MetaMask Governance Honeypot
Reported loss
$1.5M
Honeypot
What happened
The contract deployer:
Created 2 fake MetaMask tokens (MASK and META) and 1 Bored Ape Yacht Club (APE) token:
Added initial liquidity at:
The liquidity was removed by the contract deployer:
Stolen funds were deposited into Tornado Cash mixer:
The contract deployer possibly blocked token transfers:
Protocol details
Evidence
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.