MakerDAO, the decentralized organization that runs on Ethereum, has fixed a critical bug that could have resulted in a complete loss of funds for all Dai users.
50,000 bountyOn Oct. 1 HackerOne user lucash-dev disclosed a report that revealed a critical bug in MakerDAO's planned Multi-Collateral Dai upgrade.
The bug could have allowed an attacker to steal all of the collateral stored in the MCD system - possibly within a single transaction, Lucash-dev said.
The bug was caught during the testing phase of the MCD upgrade and before any users had access to the system.
The report reveals that the attack was possible due to a complete lack of access control in a MakerDAO smart contract.
"A lack of validation in the method flip.kick allows an attacker to create an auction with a fake bid value. Since the end contract trusts that value, it can be exploited to issue any amount of free Dai during liquidation. That Dai can then be immediately used to obtain all collateral stored in the end contract."
Lucash-dev reported the security flaw via the HackerOne forum and received a $50,000 bounty from MakerDAO's bounty program which was the first critical finding in the program.
MakerDAO gives grant to freelance employment platformCointelegraph reported in September that blockchain-based employment platform Opolis received a developer grant from MakerDAO, which will allow them to bring MakerDao's stablecoin DAI to Opolis' blockchain-based employment platform for freelancers.
"Maker is looking forward to seeing how Dai can help de-risk this emerging workforce."
Hackerone User Reveals Critical Bug Through MakerDAO Bounty Program
Published on Oct 3, 2019
by Cointele | Published on Coinage
Coinage
Mentioned in this article
Recent News
View All
Blockchain Bites: Bitcoin's Run, Uniswap's Hemorrhaging Value, Anchorage's Banking Bid
Bitcoin is nearing all-time highs in price and market cap last set three years ago.
Japan's megabanks to lead experiment with digital yen
We have, in order, Cheese Bank with a $3.3 million theft, Akropolis with its $2 million loss, Value DeFi with a whopping $6 million exploit and finally Origin Protocol's loss of $7 million.
Number of new Bitcoin addresses spikes amid growing FOMO
Japan's three largest banks, as part of a group of 30 private sector actors, are set to collaborate on an experiment with a digital yen.
Not just Wall Street: Quant trader explains why Bitcoin price is going up
Sam Trabucco, a quantitative trader at Alameda Research, believes four general factors are pushing up the price of Bitcoin.