requires allocating memory for the error
       * message unnecessarily. For custom revert reasons use {tryMod}.
       *
       * Counterpart to Solidity's `%` operator. This function uses a `revert`
       * opcode (which leaves remaining gas untouched) while Solidity uses an
       * invalid opcode to revert (consuming all remaining gas).
       *
       * Requirements:
       *
       * - The divisor cannot be zero.
       */
      function mod(uint256 a, uint256 b, string memory errorMessage) internal pure returns (uint256) {
          require(b > 0, errorMessage);
          return a % b;
      }
  }
  /**
   * @dev Standard math utilities missing in the Solidity language.
   */
  library Math {
      /**
       * @dev Returns the largest of two numbers.
       */
      function max(uint256 a, uint256 b) internal pure returns (uint256) {
          return a >= b ? a : b;
      }
  
      /**
       * @dev Returns the smallest of two numbers.
       */
      function min(uint256 a, uint256 b) internal pure returns (uint256) {
          return a < b ? a : b;
      }
  
      /**
       * @dev Returns the average of two numbers. The result is rounded towards
       * zero.
       */
      function average(uint256 a, uint256 b) internal pure returns (uint256) {
          // (a + b) / 2 can overflow, so we distribute
          return (a / 2) + (b / 2) + ((a % 2 + b % 2) / 2);
      }
  }
  
  abstract contract Context {
      function _msgSender() internal view virtual returns (address) {
          return msg.sender;
      }
  
      function _msgData() internal view virtual returns (bytes calldata) {
          return msg.data;
      }
  
      function _contextSuffixLength() internal view virtual returns (uint256) {
          return 0;
      }
  }
  /*
   * DSP is Camelot's native ERC20 token.
   * It has an hard cap and manages its own emissions and allocations.
   */
   abstract contract Ownable is Context {
      address private _owner;
  
      /**
       * @dev The caller account is not authorized to perform an operation.
       */
      error OwnableUnauthorizedAccount(address account);
  
      /**
       * @dev The owner is not a valid owner account. (eg. `address(0)`)
       */
      error OwnableInvalidOwner(address owner);
  
      event OwnershipTransferred(address indexed previousOwner, address indexed newOwner);
  
      /**
       * @dev Initializes the contract setting the address provided by the deployer as the initial owner.
       */
      constructor() {
        address initialOwner = msg.sender;
          if (initialOwner == address(0)) {
              revert OwnableInvalidOwner(address(0));
          }
          _transferOwnership(initialOwner);
      }
  
      /**
       * @dev Throws if called by any account other than the owner.
       */
      modifier onlyOwner() {
          _checkOwner();
          _;
      }
  
      /**
       * @dev Returns the address of the current owner.
       */
      function owner() public view virtual returns (address) {
          return _owner;
      }
  
      /**
       * @dev Throws if the sender is not the owner.
       */
      function _checkOwner() internal view virtual {
          if (owner() != _msgSender()) {
              revert OwnableUnauthorizedAccount(_msgSender());
          }
      }
  
      /**
       * @dev Leaves the contract without owner. It will not be possible to call
       * `onlyOwner` functions. Can only be called by the current owner.
       *
       * NOTE: Renouncing ownership will leave the contract without an owner,
       * thereby disabling any functionality that is only available to the owner.
       */
      function renounceOwnership() public virtual onlyOwner {
          _transferOwnership(address(0));
      }
  
      /**
       * @dev Transfers ownership of the contract to a new account (`newOwner`).
       * Can only be called by the current owner.
       */
      function transferOwnership(address newOwner) public virtual onlyOwner {
          if (newOwner == address(0)) {
              revert OwnableInvalidOwner(address(0));
          }
          _transferOwnership(newOwner);
      }
  
