Three Exploits

The first exploit covered by Rekt News, done in November 2020, was a flash loan that resulted in a $7 million loss. On May 5th, a new exploit occurred on the vBWAP/BUSD LP due to losing a line of code caused by “human error.” It didn't stop there, on May 7th vSwap contract was exploited draining 11M from its pools. In total these hacks resulted in over 20,000,000 of lost funds due to smart contract risks.

Rekt News Investigatives May 5th Exploit

The ensuing investigation details are taken from the RektNews analysis of what went down with the code exploit:

• On May 5th, 2021, 3:22 AM UTC, the exploiter re-initialized the pool and set the operator role to himself and _stakeToken to HACKEDMONEY.
• By doing so, the exploiter took control of the pool, called the method governanceRecoverUnsupported(), and drained the original stake token (vBWAP/BUSD LP).
• The exploiter then removed 10,839.16 vBWAP/BUSD LP, burned the LP tokens, received 7342.75 vBSWAP and 205,659.22 BUSD.
• The exploiter then sold all 7342.75 vBSWAP for 8790.77 BNB at 1inch exchange.
• The exploiter used both BNB and BUSD to buy renBTC and used renBridge to move the funds back to BTC, sent to the following address: 1Cm6WGvXQ9EgvvWX5dRsBxE2NvxFjfbcVF
• The actions can be verified on-chain here.
• The affected pool contract had an initialize() function that should have been activated after deployment.
• The line: initialized = true; is missing from the function.
• This meant anyone could re-initialize the pool and set themself as owners, thereby taking complete control. As an owner, the exploiter used the governanceRecoverUnsupported(), which is used for recovering pool funds in the event of a bug or undesired event.

During the setup of the profit-sharing vStake pool, the code was not written from scratch but migrated from the old implementation of the Value DeFi Reserve Fund. The original implementation had the correct setting, but when merging the code, the line was not included.

Peckshield Investigation on Latest Exploit

The latest hack on May 7th at 07:41:39 PM +UTC has drained 11M USD from the vSwap contract liquidity pools. Another blockchain-based security organization also released a medium post detailing what may have transpired with the code— an incorrectly weighted constant product invariant calculation.

From the technical analysis of what may have transpired with the code according to Peckshield;

“The root cause behind this attack, the vulnerability stems from the improper use of a complex exponentiation power() function, which unfortunately lies in the critical path for invariant calculation and enforcement. Confirming Rekt News “Human Error” identification of the problem. Peckshield also suggest to make the assumption explicit in the power() function by adding the following requirement: require(baseN >= baseD)!”

ValueDefi released this Tweet an hour ago, indicating that they are working with PeckShield Inc and Certik to analyze the root cause of the exploit.

Another Day, Another Exploit

Once again, the Binance Smart Chain (BSC) community has been reminded of the vulnerability of smart contract codes. A new day seems to come with a new code exploit, a pool draining, or a rugpull event done. The ecosystem is threatened with this type of event becoming rampant in recent times.

Does it show us weak contract codes, lazy teams, or better ways to strengthen the blockchain security systems further? Whatever the right answers may be, it shouldn’t come with repeated loss of funds for DeFi users.
Join the rest of the community to keep an eye on funds movement in the wallet.

What is SafeStar?

SafeStar is a frictionless yield and liquidity generating protocol that works by applying 10% fees for each transaction. These transactions are subsequently split into two, 5% to locked liquidity, the remaining 5% distributed among holders.

This creates a system where token holders get rewarded without doing anything. Users must simply hold SafeStar tokens in a compatible wallet and they can watch their balance grow automatically, in a frictionless manner. The platform also incorporates a lottery system where users can catch fun for reward.

‍

Key Features

• Deflationary
• RFI mechanics
• Lottery

Project Components

Deflationary Mechanism: 

SafeStar token is integrated with a burn mechanism that tax 10% of the total amount per transaction, of which 5% goes to a locked pool and the remaining 5% split to stakeholder. This will  help to reduce the total number of tokens in circulation over time. According to the statistics obtained from the website, a total number of 443,819,739,166,317 SafeStar tokens have been burned to date.‍

RFI Mechanics:

Earn passive income by the embedded RFI mechanics in the token. The RFI mechanics are responsible for the auto reward system that increases your balance. Whenever a transaction is done, whether a transfer between wallets, or a trade, SAFESTAR is split into two, where it is auto-locked and auto rewarded to holders.

