Perpetual DEX El Dorado Exchange (EDE) attackers posted information on the chain saying, "The developers implemented a backdoor that allows them to force liquidate any position they want. This malicious activity involves deliberately signing incorrect prices to manipulate users' positions and steal their funds, to stop the attack on users, (I) started a white hat operation to expose this issue. All executed transactions are made with prices signed/generated by the developers, anyone can Use these prices to easily empty the entire ELP pool through a few transactions. At the same time, the attacker stated, "If the developer admits to manipulating the price, the funds will be refunded and 10% of the pool's value at the time will be charged as a white hat fee. In order to minimize Immediate impact on liquidity providers, I stopped the white hat operation after reaching 20% of the pool value, but the entire pool is always at risk. I also want to take this opportunity to reveal other existing vulnerabilities (provided you agree to the above terms )". Foresight News reported this morning that the perpetual DEX EDE was suspected of being attacked and lost about $580,000. The attacker has sent a message on the chain, saying "Hello, I am not a black hat hacker."
Jixu
