Hackers Exploits Four.Meme Token Launch Vulnerability, Steals $130K in BNB

Four.Meme, a memecoin generator built on the BNB Chain, has become the victim of a security attack that resulted in the loss of approximately 200 BNB (worth around $130,000). The exploit, which affected the launch function, has forced the platform’s development team to halt the feature until the issue is rectified.

How It Happened

The blockchain security firm SlowMist explained how the exploit occurred. The hacker purchased a small number of tokens and launched through Four.Meme’s “0x7f79f6df function.” The bad actor employed this feature to transfer tokens to a non-existent trading pair address on the BNB Chain-based decentralized exchange PancakeSwap.

Then, the hacker created the non-existent trading pair and added liquidity without sending the yet-to-be-created tokens to the trading pair. This allowed them to bypass Four.Meme’s transfer restrictions. The bad actor eventually added liquidity at an unexpected price and siphoned pool liquidity.

On-chain data reveals that the attacker has stolen around 200 BNB as of press time. It remains uncertain if Four.Meme’s team has rectified the breach. However, the team offered a temporary solution — suspending the token launch feature until the issue is resolved.

The team also assured affected users that they would be reimbursed this week after filling out a damage submission form.

Currently, https://t.co/IRnIR1BwDd is under attack, and the launch function has been suspended for emergency investigation.

We will compensate affected users and provide a damage submission form to collect relevant information.

Our team is working hard to fix the problem and…

— Four.Meme (@four_meme_) March 18, 2025

Not the First Time

Four.Meme’s latest security breach comes only six weeks after it parted ways with $183,000 following a security attack that affected the token liquidity pool launched on PancakeSwap. The platform’s team temporarily suspended on-chain activities on the affected features until the issue was rectified.

The platform’s second attack in the space of six weeks raises questions about Four.Meme’s security level. Some users urge the platform to tighten its security so that such occurrences do not repeat themselves in the future.