The NonNFT Summit

Cryptoart Event Nov. 7, 2022 @ Prim 32, Mexico City. Official commemorative token collection:

[The NonNFT Summit @NonNftSummit]

11/7/22

[XCOPY 🏴 @XCOPYART]

74/222 minted - 8 days to go

[XCOPY 🏴 @XCOPYART]

50/222 minted - 5 days to go

[The NonNFT Summit @NonNftSummit]

Burn one 'Clásico' to redeem 'Explotar II'
FREE (only gas fee)
Max supply 222
Starts today 6 pm ET and lasts 7 days, ending on April 15 6 pm ET

☢️☢️☢️BURN HERE☢️☢️☢️
https://t.co/jbdWpD9OKs

[The NonNFT Summit @NonNftSummit]

Explotar II

[The NonNFT Summit @NonNftSummit]

Burn one 'Clásico' to redeem 'Explotar'
0 ETH (only gas from tx)
Max Supply 222
Starts today at 5 pm ET (in about 20 mins) and lasts 10 days, ending on April 18 5pm ET

🔥🔥🔥BURN HERE🔥🔥🔥
https://t.co/apara43RSp

[The NonNFT Summit @NonNftSummit]

Explotar

[The NonNFT Summit @NonNftSummit]

@CarignanoCampag @Moxarra @neurocolor @XCOPYART https://t.co/QtvOplYHeK

[The NonNFT Summit @NonNftSummit]

We recently became aware that our token contract was compromised due to an exploit found on thirdweb.

The contract is now locked, and a snapshot has been taken as we prepare a solution.

We apologize for the delayed response. The development and NonNFT Summit teams were caught off guard, with some of us traveling.

We are discussing whether to use the mitigation tool further and conduct an airdrop, but most likely, we will proceed with an airdrop from a different contract.

The pre-attack holder addresses will be honored. Our goal is to turn the situation into something positive so expect some news on the airdrop this January.

[The NonNFT Summit @NonNftSummit]

NonNFT 2022
@Moxarra x @neurocolor x @XCOPYART
666 tokens airdropped to the pre-attack holders (check ‘hidden’ folder) ❇️

official contract: https://t.co/4SONi0yK2b

Burn to redeem variants soon 👀

[XCOPY 🏴 @XCOPYART]

👀

[The NonNFT Summit @NonNftSummit]

@DigitalCollecto absolutely

[The NonNFT Summit @NonNftSummit]

We recently became aware that our token contract was compromised due to an exploit found on thirdweb.

The contract is now locked, and a snapshot has been taken as we prepare a solution.

We apologize for the delayed response. The development and NonNFT Summit teams were caught off guard, with some of us traveling.

We are discussing whether to use the mitigation tool further and conduct an airdrop, but most likely, we will proceed with an airdrop from a different contract.

The pre-attack holder addresses will be honored. Our goal is to turn the situation into something positive so expect some news on the airdrop this January.

[thirdweb @thirdweb]

IMPORTANT

On November 20th, 2023 6pm PST, we became aware of a security vulnerability in a commonly used open-source library in the web3 industry.

This impacts a variety of smart contracts across the web3 ecosystem, including some of thirdweb’s pre-built smart contracts.

Based on our investigation so far, this vulnerability has not been exploited in any thirdweb smart contracts. However, smart contract owners must take mitigation steps on certain pre-built smart contracts that were created on thirdweb prior to November 22nd, 2023 at 7pm PT.

The impacted pre-built contracts include but are not limited to DropERC20, ERC721, ERC1155 (all versions), and AirdropERC20. Please see a full list of impacted smart contracts and mitigation steps at this link → https://t.co/4uSu6ToMEs

Our immediate priority is to protect our customers impacted by this vulnerability. If you deployed one of these pre-built smart contracts using thirdweb’s dashboard or SDKs before November 22nd at 7pm PST, you need to perform some steps to mitigate the potential exploitation of the vulnerability.

We and our security partners have been working at full capacity since being made aware of the vulnerability to build a tool to easily determine and perform the mitigation steps you need to take, which can be accessed here → https://t.co/dTgR4rUzWy

In most cases, the mitigation steps will involve locking the contract, taking a snapshot and migrating to a new contract without the known vulnerability. The exact steps you need to take will depend on the nature of your smart contract, and you can determine these using the tool.

