KreamPie Honeypot

Reported loss Not disclosed
BNB Chain
Honeypot

What happened

KreamPie (KPIE) is a BEP-20 token on BNB Chain that blocks every sale into its liquidity pool. The first transferFrom the contract sees, normally the router pulling the deployer's tokens into the new PancakeSwap pair when liquidity is added, stores that recipient in a variable named newun. From then on, both transfer and transferFrom revert with please wait whenever the recipient is newun, so holders can buy from the pool but cannot sell back into it.

The owner can repoint newun at any time with transfernewun. The same newun trap was documented in April 2021 in a family of BNB Chain tokens such as SafeRocket; De.Fi's REKT database lists KreamPie as an exit scam/honeypot, with no loss figure.

How it happened

  1. The constructor mints the full 10,000,000,000 KPIE (3 decimals) to the owner; newun starts as address(0).
  2. When liquidity is added through the PancakeSwap router, the router calls transferFrom(owner, pair, amount). Because newun == address(0), the line if(from != address(0) && newun == address(0)) newun = to; records the pair as newun.
  3. Buys still work: the pair sends KPIE to the buyer, and the buyer is not newun.
  4. A sell sends KPIE to the pair, through transfer or the router's transferFrom. Both functions check require(to != newun, "please wait"), so every sell reverts with a message that suggests a temporary delay.
  5. transfernewun(address _newun) is onlyOwner, so the owner can move the block to another address, which would reopen sells, or set it back to zero so the next transferFrom recipient is blocked instead.
  6. Removing liquidity sends KPIE out of the pair rather than into it, so the block does not stop whoever holds the LP tokens from withdrawing the pool's BNB.
  7. clearCNDAO() lets the owner withdraw any BNB held by the token contract itself.

Protocol details

Classification Token
Protocol Type Exit Scam/Honeypot
Affected asset / contract KPIE

Evidence

Same attack technique

Browse all hacks →
BNB Chain MoonFly Loss not disclosed BNB Chain SHIBA PLATINUM Loss not disclosed BNB Chain MoonChain Loss not disclosed BNB Chain TIGER Loss not disclosed

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.

Start Free Trial Explore attack classes