Azoundria: Created page with "{{Imported Case Study With About|source=https://www.quadrigainitiative.com/casestudy/gemholicecosystemrugpull.php}} {{Unattributed Sources}} Gemholic Logo/Homepage/TwitterGemholic raised 921 ETH worth of funds to create a new blockchain ecosystem. Those funds were then locked due to an issue with their smart contract deployed on zkSync. This took over a year to resolve via an update to the zkSync algorithm. Once it was complete, the Gemholic..."

2024-09-18T19:39:48Z

Created page with "{{Imported Case Study With About|source=https://www.quadrigainitiative.com/casestudy/gemholicecosystemrugpull.php}} {{Unattributed Sources}} thumb|Gemholic Logo/Homepage/TwitterGemholic raised 921 ETH worth of funds to create a new blockchain ecosystem. Those funds were then locked due to an issue with their smart contract deployed on zkSync. This took over a year to resolve via an update to the zkSync algorithm. Once it was complete, the Gemholic..."

New page

{{Imported Case Study With About|source=https://www.quadrigainitiative.com/casestudy/gemholicecosystemrugpull.php}}
{{Unattributed Sources}}

[[File:Gemholic.jpg|thumb|Gemholic Logo/Homepage/Twitter]]Gemholic raised 921 ETH worth of funds to create a new blockchain ecosystem. Those funds were then locked due to an issue with their smart contract deployed on zkSync. This took over a year to resolve via an update to the zkSync algorithm. Once it was complete, the Gemholic team nearly immediately withdrew the funds, and started transferring them through TornadoCash. It seems very certain that both founders will be brought to justice given the low anonymity set of TornadoCash, and that they subsequently used centralized exchanges following that point.<ref name="slowmisthackedarchive-14322" /><ref name="0xaasciencetwitter-14343" /><ref name="cprinzetwitter-14344" /><ref name="echoewebtwitter-14345" /><ref name="anderbnbtwitter-14346" /><ref name="etherscan-14347" /><ref name="etherscan-14348" /><ref name="0xzodiaccallertwitter-14349" /><ref name="gemholicworldarchive-14350" /><ref name="smallpdf-14351" /><ref name="gemholicecotwitter-14352" /><ref name="cryptorank-14353" /><ref name="coingecko-14354" /><ref name="bee-14355" /><ref name="coinmarketcap-14356" /><ref name="solidproofiotwitter-14357" /><ref name="solidproofiomedium-14358" /><ref name="zksyncexplorer-14359" /><ref name="solidproofgithub-14360" /><ref name="stakingrewards-14361" /><ref name="decripto-14362" /><ref name="binance-14363" />

== About zkSync ==
"zkSync is a Layer-2 scaling solution developed by Matter Labs, aimed at reducing costs, speeding up transactions, and providing security on Ethereum using ZK Rollups technology."
== About Gemholic ==
"Gemholic Ecosystem consists of product features and mechanisms that support each other while creating new benefits for all parties involved in the ecosystem. Gemholic Ecosystem provides GemLaunchpad, GemStaking, Gem Yield Farming, Gem Mining (Play-to-Earn feature), and Gem Cash (Tonardo Cash) for the entire CoreDAO Chain."

"The Gemholic Ecosystem uses 8-bit images as its main visual theme. With such a theme and visuals, we will attract many users as well as investors, as it is quite similar to old-school games with 8-bit graphics that make us feel like we're going back to our youth. It will feel like embarking on an adventure to search for treasure and mine resources."

== The Reality ==
This sections is included if a case involved deception or information that was unknown at the time. Examples include:

* When the service was actually started (if different than the "official story").
* Who actually ran a service and their own personal history.
* How the service was structured behind the scenes. (For example, there was no "trading bot".)
* Details of what audits reported and how vulnerabilities were missed during auditing.

