MoonAkita Inu Honeypot

Reported loss Not disclosed
BNB Chain
Honeypot

What happened

MoonAkita Inu (MNAKITA) is a BNB Chain token deployed on 27 March 2021 at 0x5b7a52b3…477f17 by 0x976B3623…476d41. Its transferFrom requires allow[_from] == true, and at deployment only the deployer is on that list. PancakeSwap sales move the seller's tokens with transferFrom, so they revert for everyone else, while buys work because the pair pays out through transfer, which has no such check.

The admin functions are not tied to the stored owner: onlyOwner compares the caller with a hard-coded address, 0xbd486897…439192. That address can add or remove sellers with addAllow and set any wallet's balance to any value with mint, and changing owner does not remove those powers, despite the header's promise that ownership would be renounced. De.Fi's REKT database lists the token as an exit scam/honeypot.

How it happened

  1. The constructor credits the whole supply to the deployer and sets allow[msg.sender] = true, so the deployer is the only address allowed as a transferFrom source.
  2. transferFrom checks require(allow[_from] == true); before moving tokens. The router sells by calling transferFrom(holder, pair, amount), so every sale from a holder outside the list reverts.
  3. transfer has no allow check, so the pair can send tokens to buyers and buys succeed.
  4. modifier onlyOwner() {require(msg.sender == address(1080614020421183795110940285280029773222128095634));_;} hard-codes the controller (0xbd486897…439192) instead of reading owner, so transferOwnership changes a variable that no permission check uses.
  5. That controller can call addAllow(holder, allowApprove) to open or close sales for any address, and mint(miner, _value) runs balances[miner] = _value;, overwriting any balance without changing totalSupply.

Protocol details

Classification Token
Protocol Type Exit Scam/Honeypot
Affected asset / contract MNAKITA

Evidence

Same attack technique

Browse all hacks →
BNB Chain KodaRobotDog Token Loss not disclosed BNB Chain YieldShiba.com Loss not disclosed BNB Chain MaxGoatToken Loss not disclosed BNB Chain LuckyDoge Loss not disclosed

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.

Start Free Trial Explore attack classes