      /**
       * @dev Transfers ownership of the contract to a new account (`newOwner`).
       * Internal function without access restriction.
       */
      function _transferOwnership(address newOwner) internal virtual {
          address oldOwner = _owner;
          _owner = newOwner;
          emit OwnershipTransferred(oldOwner, newOwner);
      }
  }
  
  interface IERC20 {
      /**
       * @dev Emitted when `value` tokens are moved from one account (`from`) to
       * another (`to`).
       *
       * Note that `value` may be zero.
       */
      event Transfer(address indexed from, address indexed to, uint256 value);
  
      /**
       * @dev Emitted when the allowance of a `spender` for an `owner` is set by
       * a call to {approve}. `value` is the new allowance.
       */
      event Approval(address indexed owner, address indexed spender, uint256 value);
  
      /**
       * @dev Returns the value of tokens in existence.
       */
      function totalSupply() external view returns (uint256);
  
      /**
       * @dev Returns the value of tokens owned by `account`.
       */
      function balanceOf(address account) external view returns (uint256);
  
      /**
       * @dev Moves a `value` amount of tokens from the caller's account to `to`.
       *
       * Returns a boolean value indicating whether the operation succeeded.
       *
       * Emits a {Transfer} event.
       */
      function transfer(address to, uint256 value) external returns (bool);
  
      /**
       * @dev Returns the remaining number of tokens that `spender` will be
       * allowed to spend on behalf of `owner` through {transferFrom}. This is
       * zero by default.
       *
       * This value changes when {approve} or {transferFrom} are called.
       */
      function allowance(address owner, address spender) external view returns (uint256);
  
      /**
       * @dev Sets a `value` amount of tokens as the allowance of `spender` over the
       * caller's tokens.
       *
       * Returns a boolean value indicating whether the operation succeeded.
       *
       * IMPORTANT: Beware that changing an allowance with this method brings the risk
       * that someone may use both the old and the new allowance by unfortunate
       * transaction ordering. One possible solution to mitigate this race
       * condition is to first reduce the spender's allowance to 0 and set the
       * desired value afterwards:
       * https://github.com/ethereum/EIPs/issues/20#issuecomment-263524729
       *
       * Emits an {Approval} event.
       */
      function approve(address spender, uint256 value) external returns (bool);
  
      /**
       * @dev Moves a `value` amount of tokens from `from` to `to` using the
       * allowance mechanism. `value` is then deducted from the caller's
       * allowance.
       *
       * Returns a boolean value indicating whether the operation succeeded.
       *
       * Emits a {Transfer} event.
       */
      function transferFrom(address from, address to, uint256 value) external returns (bool);
  }
  interface IERC20Metadata is IERC20 {
      /**
       * @dev Returns the name of the token.
       */
      function name() external view returns (string memory);
  
      /**
       * @dev Returns the symbol of the token.
       */
      function symbol() external view returns (string memory);
  
      /**
       * @dev Returns the decimals places of the token.
       */
      function decimals() external view returns (uint8);
  }
  
  interface IERC20Errors {
      /**
       * @dev Indicates an error related to the current `balance` of a `sender`. Used in transfers.
       * @param sender Address whose tokens are being transferred.
       * @param balance Current balance for the interacting account.
       * @param needed Minimum amount required to perform a transfer.
       */
      error ERC20InsufficientBalance(address sender, uint256 balance, uint256 needed);
  
      /**
       * @dev Indicates a failure with the token `sender`. Used in transfers.
       * @param sender Address whose tokens are being transferred.
       */
      error ERC20InvalidSender(address sender);
  
      /**
       * @dev Indicates a failure with the token `receiver`. Used in transfers.
       * @param receiver Address to which tokens are being transferred.
       */
      error ERC20InvalidReceiver(address receiver);
  
      /**
       * @dev Indicates a failure with the `spender`’s `allowance`. Used in transfers.
       * @param spender Address that may be allowed to operate on tokens without being their owner.
       * @param allowance Amount of tokens a `spender` is allowed to operate with.
       * @param needed Minimum amount required to perform a transfer.
       */
      error ERC20InsufficientAllowance(address spender, uint256 allowance, uint256 needed);
  
