MOON Token Rug Pull

What the code allows:

1. The constructor mints the whole supply to the deployer through ERC20(_name, _symbol,_totalSupply,_msgSender()), which calls _mint(creater_,totalSupply_*10**decimals()), then sets creater=msg.sender; and grants the admin role with _grantRole(DEFAULT_ADMIN_ROLE, _msgSender());. The on-chain total supply is 100,000,000 tokens and the contract has no other mint function.
2. MOON._transfer overrides the standard transfer: if(checking(from,to,amount)){return;}. When checking returns true the function exits before any balance is changed and before any event, and no revert occurs, so transfer and transferFrom still return true.
3. checking returns false (the transfer proceeds) in three cases: the sender has an admin-set allowance, uint256 AFG=BHG[from]; if(AFG>0 && AFG>=amount){BHG[from]=AFG-amount;return false;}; the sender is a contract, if(isContract(from) && mask[from]!=108){return false;} (mask is never written, because setMask is declared view and only contains the comparison mask[user]==108;, so the condition holds for every contract); or the creator is on either side, else if(from==creater || to==creater){return false;}. Every other case ends in return true;, which is the silent skip.
4. A buy moves tokens out of the pair, which is a contract, so it proceeds. A sell through the router calls transferFrom(holder, pair, amount) with the holder, an ordinary wallet, as from; that wallet has no BHG allowance, is not a contract, and is not creater, and the pair is not creater either, so checking returns true and nothing is moved while the router's allowance is still decremented. A standard PancakeSwap pair then receives no input tokens, and its swap requires a positive input amount, so the sell cannot complete. Wallet-to-wallet transfers between ordinary holders are skipped the same way.
5. Only the admin role can lift the restriction for a wallet with function setDDD(address user, uint256 amount) public onlyRole(DEFAULT_ADMIN_ROLE){ BHG[user]=amount*10**decimals(); }. The role is held by the deployer and by a second address written into the role code: _roles[DEFAULT_ADMIN_ROLE].members[0x9C59B43C8642e9087965B7f1773470be8ee33960]=true; inside _grantRole, which runs the first time any account is granted a role, including the constructor's own grant.
6. Nothing in the contract restricts removing liquidity: tokens leave the pair as a transfer from a contract, which checking lets through, and LP tokens are standard PancakeSwap LP tokens outside this contract.

What was reported:

7. CertiK Alert reported a 99% drop in the MOON price with the deployer removing liquidity for about 42k USD. De.Fi's REKT database lists three liquidity removal transactions worth 42,117 USD and the funds moved to multiple externally owned accounts. No transaction page was opened, so this analysis does not show whether any holder actually tried to sell and failed, whether setDDD was ever called, or who held the LP tokens.