Avalanche

Hackers exploited a vulnerability on Oct 7 and drained $2.9 million worth of Avalanche (AVAX) tokens from the smart contract of Stars Arena, an Avalanche-based social token platform. The vulnerable smart contract was used to secure tokens on the platform.
In a post on X, Star Arena <a href="https://twitter.com/starsarenacom/status/1710604987812708531" rel="noopener noreferrer nofollow">noted</a> that the platform is still under a Distributed Denial of Service (DDoS) attack. In a DDOS attack, bad actors disrupt the regular functioning of a platform by overwhelming it with a flood of traffic.
Star Arena added:
<blockquote>
 “We are working on a solution to get everyone’s funds recovered and have the Arena move forward.”
</blockquote>
Blockchain security firm PeckShield first identified the attack and <a href="https://twitter.com/peckshield/status/1710555944269292009" rel="noopener noreferrer nofollow">attributed</a> it to a reentrancy issue. A reentrancy issue refers to a security flaw that allows an external contract or attacker to repeatedly call back into the vulnerable contract’s functions before the previous calls have been completed.
According to PeckShield, the reentrancy issue allowed the attackers to represent chat room access and sell tickets at exorbitant prices reaching as high as $2,740 each.
While the breach did not impact tokens in user wallets, users cannot realize any value by selling tickets they own.
The exploited vulnerability has depleted the value locked in Stars Arena’s smart contract to just $0.051, according to DefiLlama <a href="https://defillama.com/protocol/stars-arena?denomination=USD" rel="noopener noreferrer nofollow">data</a>. The platform has cautioned users against depositing any funds on the platform.
<h2 id="previous-attack">Previous attack</h2>
Stars Arena, an iteration of FriendTech, offers tokens for purchase, granting access to individual chat rooms. These tokens typically follow a bonding curve, increasing in price as more users acquire them. Transaction fees on such platforms are relatively high, with FriendTech imposing a 10% fee on each transaction, divided between the app and the platform’s owner.
Stars Arena had previously faced a smaller vulnerability that allowed the unauthorized draining of AVAX coins from its smart contract. However, since the issue was challenging to exploit, few funds were lost before it was rectified.
At the time, Ava Labs CEO Emin Gun Sirer <a href="https://twitter.com/el33th4xor/status/1709923165919387999" rel="noopener noreferrer nofollow">dismissed</a> security concerns as malicious actors spreading “FUD” (fear, uncertainty, and doubt).
The post <a rel="noopener noreferrer nofollow" href="https://cryptoslate.com/avalanche-project-stars-arena-suffers-2-9m-exploit-leaving-smart-contract-with-just-0-051/">Avalanche project Stars Arena suffers $2.9M exploit, leaving smart contract with just $0.051</a> appeared first on <a rel="noopener noreferrer nofollow" href="https://cryptoslate.com">CryptoSlate</a>.

Avalanche project Stars Arena suffers $2.9M exploit, leaving smart contract with just $0.051

Table of Contents

CryptoSlate

Other articles published on Oct 7, 2023

The FTX Effect May Act as a Fatal Catalyst to Solana Ecosystem

Grayscale ruling dilemma: Will the SEC make an appeal move?

Stars Arena Faces a $2.9M Setback Due to Reentrancy Flaws

Beware ‘LoveGPT’: Dating Scam Targets Lonely AI Enthusiasts

Elon Musk, X criticized for suspending pro-XRP account

Elon Musk Faces Scrutiny Over Suspension of XRP Account Amidst SEC Investigation

Join our free newsletter for daily crypto updates!