DEFI TIMES Newsletter

Share this post
Another Day, Another Hack… Almost!
newsletter.defitimes.io

Another Day, Another Hack… Almost!

How a Paradigm researcher prevented another disastrous hack and why it’s kind of ironic

Fabian Klauder
Aug 20, 2021
Share this post
Another Day, Another Hack… Almost!
newsletter.defitimes.io

Hey DEFI TIMES community,

This week, a researcher at Paradigm, called Sam Sun, prevented another disastrous hack that could have threatened hundreds of millions of dollars.

Last week, we talked about the Poly Network hack, where a hacker was able to remove over $600 million from the protocol’s token bridge. Luckily, the hacker gave back almost all of the funds!

This time, things could have gone wrong… almost!

Sam Sun explained how he examined the smart contract code for the BitDAO token sale. BitDAO has completed a token sale worth over $365 million - with over $230 million from Peter Thiel, Pantera Capital, Dragonfly Capital, and other partners. It was one of the largest token sales in the history of DAO’s.

Sam Sun pointed out that there was a critical bug that could have threatened the whole $365 million.

Twitter avatar for @samczsunsamczsun @samczsun
Just pulled off maybe the biggest whitehat rescue ever. Story time soon 🔥

August 17th 2021

345 Retweets4,528 Likes

Sun didn’t expect to find any bugs at first:

“I didn’t really expect this to be a vulnerability though, since I didn’t expect the Sushi team to make such an obvious misstep.”

After looking closer, he found a bug in the Miso Dutch auction contract. In fact, some of the functions apparently lacked access controls.

He tested the bug with a successful exploit and immediately contacted his colleagues Georgios Konstantopoulos and Dan Robinson to double-check.

“Suddenly, my little vulnerability just got a lot bigger. I wasn’t dealing with a bug that would let you outbid other participants. I was looking at a 350 million dollar bug.”

After that, Sam Sun contacted SushiSwap CTO Joseph Delong to rescue the funds. The SushiSwap and BitDAO team acted quickly: BitDAO manually ended the auction by buying the remaining allocation. Funds were safe!

But things could have gone differently! Why?

There’s a conflict of interest between SushiSwap and Paradigm. It’s widely known that Paradigm has a significant stake in Uniswap. Since SushiSwap is the main competitor of Uniswap, Paradigm basically saved their biggest enemy.

Twitter avatar for @iamDCinvestorDCinvΞstor @iamDCinvestor
> found and helped patch a vulnerability that put over 109k ETH at risk everyone knows Paradigm has big UNI / Uniswap bags, but Sam from their team just helped save SushiSwap (an ostensible competitor) from a critical bug this is the ethos of the space among the best actors

samczsun @samczsun

Auditor's logs, 16th of August. I found a critical vulnerability in SushiSwap's MISO platform https://t.co/untzdxay7q

August 17th 2021

60 Retweets648 Likes

I wonder what would have happened if Sam Sun just left the bug to be naturally discovered. I think this would have significantly damaged SushiSwap’s reputation. It probably wouldn’t have killed SushiSwap completely, but Uniswap would have profited in a big way.

Things like this only happen in crypto!


Subscribe to our newsletter to level up your crypto game!


Gelato $GEL Whitelist Opening

Twitter avatar for @defitimesDEFI TIMES @defitimes
BREAKING: ⁦@gelatonetwork⁩ Announces GEL Token Whitelist Opening ‼️ Learn more about it here⬇️
Gelato Network Announces GEL Token Whitelist Opening - DEFI TIMESGelato Network announced the whitelist opening for the upcoming sale of the native Gelato (GEL) token. Very recently, Gelato Network partnered with QuickSwap to enable native limit orders. Gelato is a protocol for automated smart contract executions on networks like Ethereum. Developers can leverage…defitimes.io

August 19th 2021

2 Retweets11 Likes

Gelato has announced their whitelist opening for the $GEL token sale.

Eindhoven Bitcoin payment

Twitter avatar for @defitimesDEFI TIMES @defitimes
Football Club PSV Eindhoven will accept #bitcoin for a new sponsorship deal! 🚀 Read here! 👇
defitimes.io/news/european-…European Soccer Club PSV Eindhoven to Accept New Sponsorship Deal Paid in Bitcoin - DEFI TIMESPSV Eindhoven has partnered with crypto trading platform Anycoin Direct for deal paying the club an undisclosed amount of Bitcoin.defitimes.io

August 18th 2021

1 Retweet3 Likes

The popular European football club PSV Eindhoven announced they will accept bitcoin for a new sponsorship deal!

AAVE and Curve on Avalanche

Twitter avatar for @defitimesDEFI TIMES @defitimes
.@AaveAave and Curve will launch on @avalancheavax! 🚀 They will participate in Avalanche's new $180 million liquidity mining program! Read more here! 👇
defitimes.io/defi/avalanche…Avalanche Launches $180 Million Liquidity Mining Program - DEFI TIMESAvalanche is launching a brand new liquidity mining program to incentivize users and developers to use the Avalanche blockchain.defitimes.io

August 18th 2021

30 Retweets176 Likes

The two large DeFi blue chips, Aave and Curve, will launch on Avalanche within a $180 million incentive program.

