What happened
Forest token (FOREST) is a BNB Chain token deployed on 29 May 2021 at 0x1112713d…20f4f2, advertised in its source comments as an eco-friendly charity token on PancakeSwap V2. Its transferFrom stores the recipient of the first call in a variable named newun, and from then on every transfer to that address fails with "please wait". When liquidity is added through the PancakeSwap router, that first recipient is the trading pair, so holders can buy but every sell reverts.
The owner can repoint newun at any time with transfernewun, and ownership has not been given up. De.Fi's REKT database lists Forest token as an exit scam and honeypot, describing it as a contract where the owner could stop holders from selling; its proof link is a write-up of this exact newun pattern on earlier tokens.
How it happened
- The constructor credits the whole supply to the deployer:
balances[owner] = _totalSupply;. - On the first
transferFromfrom a non-zero address, the contract saves the recipient:if(from != address(0) && newun == address(0)) newun = to;. Adding liquidity through the router makes this call from the owner to the pair, so the pair would becomenewun. - Every later
transferFromrunselse require(to != newun, "please wait");, andtransferrunsrequire(to != newun, "please wait");. A PancakeSwap sell moves tokens to the pair, so it reverts, while buys (transfers out of the pair) are unaffected. - The check has no owner exemption, but the owner controls the blocked address through
function transfernewun(address _newun) public onlyOwner { newun = _newun; }and can reopen or move the block. - The owner can also withdraw any BNB sent to the contract with
clearCNDAO().
Protocol details
Evidence
- report Token Sniffer post (De.Fi proof link) twitter.com
- transaction Forest token contract creation transaction bscscan.com
- address Forest token (FOREST) verified contract code on BscScan bscscan.com
- analysis Scam explained: BSC stealthy LP block (cryptot3ddybear) cryptot3ddybear.gitlab.io
- analysis Sourcify match for 0x1112713db69f84b26177dd6f99d2df018720f4f2 on BNB Chain repo.sourcify.dev
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
