Last night a vulnerability was discovered and patched within 24 minutes.
All funds are safe. No action is required by users.
We have published a detailed write-up here:
https://github.com/iearn-finance/yearn-security/blob/master/disclosures/2020-09-25.md …
h/t @samczsun @AndreCronjeTech @lehnberg @bluekirbyfi
Great write-up folks! It’s not clear how long this was happening before the alarm was raised. Any scope for alerting on anomalies like this? It was fortunate that discord users called it out, but we shouldn’t rely on that.
-
-
When the monitoring system is finished, alerting would be trivial to add.
-
Perfect. You guys are awesome. <3
Fin de la conversation
Nouvelle conversation -
Le chargement semble prendre du temps.
Twitter est peut-être en surcapacité ou rencontre momentanément un incident. Réessayez ou rendez-vous sur la page Twitter Status pour plus d'informations.