maticnetwork / contracts

Smart contracts comprising the business logic of the Matic Network
https://matic.network
GNU General Public License v3.0
1.15k stars 506 forks source link

fix: remove transferWithSig in MRC20 #392

Closed imyourm8 closed 2 years ago

marsrobertson commented 2 years ago

Blog: https://blog.polygon.technology/all-you-need-to-know-about-the-recent-network-upgrade/

image

Technical blog: https://medium.com/immunefi/polygon-lack-of-balance-check-bugfix-postmortem-2-2m-bounty-64ec66c24c7d

THE EXPLOIT IS PRETTY SIMPLE

I'm curious about all the "panic in the war room" and all the private messages issued to node operators...

...also how did you share the updated software? Sending arbitrary binaries?

Do you happen to know all of them in-person?

https://wallet.polygon.technology/staking/

image

It was pretty critical, almost like https://en.wikipedia.org/wiki/Log4Shell

https://en.wikipedia.org/wiki/Log4Shell