BPET
1,245 views
5 Posts
Hot
Latest
LIVEkaymyg
--
Bullish
A newly-launched #PvP feature has encountered an exploit resulting in the theft of 91.5 #ETH (~$254K). The exploit involved the withdrawal of #BPET tokens from an on-chain PvP contract. The perpetrator's address on #Arbitrum is 0x22518a5c1f3e29b01d8b04145953ce20d3c99f31. The stolen funds are stored at 0x0671E3357655AaCe65fCBe323293A6760579B6e1 on the #Ethereum mainnet. The platform seeks assistance from renowned exploit investigators such as @zachxbt and @RektHQ to trace the exploiter. Specific wallet addresses associated with the exploit are provided, and a detailed post-mortem report explains the incident. The project assures that ongoing PvP and operational aspects remain unaffected. Efforts are underway to collaborate with third parties to identify the exploiter's real-life identity. The stolen funds' current status can be tracked through provided transaction details.
https://etherscan.io/address/0x0671e3357655aace65fcbe323293a6760579b6e1
@Michaeltalkhere on X
https://etherscan.io/address/0x0671e3357655aace65fcbe323293a6760579b6e1
@Michaeltalkhere on X
New #socialfi on #Arbitrum
#xPet.Tech is an innovative platform merging the fun of virtual pet ownership with blockchain technology's transformative capabilities. It offers users an interactive space to nurture, care for, and trade virtual pets.
Key Features:
1. Pet Raising: Users can care for virtual pets, fostering a bond akin to real-world pet ownership.
2. Twitter Chests: Hidden chests on Twitter unlock rewards for pets, encouraging exploration.
3. Farming: Pet owners can cultivate a virtual farm, earning rewards to enhance their pets.
4. Adventures: Pets embark on adventures, facing various challenges.
5. Collaborative Earnings: Users team up to boost their earnings together.
6. Marketplace: A secure platform for buying, selling, and trading pets and items.
7. Staking: Users stake assets to earn interest within the xPet.Tech ecosystem.
8. Borrowing: Utilize assets as collateral to borrow #XPET tokens.
9. Conversion: Convenient system to interchange between XPET and #BPET assets.
10. Revenue Sharing: Transparent sharing of platform earnings back to the community.
xPet.Tech revolutionizes virtual pet ownership with blockchain, ensuring security, transparency, and authenticity in all interactions. Join the xPet.Tech community to experience the joys and benefits of virtual pet companionship.
Use the invite code below to catch up.
(xpet_4f3314f7)
#xPet.Tech is an innovative platform merging the fun of virtual pet ownership with blockchain technology's transformative capabilities. It offers users an interactive space to nurture, care for, and trade virtual pets.
Key Features:
1. Pet Raising: Users can care for virtual pets, fostering a bond akin to real-world pet ownership.
2. Twitter Chests: Hidden chests on Twitter unlock rewards for pets, encouraging exploration.
3. Farming: Pet owners can cultivate a virtual farm, earning rewards to enhance their pets.
4. Adventures: Pets embark on adventures, facing various challenges.
5. Collaborative Earnings: Users team up to boost their earnings together.
6. Marketplace: A secure platform for buying, selling, and trading pets and items.
7. Staking: Users stake assets to earn interest within the xPet.Tech ecosystem.
8. Borrowing: Utilize assets as collateral to borrow #XPET tokens.
9. Conversion: Convenient system to interchange between XPET and #BPET assets.
10. Revenue Sharing: Transparent sharing of platform earnings back to the community.
xPet.Tech revolutionizes virtual pet ownership with blockchain, ensuring security, transparency, and authenticity in all interactions. Join the xPet.Tech community to experience the joys and benefits of virtual pet companionship.
Use the invite code below to catch up.
(xpet_4f3314f7)
Via @Michaeltalkhere ($BPET dev team lead ) on X regarding the #PvP contract #exploit
As announced, I would like to disclose the details of the exploit and how did we get the money back.
Firsly, the reason of the exploit was there was a bug in ârequest swap from #POTION to #BPET â functionality that makes the exploiter be able to withdraw excessive amounts of $BPET tokens from the PvP contract after staking their own tokens.
Below are some noticeable withdrawing transactions the exploiter made.
(https://arbiscan.io/tx/0x058b8808e721f68c01c62ad70687f38f39d749bfc9d0e8f6be839c3af603dec6)
(https://arbiscan.io/tx/0x1ad1f7536e2d91cc5aeef6e29f948ee73fa760a482b0455ca78adade83c4ef53)
(https://arbiscan.io/tx/0x500713e7c025d5ab71e2446069a46a60009ef8060d2537bc4b29296c6f76f9d7)
Right after becoming fully aware of the exploit, we did 2 things
- Checked out to see if the exploiterâs addresses can be mapped with any Twitter profiles of any xPet users (and we found the user mapping with one of the exploiter addresses)
- Reached out to all partners in our network who can pour in the helps. They were explorer sites, centralized exchanges, privacy mixers, offramp tools, and security firms.
