r/chia

▲ 10 r/chia

Ecosystem Security Update

>First and foremost, the chia L1 blockchain (chia) is safe, XCH and the core network were never compromised. Three security exploits of ecosystem projects occurred recently on the Chia blockchain. These incidents were isolated logic bugs in 3rd-party Chialisp smart coins, Chia Network, Inc (Chia) is actively aiding teams with analysis and recovery. Here is what happened:

>warp.green: A puzzle logic bug let an attacker drain bridged USDC on ETH/Base. The $XCH bridge was unaffected. Chia partnered with the warp.green team to make all affected users whole.

>TibetSwap: A liquidity pool puzzle bug put liquidity at risk, the response was swift. Chia & TibetSwap worked together to build a custom tool to rescue the funds. The remaining funds were returned and all users have been made whole.

>Circuit_DAO: A vault exploit drained ~1k BYC from their treasury. User loss was minimal (~26 BYC) and will be reimbursed during their sunset/relaunch.

>A huge thanks to the developer and whitehat community for working around the clock to contain these incidents, protect users, and safeguard the ecosystem !

>Ecosystem Security Update blog

>Warp Green post mortem

>TibetSwap post mortem

>CircuitDAO details

>Builders: Check solution malleability, replay protection & puzzle validation guides at chialisp.com.

reddit.com
u/willphule — 9 days ago