{"investigation":{"slug":"fourmeme","entity_name":"four.meme","trust_score":38,"severity_base":null,"score_modifier":0,"confidence":0.78,"status":"published","content_type":"investigation","summary":"four.meme is a permissionless meme token launchpad built on BNB Chain (BSC), operated under the Four (formerly BinaryX) ecosystem, that enables zero-KYC token creation with automatic bonding-curve-to-PancakeSwap liquidity migration. The platform suffered two confirmed smart contract exploits within six weeks in early 2025, losing a combined total of approximately $310,000 in user and pool funds. Repeat critical vulnerabilities, a phishing campaign that hijacked Google search results, and ecosystem-wide spam and token-pollution incidents raise substantial safety concerns for users.","sections":[{"content":"four.meme launched in mid-2024 as the first dedicated meme token launchpad on BNB Chain (Binance Smart Chain). The platform is operated under the broader Four ecosystem, which rebranded from BinaryX in early 2025. The native governance and utility token is FORM (previously BNX), which completed a 1:1 token swap in March 2025. The platform offers zero-KYC, permissionless token creation for approximately 0.005 BNB, with tokens immediately entering a bonding curve trading phase and automatically migrating to PancakeSwap V3 liquidity pools upon reaching their graduation threshold. As of mid-2025, the platform has recorded cumulative DEX volume of approximately $2.6 billion, over 400,000 tokens launched, roughly 2 million cumulative users, and a token graduation rate of approximately 1.34%. four.meme does not curate token quality; any wallet can deploy a token without review, disclosure, or legal accountability. The platform states a fair-launch model with no pre-sales or team allocations for individual tokens, though the underlying FORM token governance structure is controlled by the Four team.","heading":"Platform Overview","sources":[{"url":"https://www.kucoin.com/learn/crypto/what-is-four-meme-bnb-chain-memecoin-launchpad-and-how-does-it-work","name":"kucoin.com","type":"other","credibility":3},{"url":"https://blog.mexc.com/what-is-four-token-form-a-binaryx-rebranding/","name":"blog.mexc.com","type":"other","credibility":3},{"url":"https://cryptoslate.com/launchpads/four-meme-review/","name":"cryptoslate.com","type":"other","credibility":3},{"url":"https://finance.yahoo.com/news/four-meme-records-2-6-073125161.html","name":"finance.yahoo.com","type":"other","credibility":3}],"severity":"medium"},{"content":"On February 11, 2025, four.meme suffered its first confirmed smart contract exploit, resulting in losses estimated at approximately $183,000 to $200,000. Blockchain security firm SlowMist identified the root cause as a missing price verification check in four.meme's liquidity pool deposit mechanism. Attackers were able to pre-create a PancakeSwap V3 pool at a deliberately manipulated price before the target token's official launch, causing the platform's automated migration to deposit liquidity at the attacker-controlled price, enabling immediate draining of pool assets. The platform suspended its PancakeSwap liquidity provider (LP) function while maintaining on-chain trading, and stated that internal user funds were not directly affected. four.meme announced it would compensate affected users and provided a damage submission form. Critics noted the platform appeared to delay public disclosure of the incident, reposting earlier messages to reduce the apparent timeline of awareness. Despite the severity of the vulnerability, the platform resumed normal operations without a published comprehensive security audit.","heading":"First Smart Contract Exploit — February 2025 ($183,000)","sources":[{"url":"https://cryptoslate.com/bnb-chains-memecoin-launchpad-four-meme-hit-by-200k-exploit-suspends-liquidity/","name":"cryptoslate.com","type":"other","credibility":3},{"url":"https://beincrypto.com/four-meme-exploit-bnb-chain/","name":"beincrypto.com","type":"other","credibility":3},{"url":"https://cryptopotato.com/bsc-based-meme-coin-launchpad-four-meme-suffers-183k-exploit/","name":"cryptopotato.com","type":"other","credibility":3},{"url":"https://www.ainvest.com/news/meme-suffers-183-000-exploit-highlighting-bnb-chain-vulnerabilities-2503/","name":"ainvest.com","type":"other","credibility":3}],"severity":"medium"},{"content":"On