Red Eagle Token Rug Pull

What happened

Red Eagle Token (EAGLE) is a BNB Smart Chain token that De.Fi's REKT database lists as an exit scam/rug pull on September 6, 2021. Its verified code sends 15% of every transfer, buys and sells included, to the deployer's address 0x464a9F61…B8812b, which is hard-coded and cannot be changed. The owner can also mint any amount of new EAGLE to itself.

The code shows what the deployer could do; no opened source confirms how the listed rug pull was carried out or what holders lost.

How it happened

1. The constructor mints the whole initial supply of 150 EAGLE to the deployer.
2. _transfer debits the sender the full amount, then runs uint256 fee = amount.mul(15).div(100); and credits it to address feerecipient = 0x464a9F614c7ba5fb7cFCf4a64D2094a6A6B8812b;. The recipient gets amount.sub(fee), 85%.
3. The event emit Transfer(sender, recipient, amount); still reports the full amount to the recipient, so explorers and wallets overstate what buyers received.
4. mint(uint256 amount) is onlyOwner and has no cap, so the owner can create new EAGLE and sell it into the pool.
5. The fee address is a literal in the code, so renounceOwnership() would stop the mint but not the 15% skim.
6. De.Fi's REKT database lists EAGLE as an exit scam/rug pull dated 2021-09-06. The exact on-chain actions and the loss are not recorded in any opened source.

Protocol details

Classification Token

Protocol Type Exit Scam/Rugpull

Affected asset / contract EAGLE

Protocol links Website

Evidence

• address Red Eagle Token (EAGLE) verified contract source, BscScan bscscan.com
• analysis Red Eagle Token BscScan token page filtered to the deployer (De.Fi proof link) bscscan.com
• analysis Sourcify match, chain 56, 0x94ee788d976c680ca22e8782e4584ac60005d033 repo.sourcify.dev