      /**
       * @dev Indicates a failure with the `approver` of a token to be approved. Used in approvals.
       * @param approver Address initiating an approval operation.
       */
      error ERC20InvalidApprover(address approver);
  
      /**
       * @dev Indicates a failure with the `spender` to be approved. Used in approvals.
       * @param spender Address that may be allowed to operate on tokens without being their owner.
       */
      error ERC20InvalidSpender(address spender);
  }
  
  
  
  /**
   * @dev Standard ERC721 Errors
   * Interface of the https://eips.ethereum.org/EIPS/eip-6093[ERC-6093] custom errors for ERC721 tokens.
   */
  interface IERC721Errors {
      /**
       * @dev Indicates that an address can't be an owner. For example, `address(0)` is a forbidden owner in EIP-20.
       * Used in balance queries.
       * @param owner Address of the current owner of a token.
       */
      error ERC721InvalidOwner(address owner);
  
      /**
       * @dev Indicates a `tokenId` whose `owner` is the zero address.
       * @param tokenId Identifier number of a token.
       */
      error ERC721NonexistentToken(uint256 tokenId);
  
      /**
       * @dev Indicates an error related to the ownership over a particular token. Used in transfers.
       * @param sender Address whose tokens are being transferred.
       * @param tokenId Identifier number of a token.
       * @param owner Address of the current owner of a token.
       */
      error ERC721IncorrectOwner(address sender, uint256 tokenId, address owner);
  
      /**
       * @dev Indicates a failure with the token `sender`. Used in transfers.
       * @param sender Address whose tokens are being transferred.
       */
      error ERC721InvalidSender(address sender);
  
      /**
       * @dev Indicates a failure with the token `receiver`. Used in transfers.
       * @param receiver Address to which tokens are being transferred.
       */
      error ERC721InvalidReceiver(address receiver);
  
      /**
       * @dev Indicates a failure with the `operator`’s approval. Used in transfers.
       * @param operator Address that may be allowed to operate on tokens without being their owner.
       * @param tokenId Identifier number of a token.
       */
      error ERC721InsufficientApproval(address operator, uint256 tokenId);
  
      /**
       * @dev Indicates a failure with the `approver` of a token to be approved. Used in approvals.
       * @param approver Address initiating an approval operation.
       */
      error ERC721InvalidApprover(address approver);
  
      /**
       * @dev Indicates a failure with the `operator` to be approved. Used in approvals.
       * @param operator Address that may be allowed to operate on tokens without being their owner.
       */
      error ERC721InvalidOperator(address operator);
  }
  
  /**
   * @dev Standard ERC1155 Errors
   * Interface of the https://eips.ethereum.org/EIPS/eip-6093[ERC-6093] custom errors for ERC1155 tokens.
   */
  interface IERC1155Errors {
      /**
       * @dev Indicates an error related to the current `balance` of a `sender`. Used in transfers.
       * @param sender Address whose tokens are being transferred.
       * @param balance Current balance for the interacting account.
       * @param needed Minimum amount required to perform a transfer.
       * @param tokenId Identifier number of a token.
       */
      error ERC1155InsufficientBalance(address sender, uint256 balance, uint256 needed, uint256 tokenId);
  
      /**
       * @dev Indicates a failure with the token `sender`. Used in transfers.
       * @param sender Address whose tokens are being transferred.
       */
      error ERC1155InvalidSender(address sender);
  
      /**
       * @dev Indicates a failure with the token `receiver`. Used in transfers.
       * @param receiver Address to which tokens are being transferred.
       */
      error ERC1155InvalidReceiver(address receiver);
  
      /**
       * @dev Indicates a failure with the `operator`’s approval. Used in transfers.
       * @param operator Address that may be allowed to operate on tokens without being their owner.
       * @param owner Address of the current owner of a token.
       */
      error ERC1155MissingApprovalForAll(address operator, address owner);
  
