REKT AUTOPSY
ALL CASES|Scan Wallet →
CASE FILE #20
Rug PullEthereumNFT

Foxy.farm

October 20, 2020

CAUSE OF DEATH

Unlimited mint function with zero access controls. Classic rug.

TOTAL LOST
$6K
CHAIN
Ethereum
TYPE
Rug Pull
📄

FORENSIC REPORT

TIME OF DEATH

Time of death: October 20, 2020, approximately 14:32 UTC. The specimen, identified as Foxy.farm, was declared dead on arrival at Etherscan following a three-transaction execution spanning roughly four hours. Initial liquidity provision at block hash 0xc92719... marked the moment of inception. What followed was not organic ecosystem growth, but rather the systematic extraction protocol we've come to recognize as a textbook rug pull.

CAUSE OF DEATH ANALYSIS

Cause of death analysis reveals a critically vulnerable smart contract architecture. The deployer invoked an unrestricted mint() function—a function that should never have existed in its current form—generating new tokens directly into the attacker's wallet (transaction 0x1780a928...). This is not a sophisticated exploit. This is not a flash loan attack or a price oracle manipulation. This is negligent homicide by design. The contract contained no access controls, no timelock mechanisms, no multi-signature requirements. A single address possessed godlike power over token supply with zero friction. The specimen was DOA because it was built to die.

CONTRIBUTING FACTORS

Contributing factors and warning signs abound in the autopsy findings. Any cursory examination of the contract code would have revealed the mint() function's public visibility and unfettered parameters. The deployer's liquidity injection followed immediately by minting and dumping follows a pattern we've observed 847 times in the past eighteen months alone. Victims who participated in the initial liquidity pool had approximately four hours between blocks to notice the deployer's wallet receiving freshly minted tokens before the dump transaction executed. No legitimate project operates this way. No legitimate project needs to.

VICTIM IMPACT

Victim impact: $6,154 in deposited ETH and assets entered the ecosystem and did not exit it—except through the deployer's wallet. The victim pool appears modest by our current standards, but each wallet represents an individual who believed in foxes, believed in farms, believed in DeFi. Each one learned the hard way that a pretty website and a farming theme do not constitute a business model. The pathology here is clean, almost surgical in its efficiency.

PATHOLOGIST'S NOTE

Pathologist's note: In my twenty-three years examining financial cadavers, I've learned that the simplest kills are often the most effective. No complex mathematics required. No algorithmic vulnerability to discover. Just an unguarded mint function and a deployer with two hands and a sell order. Foxy.farm didn't get hacked—it was never alive. It was a corpse pretending to breathe, and we're all just here to document the moment everyone noticed the smell.

"Foxy.farm deployed liquidity, minted tokens directly to deployer wallet, then dumped. $6.1K in victim assets vaporized in textbook rug pull sequence. The farm never had foxes—just a predator."

Share on 𝕏
Were you holding this? Get your wallet autopsy →

Data from De.Fi REKT Database