How to Protect Yourself from Bscex SwapX Vulnerability
On March 27th, according to Scam Sniffer\’s monitoring, there was a vulnerability in the early contract Bscex SwapX of LaunchZone, and currently $7799856 in funds has been stolen. U
On March 27th, according to Scam Sniffer’s monitoring, there was a vulnerability in the early contract Bscex SwapX of LaunchZone, and currently $7799856 in funds has been stolen. Users who approve the contract early face risks. 34065 addresses are in danger. Please check and revoke the authorization as soon as possible.
A vulnerability in LaunchZone’s early contract, Bscex SwapX, resulted in the theft of nearly $7.8 million in funds, with over 34000 addresses at risk
Bscex SwapX is a decentralized exchange on the Binance Smart Chain that allows users to swap tokens quickly and cheaply. However, on March 27th, a vulnerability in the early contract of LaunchZone’s Bscex SwapX was discovered by Scam Sniffer, and over $7 million has been stolen from vulnerable addresses. If you approved the contract early, your funds might be at risk, too. This article will explain how the vulnerability works, how to check if your address is affected, and how to revoke the authorization to protect yourself.
What is the Bscex SwapX Vulnerability?
The vulnerability is related to the early approval of the contract. When users approve the contract early, they give it permission to transfer tokens on their behalf. However, some malicious contracts abuse this permission to steal funds from users. In this case, the attacker created a contract that looks like Bscex SwapX with a slightly different address. When users approve that contract instead of the legitimate one, the attacker can drain their funds.
How to Check if Your Address is Affected
To check if your address is affected, you need to look at the list of authorized contracts. You can do this by using a blockchain explorer like Bscscan. Go to the page of your address, and click on the “Read Contract” tab. Look for the “Approved” function, and click on it. You should see a list of authorized contracts, including Bscex SwapX. If there’s any other contract on the list, especially with a similar name or address, it might be the malicious one.
How to Revoke the Authorization
To revoke the authorization, you need to call the “approve” function with a 0 as the value. This action will cancel the approval for all contracts, including the malicious one. You can do this using a wallet app or a blockchain explorer. In the wallet app, find the “approve” function for Bscex SwapX and set the value to 0. In the blockchain explorer, go to the “Write Contract” tab and find the “approve” function. Enter your address, the address of Bscex SwapX, and 0 as the value. Submit the transaction, and wait for the confirmation.
How to Prevent Similar Attacks
To prevent similar attacks, you should always be careful when approving contracts. Make sure to verify the address and the name of the contract before approving it. Also, use reputable wallets and blockchain explorers that have anti-phishing measures. Finally, consider using a hardware wallet to store your funds, as it’s harder for attackers to steal from them.
Conclusion
The Bscex SwapX vulnerability shows how important it is to be vigilant about security when dealing with cryptocurrencies. By following the steps in this article, you can protect yourself from the current attack and prevent similar ones in the future. Always remember to check the contracts you approve, and never give excessive permissions to any contract.
FAQs
1. Can I get my stolen funds back?
No, unfortunately, once your funds are stolen, they’re gone forever. That’s why it’s essential to take preventive measures before it happens.
2. How can I report the attack to the authorities?
You can report the attack to the Binance Smart Chain security team, who will investigate it and take appropriate actions. You can also report it to the police or the cybersecurity agency in your country.
3. What other security measures should I take to protect my cryptocurrency investments?
Besides the measures mentioned in this article, you should also use strong passwords, two-factor authentication, and multisig wallets. Also, be careful with phishing emails and social engineering scams that might trick you into revealing your private keys or seed phrases.
This article and pictures are from the Internet and do not represent Fpips's position. If you infringe, please contact us to delete:https://www.fpips.com/11155/
It is strongly recommended that you study, review, analyze and verify the content independently, use the relevant data and content carefully, and bear all risks arising therefrom.
Recommended articles
-
Storybook Brawl’s Shutdown: A Look at What Happened
According to reports, the digital card game Storybook Brawl will shut down its server on May 1st. Its co founder, Matthew Nass, issued a statement on its Discord server on Tuesday
-
Limit Break Acquires FreeNFT
According to reports, Gabriel Leydon, CEO of Limit Break, the parent company of the NFT project DigiDaigaku, tweeted that Limit Break had completed the acquisition of the NFT platform FreeNFT, and the specific amount of the proposed acquisition was not publicly announced. FreeNFT is a Free to Own ecological Launchpad on which Digi Daigaku once drew a prize. DigiDaigaku parent company Limit Break completes the acquisition of NFT platform FreeNFT Analysis based on this information:Limit Break, the parent company of DigiDaigaku, has reportedly completed the acquisition of the Free to Own ecological Launchpad, FreeNFT. Gabriel Leydon, the CEO of Limit Break, announced the news through his Twitter account but did not disclose the actual cost of the acquisition. FreeNFT is a platform that has been designed to help creators launch their NFT projects without requiring any upfront cost. It allows creators to launch their projects directly and helps them promote their work in the market. The platform is a decentralized…
-
Understanding the Recent Bullish Trend in Bitcoin Options
On March 20th, it was reported that as the price of Bitcoin rose to the range of 28000 US dollars, there was a reversal bullish trend in Bitcoin options. The 25% Delta deviation of
-
Peloton’s Robin Arzón to Launch Lifestyle Membership Club
According to reports, Robin Arz ó n, vice president and CEO of the fitness giant Peloton Fitness Program, founded the Web3 Lifestyle Membership Club Swagger Society, which is expected to be launched in the next few months. （CoinDesk） Vice President of fitness giant Peloton plans to launch Web3 Lifestyle Member Club Analysis based on this information:Robin Arzón, the Vice President and CEO of Peloton Fitness Program, is set to launch a new lifestyle membership club in the coming months. The new club, called Swagger Society, is expected to be powered by web3 technology. According to reports by CoinDesk, the fitness mogul who is also a best-selling author, speaker and athlete, founded the club with the aim of creating a platform for people to connect, share and experience different lifestyles. With over 1.4 million Peloton subscribers, Arzón has been instrumental in the company’s exponential growth in recent years. The fitness giant’s success can be attributed to its ability to integrate technology…
-
US Senators Elizabeth Warren and Roger Marshall Postpone Cryptocurrency Anti-Money Laundering Bill amid Recruitment of Co-Sponsors
According to reports, according to two sources familiar with the matter, US Senators Elizabeth Warren and Roger Marshall have postponed the introduction of their cryptocurrency ant
-
The United States is Giving Cryptocurrencies Away: Is This Good for the World But Not for US Businesses?