Lottery System: 

Unlike most RFI based and deflationary platform without a working product, SafeStar has a native active lottery system with a weekly raffle draw held every week.

An active game is currently live and will end in 48hrs. A total of 500 million $SAFESTAR is required for entry and 150 billion $SAFESTAR token up for winning participants.

Fees generated from the lottery system are split into two; one part goes to the charity, which is currently around 0.9689 BNB, approximately $604 in today’s rate, and the constant burn of the tokens 51 billion $SAFESTAR.

How Does it Work?

Taking an assumption that the ticket price is 100 $SAFESTAR

• 100 lottery tickets are purchased, each costing 100 SAFESTAR
• The total collected funds equal 10000 SAFESTAR
• 90 SAFESTAR goes to the prize pool, where winners will be shown on the prize distribution - chart.
• 10 SAFESTAR will cover network tx fees.
• The jackpot will be split across all winners.
• One guaranteed winner will win all Super Jackpot.
  

The lottery system will add to the auto passive income generating medium of SafeStar for holders who have a high-risk appetite and wants to add up to their holding.

As part of the token growth and the SafeStar project expansion, the token has been listed on P2PB2B, one of the top crypto exchanges. This exchange offers that boast more than $600 million in daily trading volume. $SAFESTAR is also active on PancakeSwap and Bitmart.

The platform reached a new milestone; more than 44% of the Total Supply has been burned forever, a whopping $18,40,311. More burns are expected as the number of holders reaches a new level—a strategy to continue reducing the total supply of the tokens.

Tokenomics

The platform features both deflationary and RFI mechanics. Each transaction is taxed with 10%, 5% goes to the PancakeSwap locked LP pool, and the other 5% is split with holders.

• The Total Supply - 1,000, 000, 000, 000, 000 $SAFESTAR
• Circulating Supply - 556, 159, 642,139, 806 $SAFESTAR (at the time of this review)
• Burned Tokens - 443, 840, 357, 860, 195 $SAFESTAR
• Token Contract
• Lottery Contract
  

The deflationary tokens can earn you up to 80% in the Annual Percentage Yield (APY), higher than any traditional system.

Roadmap

An extensive number of the Q2 roadmap has been achieved;

• A revamp of the website and the whitepaper
• Listing on P2PB2B exchange
• Improvement of the lottery dapp
• Full-scale marketing campaign

What’s left of Q2 will be the R&D of various dApps, including Non-Fungible Token and other decentralized instruments.‍

For Q3 2021:

• Become a phenomenon on Social Media.
• Marketing and product promotion campaigns.
• Incorporate unique and exciting Non-Fungible Token technology.
• Incorporate other DeFi instrument technology.
• Continue to implement charity work into the core SAFESTAR product.

As you can observe, marketing has been activated to promote the platform, YouTube influencers, and various marketing campaigns. Incorporating Non-Fungible Token (NFT) technology(marketplace) will bring it up to speed with other DeFi protocols that have implemented certain forms of NFTs in their systems.

Governance voting will be the next phase of development for the platform. The major decisions for the protocol will be placed in the hands of the community. Other beneficial features will be decided by the community when this goes live.

In Conclusion

Passive generating income by doing nothing else than holding in your wallet is the safest type of DeFi stake we can find around.

SafeStar Lottery System sets it apart from other deflationary and RFI-based systems without a use case. Full-scale marketing has started for the project, and it is gradually becoming a phenomenon with the corporation of influencers from Twitter and Youtube. Holders should expect to see bigger moves from the team in the future.

Overall it is vital to proceed with caution when purchasing tokens that have just been listed. For those who have not already read our articles on safety in the BSC, it is crucial to reference the following items, HERE and HERE.

This is a paid press release, BSC.News does not endorse and is not responsible for or liable for any content, accuracy, quality, advertising, products, or other materials on this page. Readers should do their own research before taking any actions related to the company. BSC.News is not responsible, directly or indirectly, for any damage or loss caused or alleged to be caused by or in connection with the use of or reliance on any content, goods, or services mentioned in the press release.

Users who wish to learn more about SafeStar should check out the following resources and media pages:

Website

Twitter 

Telegram

Medium