Read on Twitter
Rarible's Flawed System Exploited: Unstoppable Domains Auction Takes a Hit
In a recent auction organized by @unstoppableweb on the @rarible platform, multiple exploitative actions were uncovered, showcasing the vulnerabilities inherent in Rarible's auction mechanism. Here's a breakdown of the events:
1. Bid Shielding Exploit:A malevolent tactic was employed where an actor placed a very high bid, deterring others from bidding.
This actor then withdrew their funds just before the auction ended, invalidating their high bid and forcing Unstoppable Domains to accept a much lower bid.
2. Notorious Actors:An actor named Gaunter O'Dimm emerged central to the bid shielding exploit.
Another actor, Ghadfather.crypto, won several domains only to resell them immediately, sometimes at lower prices, without any clear motive.
3. Lost Funds:@NadjaBester reported a loss of funds without receiving the domain she bid for, indicating a potential bug or another exploit in Rarible's system.
4. Immediate Resales:Ghadfather.crypto’s immediate resale of domains hints at possible market manipulation or another underlying scheme.
5. Auction House Change:Due to these issues, Unstoppable Domains decided to halt auctions on Rarible and move to a more traditional auction house for future sales.
Technical Details:
The bid shielding exploit leverages a flaw in Rarible's UI which prevents users from placing bids lower than the highest bid.
When the high bidder withdraws their funds, the system is forced to accept the next highest bid, which is significantly lower.
The continuing of the auction beyond the stipulated time suggests a flaw in Rarible’s timer mechanism which should have closed the auction after 10 minutes without a new bid.
These incidents underline the urgent need for Rarible and similar platforms to address these exploitable flaws to ensure fair auction practices and to safeguard the interests of genuine participants.
In a recent auction organized by @unstoppableweb on the @rarible platform, multiple exploitative actions were uncovered, showcasing the vulnerabilities inherent in Rarible's auction mechanism. Here's a breakdown of the events:
1. Bid Shielding Exploit:A malevolent tactic was employed where an actor placed a very high bid, deterring others from bidding.
This actor then withdrew their funds just before the auction ended, invalidating their high bid and forcing Unstoppable Domains to accept a much lower bid.
2. Notorious Actors:An actor named Gaunter O'Dimm emerged central to the bid shielding exploit.
Another actor, Ghadfather.crypto, won several domains only to resell them immediately, sometimes at lower prices, without any clear motive.
3. Lost Funds:@NadjaBester reported a loss of funds without receiving the domain she bid for, indicating a potential bug or another exploit in Rarible's system.
4. Immediate Resales:Ghadfather.crypto’s immediate resale of domains hints at possible market manipulation or another underlying scheme.
5. Auction House Change:Due to these issues, Unstoppable Domains decided to halt auctions on Rarible and move to a more traditional auction house for future sales.
Technical Details:
The bid shielding exploit leverages a flaw in Rarible's UI which prevents users from placing bids lower than the highest bid.
When the high bidder withdraws their funds, the system is forced to accept the next highest bid, which is significantly lower.
The continuing of the auction beyond the stipulated time suggests a flaw in Rarible’s timer mechanism which should have closed the auction after 10 minutes without a new bid.
These incidents underline the urgent need for Rarible and similar platforms to address these exploitable flaws to ensure fair auction practices and to safeguard the interests of genuine participants.
For more detailed information, you might want to follow @UDTradingClub thread directly. You could also visit the Unstoppable Domains and Rarible platforms to see if there are any official statements or updates regarding the mentioned auction event.
x.com/udtradingclub/…
x.com/udtradingclub/…
• • •
Missing some Tweet in this thread? You can try to
force a refresh
