chrisdior: "🚨JUST IN: @SubQueryNetwork EXPLOITED - $130K LOST setContractAddress() and s"

chrisdior@chrisdior777·12 Nis

🚨JUST IN: @SubQueryNetwork EXPLOITED - $130K LOST setContractAddress() and setBatchAddress() in Settings.sol had zero access control. Any wallet could silently replace the protocol's core contract registry. After draining, attacker restored original addresses to cover tracks

English

3.4K

0xGondar@0xGondarxyz·12 Nis

@SubQueryNetwork @chrisdior777 Who audited your protocol?

English

Ruile@Tha_Druid·14 Nis

@0xGondarxyz @SubQueryNetwork @chrisdior777 why they deleted the reply

English

SubQuery@SubQueryNetwork·15 Nis

@Tha_Druid @0xGondarxyz @chrisdior777 Hmm I don't think we deleted our response? We were audited by Hacken. You can find full details of the incident in the report we released: x.com/SubQueryNetwor…

SubQuery@SubQueryNetwork

We’ve published our full post-mortem on the recent security incident. The investigation identified an additional exploit, bringing the total impacted to 359,614,732 SQT. No private keys were compromised. Fixes are live, and all affected users will be fully compensated. Full details + recovery plan ↓ bit.ly/4syDr5M

English

Paylaş