Lucky Coin Honeypot

Reported loss Not disclosed
BNB Chain
Honeypot

What happened

Lucky Coin ($LUCKY) is a BNB Chain reflection token deployed on 24 May 2021 at 0x2e8921b7…7316c1, built on the common SafeMoon-style template with 4% reflection and 4% liquidity fees. One added line in _transfer, require(tx.origin == to || tx.origin == owner());, only lets a transfer go through when the wallet that started the transaction is the one receiving the tokens, or is the owner. A PancakeSwap buy passes because the buyer receives the tokens, but a sell sends tokens to the pair, so it reverts for every holder except the owner.

The owner can also change both fees with no upper limit and can use the template's lock function to look renounced for a while and then reclaim ownership. De.Fi's REKT database lists Lucky Coin as an exit scam and honeypot, describing it as a contract where the owner could stop holders from selling.

How it happened

  1. The constructor gives the deployer the full supply of 1 trillion $LUCKY and creates the PancakeSwap pair: _rOwned[_msgSender()] = _rTotal; and createPair(address(this), _uniswapV2Router.WETH()) on router 0x10ED43C7…56024E.
  2. Every transfer and transferFrom runs _transfer, which checks require(tx.origin == to || tx.origin == owner());.
  3. On a buy, the pair sends tokens to the buyer, who also signed the transaction, so tx.origin == to holds.
  4. On a sell, the router calls transferFrom(holder, pair, amount). The recipient is the pair, not the holder, so the check fails and the sell reverts with no error message. Wallet-to-wallet transfers fail the same way; only the owner's transactions are exempt.
  5. The owner keeps further levers: setTaxFeePercent and setliquidityFeePercent accept any value, and lock(uint256 time) sets _owner = address(0) while saving _previousOwner, so unlock() can restore the owner after the lock time.

Protocol details

Classification Token
Protocol Type Exit Scam/Honeypot
Affected asset / contract $LUCKY

Evidence

Same attack technique

Browse all hacks →
BNB Chain SAFE SHIBA Loss not disclosed BNB Chain Smaugs Loss not disclosed BNB Chain Paralink Network Loss not disclosed BNB Chain DIAMOND Loss not disclosed

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.

Start Free Trial Explore attack classes