March 18, 2025, four.meme suffered a second distinct smart contract exploit approximately six weeks after the first. This exploit involved a different but related class of vulnerability in the platform's pre-launch token transfer mechanism. According to analyses by SlowMist, QuillAudits, and Lunaray, the attacker used the 0x7f79f6df function (buyTokenAMAP) to acquire tokens before their official launch, then sent those tokens to a predicted but not-yet-deployed PancakeSwap pair address. Because the platform's transfer restriction logic (MODE_TRANSFER_RESTRICTED) failed to block transfers to pre-computed pair addresses, the attacker was able to self-create the pair, add liquidity at a manipulated price ratio, and drain liquidity once the official launch migrated funds into the attacker-controlled pool. Lunaray described this as a combination of predictable-address exploitation and a migration-stage sandwich attack. Total losses were estimated between approximately $130,000 and $174,000. Stolen funds — approximately 200 BNB — were moved through FixedFloat, a known privacy-oriented exchange, and across multiple wallets to obscure the trail. four.meme again suspended its token launch function and pledged compensation. The platform resumed operations after announcing a security review, though no public third-party audit report was published at the time.","heading":"Second Smart Contract Exploit — March 2025 (~$130,000–$174,000)","sources":[{"url":"https://decrypt.co/310388/meme-coin-launchpad-four-meme-falls-victim-to-another-exploit","name":"decrypt.co","type":"other","credibility":3},{"url":"https://lunaray.medium.com/four-meme-hack-analysis-7f320dc99b9e","name":"lunaray.medium.com","type":"other","credibility":3},{"url":"https://www.quillaudits.com/blog/hack-analysis/four-meme-attack-analysis","name":"quillaudits.com","type":"other","credibility":3},{"url":"https://cryptoslate.com/four-meme-handles-second-exploit-in-months-reinstates-launch-service/","name":"cryptoslate.com","type":"other","credibility":3},{"url":"https://www.web3isgoinggreat.com/single/fourmeme-hack-2","name":"web3isgoinggreat.com","type":"other","credibility":3}],"severity":"medium"},{"content":"In February 2025, approximately one week after the first exploit became public, a fraudulent clone of four.meme appeared as a top result in Google search advertising. Scammers purchased Google Ads targeting users searching for the legitimate platform and redirected them to a phishing site designed to steal wallet credentials or drain connected wallets. The incident was highlighted by security researchers and crypto news outlets as an opportunistic secondary attack layered on top of the protocol exploit, targeting users who learned of the platform during media coverage of the hack. The fraudulent campaign illustrates a compounding risk profile: the platform's brand was actively being weaponized against its own users while its smart contracts remained under attack. The legitimate four.meme team warned users to verify URLs carefully but did not provide detailed public guidance on identifying the fake site.","heading":"Phishing Campaign and Fraudulent Clone Site","sources":[{"url":"https://www.cryptopolitan.com/fraudulent-four-meme-top-result-google/","name":"cryptopolitan.com","type":"other","credibility":3},{"url":"https://beincrypto.com/four-meme-hacked-suspends-token-trading/","name":"beincrypto.com","type":"other","credibility":3}],"severity":"medium"},{"content":"four.meme's permissionless architecture creates a structurally high-risk environment for token buyers. With a token graduation rate of approximately 1.34%, the overwhelming majority of tokens launched on the platform fail to achieve sustainable liquidity. In October 2025, the platform was targeted by a