What happened
This Bitcoin BSC (BTCBSC) token at 0x48747d32…9AFfec on BNB Chain was deployed on 26 September 2023 by 0xA51EA8e0…3780Df; CertiK described it as a fake token that could be confused with legitimate projects of the same name. The constructor mints the full 21,000,000 BTCBSC supply to the deployer, and the owner has a single switch, pauseContract(), that makes every transfer, transferFrom and approval revert until it calls unpauseContract(). While paused, no holder can sell and no trade through the PancakeSwap pool can settle.
CertiK reported on 10 October 2023 an exit scam in which the deployer profited about $36,200. De.Fi's REKT database says that on 3 October 2023 the deployer removed 235.87 WBNB, worth $48,617, from the PancakeSwap pool in transaction 0x39044759…158310, for a loss of $35,813 that remained in the deployer's wallet.
How it happened
- The constructor sets
owner=msg.senderand calls_mint(msg.sender,(21000000*(10**18))), so the deployer holds the whole supply before any liquidity is added. pauseContract()isonlyOwnerand sets_paused = true.transfer,transferFrom,_transferand_approveall carrywhenNotPaused, so every movement or approval of BTCBSC reverts with "Pausable: paused", including the pool's transfers for buys, sells and liquidity removals.- Only the owner can lift the pause with
unpauseContract().transferownershipaccepts any address, so ownership can be handed over or given up, but the on-chain owner read in September 2026 is still the deployer. - CertiK reported that the deployer profited about $36,200; De.Fi's listing records the deployer removing 235.87 WBNB from the pool.
Protocol details
Evidence
- report CertiK Alert: exit scam on a fake Bitcoin BSC Token twitter.com
- transaction Bitcoin BSC (BTCBSC) contract creation transaction bscscan.com
- transaction bscscan.com transaction 0x3904…8310 bscscan.com
- address Bitcoin BSC (BTCBSC) verified contract code on BscScan bscscan.com
- address bscscan.com address 0xA51E…80Df bscscan.com
- analysis Sourcify match for 0x48747d325d139b1F9cD29d9381Fb73228B9AFfec on BNB Chain repo.sourcify.dev
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
