It looks like it's an "upgradable contact" that means the admin can do whatever they want with funds you send there. No exploit or hack needed to lose your fund

It looks like it's an "upgradable contact" that means the admin can do whatever they want with funds you send there. No exploit or hack needed to lose your funds. Really I'd say that project just isn't DeFI, but an on chain hedge fund. DeFI is usually non custodial meaning that the creator doesn't have the ability to touch your funds.