Subscribe to MUSE DAO
MUSE DAODistribution of Muse staking reward
A few weeks ago we announced the start of single $MUSE staking to earn $MUSE bought back using the NFT20 protocol fees. We decided to migrate to a new staking contract that offers more flexibility and safety based on the xSushi smart contract:The new contract issues Staked Muse (sMUSE), an ERC20 that offers a new range of use cases for the $Muse ecosystem.The first contract had an arithmetic error spotted by Bailey T that could have locked forever some $Muse on the contract in the long term a...
MUSE DAO2 years anniversary community update
It’s been 2 years since the launch of the Very Nifty game that lead to the creation of the Muse DAO: An NFT venture builder owned by the community. In this article, we’ll take the time to write about some of our past releases and see where we are going. For the lookback, our past releases fit in the NFT universe and will be listed in several categories: Trading, Gaming, Tools, and experiments.NFT TradingNFT20 is our flagship product. The first NFT exchange that enabled trading tokenized floor...
MUSE DAONFT20 & MUSE Community Update
The Tao of Pooh the BearIt’s been a while since the last community update, in part because we’ve been growing and working on so many things that we didn’t have time to write one, but time is due.CommunityAfter 9 months of daily product iteration and investing time in the community, we are really happy with the state of things and enjoy more than ever the every day of coming to discord and discussing ideas, laughing with, and getting mad at anon pepes, a dream come true.We also see a consisten...
<100 subscribers
MUSE DAODistribution of Muse staking reward
A few weeks ago we announced the start of single $MUSE staking to earn $MUSE bought back using the NFT20 protocol fees. We decided to migrate to a new staking contract that offers more flexibility and safety based on the xSushi smart contract:The new contract issues Staked Muse (sMUSE), an ERC20 that offers a new range of use cases for the $Muse ecosystem.The first contract had an arithmetic error spotted by Bailey T that could have locked forever some $Muse on the contract in the long term a...
MUSE DAO2 years anniversary community update
It’s been 2 years since the launch of the Very Nifty game that lead to the creation of the Muse DAO: An NFT venture builder owned by the community. In this article, we’ll take the time to write about some of our past releases and see where we are going. For the lookback, our past releases fit in the NFT universe and will be listed in several categories: Trading, Gaming, Tools, and experiments.NFT TradingNFT20 is our flagship product. The first NFT exchange that enabled trading tokenized floor...
MUSE DAONFT20 & MUSE Community Update
The Tao of Pooh the BearIt’s been a while since the last community update, in part because we’ve been growing and working on so many things that we didn’t have time to write one, but time is due.CommunityAfter 9 months of daily product iteration and investing time in the community, we are really happy with the state of things and enjoy more than ever the every day of coming to discord and discussing ideas, laughing with, and getting mad at anon pepes, a dream come true.We also see a consisten...
Share Dialog
Share Dialog
TLDR: A bug allowed someone to mint a huge amount of CUDL. The game and token are paused for now.
CUDL is a Tamagotchi-like game on the Ethereum blockchain where cats are able to mint some CUDL depending on their level. The in-game token is then used to buy food in order to keep the cat healthy and increase his daily rewards based on a level system.
The game started its beta just 31 days ago managing to gather 4010 Acclimated Mooncats in an awesome adventure played by 744 cuddlers.
While we were upgrading the game in the past 2 days to a new version in order to lower gas costs of playing and balance the economy we introduced a bug that enabled a lucky player to mine too much CUDL. This bug affected people registering new cats and mining for the first time. Following the discovery of unusual activity on the game we decided to pause the game and transfer of CUDL to limit the damage to liquidity providers and players.
Here is the full timeline of events:
Aug-16–2021 10:29:02 PM: The game logic was updated introducing the new features and the bug.
Aug-17–2021 07:05:03 PM: An existing player gave life to two new cats (4004 / 4005).
Aug-18–2021 02:39:25 AM: The player mined all his 5 cats (including his 2 new cats that never mined before) triggering the bug that mined 226285 CUDL (doubling the total supply).
Aug-18–2021 02:46:53 AM: The player started selling tokens on Uniswap in a few transactions for a gain of 5 ETH.
Aug-18–2021 04:06:34 AM: After detecting and analyzing the unusual activity we decided to pause the game and all token transfers.
