Slicer Finance Rug Pull
What happened
Slicer Finance (SLS) was an Ethereum token launched at the end of December 2020; De.Fi's REKT database describes it as a fair launch with no initial liquidity added by the deployer. The verified SLS contract lets its governor (gov, the deployer at construction) or the configured liquidityPool address mint any amount of SLS to any address, with no cap. On 2021-01-01 at 11:18 UTC the deployer 0xB6eAFC4f…5B6840 called mint() to create 100 trillion SLS in its own wallet (tx 0xcb78fcc5…e02cf6), and four minutes later swapped that amount into the Uniswap V2 SLS pool for about 19.64 WETH (tx 0xc4313139…800185).
Later that day a #RUGDETECTIVES post on X reported that the team wallet, which had no lock-up, dumped 19.9 ETH and that the project's Telegram had been deleted. De.Fi's REKT database lists about $14,346 lost.
How it happened
- The constructor makes the deployer the governor:
gov = msg.sender;. mint(address to, uint256 amount)is guarded only byonlyMinter, which allowsmsg.sender == liquidityPool || msg.sender == gov;_mintaddsamountto_totalSupplyand to the recipient's balance with no maximum supply.- The governor can also point
liquidityPoolat any address through_setLiquidityPool, adding a second address that can mint. - On 2021-01-01 at 11:18 UTC the deployer called
mint()with itself asto, creating 100 trillionSLS(tx 0xcb78fcc5…e02cf6). - At 11:22 UTC the deployer sold the same amount through Uniswap V2 Router 2 with
swapExactTokensForTokens, receiving about 19.64 WETH from the SLS pool (tx 0xc4313139…800185). - Later on 2021-01-01 an X post tagged #RUGDETECTIVES reported the team wallet dumped 19.9 ETH and the Telegram group was deleted.
Protocol details
Evidence
- report X post: Scam Project @slicerfinance $SLS, team wallet dumped 19.9 eth twitter.com
- transaction Etherscan transaction 0xcb78fcc5...02cf6 (SLS mint by the deployer) etherscan.io
- transaction Etherscan transaction 0xc4313139...00185 (SLS sale by the deployer) etherscan.io
- address Slicer.Finance (SLS) verified token contract, Etherscan etherscan.io
- analysis Sourcify match, chain 1, 0x1dAfac57c2F74CBC2736486309a009880CE4cbfc repo.sourcify.dev
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.