MetaMoonMars Hack

MetaMoonMars token was exit scammed via Withdrawal Fee issue. The token deployer used a privileged function to set a huge fee multiplier

MetaMoonMars is a BEP20 token trading on PancakeSwap. The contract of the token contained privileged function aprove() which sets a fee multiplier. At first, the fee was 8 percent, and after some period the function was called again, setting a fee of 99 percent.

Users were not able to buy a fair amount of tokens, and their funds were transferred into the pool.

of the huge fee, users couldn't sell the little amount of $M3 token they receive. The scammer profited for 866 $USD.

Attacker address:

https://bscscan.com/address/0xda7e1666…a17c96

Malicious transactions:

https://bscscan.com/tx/0x93a82872…6fdcc0

https://bscscan.com/tx/0xe4095741…dc78d7

Tokens transfer transaction:

https://bscscan.com/tx/0x77c2be94…3ce378