What happened
This "Centrifuge" (CFG) token is a BNB Chain contract deployed on 28 May 2021 at 0x507340bb…31ad2d that copies the name, symbol and marketing text of the Centrifuge protocol's CFG token; nothing in its code connects it to that project. Its transferFrom stores the recipient of the first call in a variable named newun, and from then on every transfer to that address fails with "please wait". When liquidity is added through the PancakeSwap router, that first recipient is the trading pair, so holders can buy but every sell reverts.
The owner can repoint newun at any time with transfernewun, and ownership has not been given up. De.Fi's REKT database lists the token as an exit scam and honeypot, describing it as a contract where the owner could stop holders from selling; its proof link is a write-up of this exact newun pattern on earlier tokens.
How it happened
- The constructor credits the whole supply of 1,000,000 CFG (9 decimals) to the deployer:
balances[owner] = _totalSupply;. - On the first
transferFromfrom a non-zero address, the contract saves the recipient:if(from != address(0) && newun == address(0)) newun = to;. Adding liquidity through the router makes this call from the owner to the pair, so the pair would becomenewun. - Every later
transferFromrunselse require(to != newun, "please wait");, andtransferrunsrequire(to != newun, "please wait");. A PancakeSwap sell moves tokens to the pair, so it reverts, while buys (transfers out of the pair) are unaffected. - The check has no owner exemption, but the owner controls the blocked address through
function transfernewun(address _newun) public onlyOwner { newun = _newun; }and can reopen or move the block. - The owner can also withdraw any BNB sent to the contract with
clearCNDAO().
Protocol details
Evidence
- report Token Sniffer post (De.Fi proof link) twitter.com
- transaction Contract creation transaction bscscan.com
- address Centrifuge (CFG) copycat token verified contract code on BscScan bscscan.com
- analysis Scam explained: BSC stealthy LP block (cryptot3ddybear) cryptot3ddybear.gitlab.io
- analysis Sourcify match for 0x507340bbb32246dae182105f71167b7fc531ad2d on BNB Chain repo.sourcify.dev
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
