Categories
Crypto News Privacy Tokens

Monero Mining Pool Dominance Drops Dramatically Amid Concerns of 51% Attack

With a market capitalisation of US$3.2 million, Monero (XMR) is the world’s largest privacy token, more than double that of its closest rival, Zcash (ZEC). However, as the protocol’s biggest mining pool, MineXMR, approached 50 percent of the hashrate, critics raised serious alarm bells.

Monero mining pools comparison at February 15. Source: pools.xmr.wiki

Risks of Concentrated Hashpower

Within proof-of-work blockchains such as Monero, the most valid and obvious concern relating to a mining pool’s disproportionate hash power is the theoretical risk of a “51 percent attack”.

In short, this is when a group controls more than 50 percent of a blockchain’s hash power. If successful, the group could then block new transactions from being confirmed, as well as change the ordering of new transactions. In addition, it may also be possible to effectively rewrite parts of the blockchain by reversing transactions. This fundamentally undermines the “double spend problem” that blockchains are supposed to solve. In that sense, the attackers can spend tokens, erase the transaction and then once again spend the tokens.

Aside from “51 percent attacks”, the other concern is that it undermines decentralisation, one of the other core premises of blockchains:

Monero Community Calls for Boycott

Across Twitter and Reddit, Monero supporters were vocal in their call for miners in the MineXMR pool to leave without delay:

As one Reddit user put it, MineXMR was just under 96 percent of the way to achieving the majority of hashrate:

One Reddit user highlighting the risk. Source: Reddit, SomeAncap2020

It would appear as if the calls to leave MineXMR have been somewhat heeded. Within 24 hours, the MineXMR pool went from 48 percent of the hashrate, down to 37 percent. Notwithstanding, its hashrate remains more than double the next largest pool, nanopool, at 22 percent.

Monero mining pools comparison at February 16. Source: pools.xmr.wiki

It’s been a tough past year for Monero, as lead maintainer “Fluffy Pony” was arrested, not to mention the token’s recent alert that its multi-sig wallet code had been compromised.

While the Monero community and holders are no doubt pleased that some miners have abandoned MineXMR, it remains to be seen whether long term, the miners are truly committed to decentralisation, or whether their own interests ultimately trump those of its holders.

Categories
Crypto News DeFi Ethereum Hackers Tokens

White Hat Hacker Chooses $2 Million Bug Bounty over ‘Printing Unlimited ETH’

A white hat hacker recently discovered a critical security bug on Optimism – a layer-2 scaling solution on Ethereum – that could have allowed him to exploit a set of smart contracts to print an unlimited amount of Ether (ETH). Instead, the hacker reported the issue to the Optimism team, who rewarded him with US$2 million for discovering the bug.

Jay Freeman, a software engineer who goes by the online handle of Saurik, discovered the bug on the project’s fork of Geth (Go Ethereum) – a popular standalone implementation for Ethereum-based protocols.

The Optimism team admitted in a blog post that the bug had been previously triggered by an Etherscan employee, and that it had gone unnoticed.

Analysis of Optimism’s chain history showed that the bug was not exploited. A fix for the issue was tested and deployed to Optimism’s Kovan and Mainnet networks (including all infrastructure providers) within hours of confirmation.

Optimism blog post

Freeman provided an in-depth insight into the discovery in a separate blog. “Exploiting this bug enables the attacker to have access to an effectively unbounded number of tokens” he said.

White Hat Hacker Saves the Day

White hat hacker is the term for ethical hackers who use their skills for identifying security issues in hardware or software networks instead of exploiting them.

The Optimism community praised Freeman’s detective work instead of taking advantage of such a situation, which could have spelled disaster for the platform:

While the DeFi community is filled with malicious actors waiting for their opportunity to attack, there are also numerous examples of white hat hackers working towards the greater good of the community.

Decentralised exchange SushiSwap, for example, almost went dark if it were not for the collective effort of a group of white hat hackers that prevented a potential US$350 million heist.

