Token-ul de lansare al lui Sushi, Miso, a piratat pentru 3 milioane de dolari

The chief technology officer of decentralized finance (DeFi) platform Sushi Swap, Joseph Delong, a anunțat that a hacker compromised the supply chain of its token launchpad platform Miso.

According to Delong, the “anonymous contractor with the GH handle AristoK3 injected malicious code into the Miso front end,” replacing the auction wallet address with their own and subsequently acquiring 865 ETH, valued at $3 million. This data can be verificat via EtherScan.

The hacker exploited the single target of the Jay Pegs Auto Mart token auction, a parody NFT project imitating the value of a 2007 Kia Sedona.

On what he called the “hardest day of my life so far,” the former senior software engineer at ConsenSys, claimed to have gained little support from leading crypto exchanges FTX and Binance in his pursuit of the funds.

Am întrebat @FTX_Oficial și @Binance să predea informațiile atacatorilor KYC, dar au rezistat de data aceasta cu probleme sensibile.

Atacatorul (atacatorii) a lucrat cu @ Anul și a abordat multe alte proiecte. Vă îndemn să vă verificați propriile front-end-uri pentru exploatări.

- Joseph Delong (@josephdelong) 17 Septembrie, 2021

Delong publicly expressed his suspicions of the hacker’s identity as blockchain and web developer Eratos. The individual hasn’t yet responded to the accusations.

Just last month, a white hat security programmer miraculously saved the Sushi protocol from a potentially disastrous $350 million hack, again through its token launchpad platform Miso, after discovering a severe vulnerability within the auction contract of the BitDAO token sale.

Fortunately, the exploit wasn’t discovered by loitering hackers and the sale continued without disturbance. Despite this, the event did showcase — as the white hat described — the “obvious misstep” taken by the team’s security operation.

Platforma DeFi announced its highly-anticipated “7/20” project update in July this year, revealing the future launch of a new automated market maker called Trident designed to become the most capital-efficient on the market.

Source: https://cointelegraph.com/news/sushi-s-token-launchpad-miso-hacked-for-3m