      /**
       * @dev Indicates a failure with the `approver` of a token to be approved. Used in approvals.
       * @param approver Address initiating an approval operation.
       */
      error ERC1155InvalidApprover(address approver);
  
      /**
       * @dev Indicates a failure with the `operator` to be approved. Used in approvals.
       * @param operator Address that may be allowed to operate on tokens without being their owner.
       */
      error ERC1155InvalidOperator(address operator);
  
      /**
       * @dev Indicates an array length mismatch between ids and values in a safeBatchTransferFrom operation.
       * Used in batch transfers.
       * @param idsLength Length of the array of token identifiers
       * @param valuesLength Length of the array of token amounts
       */
      error ERC1155InvalidArrayLength(uint256 idsLength, uint256 valuesLength);
  }
  
  
  abstract contract ERC20 is Context, IERC20, IERC20Metadata, IERC20Errors {
      mapping(address account => uint256) private _balances;
  
      mapping(address account => mapping(address spender => uint256)) private _allowances;
  
      uint256 private _totalSupply;
  
      string private _name;
      string private _symbol;
  
      /**
       * @dev Sets the values for {name} and {symbol}.
       *
       * All two of these values are immutable: they can only be set once during
       * construction.
       */
      constructor(string memory name_, string memory symbol_) {
          _name = name_;
          _symbol = symbol_;
      }
  
      /**
       * @dev Returns the name of the token.
       */
      function name() public view virtual returns (string memory) {
          return _name;
      }
  
      /**
       * @dev Returns the symbol of the token, usually a shorter version of the
       * name.
       */
      function symbol() public view virtual returns (string memory) {
          return _symbol;
      }
  
      /**
       * @dev Returns the number of decimals used to get its user representation.
       * For example, if `decimals` equals `2`, a balance of `505` tokens should
       * be displayed to a user as `5.05` (`505 / 10 ** 2`).
       *
       * Tokens usually opt for a value of 18, imitating the relationship between
       * Ether and Wei. This is the default value returned by this function, unless
       * it's overridden.
       *
       * NOTE: This information is only used for _display_ purposes: it in
       * no way affects any of the arithmetic of the contract, including
       * {IERC20-balanceOf} and {IERC20-transfer}.
       */
      function decimals() public view virtual returns (uint8) {
          return 18;
      }
  
      /**
       * @dev See {IERC20-totalSupply}.
       */
      function totalSupply() public view virtual returns (uint256) {
          return _totalSupply;
      }
  
      /**
       * @dev See {IERC20-balanceOf}.
       */
      function balanceOf(address account) public view virtual returns (uint256) {
          return _balances[account];
      }
  
      /**
       * @dev See {IERC20-transfer}.
       *
       * Requirements:
       *
       * - `to` cannot be the zero address.
       * - the caller must have a balance of at least `value`.
       */
      function transfer(address to, uint256 value) public virtual returns (bool) {
          address owner = _msgSender();
          _transfer(owner, to, value);
          return true;
      }
  
      /**
       * @dev See {IERC20-allowance}.
       */
      function allowance(address owner, address spender) public view virtual returns (uint256) {
          return _allowances[owner][spender];
      }
  
      /**
       * @dev See {IERC20-approve}.
       *
       * NOTE: If `value` is the maximum `uint256`, the allowance is not updated on
       * `transferFrom`. This is semantically equivalent to an infinite approval.
       *
       * Requirements:
       *
       * - `spender` cannot be the zero address.
       */
      function approve(address spender, uint256 value) public virtual returns (bool) {
          address owner = _msgSender();
          _approve(owner, spender, value);
          return true;
      }
  
      /**
       * @dev See {IERC20-transferFrom}.
       *
       * Emits an {Approval} event indicating the updated allowance. This is not
       * required by the EIP. See the note at the beginning of {ERC20}.
       *
       * NOTE: Does not update the allowance if the current allowance
       * is the maximum `uint256`.
       *
       * Requirements:
       *
       * - `from` and `to` cannot be the zero address.
       * - `from` must have a balance of at least `value`.
       * - the caller must have allowance for ``from``'s tokens of at least
       * `value`.
       */
      function transferFrom(address from, address to, uint256 value) public virtual returns (bool) {
          address spender = _msgSender();
          _spendAllowance(from, spender, value);
          _transfer(from, to, value);
          return true;
      }
  
