BNB HEROES Rug Pull

Reported loss $561K
Rugpull

What happened

BNB Heroes (BNBH) was a token on BNB Chain whose contract gave the deployer the entire 100 million supply and exempted that address from trading fees and the per-trade size limit. The owner can also raise the buy and sell fee (13% to a BNB pool plus 2% to liquidity) with no upper bound, set the maximum trade size to any value including zero, and exempt any wallet from both limits. Liquidity the contract adds from collected fees is minted to the owner's address.

On 18 January 2022, PeckShield reported a 64% BNBH price drop and attributed the dump to the team's owner/deployer, adding that the team's X account had been inactive for about a month and its website was offline. CertiK flagged BNBH as a rug pull and said the owner dumped tokens worth 432 BNB (about $191,038). De.Fi's REKT database also says the owner removed liquidity from the main pair in 0xe7d7f444…923576 and sold the remaining tokens in six further transactions: 0xae461edf…e8fb5a, 0x1dd4b70f…cb9e59, 0x2aaef863…adabe6, 0x91f03917…e828f4, 0x2545685f…5e8993 and 0x552166f9…5a123e.

How it happened

  1. At deployment the constructor credits all 100,000,000 BNBH to the deployer (_balances[_msgSender()] = _tTotal;) and marks it fee-exempt (_isExcludedFromFee[_msgSender()] = true;).
  2. Because the fee and _maxTxAmount checks both skip exempt addresses, the owner can sell any amount into the PancakeSwap pair in one trade and pay no fee, while other holders pay 15% and are capped at 200,000 BNBH per trade.
  3. The auto-liquidity routine adds liquidity with owner() as the LP recipient, so LP tokens it creates belong to the owner and can be withdrawn by that address.
  4. The owner also keeps setFees and setMaxTxAmount with no bounds: a combined fee above 100 makes every non-exempt buy or sell revert, and a zero _maxTxAmount does the same.
  5. PeckShield and CertiK attributed the January 2022 dump to the owner/deployer, with CertiK putting it at 432 BNB; De.Fi's REKT database lists a liquidity removal from the main pair followed by six token sales.

Protocol details

Classification Gaming / Metaverse
Protocol Type Exit Scam/Rugpull
Affected asset / contract BNBH
Protocol links Website @BnbHeroes

Evidence

Same attack technique

Browse all hacks →
Raptor2 $84K lost Mercenary $760K lost Sloth Inu $8K lost Meta Pets $709K lost

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.

Start Free Trial Explore attack classes