what's ShiMama (屎麻麻) / Shibaba (屎粑粑)?
ShiMama (屎麻麻) and Shibaba (屎粑粑) are paired BEP-20 meme tokens on Binance Smart Chain, with names in Chinese characters evoking humorous "shit mama" and "shit baba" themes typical of meme coins. ShiMama has a total supply of approximately 2 billion tokens (18 decimals), while Shibaba has 1 billion. Their PancakeSwap LP pool integrates with ShiMamaProtocol, enabling features like LP burns, node buying, referrals, static rewards, and tax processing. The protocol's executePairBurn function pulls and burns tokens from the LP based on parameters, lacking access control, which led to exploitation via flash loans and arbitrage. Contracts are verified on BSCScan with no external links.
ShiMama/Shibaba exploited Mar 19, 2026: LP tokens burned, 52.98 WBNB lost.
Suffered an exploit on March 19, 2026 due to missing access control in the executePairBurn function of ShiMamaProtocol contract (0x5049d10378356fde0b44c93fa7bb75836f10b49a), allowing an attacker to burn nearly all tokens from the ShiMama/Shibaba LP pool (0x564cb2bae0b35cfc8c77d94d65015fe898f8f927) and extract approximately 52.98 WBNB in profit through arbitrage, causing massive liquidity loss to the LP pool.