TechFlow news, on March 18, according to SlowMist monitoring, the Four.meme token was attacked by an attacker exploiting a pre-launch vulnerability to steal liquidity.
The attacker used Four.meme's 0x7f79f6df function to purchase a small amount of tokens before the token launch, and leveraged this function to send the tokens to a PancakeSwap trading pair address that had not yet been created.
This allowed the attacker to create a trading pair and add liquidity without needing to transfer the unreleased tokens, thereby bypassing the pre-launch transfer restriction (MODE_TRANSFER_RESTRICTED) of the Four.meme token.
Ultimately, the attacker added liquidity at an unintended price, successfully stealing funds from the liquidity pool.




