Whoa! Where’s the $CANE?

Hurricane.Finance
3 min readDec 11, 2020

--

Dear Storm Watchers and Chasers,

Thank you for your patience and understanding while we work to bring our storms back up. There are sometimes some unexpected outcomes from creating these Category 5 Hurricanes. Today we ran into an issue in the Smart Contract caused by adding a new pool. This was in preparation of the release of our new Hurricane Andrew storm! We want to do our best to keep your Category 5 Wins coming so we are fast to work on a new contract with more protections in place. With our dedicated team of Storm Experts (the 3-dev team) you’ll be back to chasing storms in no time!

We took sometime to review your suggestions and will be working in details like:
Airdropping Current Holders
Removing Pools Support
Locking Contract Mint Supply to 10K

While our team develops the new contract we would like to address the exploit of our system that occurred today. During the preparation of our new storm we reduced the rewardAllocation in Hugo by 1% and added a new YFL/CANE pool with this 1% reward allocation from the available rewards. These two transactions can be seen below:

Reducing Hugo rewards by 1%: https://etherscan.io/tx/0xc30cac885507dae44c3d9456c0314295961cfedffe4aea1a015cd78b622295c1

Adding new YFL/CANE pool (https://info.uniswap.org/pair/0x592adfd469fb8cc58778ac0323c785b464e0d3f2) at 1%: https://etherscan.io/tx/0x1de471931249d4d976432ca986827a6161bb0549d46ad70000cba295b676511c

Without our discretion, this account performed some abnormal behavior by prematurely interacting with the new unreleased pool:

1. They first added in liquidity manually: https://etherscan.io/tx/0x98458ca01e3d228b0a94db949144cb6e03ef2723dfa9d49b8d74db4d6d95e739

2. Then Claimed Rewards manually on the new pool: https://etherscan.io/tx/0x5536e674960b7f770c70cde51f288fc3d23633d14ad526768abe4206aed8d048

From the research completed, these are the actions we believe triggered the reward calculation issue:

  1. The next user made a call first to Stake in Katrina,
  2. Then to Claim Rewards in Hugo only 8 seconds later
  3. The contract minted an abnormally large number of CANE tokens as rewards
  4. The contract sold 50% of them on Uniswap for ETH.
  5. Thus draining our Uniswap pool of its ETH.

As a part of our research, we have narrowed down the list of IP addresses that were using the site around that time. We’ve utilized that information to help us identify the account holding the ETH and will continue to monitor it’s movement until further notice.

https://etherscan.io/address/0xc4c0db643ec78c2c2a058d66b8f37fc2b3ef8c74

As we work on a more secure V2 we would like to reach out to this account holder with the following message and take a moment to reflect on all the feedback we have received thus far.

Dear Loyal Storm Chaser,

You have been a loyal supporter of CANE since it’s launch. We’ve noted your purchase of 1.28 CANE on Uniswap at launch and appreciate your putting forth your valuable ETH. You even staked the CANE you purchased into Hugo and have been a part of the Hugo pool ever since. We know you are looking to take part in the future governance protocol!

More importantly, you are a part of our community and this has hurt them all. It’s shaken their confidence in an amazing project, it’s taken their hard earned money out of their pockets and it’s most likely left some people with debts they can’t afford. We don’t believe this was what you intended and we’re sure there is a way to resolve this without your fellow Storm Chasers being hurt in the end.

Your account currently has the entire Uniswap ETH pool balance owned by your fellow Hurricane Community: https://etherscan.io/address/0xc4c0db643ec78c2c2a058d66b8f37fc2b3ef8c74

It’s your willingness to support this community that we appreciate the most. We’re sure you would love to continue chasing storms so we would like to provide an opportunity for you to return the ETH claimed from the pool with no public embarrassment. This will allow us to continue running operations and replace the money your fellow members lost. It would also make you a hero to your community!

As an added bonus, we are offering a monetary reward sent directly to you and additional CANE rewards. We will be pausing the chat while our developers work on a new contract and we await your response. Please feel free to reach out to @Category5 via Telegram to discuss how to move forward.

Thank you!

--

--

Hurricane.Finance

Hurricane Finance is simple and experimental yield farming designed to benefit storm chasers for the long term.