Emin Gun Sirer: Stars Arena sees quick recovery after $2,000 breach

Emin Gun Sirer is a public record based on article evidence, entity context, event links, and relationship context.

The Avalanche-based social protocol, Stars Arena, recently experienced a security breach on October 5th, which exposed a critical flaw. This flaw allowed unauthorized access to Avax tokens from its smart contracts, endangering over $1 million in assets. The vulnerability was first identified by analyst lilitch.eth, who traced it back to a faulty getPrice function enabling malicious actors to transfer funds to their wallets, potentially draining the contract. The Block Research also confirmed this security gap.

Also read: Mixin network hit by $200 million hack: operations halt Deterred by a long, arduous process Despite this vulnerability, the network’s high transaction fees act as a deterrent for potential hackers. Exploiting the flaw would require multiple calls to the contract, making it an unprofitable endeavor. Stars Arena, inspired by FriendTech, launched in September and quickly gained traction, locking over $1 million within two weeks and causing a surge in on-chain transactions on the Avalanche network.

Also read: Sony discloses cybersecurity breach exposing employee Data Swift response kept loss at minimum On October 6th, Emin Gun Sirer, co-founder of Ava Labs, took to social media to announce that the Stars Arena vulnerability has been successfully remedied. Attackers would now need to spend $0.25 to acquire a mere $0.04, resulting in a total loss of just $2,000.The swift response by the Avalanche community and the protocol’s developers demonstrates the resilience and adaptability of blockchain ecosystems when addressing security issues.

While the breach was concerning, it highlighted the robustness of the Avalanche network and the commitment of its stakeholders to a secure and thriving ecosystem. So much FUD about a Stars Arena exploit that has (1) already been fixed, (2) cost the attacker $0.25 to make $0.04, and (3) the attacker extracted a sum total of only $2,000. Now that it's over, let's get back to having fun in the arena. — Emin Gün Sirer🔺⚔️ (@el33th4xor) October 5, 2023