== What Happened ==
"Users who participated in Gemholics fundraising thought they had waited for the day of repayment, but unexpectedly witnessed another runaway project on ZKsync." "On June 7, zkSync(@zksync) completed its v24 upgrade, which fixed the issue and allowed the locked funds to be accessed. Following the upgrade, the Gemholic project withdrew 921 Ether from the contract and transferred it to the Ethereum blockchain. Gemholic’s X account and all Telegram messages had also been deleted at the time of publication."
{| class="wikitable"
|+Key Event Timeline - Gemholic Ecosystem Rug Pull
!Date
!Event
!Description
|-
|March 8th, 2023
|KYC Verification Complete
|The Gemholic project passes the KYC verification process with SolidProof.
|-
|March 13th, 2023
|Smart Contract Audit Complete
|The Gemholic project completes a smart contract audit via SolidProof. This identifies only minor issues and no critical vulnerabilities.
|-
|March 29th, 2023 11:54:11 PM MDT
|Binance Funding Transaction
|A transaction funds 0.0988 ETH from Binance, which is ultimately used to fund the layer 2 zkSync protocol used to launch Gemholic.
|-
|December 5th, 2023 2:48:50 PM MST
|Last Online Capture
|The last capture of the gemholic website via the internet archive.
|-
|June 7th, 2024 4:30:00 AM MDT
|Rug Pull Transaction
|The time of the specific transaction which is moving invested funds on the ZKSync layer 2 protocol.
|-
|June 7th, 2024 7:55:00 AM MDT
|Funded From Binance
|Twitter user anderbnb reveals that the Gemholic address was originally funded by Binance and asks various community users for help.
|-
|June 8th, 2024 12:52:00 AM MDT
|Tweet Reporting Situation
|A Tweet is made which reports on the rug pull (in Chinese).
|-
|June 8th, 2024 1:14:00 PM MDT
|Summary Tweet Posted
|A summary tweet is posted by Twitter user Echoeweb.
|-
|June 8th, 2024 3:31:00 PM MDT
|Inclusion In List
|The incident is included in a summary of crypto events happening today by @Cprinze_.
|-
|June 10th, 2024 4:54:00 AM MDT
|SolidProof Official Report
|SolidProof posts an official incident report about the Gemholic situation.
|-
|June 13th, 2024 10:49:00 PM MDT
|Supposed Personal Information
|The supposed personal information of the CEO of the Gemholic project is posted, including an address in Vietnam.
|}

== Technical Details ==
"The zkSync project Gemholic had its funds locked for over a year because of a mistake in the sales contract. Matter Labs, the team behind Ethereum layer-2 scaling solution #zkSync, identified the issue as stemming from the .transfer() function in the GemstoneIDO smart contract, which is part of a project run by the GemholicECO ecosystem."

"Gemholic was also quick to make a commitment, writing on its official Twitter account, “We understand that many people have lost confidence, but we still believe that the ZKsync team can get things done. We need everyone to trust us. Once the agreement is finalized, we will launch marketing activities and project pre-release. We will also refund excess payments.”"

"The team behind ZkSync, @the_matter_labs rescue[d] the @GemholicECO after a botched token sale, allowing them to retrieve 921 $ETH ($1.7M) raised."

""Last year, Gemholic raised 921 ETH on ZKsync. However, due to the technical differences between ZKsyncs Era network and the Ethereum mainnet at the time, Gemholics fundraising method when it was launched on ZKsync was to directly copy the Ethereum contract code. Due to the lack of sufficient testing of the ZKsync architecture differences, the transfer() function in the Gemholic contract generated fees exceeding the gas limit on ZKsync, resulting in passive lock-up of the raised funds.

Eden Au, director of research at The Block, noticed the issue and tweeted, “A project on ZKsync raised 921 ETH ($1.7 million) in a token sale, but the funds are forever trapped in a smart contract. The Transfer() function works on Ethereum and other EVM chains, but not on ZKsync.”"

"The smart contracts were deployed on zkSync without any prior checks. However, the developers from ConsenSys warned about using the Solidity transfer function in 2019. This function uses a fixed amount of hard-coded gas, which makes them fail because the transfers currently use more.

zkSync also warns about this limitation and its impact on smart contracts. Furthermore, the team examined the source code of “dozens of popular crypto projects”, finding all of them compliant with the new dynamic system."

"More than a year later, the value of the 921 ETH raised by Gemholic has tripled to more than three million US dollars. On June 7, ZKsync started the mainnet upgrade. In the v24 version, ZKsync added a function that allows the transfer() function to be called normally when gas is not specified to improve compatibility with Ethereum."

== Total Amount Lost ==
The total amount lost has been estimated at $3,400,000 USD.

How much was lost and how was it calculated? If there are conflicting reports, which are accurate and where does the discrepancy lie?

== Immediate Reactions ==
"The project gemholic on zkSync has run away, and its Twitter and Telegram accounts have been deleted. A total of 921 ETH of user assets, about 350w u, were stolen."

