Olden Era
High Risk
Ten citadels. One legion. Every die on the server.
1 Issues Detected
1
Backdoor Functions
For the AfriPrime VaultFactory contract, whose address is 0xba65b620b1bcc6c0708b95c0830103358d876b09 on the BSC chain, the operator can move USDT out of a vault to eliazarReceiveWallet / oracleReceiveWallet via pullCapital / pullCapitalOracle, and under-repay principal by reporting losses through returnCapitalWithLoss / returnCapitalWithLossOracle; superAdmin can also rotate operators, fund-flow wallets, and profit-split logic at any time via setOperator, setEliazarWallets, setOracleWallets, setSplitManager, etc. User fund safety therefore depends on trust in these privileged callers.
Summary
High Risk
Audit
DappBay Red Alarm
List Time
Aug, 05, 2026
Chain
BNB Smart Chain