EthereumCommonwealth / CLOIP

The Callisto Network Improvement Proposal repository
Creative Commons Zero v1.0 Universal
1 stars 1 forks source link

SOY Refunds. #9

Open Dexaran opened 5 months ago

Dexaran commented 5 months ago

Treasury accident & SOY Finance

As the result of an unauthorized Treasury withdrawal incident (https://github.com/EthereumCommonwealth/CLOIP/issues/7) Callisto Enterprise released the statement: https://twitter.com/CLOEnterprise/status/1760258166955049092

In this statement Callisto Enterprise resigns from any rights to Callisto Network Treasury and agrees to send back the previously withdrawn funds. They also allocated 50M CLO to refund any party who may be underpaid during the refund process.

I suggested them to send the funds back to the Treasury account: https://twitter.com/Dexaran/status/1760388149304295861

Callisto Security (controlled by the same Callisto Enterprise employees) replied that "Using a compromised wallet is not secure. If you knew anything about security, you wouldn't even suggest it."

https://twitter.com/CallistoAudits/status/1760623110766711230

It is unclear what Callisto Enterprise means with their statement, so I have to explain Callisto Security employees that there is a clear difference between a "misused wallet" and a "compromised wallet" and the Treasury address was definitely misused by them (they attempted to withdraw all the funds without negotiating it with other key holders) but its keys were not compromised. Keys were belonging to persons they were given to, the problem was that these persons used the keys in a wrong way. Unless Callisto Enterprise compromised the keys on their end by exposing them to some third parties - the Treasury keys are not compromised and judging by the fact that after their withdrawal there were no outgoing transfers from Treasury address no third parties gained access to the keys, otherwise the rest of the funds would have been withdrawn as well.

While we are awaiting for the funds to be delivered to a new address that I have given Callisto Enterprise we can start gathering data for a refunding process.

SOY Refunds

If you were involved in the accident and you were an active liquidity provider on SOY.Finance exchange in a CLO-SOY pair on block 14186359 February-16-2024 11:39:15 AM +-6 UTC (https://explorer.callisto.network/block/14186359/transactions) please provide us with your address and a transaction that provided liquidity to the CLO-SOY pair.

This measure is only needed to gather the data to speed up the process. Everyone will get a refund no matter if they will provide their transactions data in this thread or not, but the ones whose data will be provided will get refunded first.

Dexaran commented 5 months ago

Here is a list of addresses that we identified as involved in the SOY accident. We will verify the correctness of the values in the spreadsheet and then proceed to the refund soy_holder_ratio.csv

Refunding script https://github.com/Dexaran/clo_mass_sender

Stanislav144 commented 5 months ago

They won't fix the wallet like that ??? This application was using Trezor Connect v7, which has been discontinued. To continue using Trezor with the application, please contact the application developer directly.

Stanislav144 commented 5 months ago

What will happen to Callisto Network CLO , CE migration ???

Dexaran commented 5 months ago

The first part of SOY refunds is completed

Here is a list of transactions, CLO refunds were sent to the SOY Liquidity providers: https://github.com/EthereumCommonwealth/CLOIP/blob/main/SOY-refunds/clo_payments.csv

Dexaran commented 5 months ago

They won't fix the wallet like that ???

If we are speaking about wallet.callisto.network - most likely it will not be updated. Also, callisto.network domain is controlled by Callisto Enterprise.

What will happen to Callisto Network CLO , CE migration ???

I will write a statement and outline the situation in the next days. Currently the most important thing is to get Gate.io and HitBTC feedbacks.

Stanislav144 commented 5 months ago

Они же так кошелек не починят???

Если мы говорим о Wallet.callisto.network — скорее всего, он не будет обновляться. Кроме того, домен callisto.network контролируется Callisto Enterprise.

Что произойдет с Callisto Network CLO, миграцией CE???

В ближайшие дни напишу заявление и обрисую ситуацию. На данный момент самое важное — получить отзывы от Gate.io и HitBTC.

if successful, there will be a new wallet holding the trezor devices ?

Dexaran commented 5 months ago

if successful, there will be a new wallet holding the trezor devices ?

I don't think we will push the update of the wallet in the next months. There is a lot of uncertainty in regards of Callisto Enterprise org and their participation in the network development.

I would rather recommend using existing wallets that can support adding a custom network.

Stanislav144 commented 4 months ago

if successful, there will be a new wallet holding the trezor devices ?

I don't think we will push the update of the wallet in the next months. There is a lot of uncertainty in regards of Callisto Enterprise org and their participation in the network development.

I would rather recommend using existing wallets that can support adding a custom network.

Tell me which wallets support the address range : Callisto list for selecting the path to obtain HD m/44'/820'/0'/0 ???

theRomanMercury commented 4 months ago

There is an address and was actively adding LP to the farm. Can you refund?

0xD482cC8EF3F65154f9E93ac1c08ec9b0c82Ef2C1

Thnx.

blssmth commented 4 months ago

Here is another address for refund (not much on it, so not a big deal) :) 0xA13EFAD58Ac9F32bc71B00a4BB14fD97E5d19677 Thanks.