According to reports, independent Ethereum educator Sassal. eth: The United States is handing over cryptocurrencies to the rest of the world. This is conducive to the decentralizat
-
COINFLIX & BITCOIN.COM: A PROMISE OF FREE TRADING ON OPNX
On April 6th, Mark Lamb, co founder of CoinFLEX, a cryptocurrency exchange, sent an open letter to Roger Ver, founder of Bitcoin. com, promising to conduct two years of free tradin
-
Large UNI Transfer to Coin An Reported by Encrypted Twitter KOL
It is reported that encrypted Twitter KOL@Bit Ember monitoring, a whale/institution holding UNI for two years transferred 710000 UNI (worth about $4.06 million…
-
Dreamland Genesis Project Suffers Distributed Server Attack
According to reports, according to CertiK monitoring, the Distributed server of the Dreamland Genesis project has been attacked. Community users are requested not to click on any links until the server is repaired. Dreamland Genesis Project Discord Server Attacked Analysis based on this information:The Dreamland Genesis project, a decentralized application built on the blockchain, has recently suffered a distributed server attack. This event has been reported by CertiK monitoring, which keeps track of security incidents related to different blockchain-based projects. The attack has caused the server to shut down, and as a result, the community of users has been advised not to click on any links until the server is repaired. The Dreamland Genesis project is a relatively new player in the world of blockchain-based applications. It aims to provide a decentralized platform for gaming and entertainment, leveraging the power of the blockchain to create a transparent and secure environment for users. The project has been gaining traction in the…
-
Bitcoin Trend Indicator: A Revolutionary Tool for Bitcoin Investors
On April 13th, CoinDesk announced that its subsidiary CoinDesk Indices had launched the Bitcoin Trend Indicator (BTI), an online tool that helps investors determine the direction o
-
Polychain Capital plans to raise $400 million for fourth fund
It is reported that Polychain Capital is discussing with potential investors and plans to raise $400 million for the fourth fund.
Polychain Capital pla…
-
The Impact of Zimbabwe’s Currency Devaluation on Global Markets
12: 00-21:00 Keywords: Zimbabwe, Bank of Russia, LVMH, World Economic Forum
Important updates on the evening of April 23rd
IntroductionOver the past few years, Zimbabwe\’s economy h -
Euler Finance’s 197 Million Dollars Loss from Hack Attack Revealed by BlockSec’s Data Release
On March 13, the security company BlockSec released data on social media, saying that Euler Finance suffered about 197 million dollars in the hacker flash loan attack, including 8877507.35 DAI, 849.14 WBTC, 34413863.42 USDC and 85818.26 stETH. The damage amount of Euler hacker attack is about 197 million dollars Analysis based on this information:BlockSec, a renowned security company, has revealed that Euler Finance suffered a loss of approximately 197 million dollars in a recent hacker flash loan attack that took place on March 13. The data which was released on social media revealed that the loss was in the form of different types of cryptocurrencies including 8877507.35 DAI, 849.14 WBTC, 34413863.42 USDC, and 85818.26 stETH. Euler Finance is a blockchain-based decentralized exchange built on the Ethereum blockchain network. Hackers carried out an attack by taking a flash loan from the exchange and swiftly exploiting the vulnerability in the contract feature. This attack allowed the hackers to manipulate prices and carry…
-
#1inch Network’s Massive Transaction Volume on Arbitrum Network
According to reports, 1inch Network tweeted that its total transaction volume on the Arbitrum network exceeded $5 billion.
1 inch Network\’s total transaction volume on the Arbitrum -
IMF Warns G20 Countries of the Risks of Encrypted Assets
It is reported that the International Monetary Fund (IMF) has warned G20 countries that the widespread use of encrypted assets may cause banks to lose deposits and reduce loans. The report said: “The widespread use of encrypted assets has brought huge risks to the effectiveness of monetary policy, exchange rate management, capital flow management measures and fiscal sustainability. In addition, central bank reserves and the global financial safety net may need to be changed, resulting in potential instability. Finally, banks may lose deposits and have to reduce lending.” The report also pointed out that, “Although the importance and relevance of specific risks vary from country to country, there are many risks in encryption assets.” However, despite the “significant risks, encryption assets have developed technologies that can be used by the public sector to achieve their own policy objectives”. IMF: The widespread use of cryptocurrency may cause banks to lose deposits and reduce loans Analysis based on this information:The International Monetary…
-
What is yearn platform (What is yearn.finance)
Yearn is a platform built on Ethereum that functions as an automated market mak