SSPF Rug Pull
What happened
SSPF was a BEP20 dividend token on BNB Chain, contract 0x75B695eE…15aB14, deployed in September 2022 with 40,000,000,000 SSPF minted to the owner. It charged 10% on buys and sells through the PancakeSwap pair (5% burned, 5% swapped to BNB for holder dividends), and the owner could raise the buy or sell fee to as much as 100% with setBuyFee and setSellFee, which would leave sellers with nothing. The owner's wallet was excluded from these fees, and the owner could exclude any other address.
On 4 January 2023 CertiK reported that SSPF dropped more than 90% after the EOA 0x833F... sold about $126,000 of tokens. The earlier write-up attributes the drop to the deployer, 0xe0b0b714…995952, removing liquidity from the pair and selling a large amount of SSPF.
How it happened
- The constructor creates the PancakeSwap pair and mints the whole supply to the owner, who is fee-exempt:
exclude(owner(), true);then_mint(owner(), totalSupply);. - Trades with the pair are taxed by
buytakeAllFeeandselltakeAllFeeat owner-set rates. The only limit isrequire(_destoryFee.add(_rewardUFee) <= _basePercent);with_basePercent = 10000, so the owner can set a 100% sell fee that sends a seller's entire amount to the dead address and the contract. - Addresses on the
_isExcludedlist, which the owner controls throughexcludeandaddExclude, trade with no fee at all. - According to CertiK, an EOA beginning 0x833F sold about $126,000 of SSPF into the pool and the price fell more than 90%. The earlier write-up says the deployer also removed liquidity from the pair. No source shows the fee setters being used.
Protocol details
Evidence
- report @CertiKAlert incident report twitter.com
- report CertiK Skynet Alert: slippage on SSPF (SSPF) twitter.com
- transaction SSPF token creation transaction bscscan.com
- address SSPF verified source code bscscan.com
- address bscscan.com address 0xe0b0…5952 bscscan.com
- analysis Sourcify match for 0x75B695eE478B8C477D3611737D93A7CeA915aB14 on BNB Chain repo.sourcify.dev
- analysis bscscan.com page 0x75b6…ab14 bscscan.com
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.