"Gemholic, a crypto project, is accused of a rug pull after moving $3.5M in recently recovered funds and vanishing from social media."

"The community discovered that Gemholic withdrew 921 ETH from the project contract the day after the V2 upgrade and bridged to the Ethereum mainnet. Subsequently, screenshots circulated in the community showed that Solomon, the founder of Gemholic, deleted all TG group messages, and the Gemholic official Twitter account was also deleted. It is obvious that the project party ran away with the money after unwinding."

"Community members are currently trying to trace the Gemholic contract creator’s address, which is supposedly funded by Binance.

The cryptocurrency community is concerned following a suspected rug-pull incident involving the Gemholic project and the zkSync network.

Several users affected by the alleged Gemholic scam have taken to X to raise awareness. NSerec, the founder of Zkmarkets, confirmed that Gemholic stole $3.5 million.

In the X post, NSerec(@NSerec) claimed that Gemholic had deceived its investors for a year by falsely promising refunds. Once the funds were finally unlocked, the team executed what appeared to be a rug pull. NSerec revealed that the address of the contract creator was supposedly funded by Binance and asked community members who have insights on how Binance might assist in reaching out to them.

KYC provider silence
Despite completing Know Your Customer (KYC) verification with SolidProof, the verification service has not publicly addressed the situation. NSerec believes that the silence is possibly an effort to prevent fear, uncertainty and doubt (FUD) from spreading among the investors."

"According to NSerec, a #KYC provider must either admit that they didn’t do a good job checking the people involved, or they should report the fraudsters to the authorities and tell the public what happened. If SolidProof keeps ignoring this problem, their service shouldn’t be trusted.

The Zkmarkets(@zkmarkets) founder said that if SolidProof doesn’t deal with the Gemholic scam, the people affected should hold SolidProof responsible. He even suggested that if they don’t take action, people should start calling them “UselessProof” instead of “SolidProof.”"

== Ultimate Outcome ==
SolidProof has "provided all necessary information to the official cybersecurity authorities in Vietnam and have requested direct contact with the Vietnam Blockchain Association. Additionally, [they] are open to collaborating with Binance and other relevant entities to trace the withdrawn funds and hold the responsible parties accountable."

"The Gemholic team employs various mixing techniques that make a portion of the funds difficult to trace, except through extensive forensic investigations. However, our analysis has traced nearly $800,000 ending up in a centralized exchange and demonstrated the dwindling effectiveness of Tornado Cash as a mixer. In fact, we observe that a significant portion of the funds was initially laundered through the protocol sanctioned by OFAC, but the money flow then led us to cross-chain bridges and to the newcomer in the galaxy of privacy protocols: RailGun, now widely used by scammers worldwide."

== Total Amount Recovered ==
The total amount recovered is unknown.

What funds were recovered? What funds were reimbursed for those affected users?

== Ongoing Developments ==
Funds are likely to be traced and recovered.
== Individual Prevention Policies ==
{{Prevention:Individuals:Placeholder}}

{{Prevention:Individuals:End}}

== Platform Prevention Policies ==
{{Prevention:Platforms:Placeholder}}

{{Prevention:Platforms:End}}

== Regulatory Prevention Policies ==
{{Prevention:Regulators:Placeholder}}

{{Prevention:Regulators:End}}

== References ==
<references><ref name="slowmisthackedarchive-14322">[https://web.archive.org/web/20240610222253/https://hacked.slowmist.io/ SlowMist Hacked - SlowMist Zone] (Accessed Jun 18, 2024)</ref>

<ref name="0xaasciencetwitter-14343">[https://twitter.com/0xAA_Science/status/1799333616767635514 @0xAA_Science Twitter] (Accessed Jun 19, 2024)</ref>

<ref name="cprinzetwitter-14344">[https://twitter.com/Cprinze_/status/1799554981554512055 @Cprinze_ Twitter] (Accessed Jun 19, 2024)</ref>

<ref name="echoewebtwitter-14345">[https://twitter.com/Echoeweb/status/1799520300960301362 @Echoeweb Twitter] (Accessed Jun 19, 2024)</ref>

<ref name="anderbnbtwitter-14346">[https://twitter.com/anderbnb/status/1799077613207703643 @anderbnb Twitter] (Accessed Jun 19, 2024)</ref>

