{"id":30676,"date":"2023-10-07T13:53:22","date_gmt":"2023-10-07T17:53:22","guid":{"rendered":"http:\/\/cryptocornercafe.com\/cafe\/?p=30676"},"modified":"2023-10-07T13:53:22","modified_gmt":"2023-10-07T17:53:22","slug":"avalanche-based-stars-arena-falls-victim-to-a-3-million-exploit-tvl-tanks-by-100","status":"publish","type":"post","link":"http:\/\/cryptocornercafe.com\/cafe\/2023\/10\/07\/avalanche-based-stars-arena-falls-victim-to-a-3-million-exploit-tvl-tanks-by-100\/","title":{"rendered":"Avalanche-Based Stars Arena Falls Victim To A $3 Million Exploit, TVL Tanks By 100%"},"content":{"rendered":"<p>Stars Arena, a decentralized social media platform built on the Avalanche network, has suffered a major security breach, resulting in the loss of a significant amount of cryptocurrency. This comes barely a day after the decentralized application (dApp) reportedly fixed a loophole in its smart contract.<\/p>\n<p>On Thursday, October 5, the Stars Arena team said \u2013 via <a href=\"https:\/\/x.com\/starsarenacom\/status\/1709934535570608172?s=20\" target=\"_blank\" rel=\"noopener\">a post on X<\/a> (formerly Twitter) \u2013 that it has averted a security exploit, which could have led to the loss of over $1 million worth of funds.\u00a0<\/p>\n<h2><strong>Stars Arena Loses $2.9 Million To Attack, PeckShield Reveals<\/strong><\/h2>\n<p>On Saturday, October 7, a pseudonymous X user <a href=\"https:\/\/x.com\/0xLawliette\/status\/1710535739975549352?s=20\" target=\"_blank\" rel=\"noopener\">raised the alarm<\/a> about the suspicious movement of Avalanche (AVAX) tokens from the Stars Arena contract.\u00a0<\/p>\n<p>A few minutes after this, the protocol\u2019s team confirmed \u2013 via a post on X \u2013 that there has been a \u201cmajor security breach with its smart contract.\u201d\u00a0<\/p>\n<p>There has been a major security breach with the smart contract. <\/p>\n<p>We&#8217;re actively checking the issue. <\/p>\n<p>DO NOT deposit any funds. <\/p>\n<p>Stay tuned for updates.<\/p>\n<p>\u2014 Stars Arena (@starsarenacom) <a href=\"https:\/\/twitter.com\/starsarenacom\/status\/1710540444075978846?ref_src=twsrc%5Etfw\">October 7, 2023<\/a><\/p>\n\n<p>This exploit has also been flagged by blockchain security firm PeckShield, who disclosed that around $2.9 million in AVAX has been drained from the decentralized social media application.\u00a0<\/p>\n<p>An<a href=\"https:\/\/x.com\/peckshield\/status\/1710555944269292009?s=20\" target=\"_blank\" rel=\"noopener\"> initial breakdown<\/a> by the security company identified a reentrancy issue on the Stars Arena Shares contract. \u201cThe reentrancy is abused to update the weight when the share\/ticket is issued so that 1 share can be sold at a much higher price of approximately 274,000 AVAX,\u201d PeckShield said.<\/p>\n<p>As earlier noted, Stars Arena has been gaining some popularity in the past few days. In fact, the recent activity uptick on the <a href=\"https:\/\/www.newsbtc.com\/avalanche\/firewood-avalanche-avax-20\/\" target=\"_blank\" rel=\"noopener\">Avalanche network<\/a> has been attributed to the rise of the decentralized social application.<\/p>\n<p>However, this latest hack represents a significant deterrent to Stars Arena\u2019s growth. According to data from DeFiLlama, the protocol\u2019s total value locked has plummeted from $1.26 million to $0.47 in the past day, reflecting a 100% decline.