Rainbow Supports L2s

Twitter avatar for @rainbowdotmeRainbow @rainbowdotme
What? RAINBOW is evolving! 🌈 starting today, u can now use Rainbow with Networks like @optimismPBC 🔴 @0xPolygon 🟣 & @arbitrum 🔵 (more coming in the future!) this update allows u to access a whole new side of Etheruem — download now & learn more:
rainbow.me/learn/a-beginn…A Beginner’s Guide to Layer 2 Networks | RainbowUp until recently, Rainbow and many other blockchain projects have only been compatible with Ethereum—the world’s public decentralized ledger. Ethereum is extremely secure and highly reliable, but it...rainbow.me

August 16th 2021

86 Retweets538 Likes

Rainbow, which is an Ethereum wallet, will now support Optimism, Arbitrum, and Polygon.

Tally Wallet

Twitter avatar for @TallyCashTally @TallyCash
Let's build a community-owned wallet for the open internet 🐶💸
blog.tally.cash/a-community-ow…A community-owned wallet for the open internetTally is a community owned and operated Web3 wallet, building off the road the early MetaMask team paved for the Ethereum community.blog.tally.cash

August 18th 2021

36 Retweets140 Likes

Tally Wallet has been announced - a Metamask competitor. It aims to bring a truly community-owned web3 wallet to the market.

1inch on Optimism

Twitter avatar for @1inch1inch Network @1inch
2/ 📻 Tune in to a positive wave as the #1inch Network expands to Optimistic Ethereum (#OΞ) by @optimismPBC! ⚡️ Dive into the pink portal with us and get a tremendous increase in the speed of your transactions. Read more ⤵️
blog.1inch.io/the-1inch-netw…The 1inch Network expands to Optimistic EthereumThe deployment on Optimistic Ethereum (OΞ) will help to substantially increase transaction speeds and lower gas fees for 1inch users. As the 1inch Network continues to expand, the 1inch Aggregation…blog.1inch.io

August 17th 2021

38 Retweets176 Likes

1inch has announced that they launched on Optimism.

SuperRare token

Twitter avatar for @SuperRareSuperRare 💎 @SuperRare
Introducing $RARE 💎 🎨 A revolution in NFT art curation ❤️ Community owned and governed 💥 Diverse curatorial voices We’re putting the future of SuperRare and the power of curation into the hands of our community. Find out how ⬇️
superrare.mirror.xyz/fkGKcN1xVNRvfZ…

August 17th 2021

596 Retweets2,282 Likes

SuperRare has introduced $RARE and aims to decentralize the platform with a DAO.

QuickSwap Limit Orders

Twitter avatar for @QuickswapDEXQuickSwap @QuickswapDEX
1/QuickSwap & Gelato partner to offer Limit Orders🔥 🍨We've had a busy month! With listings on @binance & @CoinbasePro, our latest #IDO & newly-launched limit orders powered by @gelatonetwork 🏦Trade with limit orders:
quickswap.exchange/#/limit-order 👓More: bit.ly/QSlimito
Image

August 16th 2021

104 Retweets406 Likes

QuickSwap has integrated limit orders - in partnership with Gelato.

Aave goes mobile

Twitter avatar for @AaveAaveAave @AaveAave
The 2001Defi team has submitted an @AaveGrants application to build a mobile app for Aave 👻📲 Read the proposal here:
governance.aave.com/t/proposal-bui… Snapshot is open: snapshot.org/#/aave.eth/pro…
Image

August 19th 2021

124 Retweets791 Likes

The Aave community made a proposal to build a mobile app. The app should grow the number of users and TVL.


Find us on:

  • Podcast | Apple | Spotify

  • News Website

  • YouTube

  • Discord

  • Twitter

  • Instagram


DISCLAIMER: All information presented above is meant for informational purposes only and should not be treated as financial, legal, or tax advice. This article's content solely reflects the opinion of the writer, who is not a financial advisor.

Do your own research before you purchase cryptocurrencies. Any cryptocurrency can go down in value. Holding cryptocurrencies is risky.


Comment
Share
Share this post
Another Day, Another Hack… Almost!
newsletter.defitimes.io

Create your profile

0 subscriptions will be displayed on your profile (edit)

Skip for now

Only paid subscribers can comment on this post

Already a paid subscriber? Sign in

Check your email

For your security, we need to re-authenticate you.

Click the link we sent to , or click here to sign in.

TopNewCommunity

No posts

Ready for more?

© 2022 DEFI TIMES
Privacy ∙ Terms ∙ Collection notice
Publish on Substack Get the app
Substack is the home for great writing