Middlemarch, the developer of Ethscriptions, an Ethereum notice protocol towards Ordinals, mentioned just a few days in the past that Ethscriptions was attacked, and about 123 addresses misplaced about 202 Ethscriptions to this vulnerability.
The vulnerability isn’t within the Ethscriptions protocol, however in a selected good contract. The protocol itself and different applications working on it have been unaffected.
The rationale for the vulnerability is that the Ethscription state can’t be reached by contract. The contract itself can not know who owns a selected Ethscription, and the person could also be paying for a non-existent Ethscription.
The simplest strategy to keep away from this sort of exploitation is to ask a trusted third occasion to verify which deposits are legitimate.
However on this case, whoever has the personal keys and might affirm which deposits are legitimate is a single level of failure. The crew needed to jot down a reference implementation that might be validated by the protocol itself.
DISCLAIMER: The knowledge offered by WebsCrypto isn’t an funding supply. The articles printed on this website replicate private opinions solely and don’t have anything to do with the official place of WebsCrypto.
