lazarusholic

Everyday is lazarus.dayβ

Protocol Exploit Report 2

2022-01-31, QubitFinance
https://medium.com/@QubitFin/protocol-exploit-report-2-30aade4d66de
#Cryptocurrency #Qubit

Contents

Protocol Exploit Report 2
First of all, we are deeply sorry about all of the damage and shock that our community has suffered.
Some articles are spreading, which were written based on wrong assumptions and speculations. Therefore, we would like to refute those while explaining the detailed history of Qbridge protocol development.
Timeline
- 23 Nov. 2021: The first deployment of the QBridge contracts on BSC https://bscscan.com/tx/0xdb9ac83db9471d20497dc249912bf80f71ad9fee28b247e3f1d493b36e958373
- 29 Nov. 2021: The first deployment of the QBridge contracts on Ethereum
https://etherscan.io/tx/0x94aa2b54f6d8a2a62266c1de6b95819d444031dc401de9b89cd71660411f0b28
- 1 Dec. 2021: The Bridge contracts including QBridge, QBridgeHandler, QBridgeDelegator, QBridgeToken, and the relayer were provided to Theori(an Audit firm). Afterward, the team began to develop the interface for Bridge. Also, the team decided to develop the function which allows direct deposit ETH(native token) instead of WETH.
- 13 Dec 2021: Audit was completed
- 13 Dec 2021: Upgrade ‘depositETH’ function
- setResource: https://etherscan.io/tx/0xe3da555d506638bd7b697c0bdf7920be8defc9a175cd35bf72fb10bc77167b66
- QBridge contract upgrade: https://etherscan.io/tx/0xc7617ed8be4f322a427a4181eb6baf7d351b829307594771a63ac716860869d9
- QBridgeHandler contract upgrade: https://etherscan.io/tx/0xd3fe9076228e51b47b7c27d2b9e1ce0b88f7be2a22236a621814e7787b089e98
- 14 Dec 2021: Internal review was …