StarMan Rug Pull

Reported loss $53K
Rugpull

What happened

The $StarMan token was rugpulled by its team. The team created an StarMan/WBNB pair to make their token tradable and dumped the $StarMan token for a profit of 173.39 $BNB.

The creator of the token deployed the contract to the BNB network, where 10B tokens were sent to him.

Then he created a  StarMan/BNB pair, 3B $StarMan and 300 $BNB:

  1. Tx 0x13c8…c429
  2. Tx 0x8eff…b933

After the community invested enough funds into the token, he removed lp, taking a profit of 173 $BNB:

Tx 0xe235…e265

Stolen funds were transferred to scammer address (B): Tx 0xfb3f…3110

Then the scammer address (B) laundered money through the Tornado.cash.

Involved addresses:

  • Scammer address (A), token creator: Address
  • Scammer address (B): Address

Transactions:

  • Token creation: Tx
  • Creating lp:
  1. Tx 0x8eff…b933
  2. Tx 0x13c8…c429
  • Remove lp: Tx

Smart-Contract Abilities

  • Owner can open trading
  • Hidden mechanism for pausing transfers openTrading() for non whitelisted users
  • Hidden whitelist roles (_synced)

Protocol details

Classification Token
Protocol Type Exit Scam/Rugpull
Affected asset / contract StarMan

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.