An attacker hijacks management of Twister Money utilizing a malicious supply

This data was shared by @samczsun of research-focused expertise funding agency Paradigm, who revealed that when sharing the malicious supply, the attacker stated he used logic much like a suggestion beforehand submitted by the group. However this time the supply had a further characteristic.

As @samczsun defined:

Full administration management of Twister Money permits an attacker to revoke all locked votes, empty all administration contract tokens, and block the router. On the time of writing, the attacker “simply took 10,000 votes as TORN and offered every thing,” @samczsun stated.

This assault reminds cryptocurrency traders to examine the descriptions and logic of the presents. An lively Twister Money group referred to as Tornadosaurus-Hex or Mr. Tornadosaurus Hex, confirmed that every one administration funds are probably compromised and requested all members to withdraw all administration funds.

As proven above, additionally they tried to create a contract that might probably reverse the modifications, however nonetheless supply the group to withdraw their funds. Cointelegraph additionally obtained a misery name from one of many Twister Money group builders who confirmed the above modifications and said:

The group is at present searching for Solidity builders to assist save the protocol from extinction. They additional said that “we have to contact Binance, this trade has extra tokens than the attacker”.

Proceed studying Coin Telegraph.