Dear @AcrossProtocol team,
I’m writing to you during your office hours of 9-5pm on M-F and have no reason to believe today is a national holiday.
I’d like to inform you that your token contract has a critical issue.
You mistakenly exposed what was meant to be an internal private function written by Open Zeppelin in their ERC20 token implementation, meant for burning tokens, and gave it to your contract owner – allowing you to take tokens out of any wallet at any point in time, arbitrarily rugging any account to 0.
Additionally both your @AcrossProtocol and @UMAprotocol contracts have the ability to infinite mint tokens (ironic given @hal2001's rant against infinite mint power on tokens last week), but I’ve already informed you of both of these and you don’t seem to care.
To fix the issue without needing to reissue your token:
Transfer ownership to a new smart contract that prevents minting beyond the total supply and disallows burning. Since this is a permanent vulnerability, the new contract must be immutable, and it should not include any functionality to transfer ownership.
If you have an active bug bounty program feel free to credit this to the @LayerZero_Core team.
Best of luck
-LZ
The arrest of @Durov is an assault on the basic human rights of speech and association. I am surprised and deeply saddened that Macron has descended to the level of taking hostages as a means for gaining access to private communications. It lowers not only France, but the world.
After extensive internal testing, server request failure is now down to 0.13%.
87% of the 2200+ servers on our network have been updated by our community of operators, and the latest cross-platform Session release will make sure that your client builds a path using only updated servers.
We want to thank everyone for your patience, feedback, and understanding throughout the process of overcoming this challenge.
If you are still have trouble, chat to us here👇 and our customer support team will work diligently to resolve it.
https://t.co/8xmJHUGAjh
#Binance is now El Salvador’s first fully licensed crypto exchange! 🇸🇻
With this, Binance has approvals and registrations in 18 markets worldwide, more than any other crypto exchange, including France, Italy, Spain, Sweden and Dubai.
https://t.co/BITj9zxdcZ
We're looking for more Session power users to join our testing group!
If you use Session every day and you want to help us make it the best that it can be, send us a DM.