InfinityDoge Honeypot
What happened
De.Fi's REKT database lists InfinityDoge (INFINITYDOGE) as an exit scam/honeypot on BNB Smart Chain, saying the owner could disable transfers so holders could not sell. The verified source has an owner-controlled sell block: the owner can mark any address as a PanCakeSwapReciever, after which every transfer to that address reverts with "Error: Can not sell this token". Marking a liquidity pool this way stops sells into it while buys out of it still work.
The whole 950 trillion token supply is minted to the deployer in the constructor.
How it happened
- The constructor mints the full supply to the deployer:
_transferTO(msg.sender, 950000000000000e18);, which is 950,000,000,000,000 tokens at 18 decimals. - The owner can flag any address with
setPanCakeSwapReciever(address _recipient, bool _feeless) public onlyOwner, which writesPanCakeSwapReciever[_recipient] = _feeless;. Unlike the whitelist setters, it is not limited bycanWhitelist, sorenounceWhitelist()does not switch it off. - Every transfer runs
calculateFeesBeforeSend(sender, recipient, amount), which containsif(PanCakeSwapReciever[recipient]){ revert("Error: Can not sell this token"); }. It returns(amount, 0)otherwise, so no fee is charged on normal transfers. - In
_transferthe sender's balance is debited first (_balances[sender] = _balances[sender].sub(amount, ...)), but the laterrevertundoes the whole call, so a blocked transfer leaves the holder's balance unchanged and moves nothing. - A sale on a decentralised exchange sends the holder's tokens to the pool address, so if the owner has flagged the pool, sells fail. Transfers out of the pool to buyers are not affected, because the check looks only at the recipient.
- Nothing in the code limits when the owner can set or clear the flag.
renounceOwnership()exists, but the on-chainowner()read in meta.json on 2026-09-30 still returned the deployer, 0xff74d4ff…c0cb43, so the power was still in place at that read.
Protocol details
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.