What happened
The contract deployer used a hidden minting functionality under the function initialSupply(), which was invoked by the contract deployer 3 times:
https://etherscan.io/tx/0x7467abb5…93a521
https://etherscan.io/tx/0xf4b6c140…c2293c
https://etherscan.io/tx/0x672689de…3dc887
In the function input data, the recipient address of the minted tokens was this address:
This external wallet added initial liquidity at:
https://etherscan.io/tx/0x1cdad510…825da5
The transaction, where the external wallet sold tokens:
https://etherscan.io/tx/0x0c02a010…41b083
Case & protocol details
Classification
Exchange (DEX)
Protocol Type
Exit Scam/Rugpull
Affected asset / contract
BP
Evidence & learning
Sources and on-chain records
- report Report twitter.com
Practice this exploit pattern safely
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.