Snowflake Floki Hack
What happened
The Snowflake Floki smart contract contained a transfer tax component that allowed the project deployer to ramp up the transfer fee of each transaction up to 100%, netting the deployer approx. $ 70k in ill-gotten funds.
The Snowflake Floki project was practically an imitation of the meme coin Floki Inu but promised to develop a metaverse casino. The $SFF token would have played the role of the in-game currency used for bets in Poker, Blackjack and Roulette. In order to make the $SFF token tradable, the contract deployer added initial liquidity in the below transaction:
https://bscscan.com/tx/0x371a142d…02fd57
A closer look at the $SFF smart contract should have alerted investors since the transfer taxes were adjustable by the contract deployer. This empowered the contract deployer to set fees up to 100% for each transaction, sending the tokens to his address:
https://bscscan.com/address/0x78cd0ea1…b67570#code#L1092
The deployer took advantage of the changeable transfer fee set it to 95% for selling SFF token:
https://bscscan.com/tx/0xe8e6680e…f678e5
In order to squeeze as much as possible out of the project, the deployer also removed liquidity several times :
https://bscscan.com/tx/0x18168c04…f73957
https://bscscan.com/tx/0xd9018a15…1cee15
https://bscscan.com/tx/0xd3ddc09b…126e04
https://bscscan.com/tx/0x3cbb6a94…06144a
https://bscscan.com/tx/0x555b7329…46f65b
The website and social media have been taken down.
Case & protocol details
Evidence & learning
Sources and on-chain records
- report Report twitter.com
Practice this exploit pattern safely
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.