Lossless Honeypot

Reported loss Not disclosed
BNB Chain
Honeypot

What happened

This "Lossless" (LSS) token on BNB Chain is built from a reused honeypot template (the verified contract is named KingAkita) that blocks ordinary holders from selling by default. Every transfer and transferFrom passes through the burnTokenCheck modifier. The owner, the _safeOwner address and owner-whitelisted wallets can move tokens freely.

Any other sender is rejected unless the recipient is the hard-coded PancakeSwap router address. A PancakeSwap sale sends tokens to the pair, not the router, so it reverts with a fake ERC20: transfer amount exceeds balance error. The owner also controls whitelist and blacklist setters disguised as increaseAllowance and addApprove, and a public _mint that lets the owner create unlimited tokens.

De.Fi's REKT database lists the token as an exit scam/honeypot; no transaction evidence of losses was found.

How it happened

  1. The constructor sets both _owner and _safeOwner to the deployer-supplied owner and mints the supply to it.
  2. The first transfer the owner makes while _owner == _safeOwner reassigns _safeOwner = recipient, giving that recipient unrestricted sending rights.
  3. _sellAmount starts at 0, so for a holder who is neither whitelisted nor blacklisted the check amount < _sellAmount is false. The transfer only succeeds if sender == _safeOwner or recipient == _unirouter.
  4. Selling through PancakeSwap moves the holder's tokens to the pair contract, so neither condition holds and the sale reverts with a message that imitates an insufficient balance.
  5. The owner can open a narrow window by transferring to itself, which sets _sellAmount. A holder who then sends a smaller amount to _safeOwner is automatically moved onto the blacklist.
  6. The owner can whitelist or blacklist any address, repoint _safeOwner with decreaseAllowance, and credit itself any amount through the public _mint function. multiTransfer lets the owner airdrop tokens, whitelist chosen recipients and set their router allowance to the maximum.

Protocol details

Classification Token
Protocol Type Exit Scam/Honeypot
Affected asset / contract LSS

Evidence

Same attack technique

Browse all hacks →
Ethereum Nagasaki Shiba Loss not disclosed Ethereum phuture.finance Loss not disclosed BNB Chain NFTQR Loss not disclosed BNB Chain KingCorgi Loss not disclosed

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.

Start Free Trial Explore attack classes