The Vanishing Act: How Exit Scammers Mint New Tokens Undetected

This report dissects a DeFi exit scam (MUMI) where attackers deployed a malicious ERC-20 token containing a backdoor that allowed hidden minting (bypassing totalSupply and Transfer events), added and locked liquidity, and used a closed-source tax contract to swap the secretly minted tokens for ETH and drain the pool—netting ~9.7 ETH; the same pattern and associated addresses appear across hundreds of tokens, indicating an automated large-scale campaign targeting bots and on-chain participants.