To be specific, #Etherscan team helped us to tag all 4 addresses related to the exploiter on Ethereum on Arbiscan as âxPet exploiterâ. Thanks for that, the exploiter addresses were visibly exposed to and closely-watched by the public. All the centralized exchange, privacy mixer, and offramp tool teams helped to take close notice In case any of the exploiting address would have interactions with centralized exchange Hot wallets, privacy mixer contracts, or offramp tool depositing addresses. The security firms has helped us follow all, even smallest, onchain traces from the exploiter
In short, we had the combined efforts from multiple parties to closely monitoring the exploiter's movements and ensure that exploiter doesnât have any chance to get the stolen funds mixed or obscured.
As announced, I would like to disclose the details of the exploit and how did we get the money back.
Firsly, the reason of the exploit was there was a bug in ârequest swap from #POTION to #BPET â functionality that makes the exploiter be able to withdraw excessive amounts of $BPET tokens from the PvP contract after staking their own tokens.
Below are some noticeable withdrawing transactions the exploiter made.
(https://arbiscan.io/tx/0x058b8808e721f68c01c62ad70687f38f39d749bfc9d0e8f6be839c3af603dec6)
(https://arbiscan.io/tx/0x1ad1f7536e2d91cc5aeef6e29f948ee73fa760a482b0455ca78adade83c4ef53)
(https://arbiscan.io/tx/0x500713e7c025d5ab71e2446069a46a60009ef8060d2537bc4b29296c6f76f9d7)
Right after becoming fully aware of the exploit, we did 2 things
- Checked out to see if the exploiterâs addresses can be mapped with any Twitter profiles of any xPet users (and we found the user mapping with one of the exploiter addresses)
- Reached out to all partners in our network who can pour in the helps. They were explorer sites, centralized exchanges, privacy mixers, offramp tools, and security firms.
To be specific, #Etherscan team helped us to tag all 4 addresses related to the exploiter on Ethereum on Arbiscan as âxPet exploiterâ. Thanks for that, the exploiter addresses were visibly exposed to and closely-watched by the public. All the centralized exchange, privacy mixer, and offramp tool teams helped to take close notice In case any of the exploiting address would have interactions with centralized exchange Hot wallets, privacy mixer contracts, or offramp tool depositing addresses. The security firms has helped us follow all, even smallest, onchain traces from the exploiter
In short, we had the combined efforts from multiple parties to closely monitoring the exploiter's movements and ensure that exploiter doesnât have any chance to get the stolen funds mixed or obscured.
A newly-launched #PvP feature has encountered an exploit resulting in the theft of 91.5 #ETH (~$254K). The exploit involved the withdrawal of #BPET tokens from an on-chain PvP contract. The perpetrator's address on #Arbitrum is 0x22518a5c1f3e29b01d8b04145953ce20d3c99f31. The stolen funds are stored at 0x0671E3357655AaCe65fCBe323293A6760579B6e1 on the #Ethereum mainnet. The platform seeks assistance from renowned exploit investigators such as @zachxbt and @RektHQ to trace the exploiter. Specific wallet addresses associated with the exploit are provided, and a detailed post-mortem report explains the incident. The project assures that ongoing PvP and operational aspects remain unaffected. Efforts are underway to collaborate with third parties to identify the exploiter's real-life identity. The stolen funds' current status can be tracked through provided transaction details.
https://etherscan.io/address/0x0671e3357655aace65fcbe323293a6760579b6e1
@Michaeltalkhere on X
https://etherscan.io/address/0x0671e3357655aace65fcbe323293a6760579b6e1
@Michaeltalkhere on X
See original
I love you ~ love you ~
Just like #rats mice love cats #1CAT đ±
No matter how much wind and rain there is
I will still be with you (Bitcoin Cat)
Love you so much! Meow đž
Todayâs protagonist has to be Bitcoin Cat! Up 33% âŒ ïž You missed #XPET #BPET and still want to miss #1CAT ?
The little Bitcoin cat who is a treasure to Wan Wan
đ„ Raised over US$100 million
đ„ đđ±đŹ times oversubscribed
đ„ Bitcoin Ecology + Chain Games + đ đđ đ + đĄđđ§âs stack đŻđđłđł
đ„ First đđđą project for the#BRCcircuit
đ„ đ The number of fans on the platform has exceeded đđŽ million, and the number of fans in the group has also exceeded đ.đČ million
Just like #rats mice love cats #1CAT đ±
No matter how much wind and rain there is
I will still be with you (Bitcoin Cat)
Love you so much! Meow đž
Todayâs protagonist has to be Bitcoin Cat! Up 33% âŒ ïž You missed #XPET #BPET and still want to miss #1CAT ?
The little Bitcoin cat who is a treasure to Wan Wan
đ„ Raised over US$100 million
đ„ đđ±đŹ times oversubscribed
đ„ Bitcoin Ecology + Chain Games + đ đđ đ + đĄđđ§âs stack đŻđđłđł
đ„ First đđđą project for the#BRCcircuit
đ„ đ The number of fans on the platform has exceeded đđŽ million, and the number of fans in the group has also exceeded đ.đČ million