In December, popular Ethereum-based layer 2 scaling solution Polygon rescued all of its MATIC tokens – worth around US$24 billion – thanks to a white hat hacker who had discovered a security bug on the protocol, leading to a hard fork on the Polygon sidechain.

Categories
Fashion Metaverse NFTs The Sandbox Tokens

Gucci Moves into Sandbox Metaverse to ‘Host Immersive Experiences’

Gucci has announced plans to expand into The Sandbox metaverse. The luxury brand has bought an undisclosed quantity of lands within the virtual world in a project labelled Gucci Vault, and is seeking to appeal to Generation Z with the move.

Step Inside the Gucci Vault

The announcement accompanies a February 10 Twitter post introducing the Gucci Vault, which Gucci describes as an experimental space and is the brainchild of the company’s creative director, Alessandro Michele. Fans have already responded positively to Gucci’s corporate metaverse involvement:

In a blatant pitch to Gen Z, The Sandbox has stated that Gucci’s new endeavour is “inspired by childhood memories” and hopes to stimulate the conversation surrounding the metaverse and the designer fashion industry’s future. The company’s plans to enter the metaverse follow its mid-2021 release of a non-fungible token (NFT) collection.

The Gucci Vault Instagram account is up and running and while its posts remain cryptic, it is said that the project will also be a means for Gucci to sell vintage pieces alongside those from other notable designers. If you’d like to learn more about the Gucci Vault, the official Discord channel is now live.

Sandbox Moves from Strength to Strength

Gucci is not The Sandbox’s first partnership. The Ethereum-based game announced a collaboration last month with Warner Bros to launch the first music-themed metaverse. Purchasing lands within the game will allow the company to develop a musical theme park and concert venue.

https://www.sandbox.game/en/about/land/
The Sandbox lands description. Source: The Sandbox

The Sandbox token (SAND) skyrocketed at the end of 2021 as Facebook’s announcement of its rebranding to Meta had a butterfly effect on the industry. While the price of SAND is currently sitting at around A$6.25, further brand involvement could see it continue to rise.

By Lauren Claxton, Crypto News Guest Author

Categories
Axie Infinity Crypto News Gaming Metaverse Tokens

Metaverse Token SLP Up 300% in a Week Amid Big Changes to Axie Infinity

Just before the dawn of the release of Season 20 for the world’s most popular play-to-earn blockchain game, Axie Infinity, the in-game reward token Smooth Love Potion (SLP) shot sky-high. Before a slight pullback, the SLP token went 3X in just days.

SLP Price Chart. Source: CoinGecko.com

The SLP rally follows the announcement of a deflationary update to the game’s economy, removing user rewards for completing certain in-game missions, including Adventure Mode SLP and Daily Quest SLP, which “will be sunset (reduced to 0)”.

Season 20 is close and when it’s released, a variety of important economic balancing changes will be implemented.

axie.substack.com

How Axie Rewards Work

Once players have collected a team of Axies, they can collect SLP tokens by completing battles. Those tokens can be redeemed for new in-game features, including breeding new Axies. 

Among the changes coming in the new Season 20 update will be a 56 percent reduction in the daily supply of SLP tokens. Players will no longer be able to earn SLP from daily questing or playing in adventure mode, thus increasing the tokens’ scarcity. 

SLP Listed on Binance

Earlier this week, Binance added SLP/BNB as a trading pair, allowing traders to directly exchange BNB for SLP on the exchange. Whenever tokens get a listing on a major exchange such as Binance, it often results in a price pump as it makes the token more accessible for new investors.

While Axie Infinity’s SLP has enjoyed notable price pumps over the past few months, is still 9x away from previous highs. The SLP token was trading at US$0.39 only seven months ago. The game continues to adopt more players and attract recognition from investors. In November, Crypto News Australia reported that an Axie Infinity land plot NFT had sold for a record-breaking US$2.48 million.

