Ordinals Finance, an Ethereum-based decentralized finance (DeFi) protocol that permits customers to lend and borrow inscriptions, has been accused of performing an exit rip-off, often known as a “rug pull.”
In an April 24 press launch seen by Cointelegraph, blockchain safety agency CertiK reported that the protocol’s developer pulled 256 million OFI tokens out of its good contracts utilizing a “safuToken” perform. One other 13 million OFI was eliminated via an “ownerRewithdraw” perform, bringing the overall variety of tokens withdrawn to 269 million, CertiK said.
We will verify that the @ordinalsfinance exit rip-off has resulted in a lack of $1 million.
All social media accounts have been deleted in addition to the challenge’s web site.
Funds have been consolidated into EOA 0x34e…25cCFhttps://t.co/0Pwlt3yibm https://t.co/RA7vSjNajI
— CertiK Alert (@CertiKAlert) April 24, 2023
Based on the blockchain safety agency, the overall loss to traders is $1 million. CoinGecko information exhibits that the market capitalization for OFI was $2.3 million earlier than the alleged exit, however it fell to barely over $143,000 afterward. This suggests that losses have been greater than $2 million. Nonetheless, some OFI token house owners might have offered because the information broke, which can account for the decrease quantity being reported by CertiK.
Blockchain information exhibits that the Ordinals deployer account withdrew over 256 million OFI tokens utilizing the safuToken perform. These funds have been allegedly despatched to a separate Ethereum account via a number of transactions. Blockchain information exhibits that this tackle acquired OFI from a number of addresses earlier than depositing the tokens into Twister Money.
The challenge’s Twitter account seems to have been deleted.
Additional investigation reveals that after receiving the 256 million OFI, the deployer account made 12 separate transactions swapping OFI for Ether (ETH).
The deployer then transferred over 85.5 ETH to the account ending in “cCF,” at which level it was deposited into Twister Money.
The safuToken switch was executed on a contract labeled “OEB Staking.” This perform is listed on the backside of the file, on traces 1445-1450, and seems to permit the “proprietor” of the contract to switch all staked tokens to itself.
The deployer account additionally made a number of calls to the OFI Staking contract to switch tokens to itself, every time utilizing a perform on traces 305–308 known as “ownerRewithdraw.” It seems to permit the proprietor to withdraw any quantity of tokens from the staking contract, so long as the steadiness within the contract is larger than a variable known as “totalOwedValue.”
