Do Right Rug Pull

What the code allows:

1. The constructor creates the pair and whitelists the recipient of the initial supply, the deployer and the burn address: setWList(toAddress,true); setWList(msg.sender,true);.
2. In _transfer, a non-whitelisted sender or receiver is blocked from touching the pair: require(from!=uniswapV2Pair&&to!=uniswapV2Pair,"swap trade fail");. Buys (from the pair) and sells (to the pair) by ordinary wallets therefore revert, while whitelisted addresses pass through if(wList[from]||wList[to]){ _balances[to] += amount; } with no restriction and no fee.
3. Only the owner can add addresses to the list: function setWList(address addr,bool flag)public onlyOwner. A whitelisted deployer can sell to and remove liquidity from the pool, and the owner decides who else can.
4. Transfers between ordinary wallets pay a 15% fee that is debited from the sender in full and sent to tradeFeeAddr: uint256 tradeFee=amount*tradeFeeRatio/BaseUnit; with tradeFeeRatio=1500. setTradeFeeRatio has no cap, and a ratio above 10000 makes amount=amount-tradeFee revert for every non-whitelisted transfer.
5. mint(address account,uint256 amount) public onlyManager lets the owner or managerAddress create new supply.
6. owner() reads as the zero address in a 2026-09-30 call, so ownership has been renounced at some point; the whitelist and fee settings are then frozen at their last values. The code does not show when it was renounced or who managerAddress is.

, per the De.Fi listing and CertiK alert:

7. The deployer sold DR into the pool in 13 transactions totaling 290,547 USD and removed 80,009 USD of liquidity in another transaction, within two days (De.Fi). CertiK's alert reported about 73% slippage from deployer sales of about 237k USD.
8. The proceeds were sent to another EOA and still sat there as BSC-USD on Dec 21, 2023 (De.Fi).