In order to save gas, we introduced a feature that enables a player to claim the reward of his pet every few days. For this we calculate the number of days that elapsed between the last time he claimed token and now as follow:
The problem with this code comes when you register a new pet, as we don’t set the lastTimeMined time in order to enable fresh players to mine one time. This worked well while we didn’t take into account the number of days elapsed between the two claims. Unfortunately in our case, the lastTimeMined sitting at 0 will result in a huge amount of day elapsed between the current timestamp and 0.
Note: In computer programming, the timestamp is based on seconds since the epoch: JAN 01 1970. Which makes at the time of the bug: 18857 days. As the basic reward for level 0 pets is 6 CUDL you get 18857 * 6 = 113142. As the person had 2 fresh cats in his collection he mined 226284 CUDL.
Considering the history of the wallet and the on-chain activity of the person following the unusual reward there is reason to believe that he was just lucky and didn’t exploit on purpose.
You don’t have to feed or mine any pets for the time being, when the new version of the game is properly tested we will announce a way to resume.
This is not the first time we go through adversity. As a community, we love the energy and attention the game managed to gain in just a month. We’ll take some time to learn from the bad and the good.
We won’t rush resuming the game, this bug was the result of humans running around the clock due to pressure we put on ourselves, and it could have been avoided.
Stay tuned and follow our discord channel #CUDL for announcements when the game is resumed.
TLDR: A bug allowed someone to mint a huge amount of CUDL. The game and token are paused for now.
CUDL is a Tamagotchi-like game on the Ethereum blockchain where cats are able to mint some CUDL depending on their level. The in-game token is then used to buy food in order to keep the cat healthy and increase his daily rewards based on a level system.
The game started its beta just 31 days ago managing to gather 4010 Acclimated Mooncats in an awesome adventure played by 744 cuddlers.
While we were upgrading the game in the past 2 days to a new version in order to lower gas costs of playing and balance the economy we introduced a bug that enabled a lucky player to mine too much CUDL. This bug affected people registering new cats and mining for the first time. Following the discovery of unusual activity on the game we decided to pause the game and transfer of CUDL to limit the damage to liquidity providers and players.
Here is the full timeline of events:
Aug-16–2021 10:29:02 PM: The game logic was updated introducing the new features and the bug.
Aug-17–2021 07:05:03 PM: An existing player gave life to two new cats (4004 / 4005).
Aug-18–2021 02:39:25 AM: The player mined all his 5 cats (including his 2 new cats that never mined before) triggering the bug that mined 226285 CUDL (doubling the total supply).
Aug-18–2021 02:46:53 AM: The player started selling tokens on Uniswap in a few transactions for a gain of 5 ETH.
Aug-18–2021 04:06:34 AM: After detecting and analyzing the unusual activity we decided to pause the game and all token transfers.
In order to save gas, we introduced a feature that enables a player to claim the reward of his pet every few days. For this we calculate the number of days that elapsed between the last time he claimed token and now as follow:
The problem with this code comes when you register a new pet, as we don’t set the lastTimeMined time in order to enable fresh players to mine one time. This worked well while we didn’t take into account the number of days elapsed between the two claims. Unfortunately in our case, the lastTimeMined sitting at 0 will result in a huge amount of day elapsed between the current timestamp and 0.
Note: In computer programming, the timestamp is based on seconds since the epoch: JAN 01 1970. Which makes at the time of the bug: 18857 days. As the basic reward for level 0 pets is 6 CUDL you get 18857 * 6 = 113142. As the person had 2 fresh cats in his collection he mined 226284 CUDL.
Considering the history of the wallet and the on-chain activity of the person following the unusual reward there is reason to believe that he was just lucky and didn’t exploit on purpose.
You don’t have to feed or mine any pets for the time being, when the new version of the game is properly tested we will announce a way to resume.
This is not the first time we go through adversity. As a community, we love the energy and attention the game managed to gain in just a month. We’ll take some time to learn from the bad and the good.
We won’t rush resuming the game, this bug was the result of humans running around the clock due to pressure we put on ourselves, and it could have been avoided.
Stay tuned and follow our discord channel #CUDL for announcements when the game is resumed.
No comments yet