Stealing a tip from a stripper is like stealing candy from a child. It's just not pretty. Someone needs to tell this to the scoundrel who managed to steal 165.38 ETH ($34,000) using a bug in one of SpankChain's smart contracts.
SpankChain is an Ethereum-based smart contract, and BOOTY is an ERC-20 token that is issued to dancers during live webcam performances. During the hack, $4,000 worth of BOOTY tokens were also frozen due to a security breach.
SpankChain did not announce the attack on its website until the next 24 hours because it was busy investigating other smart contract errors and did not notice the incident. And although the investigation is still ongoing, the company explained in detail how exactly this happened, indicating the address of the attacker, the malicious contract and the internal transactions associated with it. It turns out that the hacker used the same bug that another hacker used in an attack on the DAO project. Namely: a bug called “recursive call”, which allows you to repeatedly withdraw tokens and recollect ETH within the same transaction.
It should be noted that SpankChain took this more seriously than many other sites that fall victim to security flaws, and has set itself the task of compensating all users who lost funds in the attack. The company plans to carry out an ETH airdrop on all of the stolen ETH and BOOTY worth $9,300.
The company has also now decided to pay an audit fee of $30,000 - $50,000, deeming Zeppelin's $17,000 audit to be insufficient. SpankChain said in a statement that paying more for security is a prudent, pragmatic decision.
The site has promised to improve its security practices in the future, and hopes that all users and dancers will collect even more BOOTY.
According to bitcoinist.com
You May Also Like
Will the Monero Church become a meme?
The Monero Church, which holds its weekly “ritual ceremonies” on Telegram, has been operating for four months. The essence of these rituals is simple: Monero users send each other five dollars in XMR twice a week, calling it a “circle of trust.” Currently the church has about 60 members, but recently their number has begun to grow noticeably.
Cryptomat is not responsible for user stupidity
According to CNBC, in February of this year, a Canadian resident became a victim of a telephone scam. As a result, she bought $62,500 worth of Bitcoin and sent it to the scammer, who she believed was the Canada Revenue Agency.
