SuperMarioBros
October 23, 2020
Hidden minting function masquerading as burn() mechanism. Classic bait-and-switch.
FORENSIC REPORT
Time of death: October 23, 2020, approximately 14:32 UTC. The specimen arrived at our facility exhibiting the classic presentation of a rug pull—sudden, complete, and executed with surgical precision. Initial liquidity was established at transaction 0xba3a2f, creating the illusion of a legitimate project. The victim pool never stood a chance.
Cause of death: Obfuscated minting functionality embedded within the burn() function. What marketing materials likely described as a token-burning mechanism for price support was, in reality, a counterfeit minting operation. At transaction 0x3bb99f, the deployer executed hidden code that generated approximately 91,223,372 new tokens directly to the attacker's wallet—a phantom issuance that would make any central banker blush. The tokens were subsequently liquidated at 0x161250, extracting value from a liquidity pool now saturated with worthless supply. The mechanics are elementary: obfuscate, mint, exit, repeat.
Contributing factors: Insufficient contract analysis. The burn() function nomenclature provided false legitimacy—victims likely assumed standard token economics. No on-chain verification was conducted. The deployer maintained wallet control from genesis, which should have triggered immediate suspicion. This was not a sophisticated attack; it was audacity masked as functionality.
Victim impact: $9,669 USD lost. Minimal by 2024 standards, but catastrophic in scale for individual participants. Estimated 147 addresses holding worthless SMBC tokens, each believing they had captured mid-tier Mario franchise nostalgia value. The psychological damage likely exceeded the financial loss—they were not merely robbed; they were mocked by a contract pretending to optimize their own investment.
Pathologist's note: The specimen exhibits textbook rug pull pathology. What's striking is not the sophistication but the brazenness—hiding minting in a burn function is the crypto equivalent of poisoning the well while offering villagers water. By 2020, this attack vector was already pedestrian. That it still succeeded speaks volumes about the intersection of greed, FOMO, and contract literacy. We see approximately 2-3 of these weekly. The cause of death was never technical; it was behavioral. SuperMarioBros learned too late that in DeFi, game over comes with real financial consequences.
"SuperMarioBrosToken expired on arrival. Deployer weaponized the burn() function to mint infinite tokens, then dumped on unsuspecting liquidity providers. $9.6K incinerated in textbook rug pull."
Data from De.Fi REKT Database