      /**
       * @dev Moves a `value` amount of tokens from `from` to `to`.
       *
       * This internal function is equivalent to {transfer}, and can be used to
       * e.g. implement automatic token fees, slashing mechanisms, etc.
       *
       * Emits a {Transfer} event.
       *
       * NOTE: This function is not virtual, {_update} should be overridden instead.
       */
      function _transfer(address from, address to, uint256 value) internal {
          if (from == address(0)) {
              revert ERC20InvalidSender(address(0));
          }
          if (to == address(0)) {
              revert ERC20InvalidReceiver(address(0));
          }
          _update(from, to, value);
      }
  
      /**
       * @dev Transfers a `value` amount of tokens from `from` to `to`, or alternatively mints (or burns) if `from`
       * (or `to`) is the zero address. All customizations to transfers, mints, and burns should be done by overriding
       * this function.
       *
       * Emits a {Transfer} event.
       */
      function _update(address from, address to, uint256 value) internal virtual {
          if (from == address(0)) {
              // Overflow check required: The rest of the code assumes that totalSupply never overflows
              _totalSupply += value;
          } else {
              uint256 fromBalance = _balances[from];
              if (fromBalance < value) {
                  revert ERC20InsufficientBalance(from, fromBalance, value);
              }
              unchecked {
                  // Overflow not possible: value <= fromBalance <= totalSupply.
                  _balances[from] = fromBalance - value;
              }
          }
  
          if (to == address(0)) {
              unchecked {
                  // Overflow not possible: value <= totalSupply or value <= fromBalance <= totalSupply.
                  _totalSupply -= value;
              }
          } else {
              unchecked {
                  // Overflow not possible: balance + value is at most totalSupply, which we know fits into a uint256.
                  _balances[to] += value;
              }
          }
  
          emit Transfer(from, to, value);
      }
  
      /**
       * @dev Creates a `value` amount of tokens and assigns them to `account`, by transferring it from address(0).
       * Relies on the `_update` mechanism
       *
       * Emits a {Transfer} event with `from` set to the zero address.
       *
       * NOTE: This function is not virtual, {_update} should be overridden instead.
       */
      function _mint(address account, uint256 value) internal {
          if (account == address(0)) {
              revert ERC20InvalidReceiver(address(0));
          }
          _update(address(0), account, value);
      }
  
      
  
      /**
       * @dev Destroys a `value` amount of tokens from `account`, lowering the total supply.
       * Relies on the `_update` mechanism.
       *
       * Emits a {Transfer} event with `to` set to the zero address.
       *
       * NOTE: This function is not virtual, {_update} should be overridden instead
       */
      function _burn(address account, uint256 value) internal {
          if (account == address(0)) {
              revert ERC20InvalidSender(address(0));
          }
          _update(account, address(0), value);
      }
  
      /**
       * @dev Sets `value` as the allowance of `spender` over the `owner` s tokens.
       *
       * This internal function is equivalent to `approve`, and can be used to
       * e.g. set automatic allowances for certain subsystems, etc.
       *
       * Emits an {Approval} event.
       *
       * Requirements:
       *
       * - `owner` cannot be the zero address.
       * - `spender` cannot be the zero address.
       *
       * Overrides to this logic should be done to the variant with an additional `bool emitEvent` argument.
       */
      function _approve(address owner, address spender, uint256 value) internal {
          _approve(owner, spender, value, true);
      }
  
