An unknown person is using the blockchain of the EOS quite be able to cash out. He managed to get every pot and a gokapp to win. The dApp EOSPlay did’t work as expected, because the attacker is a clever trick, uithaalde. He made the network unusable by blocks of time (due to charge). In total, brought him 30,000 for the EOS, which is equivalent to roughly about $110.000.
Contents
EOS guess dApp
The slimmerd used, REX, is a product of the EOS that you have the RAM and the CPU, the memory will be able to exchange in order to ensure that the transaction can be processed. Rex, which stands for Resource EXchange. He managed to get to the EOSPlay to be empty to pull up all the coins that are out there take advantage of the stage. Why is that? He was simply far and away the most powerful (and smarter) in person.
Dude is emptying EOSPlay right now pic.twitter.com/RyrcdieL5n
— rektkid (@rektkid_ September 13, 2019
The cost for the attacker to just 300 for the EOS in the amount of $1,000, to 30,000 tokens to sit it out. The transactions are in the above tweet, and this has been confirmed so the “hack”. Although, a hack? The attacker would love to be on the lines of the grid, and it shows, so in fact, that there is something wrong with the blockchain.
An anonymous developer’s GUIDE-233, by default, to let you know that this action is in more of dApps can be made. Therefore, it is not so much an issue of EOSPlay. The hacker seems to have multiple accounts to use the variety of smart contracts is to ‘abuse’.
How does it work?
EOSIO, Alabama explains how it was done. As I said, the attacker is REX. In the “billing” of the CPU, which is to be exchanged will take on the fly. Basically, everyone is locked out unless there is more canon EOS bet the attacker is on the network. In this case, the hacker, has approximately 1 million of the EOS used for the CPU from the TOP.
The billing rate dynamically increases for the CPU, and everyone basically gets locked out, unless they have more for canon eos staked more than the attacker. The attacker was about a 1-million-eos-staked to the cpu from the Rex in this case
— eosioAlabama (@eosioalabama) on September 14, 2019
Due to this, about 900,000 of the EOS, and to indicate to the CPU, it could be others, apparently, have no access to these resources. “The network is overloaded, issued an injunction against the hacker, that there are transactions to be sent could be because of the cost, the vast majority of users are too high have been.” The EOS, which was used for only 0.2% of the total maximum capacity, and usually would have the processing power to be distributed to all of the strikers. It does show the seriousness with which this traffic in the network.
Just to summarise, someone rented a load of resources from REX and is using it to exploit a gambling dapp called EOSPlay. They seem to have walked away with about 30k on the EOS so far. Don’t panic, just wait and the resource usage should go back to normal.
rektkid on twitter
Some DAPPs were using future blocks, and to generate random numbers. “The attacker rented the 1.2-m CPU, from the REX to create thousands of deferred trxs, blocking of the network.
The hacker can then ‘cherry pick’ the trxs-they wanted to go through(the mining one) and the others(losing one) and stay blocked
— Michael Fletcher (@Mikefletcher42) On September 14, 2019
Loophole
What is even worse is that the owners of the smart sales effort, they would have to get these contracts out. The traffic on the network, and the lack of network resources, which is the root cause of it. So it’s (theoretically) possible for the attacker to himself in such a position forever, it will be difficult for the network to kick the habit. In the worst case scenario, there would be a fork should come out to be the evil person to stop.
Network congestion makes it (1) hacker and (2) to be attacked DApp, the only users of the network who have had enough of CPU to operate. This is after the contract of the developers, from redeploying to the contract and stopping the attack when they recognized the issue.
Jared Moore
Source: CryptoSlate
The new Bitcoin News on: Bitcoin, and the Lightning Network, as well as the measures taken by The Bank
To have a say about anything that has to do with bitcoin, altcoins, and the market that surrounds it? Come and visit us on Facebook, Twitter, or by Telegram.
Thank you for signing up!