Token

Secure

<a href="https://bitcoinworld.co.in/time-token-exploited-188k-lost-in-the-exploit/" title="TIME Token Exploited, $188k Lost In The Exploit" rel="noopener noreferrer nofollow"></a>
According to CertiK, the TIME token was exploited recently, resulting in a loss of approximately $188k.&nbsp;
The attack began with the exploiter converting 5 ETH to Wrapped Ether (WETH), and then trading this for over 3.4 billion TIME tokens.
CertiK analysts reported that the exploit’s root cause was the manipulation of the Forwarder contract, which is designed to execute transactions from any address.&nbsp;
The attacker crafted a request with a falsified sender address, which they controlled, and a matching signature. This deceptive request passed the Forwarder contract’s verification process.
<blockquote class="twitter-tweet" data-width="550" data-dnt="true">
 <a href="https://twitter.com/hashtag/CertiKSkynetAlert?src=hash&amp;ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">#CertiKSkynetAlert</a> <img src="https://s.w.org/images/core/emoji/14.0.0/72x72/1f6a8.png" alt="🚨" class="wp-smiley" style="height: 1em; max-height: 1em;">
 TIME Token was exploited for ~$188k due to a recently disclosed vulnerability around ERC2771 and Multicall
 See our in-depth analysis on the TIME exploit below<a href="https://t.co/NF8UPcRPfQ" rel="noopener noreferrer nofollow">https://t.co/NF8UPcRPfQ</a> <a href="https://t.co/MGDnmFd56d" rel="noopener noreferrer nofollow">https://t.co/MGDnmFd56d</a>
 — CertiK Alert (@CertiKAlert) <a href="https://twitter.com/CertiKAlert/status/1733144963792191604?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">December 8, 2023</a>
</blockquote>
<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
The attacker leveraged a <a href="https://www.certik.com/resources/blog/5SXRcPGmshARXGrWxfgsAv-time" rel="noopener noreferrer nofollow">parsing error</a>, where the TIME contract was deceived into recognizing an attacker-controlled address as legitimate.&nbsp;
As a result, the TIME contract erroneously burned a massive amount of tokens from the target pool controlled by the attacker, rather than the intended address.
See Also: <a class="row-title" href="https://bitcoinworld.co.in/mydoge-twitter-account-hacked-mobile-app-and-wallets-secure/" aria-label="“MyDoge Twitter Account Hacked, Mobile App and Wallets Secure” (Edit)" rel="noopener noreferrer nofollow">MyDoge Twitter Account Hacked, Mobile App and Wallets Secure</a>
The attacker burned over 62 billion TIME tokens, leading to a drastic reduction in the token pool. The tokens were then exchanged for a substantial amount of WETH, eventually converting these back to ETH, including a portion used for a bribe in the process.
This incident highlights the underlying vulnerabilities in smart contracts, where even a minor error can lead to substantial financial losses.
<blockquote>
 Disclaimer: The information provided is not trading advice. Bitcoinworld.co.in holds no liability for any investments made based on the information provided on this page. We strongly recommend independent research and/or consultation with a qualified professional before making any investment decisions.
</blockquote>
The post <a href="https://bitcoinworld.co.in/time-token-exploited-188k-lost-in-the-exploit/" rel="noopener noreferrer nofollow">TIME Token Exploited, $188k Lost In The Exploit</a> appeared first on <a href="https://bitcoinworld.co.in" rel="noopener noreferrer nofollow">BitcoinWorld</a>.

TIME Token Exploited, $188k Lost In The Exploit

ItsBitcoinWorld

Other articles published on Dec 9, 2023

Arbitrage Bot Depletes LFNTY-USDC Pool on Lifinity DEX

Why is JTO Coin Price Rising? How High Will Jito Price Reach in 2024?

Elon Musk’s X and Amazon discuss potential collaboration

SHIB Price Prediction: Is Shiba Inu Set For a Major Rally?

Terra Luna Classic (LUNC) Reaches 85 Billion LUNC Burn Milestone

Elon Musk’s Bitcoin Mantra error sparks social media buzz

Join our free newsletter for daily crypto updates!