FairSatoshi Honeypot

Reported loss Not disclosed
BNB Chain
Honeypot

What happened

FairSatoshi (0x97dc4d9d…154422) is a BNB Smart Chain token whose transferFrom only works for holders that appear in an allow mapping. The mapping is false for every address except the deployer, so an approval-based sale such as a router swap reverts for ordinary holders, while plain transfer calls still work. The only address that can add holders to the mapping is a hard-coded address, not the owner variable.

De.Fi's REKT database lists the token as an exit scam/honeypot, stating that the contract owner could disable the transfer function and restrict users from selling.

How it happened

  1. The constructor sets owner = msg.sender;, gives the whole supply to the deployer with balances[msg.sender] = totalSupply; and whitelists only that address with allow[msg.sender] = true;.
  2. transfer has no whitelist check, so a holder can still send tokens straight to another address.
  3. transferFrom, the function a DEX router calls to pull tokens from a seller, contains require(allow[_from] == true);. allow is false for every ordinary holder, so the call reverts.
  4. The onlyOwner modifier is require(msg.sender == address(1080614020421183795110940285280029773222128095634)), which is the hard-coded address 0xbd486897…439192. That address can call addAllow(address holder, bool allowApprove) to switch any holder on or off. It is different from the deployer address, and transferOwnership only rewrites the unused owner variable, so it does not move this power.
  5. The same hard-coded address can call mint(address miner, uint256 _value), which runs balances[miner] = _value;. This overwrites any balance without changing totalSupply.
  6. The header comment advertises a 2% liquidity lock, 2% holder distribution and burnt LP. The code contains no fee, reflection or liquidity logic, and no function to change the hard-coded address.

Protocol details

Classification Token
Protocol Type Exit Scam/Honeypot
Affected asset / contract FAIRSATOSHI

Evidence

Same attack technique

Browse all hacks →
BNB Chain FairRocket Loss not disclosed BNB Chain Turtle In Space Loss not disclosed BNB Chain SafeBinance Loss not disclosed BNB Chain ElonProtocol Loss not disclosed

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.

Start Free Trial Explore attack classes