What happened
At first, the contract deployer removed himself from the list of minters, at this transaction:
However, he left an opportunity in the token smart contract that would have allowed him to reinstate himself as a minter. He invoked addMinter function in the following transaction:
After doing this, the owner generated an additional 4K SHABU tokens and placed them in his wallet. The owner could increase the tax rate to 100% and put himself on the whitelist. The project exit scammed after the token contract owner drained liquidity, stealing 10 ETH. ShabuVault's website and social media are inaccessible.
Protocol details
Evidence
- report Report archive.ph
- analysis de.fi Analysis t.me
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
