What happened
ANTI (AntiSocial Token) is a BEP20 token on BNB Smart Chain whose verified source gives the owner an uncapped minting power. mint(address _to, uint256 _amount) is public onlyOwner and calls _mint, which adds to _totalSupply with no maximum, and the base contract has a second owner-only mint(uint256 amount) that mints to the caller. Holders therefore depended on whoever holds ownership not creating new supply, because newly minted tokens dilute every existing balance and can be sold into any liquidity pool.
De.Fi's REKT database lists this token as an exit scam / rug pull dated 2021-08-26 with no loss figure; the source code alone does not show what the owner did.
How it happened
- The token is deployed from a BEP20 base that inherits OpenZeppelin
Ownable, so the deployer address 0xa7747a7a…06D762 starts as owner and ownership can be moved withtransferOwnership(the current on-chain owner read on 2026-09-30 is 0x50e2b842…21da4d). AntiSocialToken.mintis declaredfunction mint(address _to, uint256 _amount) public onlyOwner { _mint(_to, _amount); ... }, so the owner can mint any quantity to any address._mintonly does_totalSupply = _totalSupply.add(amount); _balances[account] = _balances[account].add(amount);with no cap, no timelock and no check against a maximum supply.- A second owner-only function,
function mint(uint256 amount) public onlyOwner returns (bool) { _mint(_msgSender(), amount); ... }, gives the same ability directly to the caller. - Newly minted tokens can be sent to a trading pair or sold into it, which would dilute holders and drain the paired asset. The code allows this path; De.Fi lists the token as a rug pull, but no transaction showing a mint or sale was opened.
Protocol details
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
