Whoa! Where’s the $CANE?

Dear Storm Watchers and Chasers,

Thank you for your patience and understanding while we work to bring our storms back up. There are sometimes some unexpected outcomes from creating these Category 5 Hurricanes. Today we ran into an issue in the Smart Contract caused by adding a new pool. This was in preparation of the release of our new Hurricane Andrew storm! We want to do our best to keep your Category 5 Wins coming so we are fast to work on a new contract with more protections in place. With our dedicated team of Storm Experts (the 3-dev team) you’ll be back to chasing storms in no time!

We took sometime to review your suggestions and will be working in details like:
Airdropping Current Holders
Removing Pools Support
Locking Contract Mint Supply to 10K

While our team develops the new contract we would like to address the exploit of our system that occurred today. During the preparation of our new storm we reduced the rewardAllocation in Hugo by 1% and added a new YFL/CANE pool with this 1% reward allocation from the available rewards. These two transactions can be seen below:

Reducing Hugo rewards by 1%: https://etherscan.io/tx/0xc30cac885507dae44c3d9456c0314295961cfedffe4aea1a015cd78b622295c1

Adding new YFL/CANE pool (https://info.uniswap.org/pair/0x592adfd469fb8cc58778ac0323c785b464e0d3f2) at 1%: https://etherscan.io/tx/0x1de471931249d4d976432ca986827a6161bb0549d46ad70000cba295b676511c

Without our discretion, this account performed some abnormal behavior by prematurely interacting with the new unreleased pool:

1. They first added in liquidity manually: https://etherscan.io/tx/0x98458ca01e3d228b0a94db949144cb6e03ef2723dfa9d49b8d74db4d6d95e739

2. Then Claimed Rewards manually on the new pool: https://etherscan.io/tx/0x5536e674960b7f770c70cde51f288fc3d23633d14ad526768abe4206aed8d048

From the research completed, these are the actions we believe triggered the reward calculation issue:

  1. The next user made a call first to Stake in Katrina,
  2. Then to Claim Rewards in Hugo only 8 seconds later
  3. The contract minted an abnormally large number of CANE tokens as rewards
  4. The contract sold 50% of them on Uniswap for ETH.
  5. Thus draining our Uniswap pool of its ETH.

As a part of our research, we have narrowed down the list of IP addresses that were using the site around that time. We’ve utilized that information to help us identify the account holding the ETH and will continue to monitor it’s movement until further notice.

https://etherscan.io/address/0xc4c0db643ec78c2c2a058d66b8f37fc2b3ef8c74

As we work on a more secure V2 we would like to reach out to this account holder with the following message and take a moment to reflect on all the feedback we have received thus far.

--

--

Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store
Hurricane.Finance

Hurricane Finance is simple and experimental yield farming designed to benefit storm chasers for the long term.