<\/p>\n<p>Stars Arena went live on Avalanche C-Chain \u2013 the blockchain component specifically designed for running smart contracts on Avalanche \u2013 in late September. Although the <a href=\"https:\/\/www.newsbtc.com\/analysis\/defi-coins\/friend-tech-records-two-new-milestones-amidst-renewed-hype\/\" target=\"_blank\" rel=\"noopener\">Friend.tech-like<\/a> platform experienced some traction after launch, recent security concerns seem to be stirring skepticism around its growth.<\/p>\n<h2><strong>$900 Million Lost To Bad Actors In 2023 Q3<\/strong><\/h2>\n<p>This latest exploit will serve as an unfriendly reminder of the growing security concerns in the crypto space. Particularly, the cryptocurrency industry saw a significant surge in exploits and security breaches in the third quarter of 2023.<\/p>\n<p>According to a quarterly report by blockchain security firm Beosin, the losses incurred only in Q3 2023 were larger than the total for the year\u2019s first half. A total of $889.26 million was lost to various attacks in the last quarter, compared to the $663 million lost in 2023\u2019s first six months.<\/p>\n\n<p>Beosin\u2019s report revealed that $540.1 million was lost to hacks, with decentralized finance (DeFi) accounting for 18% of this value. Notably, DeFi peer-to-peer service <a href=\"https:\/\/www.newsbtc.com\/news\/defi\/200-million-crypto-mixin-network\/#:~:text=%24200%20Million%20In%20Crypto%20Lost%20As%20Mixin%20Network%20Comes%20Under%20Attack,-by%20Scott%20Matherson&amp;text=Decentralized%20finance%20peer-to-peer,a%20result%20of%20the%20attack.\" target=\"_blank\" rel=\"noopener\">Mixin Network lost $200 million<\/a> due to a compromise in its cloud service provider database.<\/p>","protected":false},"excerpt":{"rendered":"<p><!-- wp:html --><\/p>\n<p>Stars Arena, a decentralized social media platform built on the Avalanche network, has suffered a major security breach, resulting in the loss of a significant amount of cryptocurrency. This comes barely a day after the decentralized application (dApp) reportedly fixed a loophole in its smart contract.<\/p>\n<p>On Thursday, October 5, the Stars Arena team said \u2013 via <a href=\"https:\/\/x.com\/starsarenacom\/status\/1709934535570608172?s=20\" target=\"_blank\" rel=\"noopener\">a post on X<\/a> (formerly Twitter) \u2013 that it has averted a security exploit, which could have led to the loss of over $1 million worth of funds.\u00a0<\/p>\n<h2><strong>Stars Arena Loses $2.9 Million To Attack, PeckShield Reveals<\/strong><\/h2>\n<p>On Saturday, October 7, a pseudonymous X user <a href=\"https:\/\/x.com\/0xLawliette\/status\/1710535739975549352?s=20\" target=\"_blank\" rel=\"noopener\">raised the alarm<\/a> about the suspicious movement of Avalanche (AVAX) tokens from the Stars Arena contract.\u00a0<\/p>\n<p>A few minutes after this, the protocol\u2019s team confirmed \u2013 via a post on X \u2013 that there has been a \u201cmajor security breach with its smart contract.\u201d\u00a0<\/p>\n<p>There has been a major security breach with the smart contract. <\/p>\n<p>We&#8217;re actively checking the issue. <\/p>\n<p>DO NOT deposit any funds. <\/p>\n<p>Stay tuned for updates.<\/p>\n<p>\u2014 Stars Arena (@starsarenacom) <a href=\"https:\/\/twitter.com\/starsarenacom\/status\/1710540444075978846?ref_src=twsrc%5Etfw\">October 7, 2023<\/a><\/p>\n<p>This exploit has also been flagged by blockchain security firm PeckShield, who disclosed that around $2.9 million in AVAX has been drained from the decentralized social media application.\u00a0<\/p>\n<p>An<a href=\"https:\/\/x.com\/peckshield\/status\/1710555944269292009?s=20\" target=\"_blank\" rel=\"noopener\"> initial breakdown<\/a> by the security company identified a reentrancy issue on the Stars Arena Shares contract. \u201cThe reentrancy is abused to update the weight when the share\/ticket is issued so that 1 share can be sold at a much higher price of approximately 274,000 AVAX,\u201d PeckShield said.