Bitcoin Forum
May 17, 2024, 12:23:42 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: Renounced Contract Is a Trap  (Read 100 times)
KiranKBS (OP)
Newbie
*
Offline Offline

Activity: 29
Merit: 1


View Profile
July 30, 2023, 06:45:32 AM
Last edit: August 03, 2023, 06:40:52 AM by KiranKBS
 #1

Renounced is just a stupid buzz word! Never fall into trap by just hearing this.

Deployer can still run functions and do scam. For example, you often come across function `manualSwap`. All they need is external function without onlyOwner scope Lol!

Either take help of contract analyzers or any developers can read the contract out for you!

This is latest trend scammers are following! Have Safe Trading!

Edit:
Sorry for not being comprehensive as you all pointed out in comments. So in a nutshell, contracts can have functions like below and can run such functions to rug pull even after Renounced.

function manualSend() external {
        require(_msgSender() == _taxWallet);
        sendETHToFee(address(this).balance);
    }
    function manualSendToken() external {
        require(_msgSender() == _taxWallet);
        IERC20(address(this)).transfer(msg.sender, balanceOf(address(this)));
    }


Above function converts tokens available in the contract to eth and send eth to deployer wallet. These days contracts are releasing approx 25% in it or 10% in contract. These functions allow us to pull plug softly in different way

Functions no need to be like above, it can be literally with any name.
Hence, Renounce is just buzz word and should be careful!
KiranKBS (OP)
Newbie
*
Offline Offline

Activity: 29
Merit: 1


View Profile
July 31, 2023, 08:18:02 PM
 #2

I believe this is very useful insight so just replying but not to inflate topic!
vv181
Legendary
*
Offline Offline

Activity: 1932
Merit: 1273


View Profile
August 01, 2023, 03:59:10 PM
 #3

Can you give examples of such contracts?

As far as I know, renouncing the contract ownership is mainly done to make the community trust the dev could not toy around with the project. The issue you raises is something new for me. Executing a swap function without `owner` control seems theoretically possible. So if you could share some examples, it would be good.

After all, there is no short amount of scam methods involving a smart contract, a programmable contract, which some layman surely does not comprehend what it actually does or the possibility of the scheme. So it is essential to refrain from gambling around with some obscure and unknown token.
Cryptoababe
Member
**
Offline Offline

Activity: 711
Merit: 18

Do it For Better Humanity


View Profile
August 01, 2023, 08:38:10 PM
 #4

Can you give examples of such contracts?

As far as I know, renouncing the contract ownership is mainly done to make the community trust the dev could not toy around with the project. The issue you raises is something new for me. Executing a swap function without `owner` control seems theoretically possible. So if you could share some examples, it would be good.


Do you know that some newbies didn't know that dev can still remove liquidity after contract has been renounced?
Have seen a lot like this. Contract is renounced, then people start buying, then dev remove liquidity.
nelson4lov
Hero Member
*****
Offline Offline

Activity: 2086
Merit: 793


Top Crypto Casino


View Profile
August 01, 2023, 10:49:54 PM
 #5

Shitcoin devs constantly looking for new ways to get away with protocol funding. These days I don't blindly trust smart contracts until I have thoroughly gone through the contract code especially if it has been verified in an explorer.

After all, there is no short amount of scam methods involving a smart contract, a programmable contract, which some layman surely does not comprehend what it actually does or the possibility of the scheme. So it is essential to refrain from gambling around with some obscure and unknown token.

Malicious devs like that often take advantage of the fact that most users don't know the technical details about how most of the smart contract functions work. So they use it to their advantage. Access control vulnerabilities are some of the most common I've seen. If I come across any of such contracts in the future, I'd be sure to share them.

█████████████████████████
████▐██▄█████████████████
████▐██████▄▄▄███████████
████▐████▄█████▄▄████████
████▐█████▀▀▀▀▀███▄██████
████▐███▀████████████████
████▐█████████▄█████▌████
████▐██▌█████▀██████▌████
████▐██████████▀████▌████
█████▀███▄█████▄███▀█████
███████▀█████████▀███████
██████████▀███▀██████████
█████████████████████████
.
BC.GAME
▄▄░░░▄▀▀▄████████
▄▄▄
██████████████
█████░░▄▄▄▄████████
▄▄▄▄▄▄▄▄▄██▄██████▄▄▄▄████
▄███▄█▄▄██████████▄████▄████
███████████████████████████▀███
▀████▄██▄██▄░░░░▄████████████
▀▀▀█████▄▄▄███████████▀██
███████████████████▀██
███████████████████▄██
▄███████████████████▄██
█████████████████████▀██
██████████████████████▄
.
..CASINO....SPORTS....RACING..
█░░░░░░█░░░░░░█
▀███▀░░▀███▀░░▀███▀
▀░▀░░░░▀░▀░░░░▀░▀
░░░░░░░░░░░░
▀██████████
░░░░░███░░░░
░░█░░░███▄█░░░
░░██▌░░███░▀░░██▌
░█░██░░███░░░█░██
░█▀▀▀█▌░███░░█▀▀▀█▌
▄█▄░░░██▄███▄█▄░░▄██▄
▄███▄
░░░░▀██▄▀


