What happened
SLOTH INU is a reflection-style token that sends the whole supply to the deployer and contains no liquidity lock or LP-token handling, so whoever holds the Uniswap LP tokens can withdraw the pool at any time. Etherscan shows the deployer 0x69c8FC2B…6f9574 deploying the token at 21:07:54 UTC on 2021-11-25, adding 3.5 ETH and about 9.2 trillion SLOTH INU at 21:11:44 UTC (transaction 0xe34fe755…5089af, 181.27 LP tokens minted to the sender), then removing liquidity in two transactions: 0xd5174a5b…aa082d at 21:32:48 UTC (2.701068 ETH, 90.6327 LP tokens burned) and 0x092c83c7…bc9043 at 21:34:04 UTC (2.621572 ETH). That is about 5.32 ETH withdrawn against 3.5 ETH added, roughly 22 minutes after the pool was created.
Separately, the code lets the owner toggle a cap on transfers and a buy cooldown, and routes 6% of every transfer to the contract, half of which is sold for ETH and sent to a hard-coded wallet.
How it happened
- The constructor assigns the entire supply to the deployer:
_rOwned[_msgSender()] = _rTotal;. The deployer then created the pool withaddLiquidityETHand received the LP tokens (transaction 0xe34fe755…5089af). - Nothing in the token code locks or burns LP tokens or restricts who can call the Uniswap router's remove-liquidity functions, so the address holding the LP tokens could withdraw at will.
- While the pool was open, every transfer paid an 8% tax:
calculateTaxFeetakes 2% for reflection andcalculateLiquidityFeetakes_liqTax + _devTax= 6%, which accumulates in the token contract. On a sell into the pair,swapAndLiquifysells half of that balance andsendTaxpays the ETH to the hard-codedfeeWallet.addLiquidityis never called, so the 2% labelled liquidity fee does not go back into the pool. - At 21:32:48 UTC and 21:34:04 UTC the deployer called
removeLiquidityETHWithPermitSupportingFeeOnTransferTokenstwice (transactions 0xd5174a5b…aa082d and 0x092c83c7…bc9043), taking 2.701068 ETH and 2.621572 ETH out of the pair. Those withdrawals took ETH out of the pool that holders would have had to sell into.
Protocol details
Evidence
- report Report slothinu.com
- transaction Etherscan transaction 0xe34fe755... (addLiquidityETH) etherscan.io
- transaction Etherscan transaction 0xd5174a5b... (removeLiquidityETHWithPermitSupportingFeeOnTransferTokens) etherscan.io
- transaction Etherscan transaction 0x092c83c7... (removeLiquidityETHWithPermitSupportingFeeOnTransferTokens) etherscan.io
- address Etherscan verified code for SlothInu 0x85bcaee8befa419becb90e8b405d131ee9e31877 etherscan.io
- analysis Web Archive web.archive.org
- analysis Sourcify match for 0x85bcaee8befa419becb90e8b405d131ee9e31877 repo.sourcify.dev
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
