SHOK Rug Pull

The verified code gives the owner the following controls. No opened source shows any of them was used, and the contract's owner is now the zero address.

1. The owner can call updateBanned or updateBannedBatch to set _banned[address]. Every transfer runs _transfer, which starts with require(!_banned[from] && !_banned[to], "ERC20: banned address"), so a flagged wallet could no longer buy, sell or move SHOK.
2. The owner can call setMarketingFee, setDeadFee or setLpRewardFee, which accept any value with no upper limit. Fees are charged out of 10000 on every trade with uniswapV2Pair; at a combined 10000 takeAllFee would take the whole trade, and above that its subtraction reverts, blocking buys and sells.
3. Wallets marked by excludeFromFees, which the constructor applies to the owner, the marketing wallet and the contract, skip fees entirely, and the whole 21,000,000 supply is minted to the owner at deployment.

What was reported: on 16 October 2022 CertiK reported an exit scam on SHOK with more than 83% slippage and about $71.4K taken. De.Fi's listing describes the drain as a SHOK transfer from an unverified contract to 0xf42c8f11…b0e3cd followed by a sale for USDT.