Token

<p class="is-style-lead">Blockchain security firm SlowMist says malicious actors have already exploited the vulnerability in the LDO Token contract on several cryptocurrency exchanges.</p> 
<p>A blockchain security firm, SlowMist, took to X (formerly Twitter) to warn users about a “known operational issue” in the LDO Token contract, saying the vulnerability has already been exploited on trading platforms without naming them.</p> 
<p>In an X <a href="https://twitter.com/SlowMist_Team/status/1700782725593268448?s=20" target="_blank" rel="noreferrer noopener">post</a> published on Sept. 10, the blockchain firm cautioned users about the so-called “fake deposit” attack, which allows bad actors to remotely execute a transfer operation where the requested value is larger than what the victim owns.</p> 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper"> 
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr">Specifically, when the LDO token contract executes a transfer operation with a quantity exceeding the user's actual holdings, it doesn't trigger the usual transaction rollback. Instead, it merely returns “false” as the outcome rather than indicating a failure.</p>— SlowMist (@SlowMist_Team) <a href="https://twitter.com/SlowMist_Team/status/1700782729338532300?ref_src=twsrc%5Etfw" target="_blank" rel="noopener">September 10, 2023</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
 </div>
</figure> 
<p> You might also like: <a href="https://crypto.news/p2p-requests-1-5m-funding-to-sustain-lido-on-solana/"> P2P requests $1.5m funding to sustain Lido on Solana </a> </p> 
<p>Analysts at SlowMist say users should not only rely on the interface data they get when sending or receiving tokens, but also on the actual return values from the token contract. They also cautioned the crypto community about token contracts that “do not adhere to the ERC20 standard.” However, SlowMist didn’t elaborate on which contracts might face the same issue.</p> 
<blockquote class="wp-block-quote"> 
 <p>“Before integrating new tokens, ensure a deep understanding and analysis of their contract code to ensure the correct deposit logic.”</p> <cite>SlowMist analyst</cite>
</blockquote> 
<h2 class="wp-block-heading" id="lido-says-tokens-are-safe">Lido says tokens are safe</h2> 
<p>Lido didn’t publicly confirm any exploits of its contract. In a <a href="https://twitter.com/LidoFinance/status/1700888072299462895?s=20" target="_blank" rel="noreferrer noopener">response</a> published on X, the project noted that the issue “is expected and conforms to the ERC20 token standard.” Lido also reassured users that LDO and stETH tokens “are safe.”</p> 
<p>Lido is a liquidity staking protocol, which supports multiple blockchain networks and <a href="https://crypto.news/comparison-between-layer-2-sidechain-solutions/" target="_blank" rel="noreferrer noopener">sidechains</a>, including Polygon. According to <a href="https://defillama.com/protocol/lido" target="_blank" rel="noreferrer noopener">data</a> from DeFiLlama, the total value locked (TVL) in Lido stands at over $14 billion as of Sept. 11. LDO is an ERC20 governance token used for voting on improvement proposals in the Lido DAO.</p> 
<p> Read more: <a href="https://crypto.news/lido-finance-adds-over-1b-in-less-than-24-hours-after-ethereum-upgrade/"> Lido Finance adds over $1b in less than 24 hours after Ethereum upgrade </a> </p>

SlowMist warns about ‘fake deposit’ flaw in Lido Token contract

Table of Contents

crypto.news

Other articles published on Sep 11, 2023

Don’t Believe the FUD: Expert Explains Why FTX Liquidations Won’t Crash the Market

Shiba Inu (SHIB) Burn Rate up 333% to Start Week Bullishly

Will Stellar and Cosmos Price Pattern Continue in August? Tradecurve Markets Price Reaches a New ...

Why Online Crypto Casinos Are Taking Over From The Traditional Gambling Market

Bitcoin: This One Thing Might Push BTC Price Below $25,000

Shiba Inu Burn Rate Skyrockets, What's Next?

Join our free newsletter for daily crypto updates!