Potatos Finance Rug Pull

Reported loss $569
BNB Chain
Rugpull

What happened

Potatos Finance (POT) was a BEP-20 token on BNB Chain at 0xeb0035f3…43dd94, deployed on 16 December 2020 by 0x60F3a33c…FBee65, which received the initial 20,000 POT and is still the contract owner. The verified code has no sell block, blacklist or fee, but it has an owner-only mint(uint256) with no supply cap that credits new POT to the owner, who can then sell them into the pool against holders. De.Fi's REKT database lists POT as an exit scam/rug pull with a $569 loss.

According to that listing, the deployer added liquidity in eight transactions (0xc6bf5b30…202fa1, 0xa7ec7b90…0a9dcd, 0x67a2b842…ca8ced, 0x16b47032…5b58a0, 0x55dcb073…150cdd, 0x659368cb…5cfc1c, 0x5a141808…f502bb, 0x79b9b0a1…e0525c), removed it in four (0xd2926281…858117, 0x49278de1…70fa80, 0xbe5a1936…c3716a, 0xef2c259c…df45c0), and sold tokens several times, for example in 0xa51c11f0…cb8967 and 0xc1e2a5d2…362bc0.

How it happened

  1. The constructor sets name Potatos Finance, symbol POT and 18 decimals, and credits the whole initial supply of 20,000 POT to the deployer, who is also owner.
  2. mint(uint256 amount) is onlyOwner and calls _mint(_msgSender(), amount), so the owner can create any amount of POT for itself; _mint only checks that the recipient is not the zero address.
  3. Newly minted POT can be sold into the PancakeSwap pool like any other balance, which takes the paired asset out of the pool and dilutes every holder.
  4. The owner controls the LP position it creates, so it can also withdraw the pool's liquidity; this needs no token code.
  5. De.Fi's REKT database lists deployer liquidity additions, four liquidity removals and repeated deployer sales, with a $569 loss.

Protocol details

Classification Token
Protocol Type Exit Scam/Rugpull
Affected asset / contract POT
Protocol links Website @potatosFinance

Evidence

Same attack technique

Browse all hacks →
Ethereum Overbase Finance $4K lost Ethereum Prophet Project $46K lost Ethereum UnlimitedBase Finance $6K lost Ethereum Reflation $9K lost

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.

Start Free Trial Explore attack classes