Technical Incident Report: Staking Logic Vulnerability and Exploitation

Hello everyone,

As you may have noticed, addresses identified with bad ONEs have been blacklisted, preventing them from performing any transactions. To remove these addresses from the blacklist, we plan to initiate the removal process once an account has burned the total sum of their delegator address’s max-loss.

Kindly send all the ONEs corresponding to the max-loss to one1qqqqqqqqqqqqqqqqqqqqqqqqqqqqph4d6xartj or using MetaMask to 0x000000000000000000000000000000000000dEaD.

We are implementing a weekly script to regularly check if an account has fully burned the bad ONEs, updating the blacklist accordingly at that time.

you can check the below result for the total max-loss per delegator

max-loss-sum-by-bad-delegator:
{
 "one132ggm0mgxdt4l8etud9e5gzpv8psgx30p7hxsq": {
  "max_loss": 434000.0,
  "total_burned": 0,
  "clean": false
 },
 "one1hhkwvqy0nxye6q7f3zufm3xtggs7plgxjhm9uv": {
  "max_loss": 66.4439562,
  "total_burned": 0,
  "clean": false
 },
 "one1td6g8sh02r7skyqtl46qdlgu0ed5lp259uut7x": {
  "max_loss": 216596.15,
  "total_burned": 0,
  "clean": false
 },
 "one1upw0kwk0znhvzmajmg68natnvwwtfdmkq6x83j": {
  "max_loss": 25550.0,
  "total_burned": 0,
  "clean": false
 },
 "one13sqcelgdcf0ss573jq5qekw24tp9srqhsc5rz6": {
  "max_loss": 382840.939572,
  "total_burned": 0,
  "clean": false
 },
 "one1zehlukl282w4d2yfagxfrtjxxgg87z0c0y8jx5": {
  "max_loss": 1996.0,
  "total_burned": 0,
  "clean": false
 },
 "one1lentd4wxugn03fvp5spmzpw5j3vjftyhjv5usv": {
  "max_loss": 2499.99,
  "total_burned": 0,
  "clean": false
 },
 "one14de246690z4pptymlwm5qsuae52ju6pzw2nhhc": {
  "max_loss": 2583225.2032236,
  "total_burned": 0,
  "clean": false
 },
 "one1n0ex306uv0ds6wwxg876hkqkkygt8zdk45mekq": {
  "max_loss": 26270.0,
  "total_burned": 0,
  "clean": false
 },
 "one1fjeduxklq45e4c594kc6u6vfn9unvfrjt29wcd": {
  "max_loss": 87643.9039046,
  "total_burned": 87643.9039046,
  "clean": true
 },
 "one12zyyam39rqrkne37c6y0f48v7ly36nptzjpdvx": {
  "max_loss": 334540.0,
  "total_burned": 0,
  "clean": false
 },
 "one14ahr2v4ut9fjswx2qa68r75zzmz9rq7fdg22an": {
  "max_loss": 731720.0,
  "total_burned": 0,
  "clean": false
 },
 "one1wupttflsngz3s9j6vqhmxq2yfrknqud3fh0dqd": {
  "max_loss": 416150.0,
  "total_burned": 0,
  "clean": false
 },
 "one1deescw460fec49e70z8a3fxkmh3gdckaj7ht5v": {
  "max_loss": 0.0,
  "total_burned": 0,
  "clean": true
 },
 "one1nte43uzsr0rhd07sklp6hfxerhsjaywprwx3jw": {
  "max_loss": 1845.0,
  "total_burned": 0,
  "clean": false
 },
 "one15s8pu2jlgnvu9dxf09z3ugnczg2zkz44dgu4hs": {
  "max_loss": 605.435096,
  "total_burned": 0,
  "clean": false
 },
 "one1cy5jyyfe2rft0rhavlcj7jpk97tr6fr6wpxphx": {
  "max_loss": 21450.0,
  "total_burned": 0,
  "clean": false
 },
 "one1nr25mye2630q8uwjh22laehl7hc5ja6hwsul60": {
  "max_loss": 204422.60040199998,
  "total_burned": 0,
  "clean": false
 },
 "one1ca3gg53q8n8punl9yjrtzf4jjw2hz3lmxn2ccv": {
  "max_loss": 100994.27109800001,
  "total_burned": 0,
  "clean": false
 },
 "one1m4zfulx43jcwxfyqjnvdz6a3347taqh6r564ec": {
  "max_loss": 190000.0,
  "total_burned": 0,
  "clean": false
 },
