ICON Reports Replay of Withdrawal Messages
Postmortem details repeated signatures triggering large ICX releases.
Postmortem details repeated signatures triggering large ICX releases.
CryptoSlate reported ICON statements that two valid withdrawal messages were replayed 1,492 times, with 1,490 calls succeeding and releasing 119.9M ICX. Confirmed losses total 150.2 ETH plus 31,204 USDC. Most of the ICX has been traced and frozen. The source article states two signatures were reused 1,492 times, causing a 25-hour halt. A hacker reused the same authorization message 1,490 times to trigger payout loops on the network.
1.2K
1 post, first seen 4d ago
Postmortem details repeated signatures triggering large ICX releases.
CryptoSlate reported ICON statements that two valid withdrawal messages were replayed 1,492 times, with 1,490 calls succeeding and releasing 119.9M ICX. Confirmed losses total 150.2 ETH plus 31,204 USDC. Most of the ICX has been traced and frozen. The source article states two signatures were reused 1,492 times, causing a 25-hour halt. A hacker reused the same authorization message 1,490 times to trigger payout loops on the network.