88mph vesting contract bug disclosure.
09 Nov 2022, 15:26
88mph vesting contract bug disclosure
1/7. On September 24, 2022, @0xSzeth, 88mph contributor, submitted a @immunefi bug report regarding the accounting logic of the MPH reward vesting contract, which resulted in depositors getting significantly more rewards than they should.
Same news in other sources
4
09 Nov 2022, 15:29
88mph vesting contract bug disclosure
1. On September 24, 2022, Szeth, 88mph contributor, submitted a bug report regarding the accounting logic of the MPH reward vesting contract, which resulted in depositors getting significantly more rewards than they should.
2. Approximately ~3572 MPH were fraudulently claimed.
3. Since then, 88mph's core contributors have executed several contract upgrades via the governance multisig wallet that fixes the issue. Existing vest balances have stopped receiving rewards and were reset to 0 after the upgrade to prevent more fraudulent claims from the old contract.
4. To resume receiving rewards, depositors need to click the “Claim MPH” button and send the transaction.
5. Based on our bounty page https://immunefi.com/bounty/88mphv3, this submission came with a reward of USD 21,000 paid in MPH to the bug hunter via
6. As no user deposits or yield token positions were at risk during the process, the 88mph core contributors decided to disclose the bug only after the deployment of the fixes to avoid any potential new risk.
7. The veMPH system incentive should work as expected from now on. Please join our Discord server if you want to report any issue you may encounter. We deeply appreciate the community involvement in making 88mph protocol a sound and transparent foundation of money & finance.
88mph vesting contract bug disclosure.
88mph vesting contract bug disclosure
1. On September 24, 2022, Szeth, 88mph contributor, submitted a bug report regarding the accounting logic of the MPH reward vesting contract, which resulted in depositors getting significantly more rewards than they should.
2. Approximately ~3572 MPH were fraudulently claimed.
3. Since then, 88mph's core contributors have executed several contract upgrades via the governance multisig wallet that fixes the issue. Existing vest balances have stopped receiving rewards and were reset to 0 after the upgrade to prevent more fraudulent claims from the old contract.
4. To resume receiving rewards, depositors need to click the “Claim MPH” button and send the transaction.
5. Based on our bounty page https://immunefi.com/bounty/88mphv3, this submission came with a reward of USD 21,000 paid in MPH to the bug hunter via https://etherscan.io/tx/0x2952487739f1cb1c98ae9e57bd168b3df0ba56cd6c873bd0fb2a15bb206d4366.
6. As no user deposits or yield token positions were at risk during the process, the 88mph core contributors decided to disclose the bug only after the deployment of the fixes to avoid any potential new risk.
7. The veMPH system incentive should work as expected from now on. Please join our Discord server if you want to report any issue you may encounter. We deeply appreciate the community involvement in making 88mph protocol a sound and transparent foundation of money & finance.
09 Nov 2022, 15:26
7/7. The veMPH system incentive should work as expected from now on. Please join our Discord server if you want to report any issue you may encounter. We deeply appreciate the community involvement in making 88mph protocol a sound and transparent foundation of money & finance 🫶.
The veMPH system incentive should work as expected from now on.
7/7. The veMPH system incentive should work as expected from now on. Please join our Discord server if you want to report any issue you may encounter. We deeply appreciate the community involvement in making 88mph protocol a sound and transparent foundation of money & finance 🫶.
09 Nov 2022, 15:26
6/7. As no user deposits or yield token positions were at risk during the process, the 88mph core contributors decided to disclose the bug only after the deployment of the fixes to avoid any potential new risk.
As no user deposits or yield token positions were at risk during the process, the 88mph core contributors decided to disclose t
6/7. As no user deposits or yield token positions were at risk during the process, the 88mph core contributors decided to disclose the bug only after the deployment of the fixes to avoid any potential new risk.
09 Nov 2022, 15:26
88mph vesting contract bug disclosure
1/7. On September 24, 2022, @0xSzeth , 88mph contributor, submitted a @immunefi bug report regarding the accounting logic of the MPH reward vesting contract, which resulted in depositors getting significantly more rewards than they should.
88mph vesting contract bug disclosure.
88mph vesting contract bug disclosure
1/7. On September 24, 2022, @0xSzeth , 88mph contributor, submitted a @immunefi bug report regarding the accounting logic of the MPH reward vesting contract, which resulted in depositors getting significantly more rewards than they should.