REALSWAK Rug Pull

REALSWAK was an NFT project whose SWAK token on BNB Chain was deployed as a disguised upgradeable proxy. The verified contract at the token address holds no token logic: every call is forwarded with delegatecall to an implementation address kept in a storage slot, and one admin address (named auctioneer in the code) can point that slot at any new contract through a function misleadingly called Transfer. That means the admin can replace the token's entire behaviour, including balances and transfer rules, at any time, and the renounced owner() visible through the proxy does not limit this power.

PeckShield reported on 22 March 2022 that REALSWAK had rugged, deleted its social accounts, and that about 1,300 BNB went from the SWAK team's address into Tornado Cash. De.Fi's listing says the deployer removed all liquidity and puts the loss at $526,968.