Around July 11th of the year, Benzolend was hack. This is not a private key leak nor a flash loan normal attack. It was a missing check :: The oracle Bls verifier accepted an identity signature and an identity key
Lesson for builders & SR:
A precompile only does math, not validation.
It will happily compute 1*1=1 and return true. Contract must reject identity points and check subgroup membership before trusting the any result.
TheSeersec retweeted
MY greatest fears are not failing at a thing, but the regrets of what could have been.
I love it when I could look at things that didn't work out as expected knowing that I did my best. It feels better than what could have been.
one of fountain of auditing is to throw all of it around the protocol asset coverage and flows
Who: Assets should be withdrawn/deposited only by authorised/specified addresses as per application logic
When: Assets should be withdrawn/deposited only in authorised/ time windows
Which: Assets, only those authorised/specified types, should be withdrawn/deposited as per application logic
Why: Assets should be withdrawn/deposited only for authorised/specified reasons as per application logic.





