{"id":22307674,"url":"https://github.com/cawfree/no-u-honeypot","last_synced_at":"2025-07-22T05:33:51.105Z","repository":{"id":266286322,"uuid":"897617802","full_name":"cawfree/no-u-honeypot","owner":"cawfree","description":"🍯 Using flashbots to frontrun the \"leaked seed phrase\" honeypot.","archived":false,"fork":false,"pushed_at":"2024-12-03T22:21:16.000Z","size":208,"stargazers_count":7,"open_issues_count":0,"forks_count":3,"subscribers_count":1,"default_branch":"main","last_synced_at":"2025-07-18T21:06:50.782Z","etag":null,"topics":["attack","ethereum","ethers","flashbots","honeypot","pbs"],"latest_commit_sha":null,"homepage":"https://twitter.com/cawfree","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"cc0-1.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/cawfree.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2024-12-02T23:59:55.000Z","updated_at":"2024-12-10T13:35:24.000Z","dependencies_parsed_at":"2024-12-03T14:35:46.277Z","dependency_job_id":"c25ff23b-76f9-4e7d-8099-76c19eab8f33","html_url":"https://github.com/cawfree/no-u-honeypot","commit_stats":null,"previous_names":["cawfree/no-u-honeypot"],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/cawfree/no-u-honeypot","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cawfree%2Fno-u-honeypot","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cawfree%2Fno-u-honeypot/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cawfree%2Fno-u-honeypot/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cawfree%2Fno-u-honeypot/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cawfree","download_url":"https://codeload.github.com/cawfree/no-u-honeypot/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cawfree%2Fno-u-honeypot/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":266433721,"owners_count":23927805,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-07-22T02:00:09.085Z","response_time":66,"last_error":null,"robots_txt_status":null,"robots_txt_updated_at":null,"robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["attack","ethereum","ethers","flashbots","honeypot","pbs"],"created_at":"2024-12-03T20:10:59.853Z","updated_at":"2025-07-22T05:33:51.083Z","avatar_url":"https://github.com/cawfree.png","language":"TypeScript","funding_links":[],"categories":[],"sub_categories":[],"readme":"# no-u-honeypot\n\n## A little knowledge can be a dangerous thing.\n\nBasically, there's this interesting honeypot where an attacker will masquerade like a victim that has straight up rocks for brains and shares their seed phrase on social media:\n\n\u003cp align=\"center\"\u003e\n  \u003cimg src=\"public/honeypot.jpg\" width=\"100%\"\u003e\n\u003c/p\u003e\n\n\u003e [**Origin Story**](https://github.com/cawfree/no-u-honeypot/blob/6f43208305bcef40e4404d739439cfc9d0b31f7c/__tests__/index.test.ts#L16) found on [**Double entry point issues**](https://www.youtube.com/watch?v=aq0n0T0wAeQ) by [**@holajotola**](https://x.com/holajotola).\n\nOnce the address is derived, consulting the block explorer will reveal an EOA that has some ERC-20 balance, but no underlying ether to cover the cost of taking the tokens out.\n\nWould-be attackers, now incensed in by the promise of free tokens, will attempt to donate a little ether to cover the cost of exfiltrating the tokens via the public mempool.\n\nHowever, **the deployer is smarter than they are**.\n\nThey're monitoring the mempool for pending donations and will immediately backrun the donation transaction with a transfer to their own address. This allows the attacker to make off with the donation and for the ERC-20s to remain inside the EOA to tempt the next sucka.\n\n## how to exploit the exploiters\n\nThis whole attack works because no-one is going to go to the effort of writing a Flashbots transaction bundle to atomically transfer the ether and withdraw the tokens... _right_?\n\nWell, that's where [**no-u-honeypot**](https://github.com/cawfree/no-u-honeypot) comes in.\n\n```shell\ngit clone git@github.com:cawfree/no-u-honeypot.git\ncd no-u-honeypot\ncp .env.example .env # add required variables\nyarn\nyarn eat \"alarm fetch churn bridge exercise tape speak race clerk couch crater letter\" # take the tokens\n```\n\n\u003e btw you might also like [`piggyback`](https://github.com/cawfree/piggyback), a poison erc20 deployer\n\n## license\n[**CC0-1.0**](LICENSE)\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcawfree%2Fno-u-honeypot","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fcawfree%2Fno-u-honeypot","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcawfree%2Fno-u-honeypot/lists"}