Every story and comment from the Hacker News API, in a layout borrowed from 2001.
A comment on Poly Network hacker returns $258M after stealing $600M. Parent comment
Reading this a hash collision was exploited:
https://rekt.news/polynetwork-rekt/
> Well... here's the actual sighash of the target function:
> http://ethers.utils.id ('putCurEpochConPubKeyBytes(bytes)').slice(0, 10)
> '0x41973cd9'
> And the sighash that the attacker crafted...
> http://ethers.utils.id ('f1121318093(bytes,bytes,uint64)').slice(0, 10)
> Fantastic. No private key compromise required! Just craft the right data and boom... the contract will just hack itself!
There are no comments on this comment yet.
Reading this a hash collision was exploited:
https://rekt.news/polynetwork-rekt/
> Well... here's the actual sighash of the target function:
> http://ethers.utils.id ('putCurEpochConPubKeyBytes(bytes)').slice(0, 10)
> '0x41973cd9'
> And the sighash that the attacker crafted...
> http://ethers.utils.id ('f1121318093(bytes,bytes,uint64)').slice(0, 10)
> '0x41973cd9'
> Fantastic. No private key compromise required! Just craft the right data and boom... the contract will just hack itself!