e-STD Rug Pull

What the code allows:

1. The constructor credits the entire supply to the deployer: _balances[msg.sender] = _totalSupply;. Supply is fixed (_totalSupply is only set there) and there is no mint function, so the deployer wallet holds every token until it sends them on.
2. Any transfer whose sender is not the pair (addressLp) is treated as a sale, and non-whitelisted senders pay deductions: if (!listWhite.isexists(from)){ then, in the sale branch, _rebate_sell_inviter, _rebate_sell_market, a burn of _rebateValue(value,ratio_sell_burn), _rebate_all_fixed and _rebate_all_Lp. The sender is debited the full amount (each rebate calls _balances[from] = _balances[from].sub(valueRatio); and the remainder is valueM = valueM.sub(valueInviter).sub(valueMarket).sub(valueFixed).sub(valueLp);). With the default ratios the deductions total up to 7%.
3. The owner controls the ratios and who is exempt. function SetListWhite(address _address) public onlyOwner makes a sender fee-free, function setAddressMarket(address _address) public onlyOwner redirects the market share, and every ratio setter takes a uint8 with no ceiling on the combined total. function setRatioMax(uint8 _ratioMax) public onlyOwner changes the divisor in return value.mul(ratio).div(ratio_max);, so lowering it inflates every deduction; once the deductions reach the full amount the seller receives nothing, and beyond that .sub reverts, so the owner can make every non-whitelisted sale fail. setAddressMarket has no zero-address check, while _rebate_sell_market and _rebate_buy_market both carry the checkAddress(addressMarket) modifier, which runs require(_address != address(0),"zero address ");, so setting the market address to zero would make every non-whitelisted transfer revert. There is no renounceOwnership, only transferOwnership to a non-zero address.

, as reported by CertiK and De.Fi's REKT database: 4. CertiK's alert reports an exit scam with the price down more than 76% and about $49K taken. De.Fi's REKT database lists the deployer sending tokens to 2 EOA addresses and three scammer addresses, including the deployer, selling a large amount of e-STD for a profit of 49,000 USD.

Neither source says that any fee ratio, whitelist entry or market address was changed.