Dexaran commented 4 months ago

0xD482cC8EF3F65154f9E93ac1c08ec9b0c82Ef2C1

This address is refunded https://explorer.callisto.network/tx/0x9dfb76194992c29de096db2cbd00096bb92fcd26231c75cd8f10ddea69b0efba

Dexaran commented 4 months ago

Here is another address for refund (not much on it, so not a big deal) :) 0xA13EFAD58Ac9F32bc71B00a4BB14fD97E5d19677 Thanks.

This address also got a refund https://explorer.callisto.network/tx/0x27692252ce29a2872cbf0dcd80a87e8375fe5a273b03721489806d0b257d68be

Dexaran commented 4 months ago

Currently only CLO part is refunded for everyone. We will proceed to refund the opposite side of the liquidity (held in SOY) shortly.

Rodi1981 commented 4 months ago

Can you check my address? When will I get my refund? 0x036528D1372fA01c208a5b0AEca5803fF2B0Bc15

Dexaran commented 4 months ago

SOY LP refunds are completed.

Here is a list of transactions (basically we delivered the amount of CLO held in LPs at block 14186359 twice as it represents the amount of funds held in liquidity in CLO equivalent): clo_payments.csv

Our investigation showed that additional profit was extracted by the arbitrage bots operating with this addresses:

None of the above addresses held any liquidity at block 14186359 in SOY pools.

There was a discussion between me and Callisto Enterprise regarding the market value of SOY token. It should be noted that the market value of an asset is a derivative of investors' expectations regarding the future of this asset. As the result the damage that was done by disclosing the bankruptcy of Callisto Enteprirse is inseparatable from the price drop caused by the SOY sell off and it's Callisto Enterprise's responsibility to restore their reputation and solve their financial problems in order to restore the market value of their token.

We suggest Callisto Enterprise to take a snapshot of SOY balances at block 14186359 and re-implement a new token based on the balances of users who held SOY before the price crash. It is worth to separate SOY balances of the users from the SOY held by Callisto Enterprise so we are providing the necessary information below.

Here is a script that calculates the amount of SOY tokens that were bought via SOY DEX and holders addresses: https://github.com/Exzender/soy_hold_find

Here is a spreadsheet containing SOY holders addresses (SOY purchased via SOY DEX): https://github.com/Exzender/soy_hold_find/blob/master/out/soy_buyer_2nd_lvl.csv

Alternatively, since Callisto Enterprise holds the SOY IDO fund, the main purpose of which is to compensate for any losses incurred by users of the Soy Finance exchange, we recommend using these funds to compensate for any damage they believe has been caused.

The amount of SOY held by users amounts in approximately 27M CLO. I would be in favor of finalizing the community Treasury CLOIP https://github.com/EthereumCommonwealth/CLOIP/issues/10 and moving the Treasury funds to the community Treasury where the community would decide what to fund or how to use the funds. If the community disagrees with any decisions taken by myself or Callisto Enterprise they can deploy the Treasury share of Callisto Enterprise to act as the community deems necessary.

bize32 commented 2 months ago

Treasury accident & SOY Finance

As the result of an unauthorized Treasury withdrawal incident (#7) Callisto Enterprise released the statement: https://twitter.com/CLOEnterprise/status/1760258166955049092

In this statement Callisto Enterprise resigns from any rights to Callisto Network Treasury and agrees to send back the previously withdrawn funds. They also allocated 50M CLO to refund any party who may be underpaid during the refund process.

I suggested them to send the funds back to the Treasury account: https://twitter.com/Dexaran/status/1760388149304295861

Callisto Security (controlled by the same Callisto Enterprise employees) replied that "Using a compromised wallet is not secure. If you knew anything about security, you wouldn't even suggest it."

https://twitter.com/CallistoAudits/status/1760623110766711230

It is unclear what Callisto Enterprise means with their statement, so I have to explain Callisto Security employees that there is a clear difference between a "misused wallet" and a "compromised wallet" and the Treasury address was definitely misused by them (they attempted to withdraw all the funds without negotiating it with other key holders) but its keys were not compromised. Keys were belonging to persons they were given to, the problem was that these persons used the keys in a wrong way. Unless Callisto Enterprise compromised the keys on their end by exposing them to some third parties - the Treasury keys are not compromised and judging by the fact that after their withdrawal there were no outgoing transfers from Treasury address no third parties gained access to the keys, otherwise the rest of the funds would have been withdrawn as well.

While we are awaiting for the funds to be delivered to a new address that I have given Callisto Enterprise we can start gathering data for a refunding process.

SOY Refunds

If you were involved in the accident and you were an active liquidity provider on SOY.Finance exchange in a CLO-SOY pair on block 14186359 February-16-2024 11:39:15 AM +-6 UTC (https://explorer.callisto.network/block/14186359/transactions) please provide us with your address and a transaction that provided liquidity to the CLO-SOY pair.

This measure is only needed to gather the data to speed up the process. Everyone will get a refund no matter if they will provide their transactions data in this thread or not, but the ones whose data will be provided will get refunded first.

Would love to take my funds away from this project

bize32 commented 2 months ago

You seriously injured this project. People like you have no right to do what you did. Refunds us plus losses