Dark.Build Honeypot
What happened
Dark.Build (DARK) is a BNB Smart Chain token with an owner-set sell block. The owner can mark any address with setPanCakeSwapReciever, and _transfer calls calculateFeesBeforeSend, which reverts with "Error: Can not sell this token" whenever the recipient is marked. If the owner marks the DEX pool, every sale into it fails for every seller, while transfers out of the pool are not checked.
The owner can mark or unmark addresses at any time unless ownership is renounced. De.Fi's REKT database lists the token as an Exit Scam/Honeypot dated 2021-04-08 and describes it as an owner-controlled transfer restriction that stopped users from selling.
How it happened
- The constructor mints 100,000 tokens (
_transferTO(msg.sender, 100000e18)) to the deployer, who is the initialowner. - The owner can call
setPanCakeSwapReciever(address _recipient, bool _feeless)(onlyOwner), which writesPanCakeSwapReciever[_recipient] = _feeless;. The function is not gated bycanWhitelist, sorenounceWhitelist()does not disable it. - Every
transferandtransferFromgoes through_transfer, which callscalculateFeesBeforeSend(sender, recipient, amount). That function containsif(PanCakeSwapReciever[recipient]){ revert("Error: Can not sell this token"); }, so any transfer whose recipient is marked reverts and the sender's balance is restored. - If the marked address is the pool, a holder's sale (a transfer from the holder to the pool, including router sales) reverts for every sender, owner included, because the check looks only at the recipient. Purchases, where the pool is the sender, are not blocked by this check.
- The owner can call the same function with
falseto unmark an address.renounceOwnership()exists, so the owner could give up the power; the code does not show whether a pool address was ever marked.
The code allows this sell block; the sources opened here do not include a transaction in which the owner marked an address or removed liquidity.
Protocol details
Evidence
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.