DogelonMars Honeypot

Reported loss Not disclosed
BNB Chain
Honeypot

What happened

DogelonMars (ELON) on BNB Smart Chain is a token whose source starts with header comments carrying Dogelon Mars launch text, including a claim that liquidity is locked forever; the contract code contains no liquidity-lock logic. What it does contain is a newun address: both transfer and transferFrom revert with "please wait" for any transfer sent to it, the first transferFrom made while it is empty sets it, and the owner can change it with transfernewun. De.Fi's REKT database lists ELON as an exit scam / honeypot dated 2021-05-14, describing the owner as able to disable transfers so holders cannot sell; it gives no loss figure.

How it happened

  1. The constructor mints the whole supply to the deployer: balances[owner] = _totalSupply;.
  2. transferFrom begins with if(from != address(0) && newun == address(0)) newun = to;. The first transferFrom after deployment stores its recipient as newun and goes through. The code does not say who that recipient is. The blog post linked by De.Fi describes the same pattern as the liquidity pool being captured when liquidity is first added.
  3. After that, transferFrom takes the else require(to != newun, "please wait"); branch and transfer runs require(to != newun, "please wait");. Any transfer to newun reverts, whatever the sender, before balances[from] is debited. If newun is a trading pair, selling into it fails while buying from it still works; the source does not show that newun is the pair.
  4. The owner can call transfernewun(address _newun) to set newun to any address. Setting it to the zero address re-arms the capture, so the next transferFrom with a non-zero sender stores a new recipient; pointing it at an address nobody uses lifts the block.
  5. clearCNDAO() is onlyOwner and sends the contract's own BNB balance to the caller; it does not touch liquidity-pool tokens.
  6. The file's leading comments say 50% of supply is locked forever in a liquidity pool, but the contract has no function that locks or releases liquidity, so that statement cannot be enforced by this code. The source does not show how newun was set or used on-chain.

Protocol details

Classification Token
Protocol Type Exit Scam/Honeypot
Affected asset / contract ELON

Evidence

Same attack technique

Browse all hacks →
BNB Chain SAD CAT Loss not disclosed BNB Chain DogeMissile Loss not disclosed Ethereum Cheetah Coin Loss not disclosed BNB Chain LILDOG Loss not disclosed

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.

Start Free Trial Explore attack classes