Categories
Bitcoin Bitfinex Crypto Exchange Crypto News Cryptocurrencies Hackers Illegal Tokens

Bitfinex Token LEO Soars 60% Amid BTC Seizure from 2016 Hack

Bitfinex’s UNUS SED LEO token (LEO), an altcoin most had forgotten since it launched in 2019, has just surged 60 percent in value following the seizure of almost US$4 billion in Bitcoin lost in an infamous 2016 hack.

LEO Price Hits All-Time High

LEO went from trading at US$4.97 to US$8.04, according to data from CoinMarketCap, reaching an all-time high. The price has settled since to US$6.84, but the surge seems to be related to the seizure of stolen crypto assets that formerly belonged to Bitfinex users.

On February 8, the US Department of Justice announced it had recovered 94,000 BTC stolen in the infamous hack of the crypto exchange Bitfinex. The 2016 hack saw 119,754 BTC stolen, worth about US$72 million at the time. The value of the stolen crypto is now almost worth US$4 billion. On February 1, an estimated US$3.5 billion in BTC was moved from wallets associated with the hack into a single wallet, alerting authorities to the stolen Bitfinex BTC.

Bitfinex CTO Paolo Ardoino took to Twitter to express his gratitude:

Deputy Attorney General Lisa Monaco said in a statement: “Today’s arrests, and the department’s largest financial seizure ever, show that cryptocurrency is not a safe haven for criminals.” The statement also named Ilya Lichtenstein and Heather Morgan as the two culprits charged with attempting to launder the stolen property.

According to the FBI, Morgan and her husband Lichtenstein spent part of the proceeds on gold, NFTs and other items. Each faces up to 25 years in federal prison should they be convicted.

LEO Buys Back

In 2019, Bitfinex sold its Leo token and raised US$1 billion in 10 days. The token is a basic exchange utility token, so using it on Bitfinex lowers trading fees. However, LEO has an additional unique property. According to its whitepaper, the firm pledged to use most of any recovered BTC from the hack to purchase LEO on the open market and burn it after.

The whitepaper indicates: “Bitfinex and its subsidiaries will use an amount equal to at least 80 percent of the recovered net funds from the Bitfinex hack …. to repurchase and burn outstanding LEO tokens.”

The whitepaper also gives the firm 18 months to dispose of the BTC, thereby allowing it to do so at a time-weighted average price rather than shock the market with one giant sale.

In a statement following the news of the seizure, Bitfinex said: “We want to express our appreciation for the dedication and hard work by the DoJ team that led to this great success. We will continue to support their efforts.”

LEO comes from the Latin phrase, “unus sed leo”, a line in the Aesop’s fable The Lioness, and the moral of the story is quality over quantity. If all goes according to plan, there will soon be considerably fewer LEO tokens in circulation.

Categories
Crypto News DeFi Hackers Tokens

Polygon DeFi Protocol ‘QiDao’ Exploited for $13 Million

Another day, another DeFi hack. This time the target was QiDao’s Superfluid vesting contract. User funds on QiDao contracts remain safe, as the exploit was “solely on Superfluid”, as the Polygon-based DeFi protocol tweeted on February 8:

The QiDao protocol allows users to borrow stablecoins against their crypto holdings at zero percent interest. Hackers were able to get away with more than US$13 million in various tokens including QI, WETH, USDC, SDT, MOCA, STACK, sdam3CRV, and MATIC. Rumour has it the stolen funds included team-vested tokens and might have belonged to some of the early backers of the project.

Dump Leads to 65% Price Plunge

The hackers behind the attack started dumping stolen QiDao on the QuickSwap decentralised exchange with high slippage, leading to a 65 percent decline in the price of the governance token:

The QiDao chart felt the pain as the price took a steep nosedive, dropping 68.05 percent in minutes, as reported by @PeckShieldAlert. According to CoinGecko, QI dropped sharply from US$1.24 to $0.18. Impressively, investors bought the dip and the price recovered to $0.80 by press time.

