Avalanche

<div class="sg-post-des">
 A fault in the Stars Arena price function allowed hackers to escape with roughly $2,000, however the vulnerability has since been patched.
</div>
<div class="cointelegraph">
 The team behind the new friend.tech-inspired protocol Stars Arena has dismissed what it called “coordinated FUD” after <a rel="noopener noreferrer nofollow" title="patching" href="https://thebittimes.com/tag/patching.html">patching</a> an exploit that saw attackers escape with $2,000 from the Avalanche-based decentralized social media platform.
 In an Oct. 5 post on X (Twitter) the Stars Arena account said the exploit was fixed, adding "don’t get this wrong, we are at war.”
 <blockquote class="twitter-tweet">
 THE EXPLOIT HAS BEEN FIXED. BUT DON’T GET THIS WRONG WE ARE AT WAR. We’re being targeted by malicious actors in the space that want to steal your money. The little guy is under attack. You are under attack. Your right to platform diversity is under attack. Don’t get it… pic.twitter.com/DmbMdf9cAq— Stars Arena (@starsarenacom) October 5, 2023
 </blockquote>
 Pseudonymous X user “0xlilitch” took a swipe at Stars Arena saying its "noob devs" missed <a rel="noopener noreferrer nofollow" title="patching" href="https://thebittimes.com/tag/patching.html">patching</a> a <a rel="noopener noreferrer nofollow" title="vulnerability" href="https://thebittimes.com/tag/vulnerability.html">vulnerability</a> in the platform’s price function allowing the attackers could sell zero user “tickets” in exchange for technically free Avalanche (AVAX) tokens.
 <blockquote class="twitter-tweet">
 So how is the contract getting drained right now? THEIR getPrice() FUNCTION IS BROKEN You can sell 0 shares and get AVAX. Yep. You can do this right now and it will work. But where do this extra AVAX come from? read next ️ pic.twitter.com/0RM7NHxLeq— lilitch.eth (@0xlilitch) October 5, 2023
 </blockquote>
 However, the attack vector reportedly turned out to be economically unfeasible for the attackers. The exploit itself caused a major surge in the gas fees on Avalanche which made extracting the earnings from the hack far more expensive than anticipated.
 As a result, the attackers supposedly ended up spending more on gas fees than they netted from the exploit.
 Ava Labs CEO Emin Gün Sirer highlighted in an X post that for every $0.04 earned from the exploit — the hackers spent an average of $0.25.
 <blockquote class="twitter-tweet">
 So much FUD about a Stars Arena exploit that has (1) already been fixed, (2) cost the attacker $0.25 to make $0.04, and (3) the attacker extracted a sum total of only $2,000. Now that it's over, let's get back to having fun in the arena.— Emin Gün Sirer (@el33th4xor) October 5, 2023
 </blockquote>
 Despite the relatively unsuccessful exploit, crypto community members were quick to lash out at the Stars Arena team.
 Related: Friend.tech SIM-swap scourge continues as scammer nets $385K in Ether
 The pseudonymous founder and developer of Delegate known as “foobar” slammed the platform claiming it botched its friend.tech fork and told Stars Arena to “delete your account and product, clownshow.”
 <blockquote class="twitter-tweet">
 you took a fully functional base contract and somehow added new attack vectors in your unverified fork. delete your account and product, clownshow— foobar (@0xfoobar) October 5, 2023
 </blockquote>
 Stars Arena is the latest app to join a growing roster of social finance platforms such as Alpha on the Bitcoin network, Friendzy on Solana and PostTech on Arbitrum.
 Despite the surge in similar DeSo apps, friend.tech remains the market leader with more than $293 million in monthly trading volume and outpaces the next-closest app, PostTech, by more than $283 million.
 Magazine: Blockchain detectives — Mt. Gox collapse saw birth of Chainalysis
 <template data-name="subscription_form" data-type="crypto_biz"></template>
</div>
Source: <a rel="noopener noreferrer nofollow" target="_blank" href="https://thebittimes.com/socialfi-app-stars-arena-dispels-coordinated-fud-after-patching-noob-vulnerability-tbt65317.html">https://thebittimes.com/socialfi-app-stars-arena-dispels-coordinated-fud-after-patching-noob-vulnerability-tbt65317.html</a>

SocialFi app Stars Arena dispels ‘coordinated FUD' after patching ‘noob’ vulnerability

TheBitTimes

Other articles published on Oct 6, 2023

Artificial Intelligence Paves the Way for a Revolution in Civil Engineering

Confidence Boost Among Bitcoin ($BTC) Holders; Momentum Building for Stellar ($XLM) and InQuebta ...

Yuga Labs makes strategic investment to push Otherside project

3 cryptocurrencies to avoid trading in October

Yuga Labs’ restructuring leads to layoffs at the company

Pentagon Boosts AI Development for Indo-Pacific Commander

Join our free newsletter for daily crypto updates!