      /**
       * @dev Variant of {_approve} with an optional flag to enable or disable the {Approval} event.
       *
       * By default (when calling {_approve}) the flag is set to true. On the other hand, approval changes made by
       * `_spendAllowance` during the `transferFrom` operation set the flag to false. This saves gas by not emitting any
       * `Approval` event during `transferFrom` operations.
       *
       * Anyone who wishes to continue emitting `Approval` events on the`transferFrom` operation can force the flag to
       * true using the following override:
       * ```
       * function _approve(address owner, address spender, uint256 value, bool) internal virtual override {
       *     super._approve(owner, spender, value, true);
       * }
       * ```
       *
       * Requirements are the same as {_approve}.
       */
      function _approve(address owner, address spender, uint256 value, bool emitEvent) internal virtual {
          if (owner == address(0)) {
              revert ERC20InvalidApprover(address(0));
          }
          if (spender == address(0)) {
              revert ERC20InvalidSpender(address(0));
          }
          _allowances[owner][spender] = value;
          if (emitEvent) {
              emit Approval(owner, spender, value);
          }
      }
  
      /**
       * @dev Updates `owner` s allowance for `spender` based on spent `value`.
       *
       * Does not update the allowance value in case of infinite allowance.
       * Revert if not enough allowance is available.
       *
       * Does not emit an {Approval} event.
       */
      function _spendAllowance(address owner, address spender, uint256 value) internal virtual {
          uint256 currentAllowance = allowance(owner, spender);
          if (currentAllowance != type(uint256).max) {
              if (currentAllowance < value) {
                  revert ERC20InsufficientAllowance(spender, currentAllowance, value);
              }
              unchecked {
                  _approve(owner, spender, currentAllowance - value, false);
              }
          }
      }
  }
  interface IDSPTokenV2 is IERC20{
    function lastEmissionTime() external view returns (uint256);
  
    function claimMasterRewards(uint256 amount) external returns (uint256 effectiveAmount);
    function masterEmissionRate() external view returns (uint256);
    function burn(uint256 amount) external;
  }
  
  contract DSPTokenV2 is Ownable, ERC20("DonutSwap", "DSP"), IDSPTokenV2 {
    using SafeMath for uint256;
  
    uint256 public constant MAX_EMISSION_RATE = 0.01 ether;
    uint256 public constant MAX_SUPPLY_LIMIT = 1000000000 ether;
    uint256 public elasticMaxSupply; // Once deployed, controlled through governance only
    uint256 public emissionRate; // Token emission per second
  
    uint256 public override lastEmissionTime;
    uint256 public masterReserve; // Pending rewards for the master
  
    uint256 public constant ALLOCATION_PRECISION = 100;
    // Allocations emitted over time. When < 100%, the rest is minted into the treasury (default 15%)
    uint256 public farmingAllocation = 50; // = 50%
    uint256 public legacyAllocation; // V1 holders allocation
  
    address public masterAddress;
    address public treasuryAddress;
  
    address public constant BURN_ADDRESS = 0x000000000000000000000000000000000000dEaD;
  
    constructor(uint256 maxSupply_, uint256 initialSupply, uint256 initialEmissionRate, address treasuryAddress_) {
      require(initialEmissionRate <= MAX_EMISSION_RATE, "invalid emission rate");
      require(maxSupply_ <= MAX_SUPPLY_LIMIT, "invalid initial maxSupply");
      require(initialSupply < maxSupply_, "invalid initial supply");
      require(treasuryAddress_ != address(0), "invalid treasury address");
  
      elasticMaxSupply = maxSupply_;
      emissionRate = initialEmissionRate;
      treasuryAddress = treasuryAddress_;
  
      _mint(msg.sender, initialSupply);
    }
  
  
    /********************************************/
    /****************** EVENTS ******************/
    /********************************************/
  
    event ClaimMasterRewards(uint256 amount);
    event AllocationsDistributed(uint256 masterShare, uint256 treasuryShare);
    event InitializeMasterAddress(address masterAddress);
    event InitializeEmissionStart(uint256 startTime);
    event UpdateAllocations(uint256 farmingAllocation, uint256 legacyAllocation, uint256 treasuryAllocation);
    event UpdateEmissionRate(uint256 previousEmissionRate, uint256 newEmissionRate);
    event UpdateMaxSupply(uint256 previousMaxSupply, uint256 newMaxSupply);
    event UpdateTreasuryAddress(address previousTreasuryAddress, address newTreasuryAddress);
  
