Ethereum
$175.28 0.19%
ETH · 2w

Bug Discovered in ENS Auctions, Finalizations Temporarily Halted

The first auctions for 3–6 character .ETH names started ending yesterday on OpenSea. Though most of these first auctions to end were resolved correctly, we were quickly made aware of some auctions that had been finalized incorrectly. We have temporarily halted finalizing any more auctions until we can be certain the problems have been solved.

The problem

In a few cases, names were awarded to the wrong bidders and for an amount lower than the highest bid on that name.

At this point, we’re aware of two issues:

First, some bidders were given incorrect information on how to bid using the JavaScript SDK. This resulted in the submission of invalid bids, with the wrong “target” field. As a result, those bids weren’t considered when deciding the auction winner.

Second, one user discovered an input validation vulnerability that allowed them to place bids on a name that actually issued a different name. Unfortunately, they exploited this to issue themselves defi.eth, wallet.eth, apple.eth, and a number of other names.

What we’re doing about it

Regarding the first problem of the incorrect information on how to use the JavaScript SDK: OpenSea has identified the problem and will be emailing bidders with instructions on how to resubmit their bids with valid information. Any auctions that haven’t been finalized yet and were affected by this will be extended; we may extend all auctions for simplicity (this information will be forthcoming soon).

Regarding the second problem of someone exploiting the input validation vulnerability: Fortunately, we caught this and halted finalization before they could get more than a few (16) names. We’ve identified and patched the issue that made this possible.

Can names that were awarded incorrectly be taken back and given to the correct bidder?

Unfortunately not. ENS is designed such that we can’t revoke .ETH names once they have been issued. This is an intentional feature of ENS that ensur...

Continue on medium.com
Recent news
ETH +0.19% · bankless.substack.com · 6h

BTC vs ETH on monetary policy (and why BTC's is overrated)

Level up your open finance game three times a week. I’m releasing this Free for Everyone until November 1. Get the Bankless program by subscribing below. Dear Crypto Natives, BTC's monetary policy is ...
ETH +0.19% · saturn.network · 8h

Weekly Top 5 Performing Token Assets 17/10

Learn about the strongest performing token assets that you can trade on DEX. Earn Ethereum and Ethereum Classic trading Top 5 performing token assets on Saturn Exchange.
ETH +0.19% · cryptoverze.com · 14h

Telegram’s Token Dream Put on Hold

Highlights: Telegram has notified investors that the TON blockchain project will be launched later than planned, pushing the deadline from Oct. 30 to April 30, 2020.This is due to a recent compliant f...