$2.2 million was stolen overnight

3d11cdf84453f85726402ec94bc7b885.png

* * *  Original: Liu Jiaolian  * * * 

Extra: Today, "Internal Reference : An Analysis of the Case of a Domestic DAO Organization Being Criminally Filed" was published on "Liu Jiaolian Internal Reference" . Welcome to pay attention to the official account "Liu Jiaolian Internal Reference" and read it.

---

Bitcoin continues to hover above 29k overnight.

Under the superficial boredom, all kinds of dogs are undercurrents.

A Twitter big V was replaced by @Pauly0x, with 150,000 Twitter fans. A few days ago, a local dog called Pond0x was launched, and it went online and shouted "the next PEPE". The fans rushed with ether, unexpectedly There was a bug in the contract code, which wiped out all the funds of Chongtugou, and it was left dumbfounded and full of feathers. [1]

The bug in the contract code is that the transfer function in the following contract code allows anyone to transfer money from any address: [2]

b03f41ae8d90ac8d1059da2ea319bce7.png

Figure: transfer code

Here, the project side showed off a bit, and built an address conversion function \_brutalized, which seems to be to get a pseudo-random address from the original address, but unfortunately, he obviously got the working principle of Ethereum wrong:

4d887b7a1997707580bc53b9bc593c3a.png

Figure: "pseudo-random" code

The function of the gas operator in the EVM is not to give a non-deterministic gas cost, but to give the gas remaining so far. This function allows the attacker to control the calculation result at will by controlling the given gas, so as to easily wipe out the balance in any currency-holding address.

To say that the real name of this big V is said to be Jeremy Cahen, he is also well-known in the local dog circle. The imitations of CryptoPhunks and NotLarvaLabs back then came from him.

In addition, in the first half of this year (2023), probably in May, he did a "social experiment" similar to "I am Qin Shihuang, send money": directly released the Ethereum address on Twitter (yougetnothing. eth), claiming to send money (Ethereum) at will, and to make it ugly, will not promise any returns. The result of the experiment is that this tweet was viewed more than 1.2 million times in one day, and nearly 600 ETH and more than 1 million US dollars were sent to the money receiving address! [3]

This time after Pond0x made a fuss, this Jeremy Cahen still laughed at the fans who lost their money on Twitter, saying that this is not a bug (defect), this is a feature (feature), this experiment is to verify your greed , to teach you a lesson.

I have seen an arrogant project party, but I have never seen such an arrogant project party. An experiment of 2.2 million US dollars has to be said to be expensive, but it does not seem to be a big money in the currency circle where tens of millions of dollars are wiped out. No matter how big or small the money is, if it falls on a loss-making person, it will cause blood in the heart at the slightest, and the mountain will be overwhelming at the worst.

Some tuition fees are simply too expensive. Stock up on big pies, and pay as little as possible for Tugou's tuition.

References:

- [1] https://web3isgoinggreat.com/single/pond0x-bug

- [2] https://etherscan.io/token/0x1d4214081985ad20aa3ca93a2206ae792635cbec#code

- [3] https://beincrypto.com/crypto-influencer-1m-ethereum-social-experiment/

* * *  Produced by Liu Jiaolian  * * * 

Join the planet to unlock full-text reading rights within 365 days of the year

You can also join the exclusive VIP community

32372e89136405ced9c555d6b001061f.jpeg

(The annual fee system is equivalent to 1.6 yuan/day)

Lesson: Liujialian Bitcoin Principle Audio Lesson‍‍‍‍

Book: "God Rolls the Dice: A History of Bitcoin"

Liu Jiaolian official account related articles to read:

Altcoins will fail

Altcoins' impending failure (and what you can do to speed it up)

Internal reference: Why is it difficult to hold altcoins for a long time?

Altcoins: A Deadly Seduction

Beyond the pancakes are copycats

200,000 times PEPE in 20 days, the rational calculation of the earth dog

Dirt Dog Season, Anxiety in the Air

SHIB uses fakes to practice

You can't learn the success of SHIB

(Public account: Liu Jiaolian. Knowledge Planet: Reply to "Planet" from the public account)

(Disclaimer: The content of this article does not constitute any investment advice. Cryptocurrency is a very high-risk product, and there is a risk of zeroing at any time. Please participate carefully and be responsible for yourself.)

Guess you like

Origin blog.csdn.net/blockcoach/article/details/132013921