 "one1hwxk85w66wt5udx6q89aaf5agm5g359455vw9h": {
  "max_loss": 26805.0,
  "total_burned": 0,
  "clean": false
 },
 "one1hwcnqd6wzkg0qsllfcn2uvczmyw9e6qtcw3gu9": {
  "max_loss": 31755.0,
  "total_burned": 0,
  "clean": false
 },
 "one1yp77tdlzzd4vqay4gczlr0t0d06q76r3fj9xqf": {
  "max_loss": 322151.40300510003,
  "total_burned": 0,
  "clean": false
 },
 "one1ayzdgkknxylhce0h6cdklnasyempyg4e27c8p0": {
  "max_loss": 49940.0,
  "total_burned": 0,
  "clean": false
 },
 "one10c3hwcyqfr27xk277rhuhxhv0hrcwnpakskc89": {
  "max_loss": 0.018944,
  "total_burned": 0,
  "clean": true
 },
 "one1958rkn62v5saegyufkpfl7r3ymjac4egnq5wac": {
  "max_loss": 0.0016790400000000001,
  "total_burned": 0.00167904,
  "clean": true
 },
 "one13fgzlk57kjn9u9fzxyt2cuessf3zq2d064gu55": {
  "max_loss": 2094.8673360000003,
  "total_burned": 0,
  "clean": false
 },
 "one1n969dd4pafq0xfmpzawq3p7nry3g6g2vauzdsr": {
  "max_loss": 37.808738999999996,
  "total_burned": 0,
  "clean": false
 },
 "one127s4m8h6dx6p4chz4d7s9wpwyx4yzph3c2v8ju": {
  "max_loss": 176700.0,
  "total_burned": 0,
  "clean": false
 },
 "one1ex8lws5wy7l2jeq0gsed7gh09c3fsl3ym36ude": {
  "max_loss": 352550.0,
  "total_burned": 0,
  "clean": false
 },
 "one1xa7d58udz6j5dr8y7j5sta8667hym3avpe4vvm": {
  "max_loss": 26789.822139,
  "total_burned": 0,
  "clean": false
 },
 "one125sfutf4r4u72dn4sr0fc9ag5wmlyfe0gcv8tq": {
  "max_loss": 12162.7002528,
  "total_burned": 0,
  "clean": false
 },
 "one198wag3t0dfy0nn57fhnrz0vs0degjwtsvyssj4": {
  "max_loss": 70968.8,
  "total_burned": 0,
  "clean": false
 },
 "one15g86zugpwg7n86pag75a0jk3xe46fjuydxmpa4": {
  "max_loss": 1107.0,
  "total_burned": 0,
  "clean": false
 },
 "one1gukv49ntzx2p4wfrzj33dh894rrgec6st4lxwp": {
  "max_loss": 94679.99999999999,
  "total_burned": 0,
  "clean": false
 },
 "one1dp2v0hgfutcagepp28av7v3k7p8xspe9qqxgez": {
  "max_loss": 208188.0,
  "total_burned": 0,
  "clean": false
 },
 "one1rzj676wlcqkuj58h2d9wj7scpu6twht6qqvw54": {
  "max_loss": 51200000.0,
  "total_burned": 15800000.0,
  "clean": false
 },
 "one1uq03je2asmsllm3v0tvqe8v8farjk6ethkt9qp": {
  "max_loss": 40600.0,
  "total_burned": 0,
  "clean": false
 },
 "one1y7wxexz67yjfv73jm2q6yvq6vxarngc46hgrvm": {
  "max_loss": 2542000.0,
  "total_burned": 82000.0,
  "clean": false
 },
 "one1lnyyvxy96ceux2a4lff5qlu3vqawmhwwy893gy": {
  "max_loss": 0.0,
  "total_burned": 0,
  "clean": true
 },
 "one135fjlv8f72q0mxrmsq0hhmdjjz7t972lz69h0n": {
  "max_loss": 2055626.4796659932,
  "total_burned": 0,
  "clean": false
 },
 "one1593c36lmvhkwsrjzk8qj0f2d9vc7uqf53dcfuz": {
  "max_loss": 127526.217948,
  "total_burned": 0,
  "clean": false
 },
 "one1v8hj9r9fm7nfu07sqq8y8gla2gmug3hunk3fum": {
  "max_loss": 2230000.0,
  "total_burned": 0,
  "clean": false
 },
 "one1j2gl3hjm2jgvamukhm97nsrzxcqkm5hjgp6zuv": {
  "max_loss": 18004811.6802,
  "total_burned": 0,
  "clean": false
 },
 "one1467ulp5s8jjl28mjqgrjnp0jm9u0e0htvrlrsv": {
  "max_loss": 864800.0,
  "total_burned": 0,
  "clean": false
 },
 "one17pvy6ht2nkp0t5yvuaryklq05m9ehhtfz0tanc": {
  "max_loss": 5700.0,
  "total_burned": 0,
  "clean": false
 },
 "one1g44sf2xlkkmv5x5uarwdxy0j228rwqz365zlv3": {
  "max_loss": 39767125.0,
  "total_burned": 0,
  "clean": false
