WhiteX Finance Honeypot

What happened

WhiteX Finance (WHX) is a BEP-20 token on BNB Chain with a hidden sell block. The first transferFrom from a non-zero address stores its recipient in the variable newun; when liquidity is added through the PancakeSwap router, that recipient is normally the liquidity pair. After that, every transfer or transferFrom whose destination is newun reverts with please wait, so holders can buy from the pool but cannot sell into it.

The owner can repoint newun at any time with transfernewun. De.Fi's REKT database lists the token as an exit scam/honeypot; no transaction evidence of losses was found.

How it happened

1. The constructor credits the full supply of 7646689569430951674980 raw units (about 7,646.69 WHX at 18 decimals) to the owner.
2. The first transferFrom with a non-zero sender runs if(from != address(0) && newun == address(0)) newun = to;. When the router adds liquidity, it pulls tokens with transferFrom into the PancakeSwap pair, so the pair can become newun.
3. Buying still works, because the pair sends tokens out to buyers and only transfers *to* newun are checked.
4. A sale sends tokens to the pair, so both transfer and transferFrom hit require(to != newun, "please wait") and revert.
5. The owner can call transfernewun to point newun elsewhere, which would reopen sells to the pair, and can later set it back. clearCNDAO lets the owner withdraw any BNB held by the token contract.

Protocol details

Classification Token

Protocol Type Exit Scam/Honeypot

Affected asset / contract WHX

Evidence

• report @Token_Sniffer incident report twitter.com
• address WhiteX Finance (WHX) verified contract source, BscScan bscscan.com
• analysis BSC-SCAM: Stealthy Liquidity Pool Block on PancakeSwap cryptot3ddybear.gitlab.io
• analysis Sourcify match, chain 56, 0x5ce082f7bc1d58ea8ea8eb294979db9166fc9161 repo.sourcify.dev