Hacker and cypherpunk collective lighting up the dark forest and educating it's denizens.
How an informational issue ended up securing (almost) half a million dollars
How a simple bug was initially reported as informational:Actually turned out to be:It all started when my friend Sai wrote,“Anyone can call setToken to set a fake erc20 TAL token contract in staking.sol, which at very least does griefing as it can only be set just once. But they probably know that so i submitted informational report just in case.”The affected project was Talent Protocol, whose bounty program had recently launched on Immunefi. Sai thought they had a griefing attack at hand, an...
How an informational issue ended up securing (almost) half a million dollars
How a simple bug was initially reported as informational:Actually turned out to be:It all started when my friend Sai wrote,“Anyone can call setToken to set a fake erc20 TAL token contract in staking.sol, which at very least does griefing as it can only be set just once. But they probably know that so i submitted informational report just in case.”The affected project was Talent Protocol, whose bounty program had recently launched on Immunefi. Sai thought they had a griefing attack at hand, an...
