Skip to main content

MLB Team Washington Nationals Partners With Terra Blockchain Community, Ballpark Plans to Accept UST

On February 9, the American professional baseball team based in Washington, D.C., the Washington Nationals, announced the team has partnered with Terra, the open-source blockchain platform and decentralized autonomous organization (DAO). The Washington Nationals detail that the team is a “leading innovator” and is “consistently introducing new technologies to enhance the fan experience.” Washington Nationals Ink Long-Term Deal With Terra Major League Baseball (MLB) team the Washington Nationals has partnered with the blockchain platform and DAO Terra, according to an announcement published by the team on Wednesday. The deal with Terra follows a slew of sports-related deals with crypto firms, but the MLB team will be the first to partner with an open-source blockchain project. In addition to the partnership, the algorithmic stablecoin UST that’s issued on the Terra blockchain will be “accepted as a payment method at Nationals Park as early as next season.” “The Nationals continue t...

Transaction batching protocol Furucombo suffers $14 million “evil contract” hack

The latest attack relied on user permissions granted to the protocol

The latest “evil contract” exploit has netted an attacker over $14 million in stolen funds. 

Furucombo, a tool designed to help users “batch” transactions and interactions with multiple protocols at once, fell victim to the attack which centered on token approvals from users.

The attacker’s address currently has $14 million is various cryptocurrencies, but the attack appears to be larger as they have been transferring ETH to privacy mixer Tornado Cash in batches over the last hour.

This attack is conceptually similar to the $20 million “evil jar” attack that struck Pickle Finance last year, as well as the $37 million “evil spell” exploit that hit Alpha Finance earlier this month. In these “evil contract” exploits, an attacker creates a contract that fools a protocol into believing it belongs there, giving them access to protocol funds.

In this case, the attacker ‘tricked’ the Furucombo protocol into thinking that their contract was a new verison of Aave. From there, instead of draining funds from the protocol as in previous evil contract exploits, they instead leveraged the ability to take the funds of every user who had given the protocol token permissions. 

“Infinite permissions means you can wipe everyone who interacted with Furucombo,” said whitehat hacker and co-founder of DeFi Italy in a statement to Cointelegraph.

This exploit type appears to be growing increasingly popular, now accounting for over $70 million in user funds lost in just a few months.

The team confirmed the attack in a Tweet, saying that they “believed” they’d mitigated the exploit but recommended revoking permissions “out of an abundance of caution:”

Users can leverage tools like revoke.cash to do so. 

The attack comes during a period of wider reflection in the DeFi world on security and the utility of auditing companies. In the last three months, three different auditing and code review services have emerged, each with a different incentive model designed to encourage more thorough and dynamic security practices.

https://ift.tt/2PkSDGP

Comments

Popular posts from this blog

Blockchain Software Firm Consensys Acquires Mycrypto Ethereum Wallet

On February 1, the blockchain infrastructure firm Consensys has revealed it has acquired the Ethereum-based wallet Mycrypto and plans to merge the wallet into Metamask. The price Consensys paid for Mycrypto was not disclosed but the announcement notes that the acquisition will “further improve the security of all the products.” Consensys Obtains Mycrypto Ethereum Wallet, Plans to Merge With Metamask in the Future Consensys has acquired the Ethereum-based wallet Mycrypto for an undisclosed sum according to an announcement released on Tuesday. The deal aims to strengthen the company’s Ethereum wallet Metamask and “enhance Web3 experiences.” The eventual merger between the two Ethereum interfaces will “provide users with a heightened experience that is even more extensive and secure,” according to Consensys. Consensys is an Ethereum software company led by one of the Ethereum co-founders Joseph Lubin. The Web3 wallet Metamask, with 21 million monthly active users (MAUs) is owned by C...

The Congolese Mountain of Gold: Surprise Discovery in Africa Shows Metal’s Scarcity Is Hard to Prove

A myriad of gold bugs like to compliment the yellow precious metal for its ostensible scarcity, as estimates say only 2,500 to 3,000 tons of new gold is produced annually. While new gold discoveries have seemingly slowed, investigative studies also show that in some areas, gold is being smuggled into the economy by the ton, and often never accounted for as far as per annum issuance estimates. Recently, reports show a whole mountain of gold was discovered in the Congo, as the Democratic Republic of the Congo is well known for being a region that sees tons of smuggled gold filtered into the global financial system unreported. Surprise Gold Deposits Continue to Crack the Precious Metal’s Scarcity Proposition It has always been said that the precious metal gold (Au) is scarce, and some reports even say that gold mining on earth will end by the year 2050 . Additionally, estimates also show that there’s roughly 2,500 to 3,000 tons of new gold that is accounted for and enters into the fin...

Bitcoin Legal Tender in 3 Days but Survey Shows 7 Out of 10 Salvadorans Want Bitcoin Law Repealed

Bitcoin is becoming legal tender in El Salvador in three days. However, a nationwide survey conducted by the University Institute of Public Opinion (Iudop) shows that seven out of 10 Salvadorans want the government to repeal the Bitcoin Law. El Salvador’s Bitcoin Law Goes Into Effect in 3 Days The University Institute of Public Opinion (Iudop) in El Salvador conducted a study between Aug. 13 and Aug. 20 of how the public views the country’s upcoming Bitcoin Law. The institute is a research center of the José Simeón Cañas Central American University (UCA). El Salvador’s Bitcoin Law is set to go into effect on Sept. 7 , when BTC will be legal tender in the country alongside the U.S. dollar. A total of 1,281 respondents ages 18 and over participated in this national survey that “represents the entire adult population residing in the country,” according to the institute. Out of all the respondents, 62.4% said they were aware of the approval of the Bitcoin Law by the deputies of the ...