MetaMask Governance Honeypot

Reported loss $1.5M
Honeypot

What happened

The contract deployer:

Address 0x0f62…b417

Created 2 fake MetaMask tokens (MASK and META) and 1 Bored Ape Yacht Club (APE) token:

Tx 0x43fa…6cc2

Tx 0x4619…72c3

Tx 0x9e9f…3674

Added initial liquidity at:

Tx 0x264e…1815

Tx 0x4a1f…b6d1

Tx 0x09b1…c8ab

Tx 0x4648…b3f3

Tx 0x6621…a19e

The liquidity was removed by the contract deployer:

Tx 0xb131…51d4

Tx 0x32ba…4076

Tx 0x6637…78f9

Tx 0x355a…9c8f

Stolen funds were deposited into Tornado Cash mixer:

Source

The contract deployer possibly blocked token transfers:

Source

Source

Source

Protocol details

Classification Token
Protocol Type Exit Scam/Honeypot
Affected asset / contract MASK, META, APE
Protocol links Website @Meter_IO

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.