Bancor network vulnerability (they are still yet to tweet about it) PLEASE CHECK YOUR ACCOUNTS

Yesterday they released their v0.6 smart contract and there is an issue. This does not inspire confidence given they lost 23.5 million from a hack in 2018:https://ift.tt/2Cg1KC1 is from their admin on Telegram: 40 mins agoDear Community,Last night at 12:00AM GMT, a vulnerability was discovered in a new version of the BancorNetwork v0.6 smart contract deployed on June 16 2020.All user funds are safe.We have deployed a new version of the BancorNetwork contract that fixes the vulnerability.If you have interacted with Bancor in the last 48 hours, please follow the steps below to check if your wallet has been affected.For MetaMask or external wallet users see below, for Bancor Wallet users skip to “Instructions for Bancor Wallet users”.——Instructions for MetaMask and external wallet usersVisit https://approved.zone/ - your MetaMask or external wallet will be automatically connected.Search the web page for the following 3 smart contract addresses:- 0x8dFEB86C7C962577deD19AB2050AC78654feA9F7- 0x5f58058C0eC971492166763c8C22632B583F667f- 0x923cAb01E6a4639664aa64B76396Eec0ea7d3a5fIf the smart contract address is found on the page, you will see a purple button below to the address "Decline for contract".Click on it, and confirm the transaction in your wallet.If you’ve seen one of the affected network addresses in the approved.zone page, proceed with these steps to inform us:- visit support.bancor.network- send a support ticket with your wallet addressUpon receiving the support ticket and verifying the affected token amounts, we will transfer the exact amounts of the affected funds to your wallet.——Instructions for Bancor Wallet usersRetrieve Bancor wallet address:- go to bancor.network- go to "My Wallet"- click the "My Address" button"- select "ETH"- you'll see your wallet address- copy your wallet addressVisit https://approved.zone/ - paste your Bancor wallet address into the search bar.Search the web page for the following 3 smart contract addresses:- 0x8dFEB86C7C962577deD19AB2050AC78654feA9F7- 0x5f58058C0eC971492166763c8C22632B583F667f- 0x923cAb01E6a4639664aa64B76396Eec0ea7d3a5fIf one of the smart contract addresses is found on the page, go back to bancor.network and perform a small conversion on bancor.network. Once executed, the conversion will immediately revoke all approvals to the affected BancorNetwork contracts.Then, proceed with these steps to inform us:- visit support.bancor.network- send a support ticket with your wallet addressUpon receiving the support ticket and verifying the affected token amounts, we will transfer the exact amounts of the affected funds to your wallet.

Submitted June 18, 2020 at 12:07PM

No comments:

Post a Comment