A fee/tax parameter can be set by an admin with no maximum. The owner can raise the fee to 100% right before users transact, capturing the entire amount — a classic honeypot / rug configuration.
// setFee(10000) // 100% // user swaps/sells -> entire output goes to the fee wallet.
uint256 public constant MAX_FEE_BPS = 500; // 5%
function setFee(uint256 bps) external onlyOwner {
require(bps <= MAX_FEE_BPS, "fee too high");
feeBps = bps;
}
Largest recorded losses in the same failure class — related, not the same bug:
The SaferICO scanner runs 201 detectors over your Solidity source, SAFE-0135 among them. Paste an address or the source itself — a small per-scan fee, shown before you sign, or unlimited on any plan.