What happened
Quick Summary
BONK Inu fake token was rugged on the Polygon network. The scammers withdrew about $150k USD of USDC from liquidity pairs.
Details of the Exploit
The BONK Inu ERC20 contract contains onlyOwner function with the minting ability. Also, the scammer didn't lock his LP tokens so he did both steps to rug users: 1) remove liquidity from pairs and 2) sell tokens to drain all left liquidity. Estimate losses are about $150k USD.
Block Data Reference
Scammer address:
Minting tx:
Remove liquidity:
Sell BONK:
Transfer USDC to another address:
Protocol details
Classification
Token
Protocol Type
Exit Scam/Rugpull
Affected asset / contract
BONK
Protocol links
Website
@toninutools
Evidence
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
