Attacker compromises MM.Finance to redirect $2 million in crypto assets to their own wallet

May 4, 2022

Attacker compromises MM.Finance to redirect $2 million in crypto assets to their own wallet

MM.Finance, a group of crypto projects based on the Cronos blockchain, suffered an attack that allowed a hacker to redirect more than $2 million worth of crypto assets that were being exchanged through the project's website to their own wallet. Although MM.Finance described the attack as "DNS hijacking", it seems unlikely this is an accurate description of the attack, which seems more likely to involve phished credentials to their domain service providers.

"Please do not perform any transactions or your funds will be sent to the exploiter wallet," MM.Finance tweeted shortly before taking the website offline. Three days earlier, MM.Finance had published a blog post to address "FUD" in their ecosystem stemming from a popular Reddit post that described MMF as an "inverse pyramid of derivatives" that the author believed would "topple", and outlined the project's "rosy future".

The project promised to try to compensate users, with its developers foregoing 45 days of trading fees to reimburse users. They also appealed to the OKC crypto exchange to intervene to help recover funds from someone they believed to be the attacker, and threatened the attacker with the FBI. "With all these information, we have more than what we need to bring this information to the FBI," they wrote on Twitter. "So here's the deal, return 90% of the funds you stole and we will let this go, no questions asked. You have 48 hours to return these funds."

Tweet by MM.Finance
"Mm Finance — The road ahead", MM.Finance blog
"Personal Take on Events and Existing Tokenomics", post from r/MMFinance
"DNS Hi-Jacking Post Mortem & Compensation", MM.Finance blog

May 4, 2022

ape holders can use multiple slurp juices on a single ape

A grimacing monkey wearing a golden eagle cowl with blue feathers and red feathers, with a galaxy behind it

(attribution)

a lotta yall still dont get it

ape holders can use multiple slurp juices on a single ape

so if you have 1 astro ape and 3 slurp juices you can create 3 new apes

Tonight's slurp juice mint event is essentially a minting event for both Lab Monkes and Special Forces

May 3, 2022

Video game company Square Enix agrees to sell much of their Western IP so they can go into the blockchain market

Tomb Raider (attribution)

Video game company Square Enix, the creators of titles including Deus Ex and Tomb Raider, agreed to sell off the intellectual property rights to those games, as well as other games and their respective game studios. The move, they said, was so they could invest more heavily in "blockchain, AI, and the cloud". This didn't come as an enormous surprise, as in January, Square Enix CEO announced these intentions in a letter that acknowledged that that (apparent subset) of players who "play to have fun" wouldn't be thrilled with their blockchain plans.

The sale agreement announcement came at a tough time for Square Enix, as it was published the same day as a report from the Wall Street Journal that "NFT Sales are Flatlining".

May 3, 2022

NFT sales drop 92% from peak, says Wall Street Journal

The Wall Street Journal reported that "the NFT market is collapsing", citing data from NonFungible that showed daily average sales of NFTs had dropped 92% from their September peak. They also reported that active wallets had dropped 88% from their November peak, suggesting fewer people were regularly trading NFTs. This may reflect growing disillusionment with a sector that's increasingly earned its reputation as full of scams and opportunities to lose money.

However, the article must be taken with a grain of salt. It's very difficult to determine in the moment what's simply a temporary lull rather than a death spiral, and notoriously inconsistent NFT and crypto data sources can tell wildly different stories.

"NFT Sales Are Flatlining", Wall Street Journal

May 2, 2022

The Vatican plans a metaverse NFT gallery

A grid of four rendered humanoid figures with very shiny skin. The women have large breasts and tiny waists, the man is muscular and slim. The top left woman is wearing a shiny white bodysuit and an iridescent complex harness around her breasts and midsection. The top right woman is wearing a translucent pink bra with large nipple rings, and fishnet pantyhose under purple pants. The bottom left man is wearing no shirt but an iridescent chest harness, and ashiny blue bottoms. The bottom right woman is wearing a very small orange crop top that reveals the bottom half of her breasts, tiny orange underwear, and a translucent pink waist harness.

Can't wait to roll up to the Vatican museum in my metaverse avatar (attribution)

A press release from metaverse developer Sensorium announced a "VR and NFT gallery" that would host art and content for the Vatican. The project will allow VR, PC, and mobile interactions, and enable people to "build unique NPCs and communicate with them". That part is a promising prospect for anyone interested in watching the Roman Catholic Church try to deal with the challenges of moderating metaverse shenanigans, and made altogether more amusing by the fact that Sensorium's current collection of example metaverse avatars are all hypersexualized, apparently covered in oil, and wear skimpy or sheer outfits apparently made from mesh, latex, and various harnesses.

