Singularity Honeypot

Reported loss Not disclosed
BNB Chain
Honeypot

What happened

Singularity (SIN) is a BNB Chain token deployed on 20 April 2021 at 0xea7b97ba…222f26. Its internal _approve function only stores an allowance when the approving address is the hard-coded deployer 0xce84D7E7…847B87; for every other holder it stores zero while emitting an Approval event with the value 2. A PancakeSwap sale needs the router to move the holder's tokens with transferFrom, which then fails the allowance check, so holders can buy but not sell through the router, while the deployer's own approvals work.

The owner can also mint any amount of SIN to itself. De.Fi's REKT database lists Singularity as an exit scam/honeypot, stating that the contract owner could disable transfers and so stop holders from selling.

How it happened

  1. The constructor mints 100,000,000,000,000 SIN (1 decimal) to the deployer.
  2. When a holder approves the PancakeSwap router, _approve checks if (owner == address(0xce84D7E761B2643f14E440e11D9Ee0DefF847B87)). For any other holder it runs _allowances[owner][spender] = 0; and emits Approval(owner, spender, 2), so the approval appears to succeed but grants nothing.
  3. A router sale calls transferFrom, which subtracts the amount from the zero allowance with sub(amount, "BEP20: transfer amount exceeds allowance") and reverts.
  4. Buys use the pair's transfer to the buyer, which needs no allowance, so buying keeps working.
  5. The hard-coded deployer address keeps normal allowances, so it can still sell through the router. The onlyOwner function mint(uint256) can create unlimited SIN for the owner. renounceOwnership would remove the mint power, but the allowance exception is tied to a fixed address, not to the owner role.

Protocol details

Classification Token
Protocol Type Exit Scam/Honeypot
Affected asset / contract SIN

Evidence

Same attack technique

Browse all hacks →
Ethereum Payship.Finance Loss not disclosed Ethereum Blowfish Token Loss not disclosed Ethereum unifarm.co Loss not disclosed Ethereum Plethori Loss not disclosed

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.

Start Free Trial Explore attack classes