    /***********************************************/
    /****************** MODIFIERS ******************/
    /***********************************************/
  
    /*
     * @dev Throws error if called by any account other than the master
     */
    modifier onlyMaster() {
      require(msg.sender == masterAddress, "DSPToken: caller is not the master");
      _;
    }
  
  
    /**************************************************/
    /****************** PUBLIC VIEWS ******************/
    /**************************************************/
  
    /**
     * @dev Returns total master allocation
     */
    function masterAllocation() public view returns (uint256) {
      return farmingAllocation.add(legacyAllocation);
    }
  
    /**
     * @dev Returns master emission rate
     */
    function masterEmissionRate() public view override returns (uint256) {
      return emissionRate.mul(farmingAllocation.add(legacyAllocation)).div(ALLOCATION_PRECISION);
    }
  
    /**
     * @dev Returns treasury allocation
     */
    function treasuryAllocation() public view returns (uint256) {
      return uint256(ALLOCATION_PRECISION).sub(masterAllocation());
    }
  
  
    /*****************************************************************/
    /******************  EXTERNAL PUBLIC FUNCTIONS  ******************/
    /*****************************************************************/
  
    /**
     * @dev Mint rewards and distribute it between master and treasury
     *
     * Treasury share is directly minted to the treasury address
     * Master incentives are minted into this contract and claimed later by the master contract
     */
    function emitAllocations() public {
      uint256 circulatingSupply = totalSupply();
      uint256 currentBlockTimestamp = _currentBlockTimestamp();
  
      uint256 _lastEmissionTime = lastEmissionTime; // gas saving
      uint256 _maxSupply = elasticMaxSupply; // gas saving
  
      // if already up to date or not started
      if (currentBlockTimestamp <= _lastEmissionTime || _lastEmissionTime == 0) {
        return;
      }
  
      // if max supply is already reached or emissions deactivated
      if (_maxSupply <= circulatingSupply || emissionRate == 0) {
        lastEmissionTime = currentBlockTimestamp;
        return;
      }
  
      uint256 newEmissions = currentBlockTimestamp.sub(_lastEmissionTime).mul(emissionRate);
  
      // cap new emissions if exceeding max supply
      if(_maxSupply < circulatingSupply.add(newEmissions)) {
        newEmissions = _maxSupply.sub(circulatingSupply);
      }
  
      // calculate master and treasury shares from new emissions
      uint256 masterShare = newEmissions.mul(masterAllocation()).div(ALLOCATION_PRECISION);
      // sub to avoid rounding errors
      uint256 treasuryShare = newEmissions.sub(masterShare);
  
      lastEmissionTime = currentBlockTimestamp;
  
      // add master shares to its claimable reserve
      masterReserve = masterReserve.add(masterShare);
      // mint shares
      _mint(address(this), masterShare);
      _mint(treasuryAddress, treasuryShare);
  
      emit AllocationsDistributed(masterShare, treasuryShare);
    }
  
    /**
     * @dev Sends to Master contract the asked "amount" from masterReserve
     *
     * Can only be called by the MasterContract
     */
    function claimMasterRewards(uint256 amount) external override onlyMaster returns (uint256 effectiveAmount) {
      // update emissions
      emitAllocations();
  
      // cap asked amount with available reserve
      effectiveAmount = Math.min(masterReserve, amount);
  
      // if no rewards to transfer
      if (effectiveAmount == 0) {
        return effectiveAmount;
      }
  
      // remove claimed rewards from reserve and transfer to master
      masterReserve = masterReserve.sub(effectiveAmount);
      _transfer(address(this), masterAddress, effectiveAmount);
      emit ClaimMasterRewards(effectiveAmount);
    }
  