For now it sounds like the project doesn't involve selling NFTs, which raises the question of why NFTs are required at all when the goal seems to just be to display artwork online — something the Vatican already does. Personally, until I can own the Popemobile in the metaverse, I'm not interested.

May 1, 2022

Juno whale threatens to sue network validators if community confiscates his tokens

(attribution)

The Juno community has officially voted to confiscate over 2.95 million $JUNO owned by one whale who they believe gamed the airdrop to obtain more than his fair share. This follows a long community discussion about his actions, and formalized a previous community poll on what to do. When the discussions began, the 2.95 million $JUNO to potentially be confiscated were worth a combined $121 million. However, the $JUNO price has dropped from the then all-time-high of around $40 to $11.30, putting the value of the tokens to be confiscated closer to $33 million.

The whale has repeatedly appealed to the community not to revoke his tokens, even trying to claim that the Juno developers had been secretly selling off $JUNO and damaging the community. Unfortunately for him, he didn't succeed in swaying the community, who voted on April 29 to confiscate his tokens.

The whale has threatened to take "legal action against each validator" if the community burns or locks the tokens that previously belonged to him, and which he claims to have been managing on behalf of clients in an investment scheme.

"Juno Blockchain Community Officially Votes to Revoke Whale’s Tokens", CoinDesk

May 1, 2022

Wikimedia Foundation stops accepting cryptocurrency donations

(attribution)

The Wikimedia Foundation, the non-profit organization that owns and operates Wikipedia and related projects, announced that they would no longer accept donations in cryptocurrency. The announcement followed a formal request from the community that the WMF no longer accept such donations, a request that came from three months of discussion among members of the community.

The Wikimedia Foundation has accepted cryptocurrency donations since 2014, accepting donations in cryptocurrencies including Bitcoin, Bitcoin Cash, Ether, Ripple (XRP), Litecoin, Dogecoin, and the DAI and USDC stablecoins. However, it has made up a small portion of the non-profit's donation revenue — they received only $130,000 worth of crypto donations in the last fiscal year, which made up 0.08% of their revenue.

There has been strong pressure from crypto advocates on the WMF to accept crypto donations — both in 2014 when it was initially implemented, but also via brigading of the recent community discussion.

Announcement from the Wikimedia Foundation
Community discussion culminating in the request

April 30, 2022

Phishing sites appearing to be the "Otherside" Bored Ape land project steal NFTs valued at $6 million

(attribution)

In what should surprise nobody, some of the historically phishing-prone fans of the pricey Bored Apes project fell for scams that pretended to be the Bored Apes' new land project, called "Otherside". In collectors' hurry to mint the metaverse land NFTs, some fell for phishing sites pretending to be the real deal.

Blockchain sleuth zachxbt found one such address that had netted around $1 million in NFTs just today, and tracing its transactions led to two other scammer wallets containing $5.1 million of other stolen NFTs.

Tweet thread by zachxbt

April 30, 2022

Popular NFT mint spikes Ethereum gas prices; OpenSea transaction fees exceed $3,500

A pixel-art image of a blue goat sitting in a red bowl

Goat Soup #3672: $275 for the NFT, $3,850 for the fee (attribution)

The much-awaited Bored Ape Yacht Club "Otherside" metaverse land sale began, and its popularity just about wrecked Ethereum for everyone else. Gas fees, which increase based on network congestion, spiked to shocking levels, with an average OpenSea sale costing more than 1.25 ETH ($3,500) in gas.

Most trading on OpenSea during this period was for the much-anticipated Otherside land deeds, which sell for around 5 ETH ($13,500) plus gas. However, some people oddly continued to buy and sell cheaper NFTs, including one person who bought a 0.1 ETH ($275) NFT and paid $3,850 in transaction fees.

Tweet thread by Molly White
"Goat Soup #3672" sale on Etherscan
Archived gas fee page showing high prices

April 30, 2022

Solana goes down again

(attribution)

On April 30, NFT minting bots began flooding the Solana network with 4 million transactions per second, causing the network to lose consensus. The project tweeted that "Engineers are still investigating why the network was unable to recover, and validator operators prepare for a restart." The network was offline for seven hours.

This is hardly the first instability the network has demonstrated, much to the chagrin of its users. Transaction flooding is an issue on Solana in part because of the low transaction fees compared to networks like Bitcoin and Ethereum, which have relatively high gas fees that would make flooding extremely expensive.

No JavaScript? That's cool too! Check out the Web 1.0 version of the site to see more entries.