<\/p>\n<p>As earlier noted, Stars Arena has been gaining some popularity in the past few days. In fact, the recent activity uptick on the <a href=\"https:\/\/www.newsbtc.com\/avalanche\/firewood-avalanche-avax-20\/\" target=\"_blank\" rel=\"noopener\">Avalanche network<\/a> has been attributed to the rise of the decentralized social application.<\/p>\n<p>However, this latest hack represents a significant deterrent to Stars Arena\u2019s growth. According to data from DeFiLlama, the protocol\u2019s total value locked has plummeted from $1.26 million to $0.47 in the past day, reflecting a 100% decline.<\/p>\n<p>Stars Arena went live on Avalanche C-Chain \u2013 the blockchain component specifically designed for running smart contracts on Avalanche \u2013 in late September. Although the <a href=\"https:\/\/www.newsbtc.com\/analysis\/defi-coins\/friend-tech-records-two-new-milestones-amidst-renewed-hype\/\" target=\"_blank\" rel=\"noopener\">Friend.tech-like<\/a> platform experienced some traction after launch, recent security concerns seem to be stirring skepticism around its growth.<\/p>\n<h2><strong>$900 Million Lost To Bad Actors In 2023 Q3<\/strong><\/h2>\n<p>This latest exploit will serve as an unfriendly reminder of the growing security concerns in the crypto space. Particularly, the cryptocurrency industry saw a significant surge in exploits and security breaches in the third quarter of 2023.<\/p>\n<p>According to a quarterly report by blockchain security firm Beosin, the losses incurred only in Q3 2023 were larger than the total for the year\u2019s first half. A total of $889.26 million was lost to various attacks in the last quarter, compared to the $663 million lost in 2023\u2019s first six months.<\/p>\n<p>Beosin\u2019s report revealed that $540.1 million was lost to hacks, with decentralized finance (DeFi) accounting for 18% of this value. Notably, DeFi peer-to-peer service <a href=\"https:\/\/www.newsbtc.com\/news\/defi\/200-million-crypto-mixin-network\/#:~:text=%24200%20Million%20In%20Crypto%20Lost%20As%20Mixin%20Network%20Comes%20Under%20Attack,-by%20Scott%20Matherson&amp;text=Decentralized%20finance%20peer-to-peer,a%20result%20of%20the%20attack.\" target=\"_blank\" rel=\"noopener\">Mixin Network lost $200 million<\/a> due to a compromise in its cloud service provider database.<\/p>\n<p><!-- \/wp:html --><\/p>\n","protected":false},"author":0,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[82],"tags":[],"class_list":["post-30676","post","type-post","status-publish","format-standard","hentry","category-blockchain"],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"http:\/\/cryptocornercafe.com\/cafe\/wp-json\/wp\/v2\/posts\/30676","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/cryptocornercafe.com\/cafe\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/cryptocornercafe.com\/cafe\/wp-json\/wp\/v2\/types\/post"}],"replies":[{"embeddable":true,"href":"http:\/\/cryptocornercafe.com\/cafe\/wp-json\/wp\/v2\/comments?post=30676"}],"version-history":[{"count":0,"href":"http:\/\/cryptocornercafe.com\/cafe\/wp-json\/wp\/v2\/posts\/30676\/revisions"}],"wp:attachment":[{"href":"http:\/\/cryptocornercafe.com\/cafe\/wp-json\/wp\/v2\/media?parent=30676"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/cryptocornercafe.com\/cafe\/wp-json\/wp\/v2\/categories?post=30676"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/cryptocornercafe.com\/cafe\/wp-json\/wp\/v2\/tags?post=30676"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}