DOGE 2.0 Honeypot
What happened
DOGE 2.0 (DOGE 2.0) is a BNB Chain token deployed on 14 May 2021 at 0xdf0b38b7…96e6b2. Its transferFrom override only succeeds when a flag called trans is true, when the deployer is the sender or recipient, or when the PancakeSwap pair is the sender. trans starts as false, so a holder's sale through the PancakeSwap router, which moves tokens from the holder to the pair with transferFrom, reverts, while purchases from the pair still go through.
The deployer also holds roles that can pause every transfer and mint unlimited tokens, and the contract's renounceOwnership and lockLiquidity functions only emit events without changing any permission or locking any liquidity. De.Fi's REKT database lists DOGE 2.0 as an exit scam/honeypot, stating that the contract owner could disable transfers and so stop holders from selling.
How it happened
- The constructor records the deployer as the immutable address
moi, setstrans = false, grants the deployerDEFAULT_ADMIN_ROLE,PAUSER_ROLEandMINTER_ROLE, mints 1,000,000,000,000 DOGE 2.0 to the deployer, and creates the PancakeSwap pair. transferFromrequirestrans || moi == sender || moi == recipient || sender == UNI, whereUNIis the pair. A router sale callstransferFrom(holder, pair, amount), so it fails for every holder except the deployer whiletransis false.- Purchases use the pair's plain
transferto the buyer, which this check does not cover, so buying keeps working. - Only a
MINTER_ROLEholder can callsetTransto open sales, and the same role can callpiocher(to, amount)to mint any amount to any address. - A
PAUSER_ROLEholder can callpause(), and thewhenNotPausedhook then blocks every transfer, mint and burn. renounceOwnership()andlockLiquidity()are public functions that only emitOwnershipRenouncedandliquidityLockedevents; calling them changes no role and locks no LP tokens.
Protocol details
Evidence
- report De.Fi REKT database listing for DOGE 2.0 (proof link: Token Sniffer 'Reported by user(s)') tokensniffer.com
- transaction DOGE 2.0 contract creation transaction bscscan.com
- address DOGE 2.0 verified contract code on BscScan bscscan.com
- analysis Sourcify match for 0xdf0b38b739a63587fea6857863fa8a5c0596e6b2 on BNB Chain repo.sourcify.dev
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.