Looking further, it seems the exploit was fundamentally the same: a reentrancy attack allowing NFTs to be swapped that we patched in future releases, but it appears to be a worse outcome. In the process they seem to have re-bought the same NFT, clearing out the listing price.
I think this bricked the NFTs held by the Strategy since there is no longer a listing for them. I also think this can be executed on the other 6 strategies that had this bug.
This was only profitable on the APESTR contract because of the Mudwater pack claim, but there's nothing stopping someone from being unprofitable and malicious to brick the other 6 (or if there is a profitable claim in the future).
NFTs getting locked in the contract is a horrible outcome. I'm glad that this didn't happen a year ago when there was more volume on these 7 tokens, but it's heartbreaking that the issue ended up being even worse.
Let me know if you have any questions below and will do my best to answer.
I've disabled new Strategy launches for the foreseeable future.
I don't think launches every day with zero volume helps the ecosystem, and it's better to allow communities that want the tech to launch themselves and thrive.
We've refunded all 14 pending requests. More below.
I’m proud to announce that we’ve donated ownership of the PunkStrategy contract to the NODE Foundation.
I view the contracts we create at TokenWorks as art. NODE is already the home of the CryptoPunks IP, and I think they’re the right people to carry this idea forward. Being able to donate PunkStrategy to them means a lot to me.
With this transfer, TokenWorks’ share of trading fees will now go to NODE, giving them a new revenue stream to support artists, exhibitions, and more. We think this is the best home for the project.
PunkStrategy runs autonomously and is designed to keep running for as long as Ethereum does. At the time of writing, the contract holds 37 Punks, which remain governed by its rules. The owner can only do three things:
* Set the trading fee on the hook between 1% and 10%
* Set the relisting multiplier for newly purchased Punks between 1.1x and 10x
* Claim the owner’s share of trading fees.
We’ll continue tweeting about PunkStrategy’s buys and sells and supporting the project. Both TokenWorks and I personally remain significant holders of PNKSTR.
The Token Works
If you're in Marfa, we're giving 2 free FWA purchases to 5 teams that win at Beer Pong.
Bring your A-game.
Watching @token_works fly has been a highlight of the last few years. So happy to be aligned with Adam in spirit, in goals, in morals. He is the fucking best to do it.
This year he’s supporting Marfa (again) and sponsoring the Birds Beer Garden. Adam is also donating 10 FWA spins to the first 10 winners.
Back to building these tables.
Thank you @Rhynotic
We use Railway for all of our indexers and keepers. The keeper will remain offline until more information of the Railway hack is released.
We've moved funds out of our keeper wallet (1.17Ξ) in the meantime.
Anyone in the TokenWorks playground can start launching their ideas via the IMD swarm
Our first idea: Mutually Assured Destruction (MAD).
Will prompt a site once it builds (no trading yet). If everything works, anyone will be able to launch their own Playground tomorrow
Our FWA keeper runs on Railway, and has been down for a few hours.
Railway is starting to come back online and the keeper will come back online once they're back up.
The purchase queue can still be processed manually by anyone with a transaction on the site.
We’ve reinstated the 10% of protocol fees that were going to daily purchasers as ethereum:0xa0df17b5ac76ababa36e1450e2cbcd18a620c845
Protocol fees are now split as follows: 70% buy-and-burn ethereum:0xa0df17b5ac76ababa36e1450e2cbcd18a620c845, 20% to stakers, and 10% to daily purchasers
TokenWorks™ retweeted
Watching @token_works fly has been a highlight of the last few years. So happy to be aligned with Adam in spirit, in goals, in morals. He is the fucking best to do it.
This year he’s supporting Marfa (again) and sponsoring the Birds Beer Garden. Adam is also donating 10 FWA spins to the first 10 winners.
Back to building these tables.
Thank you @Rhynotic
TokenWorks™ retweeted
CryptoPunk #3190 purchased with 1.00 ETH backing ($2,427 USD) by 0x184b...179a from 0xb924...3ad1
fwa.fun/nft/55
15% of the total FWA supply is now staked and voting on what goes in the pool























