The launch contract has been replaced

What to do

Open Portfolio, and if any coin there is marked “retired contract”, sell it or claim your share when it suits you — your money is not stuck, but the retired contract still has the fault described below and it cannot be switched off.

Your money

Every token and every SYS you hold is exactly where it was. Nothing was moved, nothing was paused, and no balance changed. Selling, claiming a mass-start share, finishing a settled coin and withdrawing creator fees all keep working at the retired contract — indefinitely, with no end date. We are not able to switch that contract off even if we wanted to: it has no off switch, and saying otherwise would be a claim the chain would contradict. What has moved to the new contract is creating a coin and buying one. Everything that takes money OUT stays where it is.

Addresses

• Launch contract (current)current0x9CCb64383778C8e24Ff613DE271B3b81d5A04e3c
• Launch contract (retired)retired0xF782Da149af19a5908a8D7312E5612b4cB943D35

The retired contract is not switched off and cannot be. Selling, claiming a mass-start share, finishing a settled coin and withdrawing creator fees all keep working there, indefinitely. Only creating and buying have been moved.

What the bug was

After a mass-start auction closed, the contract paid for tokens in two different ways depending on which direction you were going. Selling a token that was inside the auction’s range refunded it at the auction’s average price, while buying that same token charged the higher step price from the ladder. Once enough had been sold back, those two prices crossed: anyone could buy cheaply and immediately sell dearer, over and over, risking nothing. The profit was not created out of nothing — it came out of the SYS belonging to the people still holding from that auction. Measured on a test chain: ten such loops earned an attacker 0.0463 SYS, and the last remaining holder got back 0.1310 SYS of the 0.1815 SYS they had put in — a loss of about 28 per cent. Nobody needed special access to do it, and somebody could set up the conditions themselves by committing heavily in an auction and selling their own allocation back. The fault was found by a pre-audit of the code, not by anyone losing money on this site, and we have no evidence it was used. It was reachable by anyone who looked, which is why this notice exists.

What changed, and what did not

In the new contract, buying and selling inside an auction’s range use the same price, so the two can no longer cross and the loop pays nothing. The new contract also has a one-way switch that lets creations be stopped if something like this is ever found again — the retired one has no such switch, which is exactly why it stays open. Thirty-three other findings from the same assessment are fixed in the new contract, two of them rated High. What did NOT change: your balances, the fees, how the ladder is priced step by step, the graduation rules, and the rule that money can always be taken out.

How to check this

Content hash
sha256:ed6b4fb084a93f811906f89b93a2510fbfc4ea045a83a0604f906c751df771b1

Signed by
0x13cc8c3c474c0c4352c2CFE0a15951cC9785D357

Signature
0x79dcfaa26910d59d70a6d64dd69fb60852a9efc58864dff4133b0894ba01ba0d450891b6e1457bbfaa27fc643ad361f98edc5e18b4023789a5570978a525ef601b

The signed message is the content hash above, exactly as shown and nothing else. Recover it with any wallet or library that verifies a personal_sign signature: it must return the address under Signed by. If it returns a different address, this notice was not written by whoever deployed these contracts.

Recorded on-chain
0x5f6b5a6350732243320c8c987b7a99a4edb2742935f31f706bdde6fec52fa877
A zero-value transaction from the signing address to itself, carrying this page’s URL and the hash above as its data. It transfers nothing and calls nothing — what it establishes is the time, which nobody can move afterwards.