Dear community,
We recently saw some unwanted interactions with the DFTP contract.
A hacker exploited a flaw in the code and managed to mint 300 DFTP (defiat POINTS) and send them to Uniswap.
https://etherscan.io/tx/0x17701b04d97f366d1e41d684c52e98f598c9248866ce6711d2d843b54981e423
The size of this “heist” remains modest (<1ETH), but it’s a great opportunity for us to show the resilience of the DFT ecosystem from such issues.
For the record: The issue was a coding flaw (@stupid here: I am 100% responsible), where a function allowing to mint 1 DFTP was left “public”.
This critical code issue needed to be mitigated.
As a result we had to respawn a new token. The new contract corrects the flaw and is available here:
https://etherscan.io/token/0xeb23df02ab127af9249227441bc4df4d5230f02a
WHAT YOU NEED TO DO IMMEDIATELY:
DO NOT SELL DFTP ON UNISWAP.
1- remove all liquidity from DFTP on UNISWAP (if you added some).
2- take rewards from the DFT-DFTP pool
3- unStake from the DFT-DFTP pool.
Then keep your DFTP in your wallet. Wait for a swap :-)
We just made a snapshot of the current balances to swap with the new token in the following DAYS. This snapshot will be updated following the DFTP unstake/rewards and Uniswap liquidity removal.
We will setup a manual swap to identify the hackers and will blacklist them.
I already wrote to Binance (tx origin for ETH) to identify the hacker/exploiter.
WHAT IT MEANS FOR YOU:
Actually… not a lot… business as usual here. That’s the beauty of the DeFiat ecosystem ;-)
DFT is untouched/unchanged. Nothing impacted the main token.
Our liquid governance and upgradeable architecture allows us to solve the DFTP problem easily with a new token. Next step is a DFTP token SWAP.
In details:
1- the creation of DFTP per transaction is deprecated.
The only way to acquire DFTP is to FARM them from the farming contract
A NEW farming contract will be setup in the following days.
2- your discounts RESET, but DO NOT “update discount” on the dashboard until the swap happened.
Once we do the swap, you will be able to update your TX discounts for when transacting with DFT.
IMPORTANT:
This “exploit” only impacts DFTP. DFT is untouched.
2hacks happened: The 1st one 3 days ago and the most recent one (trigger) 10 hours ago.
This fast-response protocol shows how fast we can solve similar issues and how resilient is our protocol.
As usual, any question, feel free to ask.
— The DeFiat Team
