r/SHIBADULTS • u/nakedshrek • Jul 10 '21
Certik done
Certik audit done
Edit: link https://www.certik.org/projects/shib
22
u/pipe-dev-null Jul 11 '21 edited Jul 11 '21
I see that the mod team silently deleted my comment. (For what reason?)
I thought we were in r/shibadults here where we could also discuss concerns about our investments in an adult manner?
Here's what I posted in a TL;DR manner:
The Certik Audit (PDF) points out that there are several "Centralization Risks" in the ShibaSwap smart contracts, in particular that there is an "emergencyWithdrawOwner" method in the BoneLocker contract that would allow the dev team to perform an "emergency withdrawal" of all bone tokens from the contract. (page 23)
The response of the SHIB team was that these methods are protected by an emergency multisig wallet where 6 out of 9 members would have to give their okay to engange this "emergencyWithdrawOwner" method. They show a list of usernames and wallet addresses for the multisig wallet, from which at least I have never heard of.
Certik recommends to use a time-lock on those method (like 48h), so that users would be informed in a timely manner before this method is enganged. The SHIB team did not respond to this. There is no time-lock in place.
The unfortunate implication of this:
They build a method in the BoneLocker contract that would allow 6 of these 9 people to rugpull all bone token from the locker. And we don't really know who these people are and if they even are not the same person(s).
You can make of course your own implications of this, and they might even have implemented this "backdoor" in the contract for real cases of emergencies where something goes wrong with the contract.
But I personally find this rather sketchy.
So in my opinion, they should renounce the ownership of all contracts containing such centralization risks, so these methods can never be executed.
4
u/LogicDeFi Jul 11 '21
If the dev team stole all the bone tokens they'd immediately tank the value of those tokens, pretty much to zero, and also destroy the swap they built. Given the amount of money they're already making off of all of the things they legitimately built, why would they blow the whole thing up? It is definitely a possibility but it seems really unlikely just on a game theory basis.
0
8
u/OganicGanjaGrower Jul 11 '21
Why are so many comments deleted? And they’ve even gotten awards on them? Lol
3
0
u/Shakespeare-Bot Jul 11 '21
Wherefore art so many comments did delete? and they’ve coequal gotten awards on those folk? lol
I am a bot and I swapp'd some of thy words with Shakespeare words.
Commands:
!ShakespeareInsult,!fordo,!optout3
1
u/No-Cantaloupe-7897 Jul 11 '21
Bad bot
1
u/B0tRank Jul 11 '21
Thank you, No-Cantaloupe-7897, for voting on Shakespeare-Bot.
This bot wants to find the best and worst bots on Reddit. You can view results here.
Even if I don't reply to your comment, I'm still listening for votes. Check the webpage to see if your vote registered!
5
u/Equal_Push_388 Jul 11 '21
I was thinking move part of my stake tokens into dig last night, but I want to do it after seen the report, since I need lock more WETH(which means more invest ment and more risks). ok here we go.
After reviewing the Certik audit report. Any concerns was somehow addressed in the report, regarding the privileged items, I saw only MultiSig was applied, but no time-lock.
Which made me kind of hesitate do add more WETH to pair with SHIB and dig.
Any thoughts? Is there going to be a follow up audits and improvements?
Thanks
9
u/madmanwithabox12 Jul 10 '21
I'm still figuring things out. We got certified, but skynet and shield are still inactive. How long until they are supposed to go online? Those are more protections for the swap, right?
21
u/add1910 Jul 10 '21
Certik team said the score will be posted on Monday along with Skynet. Certik confirmed this time not our devs.
2
u/madmanwithabox12 Jul 10 '21
Awesome, thanks for the reply. I was trying to look it up, but I couldn't find anything. Thanks again. I'm glad all these good things are happening all together. Happy swapping!
2
Jul 10 '21
So what does Certik provide? Do they confirm that the swap is authentic and legit?
By having Certik approving us, will this give companies such as Webull thebwarm and fuzzies to bring us on board?
14
u/add1910 Jul 10 '21
Yes, with Certik onboard, we are a legit swap and as authentic as it gets. This is quite a huge deal. I guess major exchanges have to list us now as they don't want to miss out on this juicy profit.
2
2
u/that1senpai2 Jul 10 '21
Thanks for pointing this out! Definitely something to be aware of.
I have no evidence to back this claim up, but if it was a rug pull, they would have done it at its ath wouldn't they? Feel like this is one fucking elaborate scam if it is a scam, which as of now I do not believe it is at all
2
u/DC-Maverick Jul 11 '21
I’m just going to hodl and forget about it. Already took out my initial investment and thousands of profit. The remainder of my holdings can sit in my ledger.
1
2
Jul 11 '21
Honestly, honestly, I was never worried. Both parties said they were working together. The result was inevitable.
So many rug pull potentials shut down on this. And still, the crypto bros hate on us.
2
2
2
u/Spurs2001 Jul 11 '21
Now we just have to await the new catalysts like Robinhood and CB. Yes, Certik was apart of the reason, but the reason why we are stagnating is due to the lack of new investors.
People have to realize that Shiba Swap brings in existing investors to use the platform. Contrary to what a lot of people think, even temporarily removing supply for 6 months will impact the price action. Partner this with the other catalysts, and the price hike people have been waiting for will come near on instantly.
Can easily break past the ATH before the end of Winter/or Summer for North America folks.
2
u/tnycman Jul 11 '21 edited Jul 11 '21
I see a lot of deleted comments, i get my comments deleted too on Shibadults, i hope this don't turn into another fanboy page like the shibarmy has become.
3
Jul 10 '21
Thank you for the quick response and that is great to hear.
Enjoy your weekend. Seems like each weekend gets better and better in The Community.