large-scale on-chain pollution attack in which over 32,000 tokens were created in a single day, most with no liquidity, no development team, or genuine community. The platform described this as 'on-chain pollution' and responded by introducing a 0.01 BNB launch fee and a manual review process for flagged tokens. GoPlus separately identified a Pixiu (honeypot) token scam operating in the four.meme ecosystem — branded '4Agent' — that caused approximately $100,000 in user losses. A first-come-first-served bonding curve model structurally advantages bot operators and faster wallets over ordinary retail participants. Post-graduation liquidity on PancakeSwap is not guaranteed; migration to DEX does not ensure depth or exit liquidity remains accessible. CryptoSlate's review of the platform noted that audit findings still included replay and admin-control concerns even after the February and March 2025 hacks. Region restrictions and regulatory exposure are not clearly disclosed, and the platform operates without KYC, making user protection mechanisms minimal.","heading":"Token Quality, Ecosystem Pollution, and Platform Risks","sources":[{"url":"https://cryptoslate.com/launchpads/four-meme-review/","name":"cryptoslate.com","type":"other","credibility":3},{"url":"https://www.cryptopolitan.com/four-meme-increases-token-launch-fee/","name":"cryptopolitan.com","type":"other","credibility":3},{"url":"https://coinspot.io/en/cryptocurrencies/four-meme-increased-the-token-launch-fee-to-fight-spam-and-toxic-memes/","name":"coinspot.io","type":"other","credibility":3},{"url":"https://cryptorank.io/news/feed/3e175-four-meme-increases-token-launch-fee","name":"cryptorank.io","type":"other","credibility":3}],"severity":"medium"},{"content":"four.meme has not published a comprehensive, publicly available third-party smart contract audit report. Both the February and March 2025 exploits were identified by external security firms — SlowMist, PeckShield, QuillAudits, and Lunaray — after the attacks had already occurred, rather than through proactive audit disclosure. SlowMist flagged the February 2025 vulnerability as a critical liquidity pool price-verification failure; the March 2025 attack exploited a separate but adjacent transfer-restriction bypass. The occurrence of two critical exploits of distinct vulnerability classes within six weeks suggests that the platform's pre-launch security review process was materially inadequate. CryptoSlate's 2026 review noted ongoing audit concerns around replay attacks and admin-control exposure. The platform's rapid feature resumption after both incidents — without publishing external audit confirmations — raises concerns about whether systemic security remediation was performed between incidents. No regulatory body has opened a formal investigation into four.meme as of the date of this investigation.","heading":"Security Posture and Audit History","sources":[{"url":"https://beincrypto.com/four-meme-exploit-bnb-chain/","name":"beincrypto.com","type":"other","credibility":3},{"url":"https://www.quillaudits.com/blog/hack-analysis/four-meme-attack-analysis","name":"quillaudits.com","type":"other","credibility":3},{"url":"https://lunaray.medium.com/four-meme-hack-analysis-7f320dc99b9e","name":"lunaray.medium.com","type":"other","credibility":3},{"url":"https://cryptoslate.com/launchpads/four-meme-review/","name":"cryptoslate.com","type":"other","credibility":3}],"severity":"medium"},{"content":"ZachXBT, the pseudonymous blockchain investigator whose Telegram channel (@investigations) is a widely cited source for on-chain fraud detection, has flagged four.meme as a high-risk entity. The specific nature and timing of ZachXBT's flag have not been independently confirmed via a publicly archived post as of this investigation. ZachXBT's concerns are consistent with the documented pattern: repeated smart contract exploits, an ecosystem heavily populated with low-quality and potentially fraudulent tokens, and structural platform features that favor sophisticated actors over retail participants. Web3 Is Going Great, a community