Qi price dip and recovery. Source: CoinGecko

On February 1, Crypto News Australia reported that Qubit Finance had suffered a US$80 million loss in a protocol exploit. With the world of DeFi still in the early stages of development, hacks such as this are common news.

Categories
Crypto News Gaming Metaverse Tokens

Metaverse Token GALA Soars 100% in a Week Following ‘SpiderTanks’ Launch

Play-to-earn (P2E) metaverse gaming protocol Gala (GALA) has seen its token price rocket 117 percent this month, with 100 percent of that figure soaring in a single week.

A big part of the Gala surge can be ascribed to the launch of SpiderTanks, a PVP Brawler game developed by award-winning Netherlands-based gaming studio GAMEDIA:

Land and Venue Sales Also Booming

As well as actual gameplay, the newer generation of games launching on Gala has tapped into another growing trend in the P2E space, land and venue sales. These allow users to earn passive income, helping to grow a larger pool of community members invested in the protocol long-term.

New partnerships are also helping Gala expand the reach of its ecosystem. One of the most significant is this week’s announcement of a collaboration with the 888innercircle community, which numbers more than 205,000 members who are fans of digital art and collectibles:

Gala User Numbers Explode

The Gala community has recorded a huge leap in user numbers, particularly since the beginning of December. The aggregate was 122,230 as at February 7, representing a threefold increase since November from 40,380 users, confirms Dune Analytics.

Metaverse tokens in general have been surging since November, with VR (virtual reality) tokens and blockchain games on fire over the holiday period. Also in November, the metaverse token SAND hit an all-time high after announcing its highly anticipated Metaverse Alpha event.

Categories
Binance Crypto News DeFi Tokens

Tron’s Justin Sun Accused of Governance Attack on DeFi Lender ‘Compound’

Billionaire Tron founder Justin Sun has been fingered for taking part in a “governance attack” scheme involving lender Compound Finance.

As per the above tweet from crypto think tank GFX Labs, Sun’s wallet borrowed 99,000 COMP tokens worth over US$13 million last week, later sending 102,000 tokens to Binance.

Later, an address that received US$9 million worth of COMP tokens from Binance proposed adding TUSD (TrueUSD) as collateral to allow Compound users to take out loans against their TUSD holdings.

On-chain governance of DeFi protocols is often token-weighted, and while one GFX representative classified Sun’s loan as a “governance attack”, there is nothing to stop users from taking out loans to vote on proposals they back.

Sun Defends His Actions

While it’s impossible to verify that the proposal address belongs to Sun, he felt compelled to defend his actions in any case:

In December, Sun resigned his CEO position at the Tron Foundation to become Ambassador to the Grenadian Government, seeking to expand blockchain adoption on its behalf. At the time he said he would remain involved with the Tron community since the network had been officially decentralised.

A year ago, Sun was caught shilling the TRX token, attempting to inveigle a popular YouTuber and influencer to promote the crypto on his social channels.

Categories
Crypto News Ethereum NFTs Tokens

Report Suggests Majority of LooksRare NFT Transactions May Be ‘Wash Trading’

Since LooksRare quickly positioned itself as OpenSea’s biggest rival after launching just three weeks ago, questions have been asked about the platform’s trading figures.

Users have been buying and selling non-fungible tokens (NFTs) between wallets they control in an effort to manipulate daily rewards, a practice known as wash trading.

LooksRare Generates $8.3 Billion Volume in Three Weeks

NFT analytics firm CryptoSlam has now reported the extent of the practice, noting that LooksRare has generated more than US$8.3 billion since launching on January 9, the vast majority of that volume in wash trading. Although the full extent is yet to be officially confirmed, initial estimates are extraordinarily high:

Most of it appears to derive from royalty-free collections, which means sellers don’t have to pay creators a secondary sale fee. Larva Labs’ Meebits tops the wash-trading list with US$4.4 billion, followed by Terraforms (US$2.9 billion), Loot (US$705 million), and CryptoPunks derivative CryptoPhunks (US$251m), with another $US62m attributed to other projects.

