The StarsArena Web3 app on Avalanche has lost some of its funds due to a malicious attack, according to social media reports on October 5.
StarsArena user Lilitch.eth discovered the exploit and announced it on X, formerly known as Twitter. Lilitch.eth claimed over $1 million was lost in the attack. The StarsArena team confirmed the attack, calling it a “war” against the app. They said the attack only resulted in approximately $2,000 in losses and the exploit has now been patched.
THE EXPLOIT HAS BEEN FIXED.
BUT DON’T GET THIS WRONG WE ARE AT WAR.
We’re being targeted by malicious actors in the space that want to steal your money.
The little guy is under attack.
You are under attack.
Your right to platform diversity is under attack.
Don’t get it… pic.twitter.com/DmbMdf9cAq
— Stars Arena (@starsarenacom) October 5, 2023
StarsArena is a Web3 social media app running on the Avalanche network. Similar to Friend.tech, it allows users to buy “shares” or tokenized assets issued by content creators. The issuers can grant token owners access to exclusive content or other perks. Avalanche has seen a surge of activity since StarsArena was launched, as the network’s daily transaction count increased by over 186% from October 3-4.
On the morning of October 5, Lilitch.eth declared on X that StarsArena was being drained of funds. “1.1 million dollars are being drained right now because of noob devs who couldn’t make a copy of http://Friend.tech that will work properly,” Lilitch stated, adding “If you hold ANY SHARES in StarsArena you should sell while you still can.” In the post, they showed an image of a contract at address 0xA481B139a1A654cA19d2074F174f17D7534e8CeC that contained approximately 107,329 Avalanche (AVAX) tokens, worth over $1 million at the time.
@starsarenacom, you fucked up
1.1 million dollars are being drained right now because of noob devs who couldn’t make a copy of https://t.co/h7traLwG9i that will work properly
If you hold ANY SHARES in StarsArena you should sell while you still can
read next⬇️ pic.twitter.com/HzgXvJc8ju
— lilitch.eth (@0xlilitch) October 5, 2023
In response, some users accused Lilitch of “fudding” (spreading fear, uncertainty, and doubt). For example, ZSwapDEX developer Mork claimed that “no exploiter can profit from this because the gas to run the tx is higher than the Avax extracted” and “they are proxy contracts – able to be updated.”
Click Here to Read the Full Original Article at Cointelegraph.com News…