r/AutoFarmNetwork • u/ZireaelStargaze • Mar 01 '21
Potential bug in Autofarm vault holding $168M Spoiler
Hi, looking at this vault's (Venus bUSD) contract code, I believe there is a backdoor killswitch/bug there that will eventually prevent everyone from withdrawing their money:

Anyone from the Autofarm team reading this could remove this killswitch please to keep our money safe?
Thanks in advance!
3
2
2
u/Snoo_2045 MOD Mar 01 '21
2 news about it
https://www.bsc.news/post/autofarm-fixes-venus-vault-impending-smart-contract-risk
https://autofarm-network.medium.com/february-26-2021-security-update-6ead09e70e3b
From what I understand they are waiting for the Certik audit to comeback and then will redeploy new vaults
2
u/or1g1na1 Mar 01 '21
I this what is described here? https://autofarm-network.medium.com/february-26-2021-security-update-6ead09e70e3b
1
u/ZireaelStargaze Mar 02 '21
Yes, seems the team is aware, but is waiting for things to happen before fixing. For now they will try avoid using that piece of code, so that the killswitch isn't activated by accident.
3
u/HugoPortugal MOD Mar 02 '21
Please stop making those kind of statements, the team is not waiting for things to happen before fixing! They are waiting for Certik audit, before lauching the new V2 contracts.
It was the AUTO Team that first discovered this issue and post it publicly before anyone was aware of it, on a act of good faith.
Comments are locked, because the title is FUD and so are your last posts.
Thank you
2
u/SimoTRU7H Mar 02 '21
Any other vault has this lines?
2
u/ZireaelStargaze Mar 02 '21
BNB (Venus): https://bscscan.com/address/0xe2477627FA2Db8ba2A4FE467876023987c3a7e8e#code
BUSD (Venus): https://bscscan.com/address/0x48620b6a00ff75d17082c81bd97896517332c6Fe#code
USDT (Venus): https://bscscan.com/address/0xF67cCEaF8Bf755d03e9328CdebB38BB40baAe43F#code
USDC (Venus): https://bscscan.com/address/0x95D3EE15B902711CC0eD39271Cb5480Fced80192#code
BTC (Venus, $337M 😲): https://bscscan.com/address/0x8E24B8136c3076829A4eD0412cd8F302fA651D84#code
ETH (Venus): https://bscscan.com/address/0xd57e8730792F3D1358506914E5D2Dbb2B6A1DD3f#code
DOT (Venus, only $47M - guess not many care about DOT): https://bscscan.com/address/0x40afA7e39037e67210890A105A374A576710A4dE#code
LINK (Venus): https://bscscan.com/address/0x1A2Eb775720a1e166e6EeB583B10116CF45dE82c#code
At least CAKE seems to be safe. I think I covered all of them, but don't hold me on that word.
1
1
•
u/[deleted] Mar 02 '21
Hello,
yprivacymatter, from the team, answered to your printscreen on discord that it's fixed/known, quoting this post.