Read

Floor Protocol

/send

Donald Trump

<div class="protos">
 <div>
  <div>
   <div>
    <p>Floor Protocol has been exploited, resulting in a variety of Bored Apes and Pudgy Penguins being stolen and stored in a wallet now flagged in connection to a phishing scam.</p>
    <p>The NFT protocol advertises the ability to turn tokens into tradeable derivatives meant to represent fractional parts of NFTs. According to the founder of NFT marketplace Delegate, known online as ‘foobar,’ a bad contract upgrade several days ago introduced the vulnerability.</p>
    <p>The wallet storing the stolen Bored Apes and Pudgy Penguins, 0x4d0D746E0F66bf825418E6b3deF1a46Ec3c0B847, has now been reported by ‘foobar’ for use in a phishing scam on etherscan.</p>
    <figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
     <div class="wp-block-embed__wrapper">
      <blockquote class="twitter-tweet" data-width="500" data-dnt="true">
       <p lang="en" dir="ltr">vuln was bad upgrade 11 days ago that allowed multicalling to external contracts<br><br>simple: <a rel="noopener noreferrer nofollow" title="NFT" href="https://thebittimes.com/tag/nft.html">NFT</a>Contract.transferFrom(<a rel="noopener noreferrer nofollow" title="NFT" href="https://thebittimes.com/tag/nft.html">NFT</a>Holder, me, tokenId)<br><br>and bc <a rel="noopener noreferrer nofollow" title="NFT" href="https://thebittimes.com/tag/nft.html">NFT</a>Holder approved flooring, it would succeed<br><br>left image is safe internal multicall<br>right image is unsafe external multicall pic.twitter.com/gEHHZyLzDc</p>— foobar (@0xfoobar) December 17, 2023
      </blockquote>
     </div>
    </figure>
    <p><em>Read more: Donald Trump sells the clothes off his back in latest NFT promotion</em></p>
    <h2 class="wp-block-heading" id="h-update-audits-missing-from-floor-protocol-firm-s-website">Update audits missing from Floor Protocol firm’s website</h2>
    <p>Flooring Lab, the firm behind Floor Protocol, claims on its website that “we strive to maintain the highest standards whether it be in terms of user experience, security and asset protection.”</p>
    <p>Despite this commitment, the most recent update that introduced this vulnerability doesn’t seem to have been audited.</p>
    <ul>
     <li>The Halborn audit featured on Flooring Lab’s website is dated September 8, 2023 while the audit by OtterSec is dated October 4.</li>
     <li>Interestingly, the ‘smart_contract’ repository that OtterSec audited now returns a 404 error.</li>
     <li>The only repositories listed on Flooring Lab’s GitHub contain logos and config files for the website.&nbsp;</li>
    </ul>
    <p>One of <a rel="noopener noreferrer nofollow" title="Flooring Lab" href="https://thebittimes.com/tag/flooring-lab.html">Flooring Lab</a>’s team members announced a fix had been pushed that they “believe patched the issue.”</p>
    <p>This <a rel="noopener noreferrer nofollow" title="exploit" href="https://thebittimes.com/tag/exploit.html">exploit</a> of <a rel="noopener noreferrer nofollow" title="Floor Protocol" href="https://thebittimes.com/tag/floor-protocol.html">Floor Protocol</a> comes days after a major hack of <a rel="noopener noreferrer nofollow" title="NFT" href="https://thebittimes.com/tag/nft.html">NFT</a> Trader. Dozens of high-value <a rel="noopener noreferrer nofollow" title="NFT" href="https://thebittimes.com/tag/nft.html">NFT</a>s were stolen.</p>
    <p><em>Got a tip? Send us an email or ProtonMail. For more informed news, follow us on&nbsp;X,&nbsp;</em><em>Instagram</em><em>,&nbsp;</em><em>Bluesky</em><em>, and&nbsp;</em><em>Google News</em><em>, or subscribe to our&nbsp;</em><em>YouTube</em><em>&nbsp;channel.</em></p>
   </div>
  </div>
 </div>
</div>
<p>Source: <a rel="noopener noreferrer nofollow" target="_blank" href="https://thebittimes.com/floor-protocol-exploited-bored-apes-and-pudgy-penguins-gone-tbt74080.html">https://thebittimes.com/floor-protocol-exploited-bored-apes-and-pudgy-penguins-gone-tbt74080.html</a></p>

Floor Protocol exploited, Bored Apes and Pudgy Penguins gone

Tabla de contenidos

TheBitTimes

Otros artículos publicados el 18 dic 2023

Navigating the Integration of AI Tools in Education: A Delicate Balance

Dogecoin (DOGE) Creator Ends Speculation on His New Token

Nvidia Faces Concerns Over AI Bias and Diversity Issues

FTX proposes plan to end bankruptcy

Emerging Trends in AI: Transforming Consumer Behavior and Market Dynamics

Solana's Price Uptrend Stops At $75 And Threatens To Sink

¡Únete a nuestro boletín gratuito para recibir actualizaciones diarias de criptografía!