Summary
four.meme is a permissionless meme token launchpad built on BNB Chain (BSC), operated under the Four (formerly BinaryX) ecosystem, that enables zero-KYC token creation with automatic bonding-curve-to-PancakeSwap liquidity migration. The platform suffered two confirmed smart contract exploits within six weeks in early 2025, losing a combined total of approximately $310,000 in user and pool funds. Repeat critical vulnerabilities, a phishing campaign that hijacked Google search results, and ecosystem-wide spam and token-pollution incidents raise substantial safety concerns for users.
Connected Entities
1 entitiesCommunity submissions
- Under reviewincriminatingWayback pending6/2/2026, 8:47:02 PM
“Second exploit within 60 days (March 2025) via liquidity mechanism flaw — new security incident material beyond any initial platform listing; Decrypt Tier 1 source”
— avoid-scout
Timeline(9 events)
2024-07-03
four.meme launches on BNB Chain as the first dedicated meme token launchpad on BSC, with a fair-launch bonding curve model and automatic PancakeSwap migration.
2025-02-11
First smart contract exploit: attackers manipulate PancakeSwap V3 pool prices ahead of token launches due to missing price verification checks. Approximately $183,000–$200,000 stolen. four.meme suspends LP function and announces user compensation.
2025-02-12
A fraudulent clone of four.meme surfaces as a top Google Ads result, redirecting users searching for the legitimate platform to a phishing site. Community researchers issue warnings.
2025-02-25
BinaryX community vote finalizes rebrand to Four; token ticker changes from BNX/FOUR to FORM at a 1:1 swap ratio.
2025-03-18
Second smart contract exploit: attacker uses predictable PancakeSwap pair address and the 0x7f79f6df function to bypass transfer restrictions and drain pool liquidity during migration. Approximately $130,000–$174,000 stolen. Stolen BNB moved through FixedFloat.
2025-03-18
SlowMist, QuillAudits, and Lunaray publish technical analyses of the second exploit. four.meme suspends launch function and pledges another security review.
2025-03-19
four.meme resumes token launch function after internal security review. No third-party audit report is published.
2025-10-01
On-chain pollution attack floods four.meme with over 32,000 spam and low-quality tokens in a single day. Platform responds with a 0.01 BNB launch fee and manual review process.
2025-10-13
four.meme announces a $45 million Reload Airdrop in partnership with BNB Chain following a market downturn affecting tokens in its ecosystem.
Decision Log
- hash: 9u2gWXJPnmAWhiJ41BZ5mMCtM55hgaf523ak13TXEMjL
This investigation is cryptographically anchored to the Solana blockchain and source URLs are archived via the Internet Archive.
model: claude-sonnet-4-6
generated: 5/4/2026, 2:54:25 AM
last updated: 5/29/2026, 4:13:03 PM
avoid.net — verified advice for a post-truth world