InfinityDoge Honeypot

Reported loss Not disclosed
BNB Chain
Honeypot

What happened

De.Fi's REKT database lists InfinityDoge (INFINITYDOGE) as an exit scam/honeypot on BNB Smart Chain, saying the owner could disable transfers so holders could not sell. The verified source has an owner-controlled sell block: the owner can mark any address as a PanCakeSwapReciever, after which every transfer to that address reverts with "Error: Can not sell this token". Marking a liquidity pool this way stops sells into it while buys out of it still work.

The whole 950 trillion token supply is minted to the deployer in the constructor.

How it happened

  1. The constructor mints the full supply to the deployer: _transferTO(msg.sender, 950000000000000e18);, which is 950,000,000,000,000 tokens at 18 decimals.
  2. The owner can flag any address with setPanCakeSwapReciever(address _recipient, bool _feeless) public onlyOwner, which writes PanCakeSwapReciever[_recipient] = _feeless;. Unlike the whitelist setters, it is not limited by canWhitelist, so renounceWhitelist() does not switch it off.
  3. Every transfer runs calculateFeesBeforeSend(sender, recipient, amount), which contains if(PanCakeSwapReciever[recipient]){ revert("Error: Can not sell this token"); }. It returns (amount, 0) otherwise, so no fee is charged on normal transfers.
  4. In _transfer the sender's balance is debited first (_balances[sender] = _balances[sender].sub(amount, ...)), but the later revert undoes the whole call, so a blocked transfer leaves the holder's balance unchanged and moves nothing.
  5. A sale on a decentralised exchange sends the holder's tokens to the pool address, so if the owner has flagged the pool, sells fail. Transfers out of the pool to buyers are not affected, because the check looks only at the recipient.
  6. Nothing in the code limits when the owner can set or clear the flag. renounceOwnership() exists, but the on-chain owner() read in meta.json on 2026-09-30 still returned the deployer, 0xff74d4ff…c0cb43, so the power was still in place at that read.

Protocol details

Classification Token
Protocol Type Exit Scam/Honeypot
Affected asset / contract INFINITYDOGE

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.