Scam Contract Core Codefunction recycle() external onlyStaking { uint256 amt = IERC20(USDT).balanceOf(this) / 3; // drains 1/3 per call IERC20(USDT).transfer(DEPLOYER, amt); // to the deployer's wallet } ↑ The core flaw: an admin function with no event log and no call limit
⚠ This report is for filing and self-check reference · not legal advice
Page 12 of 24
9. Scam Contract Core Code
// Flaw 1: admin drain functionfunction recycle() external onlyStaking {
uint256 amt = IERC20(USDT).balanceOf(address(this)) / 3;
IERC20(USDT).transfer(DEPLOYER, amt);
// ⚠ no events, no call limit, no timelock
}
// Flaw 2: ownership transfer not renouncedfunction transferOwnership(address newOwner) public onlyOwner {
owner = newOwner;
// ⚠ a single EOA can still rotate the owner at will
}
Page 18 of 24
11. Statement to Police (Customised Wording)
My name is [NAME], ID number [ID NUMBER] … the scam address involved is 0x7f9bd73e51e66e0b2c7a87db0ca530a11eb7a7e9 … the funds have already flowed into Binance Hot 7 (0xdfd5293d8e347dfe59e90efd556295c6aca5225b) … I respectfully request that the public security authority issue a Letter of Assistance in Investigation / Freeze Notice to Binance and other exchanges …
⚠ For self-check and police-report reference only. Not legal advice.
Page 12 / 24
IX. Scam Contract Core Code
// Vulnerability 1: Admin drain functionfunction recycle() external onlyStaking {
uint256 amt = IERC20(USDT).balanceOf(address(this)) / 3;
IERC20(USDT).transfer(DEPLOYER, amt);
// ⚠ No event, no cap, no timelock
}
// Vulnerability 2: Ownership not renouncedfunction transferOwnership(address newOwner) public onlyOwner {
owner = newOwner;
// ⚠ Single EOA can swap owner anytime
}
Page 18 / 24
XI. Police Report Statement (Template)
My name is [Name], ID number [ID]……The scam address involved is 0x7f9bd73e51e66e0b2c7a87db0ca530a11eb7a7e9……The funds have flowed into Binance Hot 7 (0xdfd5293d8e347dfe59e90efd556295c6aca5225b)……I respectfully request the public security authority to issue a Letter of Investigation/Freeze to Binance and other exchanges……
On-chain tracing and data collaboration have recovered funds in some cases — all cases below are publicly verifiable and are not a promise of outcome.
Address profile
10 SC
Report language:(The English edition is translated chapter by chapter · the sample excerpt below shows the result)
L5 express: your deep report is generated immediately; a human then reviews the risk rating and hands it over on Telegram. Human hours: 09:00–24:00 UTC+8; orders outside these hours are picked up from 09:00 the next day.
⚠ This will charge
Loading balance…
Data reference · This page shows on-chain data analysis results for reference only. It is not investment advice, and no fund recovery is guaranteed.