You can also find a step-by-step guide on how to use the mitigation tool here → https://t.co/TQGd6ukRH3

Please note: If your holders have tokens locked in any liquidity or staking pool, they should pull these tokens out before you begin these steps. Otherwise, you will not be able to distribute new tokens to these users. Additionally, you should request that your users revoke approvals on all thirdweb contracts using https://t.co/cNpEcF6vjm, which will protect your users if you choose not to mitigate the contract.

Once we became aware of the vulnerability, we activated our security team and worked closely with our audit partners to investigate the issue. We successfully pushed a remediation for all of thirdweb’s impacted pre-built contracts created after November 22nd 7pm PST.

Any thirdweb smart contract (as long as it is the latest version) deployed after November 22nd at 7 PM PST is therefore not impacted by this known vulnerability. All other thirdweb services, including our wallets, payments, and infrastructure services, are also unaffected and functioning as usual.

We have also contacted the maintainers of the open-source library at the root of the vulnerability (which we are not specifying to mitigate the chance of exploitation) and contacted other teams we believe may be impacted by the same issue to share our findings and mitigation measures.

Moving forward, we are increasing our investment in security measures. This includes doubling our bug bounty payouts from $25k to $50k per bounty, and implementing a more rigorous auditing process, with the goal of creating a robust environment for web3 developers.

We understand that this will cause disruption, and we are treating the mitigation of the issue with the utmost seriousness. We will be offering a retroactive gas grant to cover fees for contract mitigations. Please fill in this form to be considered. → https://t.co/Ppo25DN0zE

Please visit our blog for more information on this vulnerability → https://t.co/4uSu6ToMEs

To access our mitigation tool, please use the link here → https://t.co/dTgR4rUzWy.

For ALL SUPPORT questions related to the vulnerability and mitigation steps, please EMAIL us directly at [email protected] to protect yourself and other users in the community from sharing vulnerable contracts.

This is the only tweet in this thread. Anything below may be spam or phishing. Do not click on any links unless you have determined they are safe and from an official https://t.co/MvT3IZ13Lv domain.

[The NonNFT Summit @NonNftSummit]

@aaasonipse @neurocolor @Moxarra @XCOPYART 💌
https://t.co/9EFaCBW5zM

[The NonNFT Summit @NonNftSummit]

We recently became aware that our token contract was compromised due to an exploit found on thirdweb.

The contract is now locked, and a snapshot has been taken as we prepare a solution.

We apologize for the delayed response. The development and NonNFT Summit teams were caught off guard, with some of us traveling.

We are discussing whether to use the mitigation tool further and conduct an airdrop, but most likely, we will proceed with an airdrop from a different contract.

The pre-attack holder addresses will be honored. Our goal is to turn the situation into something positive so expect some news on the airdrop this January.

[The NonNFT Summit @NonNftSummit]

one year ago! nice memories. slow-cooking the follow-up

[WG @WGMeets]

Spoke at the incredible @NonNftSummit in Mexico, thanks to @neurocolor @Moxarra and @MrMonkX we had an amazing time.
Spoke to my Latinos in CryptoArt with @santiagoitzcoat @CaballeroAnaMa and hosted by @gblsts ❤️‍🔥
Another memory that will be treasured forever!

[lulú 𓇼 @lulucollages_]

Mexican collage dump from my visit to the @NonNftSummit 🚬🌞

[Dan Anderson @droplister]

I love being early to technology, that's part of what drove me to create the @dan_files.

There's something about an immutable timestamp that just cuts through the noise, y'know?

Here's what else I've been early on...

[神経色 @neurocolor]

times people used the “u” word at the @NonNftSummit:

0

[espinosa @aaasonipse]

in 2022 my work was shown internationally multiple times, most notably at the mindblowing @NonNftSummit in Ciudad de Mexico

my work was collected hundreds of people, including incredibly thoughtful collectors -some who also happen to be favorite artists of mine-

👇🧵

[esesteban.eth @menosgobierno]

🫵
#tbt @NonNftSummit
🤘

#rifado

[Ana María Caballero @CaballeroAnaMa]

just listed the remaining editions of the article I wrote on @NonNftSummit as free mints on @fx_hash_ with all royalties set to go to #tezosforiran.

if you'd like one, pls take one via the link below.