Why Users Are Selling NFTs at Vastly Inflated Prices

Users who buy and sell NFTs on the LooksRare site are offered a percentage of the day’s total sales via the site’s own LOOKS token. Those users then game the system by selling NFTs back and forth between their own Ethereum wallets via artificially inflated prices, with the aim of earning more in LOOKS rewards than they’d spend on LooksRare’s 2 percent marketplace fee and the Ethereum network’s own gas fees.

LooksRare also provides Wrapped Ethereum (WETH) rewards for users who stake their LOOKS tokens in the platform, providing further incentive to accumulate and then hold a large number of them. The community reward models set LooksRare apart from OpenSea, but with trading rewards at their highest level during the platform’s first 21 days, some users are clearly abusing the system.

Categories
Crime Crypto News DeFi Scams Tokens

TIME Token Collapses 60% Amid Revelation that Co-Founder is a Known Convict

DeFi (Decentralised Finance) project Wonderland has seen its native token TIME collapse 60 percent after it was revealed it had been co-founded by Michael Patryn, also one of the co-founders of the now-defunct Canadian crypto exchange QuadrigaCX.

0xSifu Steps Down as CEO of Wonderland

The co-founder and chief financial officer of the Avalanche-based DeFi protocol Wonderland had been known as OxSifu. A user by the name of zachxbt revealed OxSifu was actually Michael Patryn, who continually changed his identity – to the point of undergoing multiple facial surgeries – to avoid detection by police.

Before he was Michael Patryn, OxSifu went by the name of Omar Dahini, then Omar Patryn. He was part of a criminal organisation called Shadowcrew, whose operations consisted of trafficking stolen credit and identity information using E-gold, a privacy-focused digital currency issued in 1996.

Two faces of Michael Patryn. Source: davidgerard.co.uk

QuadrigaCX was a Canadian crypto exchange owned and operated by Gerald Cotten, who died unexpectedly in 2018, his body cremated before anyone could verify his death. The eerie side is that he took with him more than US$160 million of investors’ money, but Omar (Patryn) and his wife ended up with the majority of the assets.

Everyone ‘Deserves a Second Chance’

Daniele Sesta, the other co-founder of Wonderland, said he knew about Patryn’s criminal past and the numerous Ponzi projects he had led. Despite Patryn’s long criminal record, Sesta decided to keep him on as Wonderland’s treasury manager.

I found out about this one month ago. I am of the opinion of giving second chances, as I have mentioned on Twitter. I’ve seen the community very divided about my choice of maintaining [Patryn] as the treasury manager after finding out who he was and his past.

Daniele Sesta, blog post

This sparked outrage in the Wonderland community, many of whom are accusing Sesta of being Patryn’s accomplice, or even being Patryn himself.

The voting process to remove Patryn from his positions ended on January 29. with the vote 87.56 percent in favour of removing OxSifu against 12.44 percent voting to keep him.

Sesta Swimming in Hot Water

Wonderland members on Twitter, Reddit, Discord, and all other social media channels related to the project, are now questioning Sesta’s legitimacy and his overall financial background.

An example of Reddit users being up in arms. Source: Reddit

Did Cotten Really Die?

Gerald Cotten reportedly died from Chrohn’s disease in 2018. The keys to the digital vault containing a massive fortune in Bitcoin were buried with him.

The event was so controversial that it was covered by worldwide media, even inspiring documentaries and movies. As Crypto News Australia reported last year, a documentary titled Dead Man Switch was screened at the Melbourne Film Festival in August, leaving a handful of questions unanswered – including whether he had faked his own death in an elaborate “exit scam”.