1. Decentralization- Collective decision making 2. Participation - Anyone can join or create proposals 3. Publicity- All votes and transactions are public 4. Community- Working together for a common goal
Use cases
Each DAO was created with their own goals/objectives in mind. It can be anything from deciding trading fees for @Uniswap, simply trying to buy the constitution with @ConstitutionDAO or simply giving out FREE PIZZA with @Pizza_DAO.
The possibilities are endless.
Exploits
DAOs can also be exploited since they’re created using smart contracts. The DAO had an exploit in it's code that lead to the #Ethereum blockchain being forked.
Although incidents like this can't be completely eliminated, they can be greatly reduced with audits.
To learn more about our audits, check out: slowmist.com
Follow us next week in our “What is Series” as we go over what is a #rugpull and how to spot them.
• • •
Missing some Tweet in this thread? You can try to
force a refresh
Brief Analysis of Nomad Bridge Exploit
The cross-chain interoperability protocol Nomad Bridge has been hacked, resulting in the unexpected withdrawal of funds. Details are as follows🧵:
1/7 In the Replica contract of Nomad, users can initiate cross-chain transactions through the send function and execute them on the target chain through the process function.
2/7 During process operations, it checks that the user submitted message must belong to an acceptable root via the acceptableRoot function. This root will be set in prove function. Therefore, the user must submit a valid message in order to operate.
Week 10 of our "What is Series" 🎓
What is a 𝗗eFi???
DeFi or Decentralized finance refers to financial applications that allows users to gain access to financial services without the need for intermediaries such as banks or other financial institutions.
👇
Traditional Finance vs Decentralize Finance
Traditional financial systems rely on a central entity to govern all operations.
Being the middleman, they take a small cut each step of the way. DeFi helps drastically cut down these costs since there is no middle man.
Use Cases
Here are some services in traditional finance and their counterparts in DeFi.
1/ On July 17, premint[.]xyz was attacked by a hacker who planted malicious JS files on the premint[.]xyz website. Spoofing the user into signing the transaction setApprovalForAll(Address,bool) to steal the user's NFT and other assets.
2/ The SlowMist security team reminds users that if you have used the premint[.]xyz platform please check your approval and cancel malicious approvals in time.
On July 10, 2022, OMNI Protocol was the victim of a flash loan attack. We investigated this incident and these are our findings.
1/ The attacker used #doodle NFTs as collateral through the supplyERC721 function, providing them with the corresponding NToken. They then call the borrow function to borrow WETH.
2/(1) Use withdrawERC721 to withdraw the NFT, and follow up with the internal function executeWithdrawERC721 to find that the withdrawal will first burn the NToken through the burn function.
Here’s some on 𝙎cams, 𝙀xploits, & 𝙍ugs that happened this week.
1. British Army Social Media Hack 2. @Crema_Finance Incident 3. New scam techniques
It’s a good thing when there isn’t much to report on events like this. 😅
Details 👇
Date: July 3
Event: British Army's Social Media hack
The British Army's Twitter and YouTube accounts were hacked to promote crypto scams. Scammers are now targeting accounts with a large following to make their scams appear more legitimate.
Crema Finance suffered from a flashloan attack, leading to losses over $8M. After a lengthy negotiation, the hacker received 45,455 SOL as white hat bounty and returned the remaining funds.