Read

Floor Protocol

/send

Donald Trump

<div class="protos">
 <div>
  <div>
   <div>
    <p>Floor Protocol has been exploited, resulting in a variety of Bored Apes and Pudgy Penguins being stolen and stored in a wallet now flagged in connection to a phishing scam.</p>
    <p>The NFT protocol advertises the ability to turn tokens into tradeable derivatives meant to represent fractional parts of NFTs. According to the founder of NFT marketplace Delegate, known online as ‘foobar,’ a bad contract upgrade several days ago introduced the vulnerability.</p>
    <p>The wallet storing the stolen Bored Apes and Pudgy Penguins, 0x4d0D746E0F66bf825418E6b3deF1a46Ec3c0B847, has now been reported by ‘foobar’ for use in a phishing scam on etherscan.</p>
    <figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
     <div class="wp-block-embed__wrapper">
      <blockquote class="twitter-tweet" data-width="500" data-dnt="true">
       <p lang="en" dir="ltr">vuln was bad upgrade 11 days ago that allowed multicalling to external contracts<br><br>simple: <a rel="noopener noreferrer nofollow" title="NFT" href="https://thebittimes.com/tag/nft.html">NFT</a>Contract.transferFrom(<a rel="noopener noreferrer nofollow" title="NFT" href="https://thebittimes.com/tag/nft.html">NFT</a>Holder, me, tokenId)<br><br>and bc <a rel="noopener noreferrer nofollow" title="NFT" href="https://thebittimes.com/tag/nft.html">NFT</a>Holder approved flooring, it would succeed<br><br>left image is safe internal multicall<br>right image is unsafe external multicall pic.twitter.com/gEHHZyLzDc</p>— foobar (@0xfoobar) December 17, 2023
      </blockquote>
     </div>
    </figure>
    <p><em>Read more: Donald Trump sells the clothes off his back in latest NFT promotion</em></p>
    <h2 class="wp-block-heading" id="h-update-audits-missing-from-floor-protocol-firm-s-website">Update audits missing from Floor Protocol firm’s website</h2>
    <p>Flooring Lab, the firm behind Floor Protocol, claims on its website that “we strive to maintain the highest standards whether it be in terms of user experience, security and asset protection.”</p>
    <p>Despite this commitment, the most recent update that introduced this vulnerability doesn’t seem to have been audited.</p>
    <ul>
     <li>The Halborn audit featured on Flooring Lab’s website is dated September 8, 2023 while the audit by OtterSec is dated October 4.</li>
     <li>Interestingly, the ‘smart_contract’ repository that OtterSec audited now returns a 404 error.</li>
     <li>The only repositories listed on Flooring Lab’s GitHub contain logos and config files for the website.&nbsp;</li>
    </ul>
    <p>One of <a rel="noopener noreferrer nofollow" title="Flooring Lab" href="https://thebittimes.com/tag/flooring-lab.html">Flooring Lab</a>’s team members announced a fix had been pushed that they “believe patched the issue.”</p>
    <p>This <a rel="noopener noreferrer nofollow" title="exploit" href="https://thebittimes.com/tag/exploit.html">exploit</a> of <a rel="noopener noreferrer nofollow" title="Floor Protocol" href="https://thebittimes.com/tag/floor-protocol.html">Floor Protocol</a> comes days after a major hack of <a rel="noopener noreferrer nofollow" title="NFT" href="https://thebittimes.com/tag/nft.html">NFT</a> Trader. Dozens of high-value <a rel="noopener noreferrer nofollow" title="NFT" href="https://thebittimes.com/tag/nft.html">NFT</a>s were stolen.</p>
    <p><em>Got a tip? Send us an email or ProtonMail. For more informed news, follow us on&nbsp;X,&nbsp;</em><em>Instagram</em><em>,&nbsp;</em><em>Bluesky</em><em>, and&nbsp;</em><em>Google News</em><em>, or subscribe to our&nbsp;</em><em>YouTube</em><em>&nbsp;channel.</em></p>
   </div>
  </div>
 </div>
</div>
<p>Source: <a rel="noopener noreferrer nofollow" target="_blank" href="https://thebittimes.com/floor-protocol-exploited-bored-apes-and-pudgy-penguins-gone-tbt74080.html">https://thebittimes.com/floor-protocol-exploited-bored-apes-and-pudgy-penguins-gone-tbt74080.html</a></p>

Floor Protocol exploited, Bored Apes and Pudgy Penguins gone

Table of Contents

TheBitTimes

Other articles published on Dec 18, 2023

The Evolution Begins: StrikeX Launches Ultimate Crypto-Crypto Swaps Experience with Swaps V2 Wall...

Macro Analyst and Renowned Investor Adjust Bitcoin Price Predictions!

Blockchain credit protocols offer competitive 9.64% APR, surpassing traditional rates

FTX proposes plan to end bankruptcy

OKX emerges as leading NFT marketplace with $50.33 million daily trading volume

Fusionist (ACE) Token Ignites 20% Rally on Binance and OKX Debut: Details

Join our free newsletter for daily crypto updates!