Archived tweet

Tweet by Definalist:

How did such a huge and foolish incident occur? - It seems that during the process of reflecting $APT coin deposits, there was a failure to check the type arguments, and all same functions transfers were recognized as the same APT native token. - Under normal circumstances, when the function is 0x1::aptos_account::transfer_coins, it should check the value of arguments[1] as a condition (for example, type_arguments[0] == 0x1::aptos_coin::aptosCoin) - However, it appears that when the function is 0x1::aptos_account::transfer_coins, it was recognized as the same APT token in all cases. If all APT ecosystem tokens were sent to Upbit's wallet, they would have been mistakenly treated as APT native coins lol Fortunately, amidst the misfortune, the scammer's token had a 6 decimal, while the native token had a decimal of 8, so a major disaster was averted. If the scam token had a decimal of 8, all users would have received $25,000 instead of $250, leading to thousands of users dumping $25,000 worth of APT, causing significant disruption Above technical explanation of the incident was provided by @mingmingbbs , Co-founder of @_TUNA_BOT Tweeted at Sep 24

Tweet #1

Image #1:

Image

Image #2:

Image

Links: