Hacker News new | ask | show | jobs
by dcolkitt 2066 days ago
For anybody morbidly interested in this kind of stuff, here's a fascinating case study. The token is ostensibly ERC20 compliant, but the transfer function is hardcoded to prevent anybody but the sender from selling on the Uniswap liquidity pool.

Muppets come in and buy the token on Uniswap. But they can't go back and sell it. Essentially all the Ethereum in the liquidity pool becomes the personal piggy bank of the scammer. There's nothing Uniswap can even do to prevent this type of scam, because the malicious code is in the token tracker contract, not Uniswap itself.

https://www.reddit.com/r/UniSwap/comments/jew0id/1000_reward...