SherLOCK Rug Pull

SherLOCK (LOCK) was a BNB Chain token whose transfer logic lets the owner stop holders from selling while the owner's own wallets trade freely. Every sale to the PancakeSwap pair or router must pass _canTransfer, which checks each seller's cumulative sold amount against what they bought, their cumulative BNB proceeds against the owner-set _theNumber, and their BNB balance against the owner-set _theRemainder; if a check fails, transfer returns true without moving any tokens, so the swap cannot complete. Addresses in _marketersAndDevs skip these checks, and the owner can also credit itself unlimited tokens through rewardHolders.

CertiK reported on 2022-09-21 that the contract deployer removed liquidity and sent 510 BNB to Tornado Cash at the time of its alert. The existing record lists 938 BNB removed from the pool, about 520 BNB sent to Tornado Cash and the rest sent to another address.