 },
 "one1jzl3yymvevrewrntlqlgrzpahpkg97hmxd0j88": {
  "max_loss": 180180.00000000003,
  "total_burned": 0,
  "clean": false
 },
 "one10f7cjygrt90pt065wsr3z0ay8cgrdxrg4px4rk": {
  "max_loss": 15.0,
  "total_burned": 0,
  "clean": false
 },
 "one1rxdtt9fvgdcy3n5sy6e4zxg0s4hn4shaqf4qtp": {
  "max_loss": 393000.00000000006,
  "total_burned": 0,
  "clean": false
 },
 "one1luq9z3l0fg8gxk8wzd37yhrrcx3fmd3tcfs48h": {
  "max_loss": 228000.0,
  "total_burned": 0,
  "clean": false
 },
 "one1ymcnvsrm8a6jd598l0n3jqjf0nfgrycdndut0k": {
  "max_loss": 59460.0,
  "total_burned": 0,
  "clean": false
 },
 "one14gn8krn0qakek4psfgxsyy48qx4y4appuxpt48": {
  "max_loss": 488775.0,
  "total_burned": 0,
  "clean": false
 },
 "one1459uca74wc2e6zxc8eyvm2n6cs3aexhk5hundm": {
  "max_loss": 3000.0,
  "total_burned": 0,
  "clean": false
 },
 "one1whtcu6xnmrzw2jqd2pjc26u8hx33w5j628vpnj": {
  "max_loss": 7693.0,
  "total_burned": 0,
  "clean": false
 },
 "one10jfp29j49elw5zxq99qrd0xk6q2zq5pzty6hkq": {
  "max_loss": 6909.689345399999,
  "total_burned": 0,
  "clean": false
 },
 "one1p5zpmgy7cdls3nqnnfezhx0h602plf0kv2ylkt": {
  "max_loss": 48000.0,
  "total_burned": 0,
  "clean": false
 },
 "one1daqq3k8fm2z4zm0g9ke9elhsrp2jgrma07a49d": {
  "max_loss": 20488.0,
  "total_burned": 0,
  "clean": false
 },
 "one10d3qqqxegdexjyzvyewa5krhgkcgl57xs6y9gm": {
  "max_loss": 3504394.785612,
  "total_burned": 0,
  "clean": false
 },
 "one1gtm05wkdm25srn7zpvfmgfs765nawyl7tm3n5a": {
  "max_loss": 2.6000000000000002e-12,
  "total_burned": 0,
  "clean": true
 },
 "one1ydljrztmu0dxlwavus4henup0e3y526vljhhut": {
  "max_loss": 43040.0,
  "total_burned": 0,
  "clean": false
 },
 "one1jgclstnfnya0hq97kc234g8xjtzfnet83jyjng": {
  "max_loss": 5425.999999999999,
  "total_burned": 0,
  "clean": false
 },
 "one1qgz640f2klk0y9rww6j26t3t6ruxkqera9ugpt": {
  "max_loss": 3740000.0,
  "total_burned": 0,
  "clean": false
 },
 "one1ltdxgdnwm39utvvdcuxcpnpjc2k7539pxe4rut": {
  "max_loss": 63420.0,
  "total_burned": 0,
  "clean": false
 },
 "one14lguy2xurkank0sj7he6zsu0yglzu6mp6s57xn": {
  "max_loss": 1267300.0,
  "total_burned": 0,
  "clean": false
 },
 "one1y7lkm3nr292hcjcczwqakhs56uwx4drsjrcn6q": {
  "max_loss": 258800.0,
  "total_burned": 0,
  "clean": false
 },
 "one162ya6spps6s8zhnt67pllraaf9f3qz9gzku8hn": {
  "max_loss": 24360.0,
  "total_burned": 0,
  "clean": false
 },
 "one1wg4ls662ahw7nwjc6fwmclmfjpjceff4he0rzc": {
  "max_loss": 9500.0,
  "total_burned": 0,
  "clean": false
 },
 "one1zp6zfmkzhv997fy2ygu8ekd4n4v64z98wezz8e": {
  "max_loss": 16205.400000000001,
  "total_burned": 0,
  "clean": false
 },
 "one1j0c7se5yn3cqjcn7cjqter5fwer0kqvhasrswr": {
  "max_loss": 470000.0,
  "total_burned": 0,
  "clean": false
 },
 "one1wk8arta8v5r3nmycz2g40h68yea8rjqg0s0n6s": {
  "max_loss": 10000000.0,
  "total_burned": 0,
  "clean": false
 },
 "one1rz3lpwfd4za6sqjky4ackvkwhfyxmyhdfn5l2r": {
  "max_loss": 15400.0,
  "total_burned": 0,
  "clean": false
 },
 "one12n23j0g3m3rccdngyfzledw87s26at9g5lfjes": {
  "max_loss": 1433293.0,
  "total_burned": 0,
  "clean": false
 },
 "one14p7vhuka533g20nqjw3kwz0kxky2cnh9v72lcm": {
  "max_loss": 16800.0,
  "total_burned": 0,
  "clean": false
 }
}
3 Likes