SafeWaifu Honeypot

Reported loss Not disclosed
BNB Chain
Honeypot

What happened

SafeWaifu (WAIFU, 0xccceb834…d72bcf) stores an address in a variable called newun and refuses every transfer to it with the message "please wait". The first transferFrom call made while newun is empty sets newun to that call's destination. If that call is the router pulling tokens into a liquidity pool, as a liquidity add normally does, later sells into the pool revert.

The owner can also reassign newun with transfernewun. De.Fi's REKT database lists the token as an exit scam/honeypot, stating that the contract owner could disable the transfer function and restrict users from selling.

How it happened

  1. The constructor sets name SafeWaifu, symbol WAIFU, 18 decimals and a supply of 10000000000000000000000000000 raw units, all credited to the deployer (balances[owner] = _totalSupply;).
  2. transferFrom begins with if(from != address(0) && newun == address(0)) newun = to;. The first call while newun is unset skips the check and stores its destination as newun. A liquidity add by a router is a transferFrom into the pool, so the pool would be captured if that call comes first; the code itself does not name the pool.
  3. From then on transferFrom runs else require(to != newun, "please wait"); and transfer runs require(to != newun, "please wait");. Neither function exempts any sender, so every attempt to send tokens to newun reverts, including a holder's sale if newun is the pool.
  4. The check tests only the destination, so tokens leaving the pool to a buyer pass unless the buyer is newun.
  5. transfernewun(address _newun) is onlyOwner and can set newun to any address. An unused address lifts the block. Setting it to the zero address re-arms the capture, because the next transferFrom with a non-zero from stores its destination again.
  6. clearCNDAO() is onlyOwner and sends the contract's own BNB balance to the caller.

Protocol details

Classification Exchange (DEX)
Protocol Type Exit Scam/Honeypot
Affected asset / contract WAIFU

Evidence

Same attack technique

Browse all hacks →
BNB Chain SafeWorld Loss not disclosed BNB Chain SafeCompound Loss not disclosed BNB Chain Cassiopeia Loss not disclosed BNB Chain StrongCroac Loss not disclosed

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.

Start Free Trial Explore attack classes