What happened
On February 11, 2025, four.meme's BNB Smart Chain liquidity-migration flow was exploited for approximately $183,000 (PeckShield's estimate). The attacker pre-created a SNOWBOARD/WBNB PancakeSwap V3 pool with an abnormal price. When four.meme migrated liquidity, it reused the existing pool without validating its price and supplied liquidity without minimum-amount/slippage safeguards.
The attacker then swapped a small amount of SNOWBOARD for WBNB. Four.meme suspended its PancakeSwap LP operations while keeping direct on-chain trading operational; reports said internal platform funds were not compromised.
How it happened
- The attacker created a SNOWBOARD token and used transactions to make it eligible for four.meme's migration flow.
- Before migration, the attacker initialized the SNOWBOARD/WBNB PancakeSwap V3 pool with an artificially high price.
- four.meme's migration found the already-existing pool, did not verify its initialized price, and called the position manager with
amount0Minandamount1Minset to zero. - The platform's intended liquidity was therefore deposited into the attacker's price-distorted pool.
- The attacker sold a small SNOWBOARD balance into the pool and withdrew most of the WBNB, producing the reported loss.
Protocol details
Security review history
- Salus View report
Evidence
Proof of concept
1 available- Code FourMeme Logic Flaw
Sources
- report @peckshieldalert incident report x.com
- report @four_meme_ incident report x.com
- analysis Website reference chaincatcher.com
- analysis DeFiLlama defillama.com
- analysis Four.meme Hack Analysis blog.verichains.io
- analysis Four Meme - Learn EVM Attacks coinspect.com
- analysis BNB Chain's Memecoin launchpad Four Meme hit by $200k exploit, suspends liquidity cryptoslate.com
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
