TAKE OF ELON Honeypot

Reported loss Not disclosed
BNB Chain
Honeypot

What happened

TAKE OF ELON (TAKEOFELON) is a BNB Chain token deployed on 28 March 2021 at 0x590afc4e…e993b6 by 0x7bc2eE43…85C4Cb. Its transferFrom requires allow[_from] == true, and at deployment only the deployer is on that list, so a PancakeSwap sale, which pulls the seller's tokens with transferFrom, reverts for every other holder while buys still work. The functions that change the list and set balances are gated by an onlyOwner modifier that does not check the contract's owner variable but a hard-coded address written as a decimal number, 0xbd486897…439192.

That hidden address can also overwrite any wallet's balance with mint. The source comment advertises liquidity locked on Unicrypt and burned dev tokens; the code enforces neither. De.Fi's REKT database lists TAKE OF ELON as an exit scam/honeypot.

How it happened

  1. The constructor sets owner = msg.sender, gives the deployer the whole supply (10,000,000,000 TAKEOFELON on-chain) and sets allow[msg.sender] = true. No other address starts on the allow list.
  2. transfer has no list check, so the PancakeSwap pair can pay out tokens and buys succeed.
  3. transferFrom adds require(allow[_from] == true). The router sells by calling transferFrom(seller, pair, amount), so the sale reverts for any seller not on the list. The deployer can still add liquidity and sell.
  4. modifier onlyOwner() {require(msg.sender == address(1080614020421183795110940285280029773222128095634));_;} compares the caller with a hard-coded address, 0xbd486897…439192 in hex, not with the stored owner. transferOwnership changes only the unused owner variable, and there is no renounce function, so this control cannot be given up.
  5. The hidden address can call addAllow(holder, allowApprove) to add or remove sellers, and mint(miner, _value), which runs balances[miner] = _value. That overwrites a wallet's balance with any value, up or down, without changing totalSupply or emitting an event.

Protocol details

Classification Token
Protocol Type Exit Scam/Honeypot
Affected asset / contract TAKEOFELON

Evidence

Same attack technique

Browse all hacks →
BNB Chain SHOPEEPAY Loss not disclosed BNB Chain REAPit Loss not disclosed BNB Chain Zona Indonesia Loss not disclosed BNB Chain StudToken Loss not disclosed

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.

Start Free Trial Explore attack classes