harm-tracking resource, independently catalogued both the February and March 2025 hacks, further corroborating the platform's pattern of security failures.","heading":"ZachXBT Flag and Community Intelligence","sources":[{"url":"https://www.web3isgoinggreat.com/single/fourmeme-hack-2","name":"web3isgoinggreat.com","type":"other","credibility":3},{"url":"https://t.me/s/investigations","name":"t.me","type":"other","credibility":3}],"severity":"medium"}],"timeline":[{"date":"2024-07-03","event":"four.meme launches on BNB Chain as the first dedicated meme token launchpad on BSC, with a fair-launch bonding curve model and automatic PancakeSwap migration.","source":""},{"date":"2025-02-11","event":"First smart contract exploit: attackers manipulate PancakeSwap V3 pool prices ahead of token launches due to missing price verification checks. Approximately $183,000–$200,000 stolen. four.meme suspends LP function and announces user compensation.","source":""},{"date":"2025-02-12","event":"A fraudulent clone of four.meme surfaces as a top Google Ads result, redirecting users searching for the legitimate platform to a phishing site. Community researchers issue warnings.","source":""},{"date":"2025-02-25","event":"BinaryX community vote finalizes rebrand to Four; token ticker changes from BNX/FOUR to FORM at a 1:1 swap ratio.","source":""},{"date":"2025-03-18","event":"Second smart contract exploit: attacker uses predictable PancakeSwap pair address and the 0x7f79f6df function to bypass transfer restrictions and drain pool liquidity during migration. Approximately $130,000–$174,000 stolen. Stolen BNB moved through FixedFloat.","source":""},{"date":"2025-03-18","event":"SlowMist, QuillAudits, and Lunaray publish technical analyses of the second exploit. four.meme suspends launch function and pledges another security review.","source":""},{"date":"2025-03-19","event":"four.meme resumes token launch function after internal security review. No third-party audit report is published.","source":""},{"date":"2025-10","event":"On-chain pollution attack floods four.meme with over 32,000 spam and low-quality tokens in a single day. Platform responds with a 0.01 BNB launch fee and manual review process.","source":"","date_original":"2025-10-01"},{"date":"2025-10-13","event":"four.meme announces a $45 million Reload Airdrop in partnership with BNB Chain following a market downturn affecting tokens in its ecosystem.","source":""}],"sources_used":[{"url":"https://www.kucoin.com/learn/crypto/what-is-four-meme-bnb-chain-memecoin-launchpad-and-how-does-it-work","name":"kucoin.com","type":"other","archive_url":"http://web.archive.org/web/20260609215313/https://www.kucoin.com/learn/crypto/what-is-four-meme-bnb-chain-memecoin-launchpad-and-how-does-it-work","credibility":3,"archive_timestamp":"2026-06-09T21:53:13+00:00"},{"url":"https://blog.mexc.com/what-is-four-token-form-a-binaryx-rebranding/","name":"blog.mexc.com","type":"other","archive_url":"http://web.archive.org/web/20260312094911/https://blog.mexc.com/what-is-four-token-form-a-binaryx-rebranding/","credibility":3,"archive_timestamp":"2026-03-12T09:49:11+00:00"},{"url":"https://cryptoslate.com/launchpads/four-meme-review/","name":"cryptoslate.com","type":"other","archive_url":"http://web.archive.org/web/20260610194007/https://cryptoslate.com/launchpads/four-meme-review/","credibility":3,"archive_timestamp":"2026-06-10T19:40:07+00:00"},{"url":"https://finance.yahoo.com/news/four-meme-records-2-6-073125161.html","name":"finance.yahoo.com","type":"other","archive_url":"http://web.archive.org/web/20251011155643/https://finance.yahoo.com/news/four-meme-records-2-6-073125161.html","credibility":3,"archive_timestamp":"2025-10-11T15:56:43+00:00"},{"url":"https://cryptoslate.com/bnb-chains-memecoin-launchpad-four-meme-hit-by-200k-exploit-suspends-liquidity/","name":"cryptoslate.com","type":"other","archive_url":"http://web.archive.org/web/20260314193200/https://cryptoslate.com/bnb-chains-memecoin-launchpad-four-meme-hit-by-200k-exploit-suspends-liquidity/","credibility":3,"archive_timestamp":"2026-03-14T