<ref name="etherscan-14347">[https://etherscan.io/address/0x3c67ae2a58c43e220c15159733022225b773eedc Address 0x3c67ae2a58c43e220c15159733022225b773eedc | Etherscan] (Accessed Jun 19, 2024)</ref>

<ref name="etherscan-14348">[https://etherscan.io/tx/0x8349afa5daa8c7cee10bb2df9752d4edb894258f047ea8be010e571f5e716645 Ethereum Transaction Hash (Txhash) Details | Etherscan] (Accessed Jun 19, 2024)</ref>

<ref name="0xzodiaccallertwitter-14349">[https://twitter.com/0xZodiacCaller/status/1801476946523779085 @0xZodiacCaller Twitter] (Accessed Jun 19, 2024)</ref>

<ref name="gemholicworldarchive-14350">[https://web.archive.org/web/20231205214850/http://gemholic.world/ GemHolic Ecosystem] (Accessed Jun 19, 2024)</ref>

<ref name="smallpdf-14351">[https://smallpdf.com/vi/file#s=b86436a2-7e74-446d-9a6f-9ed3fe2f2c3d Smallpdf.com] (Accessed Jun 19, 2024)</ref>

<ref name="gemholicecotwitter-14352">[https://twitter.com/GemholicECO/status/1644164420954906624 @GemholicECO Twitter] (Accessed Jun 19, 2024)</ref>

<ref name="cryptorank-14353">[https://cryptorank.io/news/feed/5442a-181765-zksync-era-landing-massive-scam-projects zkSync Era: The Landing Of Massive Scam Projects] (Accessed Jun 19, 2024)</ref>

<ref name="coingecko-14354">[https://www.coingecko.com/en/coins/gemholic https://www.coingecko.com/en/coins/gemholic] (Accessed Jun 19, 2024)</ref>

<ref name="bee-14355">[https://www.bee.com/es/12393.html https://www.bee.com/es/12393.html] (Accessed Jun 19, 2024)</ref>

<ref name="coinmarketcap-14356">[https://coinmarketcap.com/community/articles/64315884854d003676186aba/ zkSync and its Efforts to Recover 921 ETH: The How and Why of it All: Guest Post by ItsBitcoinWorld | CoinMarketCap] (Accessed Jun 19, 2024)</ref>

<ref name="solidproofiotwitter-14357">[https://twitter.com/SolidProof_io/status/1800119385928982665 @SolidProof_io Twitter] (Accessed Jun 19, 2024)</ref>

<ref name="solidproofiomedium-14358">[https://solidproof-io.medium.com/incident-report-on-gemholic-ecosystem-d2160985d054 Incident: Report on Gemholic Ecosystem | by Solidproof.io | Jun, 2024 | Medium] (Accessed Jun 19, 2024)</ref>

<ref name="zksyncexplorer-14359">[https://explorer.zksync.io/tx/0x1b912aa113ef7ef10554ef382ba7490e949c149726874d2932e655b1edda7e78 zkSync Era Block Explorer] (Accessed Jun 19, 2024)</ref>

<ref name="solidproofgithub-14360">[https://github.com/solidproof/projects/blob/main/GemHolic/SmartContract_Audit_Solidproof_Gemholic.pdf projects/GemHolic/SmartContract_Audit_Solidproof_Gemholic.pdf at main · solidproof/projects · GitHub] (Accessed Jun 19, 2024)</ref>

<ref name="stakingrewards-14361">[https://www.stakingrewards.com/asset/gemholic Gemholic (GEMS) Staking Rewards Calculator] (Accessed Jun 19, 2024)</ref>

<ref name="decripto-14362">[https://decripto.org/en/gemholic-rug-pull-on-chain-analysis-reveals-where-the-funds-went-exclusive/ https://decripto.org/en/gemholic-rug-pull-on-chain-analysis-reveals-where-the-funds-went-exclusive/] (Accessed Jun 19, 2024)</ref>

<ref name="binance-14363">[https://www.binance.com/en-NZ/square/post/2024-06-07-suspicions-arise-over-gemholic-s-financial-activities-within-zksync-ecosystem-9157750152434 https://www.binance.com/en-NZ/square/post/2024-06-07-suspicions-arise-over-gemholic-s-financial-activities-within-zksync-ecosystem-9157750152434] (Accessed Jun 19, 2024)</ref></references>

Gemholic Ecosystem Rug Pull - Revision history