KINGOFREFLECT Honeypot
What happened
De.Fi's REKT database lists KINGOFREFLECT (KOR, BNB Smart Chain contract 0x01ecb213…86940b) as an Exit Scam/Honeypot, noting that the contract owner could restrict holders from selling. The verified source stores a variable newun and rejects every transfer or transferFrom whose recipient equals it with the message "please wait". newun is filled automatically by the first transferFrom call, which is how an exchange pool address gets captured when liquidity is deposited, and the owner can also set it directly with transfernewun.
A token sale routed to the captured address then reverts. Security researchers' write-up of this pattern (published 2021-04-11, without naming KOR) calls it a stealthy liquidity-pool block.
How it happened
- The constructor mints the full supply to the deployer:
_totalSupply = 1100000000000000000000000000;andbalances[owner] = _totalSupply;, which is 1.1 billion tokens at 18 decimals. newunstarts empty.transferFrombegins withif(from != address(0) && newun == address(0)) newun = to; else require(to != newun, "please wait");. The firsttransferFromtherefore skips the check and stores its recipient asnewun. If that first call is the liquidity deposit pulled by a router,newunbecomes the pool address.- From then on both paths refuse that recipient:
transferhasrequire(to != newun, "please wait");and latertransferFromcalls take theelsebranch with the same check. - A holder's sell through a router moves tokens into the pool with
transferFrom, so it reverts when the pool isnewun. Moves that go out to other addresses (for exampletransferfrom the pool to a buyer) do not pass through this check. - The owner controls the switch:
function transfernewun(address _newun) public onlyOwner { newun = _newun; }. Setting it to the zero address re-arms the capture, because the nexttransferFromstores its recipient again; pointing it at an unused address lifts the block. TheOwnedbase hastransferOwnershipandacceptOwnershipbut no renounce function.
The code shows what the owner can do; no opened transaction shows transfernewun being called or what newun currently holds.
Protocol details
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.