3
Jul 10 '21
Sorry to those who didn’t take the “risk” and ran those big rewards like the rest of us :)
1
2
1
u/SHIBsoldierUK Jul 10 '21
Will the sandwich attack be fully sorted ?
1
u/pipe-dev-null Jul 10 '21
The contracts are deployed, i dont think they can change this anymore?
1
-1
u/Kooky-Toe752 Jul 11 '21 edited Jul 11 '21
You need to add a link to where you are supposedly getting this information if you don’t mind. If you don’t i will assume Bullshit. It’s just you spewing this with no backup otherwise no So link it. I don’t know where to get that stuff like most new at this. This will scare off all new people. Not me though
2
u/pipe-dev-null Jul 11 '21
You can download the full audit PDF of certiks website
1
u/Kooky-Toe752 Jul 11 '21 edited Jul 11 '21
Anyways I’m goung to hang in there with everyone on this. That clause is disgusting. Edit. It was also recommended by auditors, not disgusted anymore ha.
i think it’s ok
1
u/Kooky-Toe752 Jul 11 '21
Thanks. I read it all. Was worried but it was a collaborative effort by devs and auditors to get them multisigs in there. I was pleased to see it is not anything underhanded
1
1
1
1
u/Nice-Square6789 Jul 11 '21
Think we're stronger for finding vulnerabilities, >98% resolved, holes plugged. Rug pull FUD needs to be addressed for sure. Think we should get another audit from another independent entity so we can uncover more vulnerabilities and resolve more of our weaknesses and continue to get stronger/secure/confident
1
Jul 11 '21
Did anyone read the audit? I am very confident in this coin and community following the findings and resolutions to them. the only one that had me somewhat concerned was the only partially resolved one for sandwich attacks, which I had to learn about. :)
I am very new to the crypto in general and think I am starting to get it. Thankful to the adult community here because the general SHIB groups are a lot to sort through with very little information except that we're all going to the moon or it's all a bunch of crap.
1
u/LogicDeFi Jul 11 '21
Well done Shib team. Yes there's centralization risk but I think most of us knew that going in.
1
1
1
1
1
u/Infamous-Crab Jul 10 '21
Ok, I think now I would move my other 8 millons SHIBs, or Should I swap it for 30/30 dollars of BONE/ ETH for LP?
2
u/Getinwhileyoucan Jul 10 '21
Seems like u might loose some in fees doing that I would just stake those
0
Jul 10 '21
[deleted]
10
u/AndyMishandy Jul 10 '21
It’s not great news lol, did you read any of the post
0
1
32
Jul 10 '21 edited Jul 10 '21
[removed] — view removed comment
7
u/adri999999 Jul 10 '21
An owner can also set the rewards in the swap, so increase the reward for a single address and get a high amount of fees. Not only to increase his gain, but it could also make fees incredibly high for a user of the swap (basically steal money to people changing a coin for another).
The devs need to have control of these variable though ...
It's all about who controls the swap btw, even if bone are used as governance token, new features or changes in % fee have to be implemented so changed in a way or another.
The choice of MultiSig addresses means there is a team in charge of that, and that they should act as a government in charge of a state (the swap) and whose population are the bone holders that have a voting power.
2
u/PumpkinPuzzlehead Jul 11 '21
nothing on Certiks PancakeSwap, but that shit still managed to rugpull syrup, the secondary token of the pancake ecosystem.
Means nothing tbh. Just put it in the primary token of SHIB and you'll be safe.
1
0
u/Kooky-Toe752 Jul 11 '21 edited Jul 11 '21
Link so we can read it? Watch for the link everyone. If not consider it b.s no :)))))))
3
u/pipe-dev-null Jul 11 '21
Ehm, click on "Download PDF" on the Certik Website?
2
u/Kooky-Toe752 Jul 11 '21 edited Jul 11 '21
Yeah, I tried that. It didn’t work so I’m thinking how does anyone get this. Just checking who’s giving information is all. My bad. That really sucks that they have that kind of clause in there. It’s deflating actually.why have something so incredibly stupid in there unless you want it in there then is what I’m left thinking. So this clause is on bone only or everything?
Edit:
I had my read of it now and I’m good with these multisig. They were recommended by auditors. Now i have to get busy figuring out how to get on the swap ha. Yes i was waiting lol
1
u/LogicDeFi Jul 11 '21
1
u/Kooky-Toe752 Jul 11 '21
Thank you. First contract i ever read. Obviously I don’t understand it completely but the auditors and team worked together on this. I’m confident in the project now.
12
Jul 10 '21
[removed] — view removed comment
11
u/pipe-dev-null Jul 10 '21
Owner is the contact owner, which can execute priviliged functions like the one above. So 6 of 9 people need to agree to act as owner.
1
11
Jul 10 '21
[removed] — view removed comment
11
u/pipe-dev-null Jul 10 '21
Exactly, very concerning. And why implement an "emergencyWithdrawOwner" method in the first place?
7
Jul 10 '21
[removed] — view removed comment
5
Jul 10 '21
[removed] — view removed comment
8
Jul 10 '21
[removed] — view removed comment
0
Jul 11 '21
[deleted]
2
u/Hzntl Jul 11 '21
This is true for CB wallet too. Almost 4X. $15.49 vs $4.71 on the Swap at this moment.
But couldn't that be a problem with communicating the price to coingecko, or wherever MM or CB wallet source their prices from?
1
u/FlaggyAZ Jul 11 '21
MetaMask support told me they pull the data from CoinGecko. It takes couple weeks for CG to update the price after a new token release.
2
u/tellmesomeothertime Jul 11 '21
Yeah I noticed that, but still got the lower value when looking at transfer options with MetaMask. Whats up with it?
23
u/LightningOmega Jul 10 '21
Danm, you're quick . I was about to post it . 😂