Bounty

April

<p>Blockchain security firm CertiK and zk-Sync decentralized exchange (DEX) Merlin are working towards a plan to reimburse users affected by a recent exploit that drained almost $2 million from the latter.</p>
<p>Merlin revealed on Thursday that the incident, which was widely believed to be an exploit, was, in fact, a rug pull by several rogue members of its back-end developer team, who manipulated the protocol’s code to achieve their goal.</p>
<h2 id="certik-and-merlin-to-compensate-victims">CertiK and Merlin to Compensate Victims</h2>
<p>Recall that Merlin’s liquidity pool was drained on Wednesday, hours after CertiK audited the protocol’s code. The DEX was conducting the public sale of its native token, MAGE, when an attacker executed the hack.</p>
<p>As <em>CryptoPotato</em> <a href="https://cryptopotato.com/zksync-dex-merlin-exploited-for-over-1-8m-after-code-audit/" data-wpel-link="internal">reported</a>, CertiK said an analysis of the event suggested a private key management issue may have led to the incident. The security firm disclosed that it had pointed out a centralization risk in the audit conducted on Monday and recommended that Merlin switches to decentralized mechanisms to avoid single points of key failure.</p>
<p>Upon further analysis, Merlin and CertiK discovered that the hack was an insider job from the protocol’s team. The back-end team implemented a call-action function that gave them power over the contracts and all trading pairs in the liquidity pools.</p>
<p>The developers were also able to manipulate Merlin’s front-end contracts and web host, allowing them to execute several on-chain transactions that drained the public sale.</p>
<blockquote class="twitter-tweet">
<p dir="ltr" lang="en">Our unwavering priority is to return all funds to effected parties and participants on the Merlin platform at the earliest opportunity. To that end, we are working alongside <a href="https://twitter.com/CertiK?ref_src=twsrc%5Etfw" data-wpel-link="external" target="_blank">@Certik</a> (Team DOXX by both Prospero &amp; Alatar Recovery Plan) to reimburse all effected users.</p>
<p>— Merlin (@TheMerlinDEX) <a href="https://twitter.com/TheMerlinDEX/status/1651281824285376513?ref_src=twsrc%5Etfw" data-wpel-link="external" target="_blank">April 26, 2023</a></p></blockquote>
<p><script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script></p>
<h2 id="a-20-white-hat-bounty">A 20% White Hat Bounty</h2>
<p>While Merlin and CertiK are working out a compensation plan, they have also informed relevant authorities about the incident and the whereabouts of the rogue technical team. The back-end team has been traced to Serbia, Europe, and local authorities have been notified.</p>
<p>The protocol has also recruited on-chain analysts to monitor the movement of the funds. The stolen assets have been <a href="https://debank.com/profile/0xa7d481944730a88b862eb57248cb1b2c8aa358ad" data-wpel-link="external" target="_blank">tracked</a> to two wallets and were still there at the time of writing.</p>
<p>Meanwhile, CertiK has <a href="https://twitter.com/CertiK/status/1651276441949028373?s=20" data-wpel-link="external" target="_blank">offered</a> the developers a 20% white hat bounty, urging them to accept it to avoid the wrath of the law.</p>
<p>The post <a href="https://cryptopotato.com/certik-and-zk-sync-dex-merlin-explore-2m-reimbursement-plan-for-rugpull-victims/" rel="nofollow">CertiK and zk-Sync DEX Merlin Explore $2M Reimbursement Plan for Rugpull Victims</a> appeared first on <a href="https://cryptopotato.com/" rel="nofollow">CryptoPotato</a>.</p>

CertiK and zk-Sync DEX Merlin Explore $2M Reimbursement Plan for Rugpull Victims

目录

CryptoPotato_News

发布于 2023年4月27日的其他文章

Bitcoin Emerges As Safe-Haven Asset With Correlation To Gold At 2-Year High

Binance Partners with Unstoppable Domains to Launch Binance US on Polygon for Fast Crypto Trading

The Sandbox and SBS Contents Hub Join Forces to Develop Metaverse ‘Running Man Park’

US House Financial Committee Republicans Look for Records to Show crypto Debanking

NEAR Protocol (NEAR) Price Prediction And A Year Of Growth For Uwerx (WERX)

“Outer Ring: Dawn chronicles”, the novel inspiring the Outer Ring MMO video game

订阅我们免费的电子期刊，获取每日最新加密领域动态！