▄▄████▄▄
▄███▀▀███▄
██████████
▀███▄░▄██▀
▄▄████▄▄░▀█▀▄██▀▄▄████▄▄
▄███▀▀▀████▄▄██▀▄███▀▀███▄
███████▄▄▀▀████▄▄▀▀███████
▀███▄▄███▀░░░▀▀████▄▄▄███▀
▀▀████▀▀████████▀▀████▀▀
Wahyuihib
Member
**
Offline Offline

Activity: 609
Merit: 10

Rexx


View Profile
August 01, 2023, 11:09:06 PM
 #6

I don't understand what you're trying to explain... or maybe my understanding isn't quite right.  maybe it's better if you want to explain something, also include examples and so on.  so that we as readers do not guess what you mean

]     ►   BUY REXX   ◄          ───────────
PRESENTS A WIDE ARRAY OF DECENTRALIZED SOLUTIONS ACROSS VARIOUS SECTORS[/url]
●   FACEBOOK   ●   TELEGRAM   ●   TWITTER   ●[/center]
kamvreto
Legendary
*
Offline Offline

Activity: 1960
Merit: 1157


View Profile
August 01, 2023, 11:19:25 PM
 #7

What are you talking about like trapping new DAaps connecting and exploiting those connected addresses?
I also don't understand what your real purpose is for creating this thread, but as far as I understand there are many users who have been stuck with fake Daaps that will exploit the connected swallow and the thing to do is to revoke it so the connection is disconnected.
vv181
Legendary
*
Offline Offline

Activity: 1932
Merit: 1273


View Profile
August 02, 2023, 11:15:09 AM
 #8

Can you give examples of such contracts?

As far as I know, renouncing the contract ownership is mainly done to make the community trust the dev could not toy around with the project. The issue you raises is something new for me. Executing a swap function without `owner` control seems theoretically possible. So if you could share some examples, it would be good.


Do you know that some newbies didn't know that dev can still remove liquidity after contract has been renounced?
Have seen a lot like this. Contract is renounced, then people start buying, then dev remove liquidity.
Obviously. Newbie won't bother or at the very least did not comprehend the technical stuff. But I don't whether what issue raised by OP, which is manualSwap function, is related to liquidity functionality as in your case.



Shitcoin devs constantly looking for new ways to get away with protocol funding. These days I don't blindly trust smart contracts until I have thoroughly gone through the contract code especially if it has been verified in an explorer.

After all, there is no short amount of scam methods involving a smart contract, a programmable contract, which some layman surely does not comprehend what it actually does or the possibility of the scheme. So it is essential to refrain from gambling around with some obscure and unknown token.

Malicious devs like that often take advantage of the fact that most users don't know the technical details about how most of the smart contract functions work. So they use it to their advantage. Access control vulnerabilities are some of the most common I've seen. If I come across any of such contracts in the future, I'd be sure to share them.

Besides the users did not understand the technical detail, mostly they also did not aware of the possibility of the technical capability, which is my main point. So surely it is blissful for the scammer to make a handy improvement to their scamming scheme technique. Since it is programmable, I'm sure it will keep evolving by maximising the flexibility of the contract function and any idea of improvement technique.
KiranKBS (OP)
Newbie
*
Offline Offline

Activity: 29
Merit: 1


View Profile
August 03, 2023, 06:14:12 AM
 #9

Can you give examples of such contracts?

So if you could share some examples, it would be good.

Sorry sir for not being comprehensive! I updated post by including example.
KiranKBS (OP)
Newbie
*
Offline Offline

Activity: 29
Merit: 1


View Profile
August 03, 2023, 06:43:02 AM
 #10

Can you give examples of such contracts?

As far as I know, renouncing the contract ownership is mainly done to make the community trust the dev could not toy around with the project. The issue you raises is something new for me. Executing a swap function without `owner` control seems theoretically possible. So if you could share some examples, it would be good.


Do you know that some newbies didn't know that dev can still remove liquidity after contract has been renounced?
Have seen a lot like this. Contract is renounced, then people start buying, then dev remove liquidity.

Yes! Renounced != LP Burnt/Locked even after that Deployer can dump either reserved tokens from his wallet or tokens kept in Contract using the function i was referring in the post.
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!