

kai
228 posts

@KaiRayden
lover of art & math artist^ - ^software🦀







748 SOL gone from a @Pumpfun fee shareholder's claimable balance. Not a hack. The token creator just removed the shareholder, collected all the fees, and added them back, one transaction through a Squads multisig. 1- Reset the fee sharing config -> removed the shareholder, made himself the sole recipient 2- Updated fee shares to add the shareholder back but this instruction automatically distributes all pending fees first. Since the shareholder was already removed, all 748 SOL went straight to the creator/auth That's it. Two calls. The second one is designed to distribute fees before updating, it's probably a safety feature. The Squads multisig was closed right after. The creator just used it against the shareholder. Dashboard still shows the shareholder with the right percentage. Vault is empty. Found this while building @ClaimScanXYZ . Now you know what to watch for. Permissions should be locked on creator fees







I wanted to check what you can do with Houdini MCP. Looks promising. github.com/capoomgit/houd… #Houdini


