SOMESING Rug Pull

Reported loss $167K
Rugpull

What happened

SOMESING (SSX) was a BEP20 token on BNB Chain, contract 0xD4E8839F…bF0c4C, deployed on 19 October 2023 under the same name as the unrelated SOMESING project. Its _transfer function does not trust its own balance ledger: before every transfer it overwrites the sender's balance with a number returned by a hidden external contract whose address was passed into the constructor as a plain integer. Whoever controls that contract decides every sender's balance at transfer time, so it can return zero for buyers (their sells revert) or an enormous balance for a chosen address, far above the 1,000,000,000 SSX total supply.

On 20 October 2023 PeckShield reported that 0x56ee7a79…584d88 swapped 1,000,000,000,000,000 SSX, a million times the supply, for about 792.2 BNB (about $169,000), and the price dropped 100%. De.Fi's REKT database records the loss as $166,715 (792.21 WBNB). The earlier write-up adds that the proceeds were moved to another EOA and split across several addresses, lists 0x3f04768E…c704ED as a second scammer address and 0x27a64f0c…75e454 as the sell transaction, and says the deployer and scammer funded their addresses from Binance.

How it happened

  1. At deployment the constructor stores a hidden address taken from an integer argument: uoDRCJVjRlAWHCHQPyPaa = address(uint160(aqfnivnz));, and mints the full supply to the deployer.
  2. Every transfer first replaces the sender's stored balance with the hidden contract's answer: _balances[eavmotosfrom] = _6d4e7d13(eavmotosfrom, amount, _balances[eavmotosfrom]);, which calls kUCLziNsIhTtOoUjqEHDt(uoDRCJVjRlAWHCHQPyPaa).a1c29f34eb3c(sender, amount, balance).
  3. Only then does the contract check _balances[eavmotosfrom] >= amount. The hidden contract can return a value below the amount for ordinary holders, so their sells revert, or an arbitrary large value for a chosen address. totalSupply never changes, so the extra tokens do not show up as a mint.
  4. On 20 October 2023 0x56ee7a79…584d88 swapped 1,000,000,000,000,000 SSX into the PancakeSwap pool, far more than the 1,000,000,000 total supply, and received about 792.2 BNB, emptying the pool.

Protocol details

Classification Token
Protocol Type Exit Scam/Rugpull
Affected asset / contract SSX
Protocol links Website @somesinglovers

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.