19:32:00+00:00"},{"url":"https://beincrypto.com/four-meme-exploit-bnb-chain/","name":"beincrypto.com","type":"other","archive_url":null,"credibility":3,"archive_timestamp":null},{"url":"https://cryptopotato.com/bsc-based-meme-coin-launchpad-four-meme-suffers-183k-exploit/","name":"cryptopotato.com","type":"other","archive_url":"http://web.archive.org/web/20260114131813/https://cryptopotato.com/bsc-based-meme-coin-launchpad-four-meme-suffers-183k-exploit/","credibility":3,"archive_timestamp":"2026-01-14T13:18:13+00:00"},{"url":"https://www.ainvest.com/news/meme-suffers-183-000-exploit-highlighting-bnb-chain-vulnerabilities-2503/","name":"ainvest.com","type":"other","archive_url":null,"credibility":3,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://decrypt.co/310388/meme-coin-launchpad-four-meme-falls-victim-to-another-exploit","name":"decrypt.co","type":"other","archive_url":"http://web.archive.org/web/20260612233056/https://decrypt.co/310388/meme-coin-launchpad-four-meme-falls-victim-to-another-exploit","credibility":3,"archive_timestamp":"2026-06-12T23:30:56+00:00"},{"url":"https://lunaray.medium.com/four-meme-hack-analysis-7f320dc99b9e","name":"lunaray.medium.com","type":"other","archive_url":null,"credibility":3,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://www.quillaudits.com/blog/hack-analysis/four-meme-attack-analysis","name":"quillaudits.com","type":"other","archive_url":"http://web.archive.org/web/20260417061510/https://www.quillaudits.com/blog/hack-analysis/four-meme-attack-analysis","credibility":3,"archive_timestamp":"2026-04-17T06:15:10+00:00"},{"url":"https://cryptoslate.com/four-meme-handles-second-exploit-in-months-reinstates-launch-service/","name":"cryptoslate.com","type":"other","archive_url":"http://web.archive.org/web/20251208225337/https://cryptoslate.com/four-meme-handles-second-exploit-in-months-reinstates-launch-service/","credibility":3,"archive_timestamp":"2025-12-08T22:53:37+00:00"},{"url":"https://www.web3isgoinggreat.com/single/fourmeme-hack-2","name":"web3isgoinggreat.com","type":"other","archive_url":"https://web.archive.org/web/20260829232215/https://www.web3isgoinggreat.com/single/fourmeme-hack-2","credibility":3,"archive_timestamp":"2026-08-29T23:22:15+00:00"},{"url":"https://www.cryptopolitan.com/fraudulent-four-meme-top-result-google/","name":"cryptopolitan.com","type":"other","archive_url":"http://web.archive.org/web/20260217050705/https://www.cryptopolitan.com/fraudulent-four-meme-top-result-google/","credibility":3,"archive_timestamp":"2026-02-17T05:07:05+00:00"},{"url":"https://beincrypto.com/four-meme-hacked-suspends-token-trading/","name":"beincrypto.com","type":"other","archive_url":null,"credibility":3,"archive_timestamp":null},{"url":"https://www.cryptopolitan.com/four-meme-increases-token-launch-fee/","name":"cryptopolitan.com","type":"other","archive_url":"http://web.archive.org/web/20260114224403/https://www.cryptopolitan.com/four-meme-increases-token-launch-fee/","credibility":3,"archive_timestamp":"2026-01-14T22:44:03+00:00"},{"url":"https://coinspot.io/en/cryptocurrencies/four-meme-increased-the-token-launch-fee-to-fight-spam-and-toxic-memes/","name":"coinspot.io","type":"other","archive_url":"http://web.archive.org/web/20260829113157/https://coinspot.io/en/cryptocurrencies/four-meme-increased-the-token-launch-fee-to-fight-spam-and-toxic-memes/","credibility":3,"archive_timestamp":"2026-08-29T11:31:57+00:00"},{"url":"https://cryptorank.io/news/feed/3e175-four-meme-increases-token-launch-fee","name":"cryptorank.io","type":"other","archive_url":"https://web.archive.org/web/20260830032419/https://cryptorank.io/news/feed/3e175-four-meme-increases-token-launch-fee","credibility":3,"archive_timestamp":"2026-08-30T03:24:19+00:00"},{"url":"https://t.me/s/investigations","name":"t.me","type":"other","archive_url":null,"credibility":3,"archive_timestamp":null}],"source_tags":["defillama"],"addresses":[],"reviewed":false,"reviewed_by":null,"model_used":"claude-sonnet-4-6","created_at":"2026-05-04T02:54:25.53169+00:00","updated_at":"2026-08-30T03:55:00.352988+00:00"}}