SSPF Rug Pull

Reported loss $126K
Rugpull

What happened

SSPF was a BEP20 dividend token on BNB Chain, contract 0x75B695eE…15aB14, deployed in September 2022 with 40,000,000,000 SSPF minted to the owner. It charged 10% on buys and sells through the PancakeSwap pair (5% burned, 5% swapped to BNB for holder dividends), and the owner could raise the buy or sell fee to as much as 100% with setBuyFee and setSellFee, which would leave sellers with nothing. The owner's wallet was excluded from these fees, and the owner could exclude any other address.

On 4 January 2023 CertiK reported that SSPF dropped more than 90% after the EOA 0x833F... sold about $126,000 of tokens. The earlier write-up attributes the drop to the deployer, 0xe0b0b714…995952, removing liquidity from the pair and selling a large amount of SSPF.

How it happened

  1. The constructor creates the PancakeSwap pair and mints the whole supply to the owner, who is fee-exempt: exclude(owner(), true); then _mint(owner(), totalSupply);.
  2. Trades with the pair are taxed by buytakeAllFee and selltakeAllFee at owner-set rates. The only limit is require(_destoryFee.add(_rewardUFee) <= _basePercent); with _basePercent = 10000, so the owner can set a 100% sell fee that sends a seller's entire amount to the dead address and the contract.
  3. Addresses on the _isExcluded list, which the owner controls through exclude and addExclude, trade with no fee at all.
  4. According to CertiK, an EOA beginning 0x833F sold about $126,000 of SSPF into the pool and the price fell more than 90%. The earlier write-up says the deployer also removed liquidity from the pair. No source shows the fee setters being used.

Protocol details

Classification Token
Protocol Type Exit Scam/Rugpull
Affected asset / contract SSPF

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.