SolarRocket Honeypot

Reported loss Not disclosed
BNB Chain
Honeypot

What happened

SolarRocket is a BEP20 token whose transfer and transferFrom functions refuse any transfer to an address stored in a variable called newun. newun is filled automatically with the recipient of the first transferFrom call, and the owner can overwrite it with transfernewun. If that first recipient is the liquidity pool, every later sale into the pool reverts with "please wait" while buys still work.

De.Fi's REKT database lists SolarRocket on BNB Smart Chain as an Exit Scam/Honeypot and says the contract owner could disable the transfer function, which restricted users in selling their tokens. The code shows what the owner can do; no transaction here shows which address newun holds or that the owner changed it.

How it happened

  1. The constructor mints the whole supply to the deployer: _totalSupply = 1000000000000000000000000000000000; and balances[owner] = _totalSupply;. That is 10^15 tokens at 18 decimals.
  2. newun starts as the zero address. The first transferFrom call with a non-zero from stores its recipient: if(from != address(0) && newun == address(0)) newun = to;. Whichever address receives that first transferFrom becomes newun.
  3. From then on, every transferFrom takes the other branch: else require(to != newun, "please wait");. transfer carries the same check: require(to != newun, "please wait");. Both apply to every sender, the owner included.
  4. A DEX sale pulls the holder's tokens into the pool with transferFrom. If the pool is the stored newun, that call reverts. A buy sends tokens out of the pool to the buyer, so the recipient is not newun and the buy goes through.
  5. The owner can change the block at any time with function transfernewun(address _newun) public onlyOwner { newun = _newun; }. Pointing newun at an unused address lifts the block; setting it to the zero address re-arms the capture, so the next transferFrom recipient becomes the blocked address. The source contains no code that lifts the block by itself.

Protocol details

Classification Token
Protocol Type Exit Scam/Honeypot
Affected asset / contract SolarRocket

Evidence

Same attack technique

Browse all hacks →
BNB Chain DOORToken Loss not disclosed BNB Chain Lucky Token Loss not disclosed BNB Chain KingShiba Loss not disclosed BNB Chain Glossify Loss not disclosed

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.

Start Free Trial Explore attack classes