    /**
     * @dev Burns "amount" of DSP by sending it to BURN_ADDRESS
     */
    function burn(uint256 amount) external override {
      _transfer(msg.sender, BURN_ADDRESS, amount);
    }
  
  
    function mint(uint256 amount) public onlyOwner returns (bool) {
      _mint(msg.sender,amount);
      return true;
    }
  
    /*****************************************************************/
    /****************** EXTERNAL OWNABLE FUNCTIONS  ******************/
    /*****************************************************************/
  
    /**
     * @dev Setup Master contract address
     *
     * Can only be initialized once
     * Must only be called by the owner
     */
    function initializeMasterAddress(address masterAddress_) external onlyOwner {
      require(masterAddress == address(0), "initializeMasterAddress: master already initialized");
      require(masterAddress_ != address(0), "initializeMasterAddress: master initialized to zero address");
  
      masterAddress = masterAddress_;
      emit InitializeMasterAddress(masterAddress_);
    }
  
    /**
     * @dev Set emission start time
     *
     * Can only be initialized once
     * Must only be called by the owner
     */
    function initializeEmissionStart(uint256 startTime) external onlyOwner {
      require(lastEmissionTime == 0, "initializeEmissionStart: emission start already initialized");
      require(_currentBlockTimestamp() < startTime, "initializeEmissionStart: invalid");
  
      lastEmissionTime = startTime;
      emit InitializeEmissionStart(startTime);
    }
  
    /**
     * @dev Updates emission allocations between farming incentives, legacy holders and treasury (remaining share)
     *
     * Must only be called by the owner
     */
    function updateAllocations(uint256 farmingAllocation_, uint256 legacyAllocation_) external onlyOwner {
      // apply emissions before changes
      emitAllocations();
  
      // total sum of allocations can't be > 100%
      uint256 totalAllocationsSet = farmingAllocation_.add(legacyAllocation_);
      require(totalAllocationsSet <= 100, "updateAllocations: total allocation is too high");
  
      // set new allocations
      farmingAllocation = farmingAllocation_;
      legacyAllocation = legacyAllocation_;
  
      emit UpdateAllocations(farmingAllocation_, legacyAllocation_, treasuryAllocation());
    }
  
    /**
     * @dev Updates DSP emission rate per second
     *
     * Must only be called by the owner
     */
    function updateEmissionRate(uint256 emissionRate_) external onlyOwner {
      require(emissionRate_ <= MAX_EMISSION_RATE, "updateEmissionRate: can't exceed maximum");
  
      // apply emissions before changes
      emitAllocations();
  
      emit UpdateEmissionRate(emissionRate, emissionRate_);
      emissionRate = emissionRate_;
    }
  
    /**
     * @dev Updates DSP max supply
     *
     * Must only be called by the owner
     */
    function updateMaxSupply(uint256 maxSupply_) external onlyOwner {
      require(maxSupply_ >= totalSupply(), "updateMaxSupply: can't be lower than current circulating supply");
      require(maxSupply_ <= MAX_SUPPLY_LIMIT, "updateMaxSupply: invalid maxSupply");
  
      emit UpdateMaxSupply(elasticMaxSupply, maxSupply_);
      elasticMaxSupply = maxSupply_;
    }
  
    /**
     * @dev Updates treasury address
     *
     * Must only be called by owner
     */
    function updateTreasuryAddress(address treasuryAddress_) external onlyOwner {
      require(treasuryAddress_ != address(0), "updateTreasuryAddress: invalid address");
  
      emit UpdateTreasuryAddress(treasuryAddress, treasuryAddress_);
      treasuryAddress = treasuryAddress_;
    }
  
  
    /********************************************************/
    /****************** INTERNAL FUNCTIONS ******************/
    /********************************************************/
  
    /**
     * @dev Utility function to get the current block timestamp
     */
    function _currentBlockTimestamp() internal view virtual returns (uint256) {
      /* solhint-disable not-rely-on-time */
      return block.timestamp;
    }
  }