Osmosis v9 升級後停機事件 - 第二日

PikachuEXE

2022 年 6 月 9 日

IPFS

幣幣很安全

Osmosis官方公告推文

https://twitter.com/osmosiszone/status/1534684186803568640

以下只抽個人認為重要的資訊翻譯(還可能翻得不準確

請查看原本推文以獲得全部資訊

While detailed calculation is still in progress, the total amount overdrawn is estimated at around $5M.

詳細點算仍在進行，暫時overdrawn金額估算約為五百萬美元

因為漏洞本身是提取流動池時會多出50%，所以為overdrawn(這字怎麼翻啦

All losses will be covered.

This is happening through a combination of efforts to maximize recovery of exploited funds and a commitment to backstop any unrecovered funds from the developer treasury.

More information on specific recovery plan will be available in the future.

所有損失會被補償，包括盡最大努力救回用漏洞轉出的幣，及使用developer treasury

不肯定developer treasury是指哪部分，但不是社群基金池

OSMO Token Distribution原文：

https://medium.com/osmosis/osmo-token-distribution-ae27ea2bb4db

A small number of wallets were responsible for the majority of exploited funds, and we are confident that we will have a high recovery rate from these wallets.

只有很少數量的錢包涉及大多數"不法資金"，所以有信心會回收大部分"不法資金"

(這段有後續，後面再說)

While ETAs are highly subject to change, It is estimated this will take at least another 2 days until a new release is made.

預計至少再等兩日才會重啟，並有可能需要更多時間

Right now efforts are focused on actions to address short-term priorities of recovering exploited funds, fortifying security, and restarting the chain.

As soon as these are resolved, we will turn to share more in-depth analysis of what happened and the learnings that we will commit to.

現在團隊集中於回收"不法資金"、提升安全性(例如做測試及找其他漏洞等)及為重開網絡做準備

之後會再發佈更深入分析及將來行動方向

"不法資金"錢包之一 - 驗證人FireStake

~~以下為本人在Twitter上有限所見，請自己上Twitter尋找全部資訊~~

驗證人FireStake | Validator發出此推文

https://twitter.com/stake_fire/status/1534598315441913856

Dear @osmosiszone community, many of you know about the Osmosis LP bug that occurred yesterday.

In disbelief of it being real, two members of @fire_stake

started testing to see if the bug existed, testing grew into a temporary lapse in good judgment, and...

in the process, we managed to convert $226 USD to ~$2M. We were thinking about our family's future, and not the future of our community.

Shortly after doing so, we stressed throughout the night about how we can set things right. We’re currently working with the Osmosis team...

to return the funds as soon as possible. We’re also working with the Osmosis team to encourage anyone else who took advantage of this situation to please come forward and return funds.

You’re welcome to come to us, and we can help act as a liaison. We need to make this right.

FireStake聲稱

FireStake兩名成員想測試此漏洞，並由226USD刷到~二百萬USD

現在會和Osmosis合作歸還"不法資金"

然後是此推文

https://twitter.com/stake_fire/status/1534662023878848512

Hi all, we’ve heard your feedback. We plan to exit operations in one of two ways:

1) Transition our nodes to trusted providers via key exchange

2) Start the unbonding process

We will update once the plan is finalized.

我們聽到你的意見並準備退出驗證人行列，方法為以下其一

1) 轉移節點給他人

2) 開始解鎖程序

再然後(這還是我剛看到的)

(不是該驗證人的推文)

https://twitter.com/MarcinMikus/status/1534826442420277248

So @stake_fire is into bs that they going to move ownership to other validator (located in same country with same connections). Changing name is not same as changing validator essentially.