goStables - Decentralized Stablecoins for the Caribbean

Successfully validated on MagicSquare. Thanks for the support!

3 Likes

Congratulations team

Les felicito, es una buena noticia

Hey all,
Important Advisory.

For transparency, this is to inform everyone that the private key of our Protocols’ main deployer was recently discovered to be compromised. As a result we no longer have access/control over the contracts deployed. The permissions on the account was switched to an unknown inactive address:

As there were no early users of the protocols on mainnet - for both goStables and Sorrel (beside myself) fortunately, no external users were affected by this incident.

We have since made some of our Github repositories private for now, as we want to ensure that our UI isn’t used with ill intent.

The next steps are to be decided whether we redeploy everything under a new multisig based account, renouncing ownership of key contracts upon redeployment or consider this project to be at its end.

This message report was submitted to Tronscan:

The private key for our project address TCiJCtTBhGSw8mMYYts67vCXUjdoFLLuYw has been compromised. On June 23rd I discovered (after a failed transfer attempt) an address TTirJPviQxVmEzPJG3yM84NnAGxeJSx4rU took over the permissions of our projects’ deployer account. Upon checking further it was found that the transaction to change permissions took place on the 20th and was switched to this inactivated account. I no longer have access to the account, its tokens/funds and deployed contracts. Apologies for posting a screen from tronscan as you’ve mentioned not to, but this is the only proof I have of and its a mandatory field to submit.

1 Like

Te agradezco tu transparencia en la información, espero lo puedas solucionar de la mejor manera es un gran proyecto.

1 Like

Upon further investigation I determined that this was a case of human error on my part and also a hard lesson learned. While working on the new Sorrel Wallet within this past week, a private key was accidentally pushed to a then public repo on Github. This resulted in the incident.

I understand this diminishes trust and confidence in what we’ve been building. We can discontinue our work based on this or we can keep building forward with more stringent checks and practices in place…

2 Likes

Siento que haya ocurrido este percance, tu eres el que decide si continuar o dejarlo, es tu decisión, por mi parte sigo diciendo que es un buen proyecto con gran trayectoria.

1 Like

After the incident in my last post, I took a break from the code to chill, clear my mind and explore next steps. Will provide further updates on redeployment soon. Thanks for the support! :vulcan_salute:

1 Like

Esperamos tus actualizaciones sobre el tema, gracias.

Alright, I hope things are getting better

Hey all,

goStables Protocol has been redeployed to mainnet. Only 2 gStables are live for now - gTTD and gXCD.

Official contract addresses are here:

Thanks for the support!
Progress step by step.

1 Like