What happened
At first, the contract deployer removed himself from the list of minters, at this transaction:
https://etherscan.io/tx/0x497aa751…ab7016
However, he left an opportunity in the token smart contract that would have allowed him to reinstate himself as a minter. He invoked addMinter function in the following transaction:
https://etherscan.io/tx/0x58bcb174…676b14
After doing this, the owner generated an additional 4K SHABU tokens and placed them in his wallet. The owner could increase the tax rate to 100% and put himself on the whitelist. The project exit scammed after the token contract owner drained liquidity, stealing 10 ETH. ShabuVault's website and social media are inaccessible.
Case & protocol details
Evidence & learning
Sources and on-chain records
- report Report archive.ph
- analysis de.fi Analysis t.me
Practice this exploit pattern safely
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.