What happened
The contract owner could disable the transfer function, which restricted users in selling their tokens:
https://honeypot.is/ethereum.html?address=0x1533c795…2415c2
The contract deployer added initial liquidity at:
https://etherscan.io/tx/0x3966fb3f…16a980
The contract deployer invoked _mint to generate new tokens on his address:
https://etherscan.io/tx/0x2d704fd0…4ba660
Newly minted tokens were sold by the contract deployer:
https://etherscan.io/tx/0x90d7e07e…596c7b
https://etherscan.io/tx/0xc0a7f366…f6bff9
Stolen funds were deposited into Tornado Cash mixer:
https://etherscan.io/tx/0xa576b767…b45adc
Case & protocol details
Evidence & learning
Sources and on-chain records
- report Report twitter.com
Practice this exploit pattern safely
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.