StarMan Hack

The $StarMan token was rugpulled by its team. The team created an StarMan/WBNB pair to make their token tradable and dumped the $StarMan token for a profit of 173.39 $BNB.

The creator of the token deployed the contract to the BNB network, where 10B tokens were sent to him.

Then he created a  StarMan/BNB pair, 3B $StarMan and 300 $BNB:

1. Tx
2. Tx

After the community invested enough funds into the token, he removed lp, taking a profit of 173 $BNB:

https://bscscan.com/tx/0xe2356bff…57e265

Stolen funds were transferred to scammer address (B): https://bscscan.com/tx/0xfb3fb8ee…f53110

Then the scammer address (B) laundered money through the Tornado.cash.

Involved addresses:

- Scammer address (A), token creator: https://bscscan.com/address/0xcbf5ac38…afaa89

- Scammer address (B): https://bscscan.com/address/0xcffe7b00…64bd44

Transactions:

- Token creation: https://bscscan.com/tx/0x808b6783…9cfb2f

- Creating lp:

1. Tx
2. Tx

- Remove lp: https://bscscan.com/tx/0xe2356bff…57e265

Smart-Contract Abilities

- Owner can open trading

- Hidden mechanism for pausing transfers openTrading() for non whitelisted users

- Hidden whitelist roles (_synced)