LILDOG Honeypot

Reported loss Not disclosed
BNB Chain
Honeypot

What happened

LILDOG (LDG) is a BEP-20 token on BNB Smart Chain with a one-address sell block. The contract stores an address called newun, and both transfer and transferFrom revert with "please wait" for any transfer sent to it. The first transferFrom made while newun is empty sets newun to its recipient, and the owner can change it with transfernewun.

De.Fi's REKT database lists LDG as an exit scam / honeypot dated 2021-05-14, describing the owner as able to disable transfers so holders cannot sell; it gives no loss figure.

How it happened

  1. The constructor mints the full supply to the deployer: balances[owner] = _totalSupply;.
  2. transferFrom begins with if(from != address(0) && newun == address(0)) newun = to;. The first transferFrom after deployment therefore stores its recipient as newun and goes through. The code does not say who that recipient is. The blog post linked by De.Fi describes the same pattern as the liquidity pool being captured when liquidity is first added.
  3. After that, transferFrom takes the else require(to != newun, "please wait"); branch and transfer runs require(to != newun, "please wait");. Any transfer to newun reverts, whatever the sender, and the revert comes before balances[from] is debited. If newun is a trading pair, selling into it fails while buying from it still works; the source does not show that newun is the pair.
  4. The owner can call transfernewun(address _newun) to set newun to any address. Setting it to the zero address re-arms the capture, so the next transferFrom with a non-zero sender stores a new recipient; pointing it at an address nobody uses lifts the block.
  5. A comment repeated in the source reads "This is a token where you can't sell". The code shows these controls exist in the compiled TokenBEP20 contract; it does not show how newun was set or used on-chain.

Protocol details

Classification Token
Protocol Type Exit Scam/Honeypot
Affected asset / contract LDG

Evidence

Same attack technique

Browse all hacks →
BNB Chain DogelonMars Loss not disclosed Ethereum Cheetah Coin Loss not disclosed BNB Chain Patrigio Loss not disclosed BNB Chain ShinyDoge Loss not disclosed

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.

Start Free Trial Explore attack classes