ivo.eth 🧙🏻‍♀️

DeFi dev; blockchain security researcher;

[ivo.eth 🧙🏻‍♀️ @0xIvo]

@VenusProtocol pushed the blame for its $15mm debt shortfall on @chainlink instead of acknowledging that Venus still has a critical bug that needs to be fixed ASAP.

Many other lending & derivative protocols have the same vulnerability. Learn why oracle hygiene matters 👇 1/8

[ivo.eth 🧙🏻‍♀️ @0xIvo]

@poordart https://t.co/XE7XNAcSVG

[ivo.eth 🧙🏻‍♀️ @0xIvo]

@0xM3rlin heh

[ivo.eth 🧙🏻‍♀️ @0xIvo]

@CL207 wtf I saw that as well but I thought it was an issue with my charting software.

Notice the random trade (green bubble) at 23,426 way below the bid

[ivo.eth 🧙🏻‍♀️ @0xIvo]

@tradinggod420 The Sun is already the god of #tron, bittorrent, and a small Caribbean island

[ivo.eth 🧙🏻‍♀️ @0xIvo]

@Zac_Aztec Even if the shielded pools are compliant with OFAC checks on all levels, that won't achieve much.

If TC prohibited deposits from sanctioned addresses it would have still been full of tokens from hacks & scams as regulators can't react fast enough to blacklist bad actors.

[ivo.eth 🧙🏻‍♀️ @0xIvo]

@Zac_Aztec Similar to how TC depositors are guilty by association after the TC pools were contaminated by all the bridge hackers.

[ivo.eth 🧙🏻‍♀️ @0xIvo]

@evan_van_ness the anonymity set is growing

[ivo.eth 🧙🏻‍♀️ @0xIvo]

@0xfbifemboy my guess:
HONEYCOIN is a transfer tax token, so kevin420 had to enable expert mode on kyber swap and increase max slippage a lot.
Kevin made the mistake of swapping to DAI instead of just ETH so the high slippage allowed an MEV searchooor to sandwich the ETH->DAI swap

[ivo.eth 🧙🏻‍♀️ @0xIvo]

@0xngmi vague descriptions make it sound like the company has a larger total addressable market

example:
a) anywap is a a cross-chain token bridge
b) anyswap is a multichain interoperability solution enabling generic cross-chain message passing

[ivo.eth 🧙🏻‍♀️ @0xIvo]

@CryptoGucci related? https://t.co/h9GPn62FqA

[Ledger 🇺🇸 @ledgerstatus]

Gave myself a little shiner unloading stuff from my truck.

[ivo.eth 🧙🏻‍♀️ @0xIvo]

@DegenSpartan A true spartan should eat spartan black soup at least once a day https://t.co/3QFuBCkQhL

[ivo.eth 🧙🏻‍♀️ @0xIvo]

@evan_van_ness Did you start with stare / shame?
Check out what a superior "irate" gamer can achieve

⬜🟨🟨⬜🟨
🟨🟨⬜🟩⬜
🟩🟩🟩🟩🟩

[ivo.eth 🧙🏻‍♀️ @0xIvo]

@TeriBull2 @Cnote203 @JiraiyaReal @_ThorFinancial The code still exists but nobody can execute it. Nobody can exploit that backdoor anymore

[ivo.eth 🧙🏻‍♀️ @0xIvo]

What does an inflationary DeFi protocol do when it runs out of tokens to pay out rewards?

Well if it's @_ThorFinancial the team abuses a backdoor in their token contract to send burned tokens to a dev wallet

They can use the same backdoor to steal $THOR from any holder

🧵👇1/8

[ivo.eth 🧙🏻‍♀️ @0xIvo]

@TeriBull2 @Cnote203 @JiraiyaReal @_ThorFinancial Only the token owner can exploit that vulnerability and after renouncing ownership the team can no longer do that.

[ivo.eth 🧙🏻‍♀️ @0xIvo]

@Cnote203 @JiraiyaReal @_ThorFinancial Thank you

[ivo.eth 🧙🏻‍♀️ @0xIvo]

@SteveFig22 @_ThorFinancial The team can steal $THOR from any wallet, but that's unlikely. If they want to rug they can take more of the "burned" coins and drain all liquidity pools

[ivo.eth 🧙🏻‍♀️ @0xIvo]

@tmg20gmt @_ThorFinancial This is not related to thorchain at all, as far as I know. The project just uses the same name & similar branding

[ivo.eth 🧙🏻‍♀️ @0xIvo]

$3 million is at risk. Only the devs can abuse the backdoor and only they can fix it. Please help me get the word out.

@banteg
@samczsun
@Mudit__Gupta
@zachxbt
@DegenSpartan
@cobie
@ledgerstatus
@XcaliburThor
@0xdegensigma
@Mercules_thor
@OblivionJt
@KasparovDefi
@aarnft

[ivo.eth 🧙🏻‍♀️ @0xIvo]

@_ThorFinancial your project is a fork of (now rugged) @RingFinancial these backdoors are present in their code as well. You didn't put them there but you have to fix them.

Change the distributionPool back to normal and renounce token ownership. Make this an actual DeFi protocol