Neutron Network Honeypot
What happened
De.Fi's REKT database lists Neutron Network (NNE, BNB Smart Chain, contract 0x7a2aa483…9aa651) as an exit scam/honeypot, stating that the contract owner could disable the transfer function and so restrict users from selling their tokens. The verified source implements this through the allowance system: _approve only records an allowance when the token owner is one hard-coded address, and writes zero for every other holder. Because transferFrom has to spend an allowance, a holder who sells through a router, which pulls tokens with transferFrom, hits a revert, while plain transfer calls are unaffected.
How it happened
- The constructor sets
_decimals = 2and_totalSupply = 1200000000(12,000,000 whole tokens) and credits all of it tomsg.sender, the deployer 0x42da1474…d22Fa8. _approveis the only function that writes_allowances. It containsif (owner == address(0x42da14748dC899236faed5Aa3C871f1483d22Fa8)) { _allowances[owner][spender] = amount; ... } else { _allowances[owner][spender] = 0; ... }.approveandincreaseAllowanceboth go through it, so for any other holder every approval, whatever the amount, is stored as 0.transferFromcalls_transfer(sender, recipient, amount)and then_approve(sender, _msgSender(), _allowances[sender][_msgSender()].sub(amount, "BEP20: transfer amount exceeds allowance")). For a non-privileged holder the allowance is 0, sosubreverts for anyamountabove zero and the whole call, including the balance move, is rolled back. A router sale spends the holder's allowance throughtransferFromand therefore fails.transfercalls_transferdirectly with no allowance check, so ordinary wallet-to-wallet transfers still work. A buy that pays tokens out of a pair withtransferis not touched by the allowance logic.- The privileged address is a literal in
_approve.renounceOwnershipandtransferOwnershipchange_owneronly and do not move it, and the code has no setter to change the literal. The owner can also callmint(uint256 amount), which credits new tokens to the owner with no cap.
The code allows steps 2 to 5. De.Fi's REKT database lists the token as an exit scam/honeypot; no transaction was opened that shows the mint being used or liquidity being removed.
Protocol details
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.