House of paper Hack
What happened
The contract owner could disable the transfer function, which restricted users in selling their tokens.
The contract deployer added initial liquidity at:
https://etherscan.io/tx/0xe07ecf72…7b04ce
The contract deployer used hidden minting functionality under the stakingTransfer() function to generate new tokens onto his wallet at:
https://etherscan.io/tx/0x57fc84ab…624fcb
The minted tokens were sold by the contract deployer at:
https://etherscan.io/tx/0x4ef7dcf6…70a5b7
Case & protocol details
Evidence & learning
Sources and on-chain records
- report Report houseofpaper.finance
Practice this exploit pattern safely
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.