Slow Mist: The Connext airdrop qualification certificate is generated by the official, and unqualified users cannot receive other people’s airdrops.

Odaily Planet Daily News According to the intelligence of the Slow Mist District, the NEXT tokens of some accounts were claimed to unexpected addresses. The Slow Mist security team followed up and shared the analysis as follows: Users can claim NEXT tokens through the claimBySignature function of the NEXT Distributor contract. There are recipient and beneficiary roles. The recipient role is used to receive the NEXT tokens of the claim. The beneficiary role is the address that is eligible to receive the NEXT tokens. It has been determined when the Connext protocol announced the air investment qualifications. When the user makes a NEXT token claim, the contract will perform two checks: one is to check the signature of the beneficiary role, and the other is to check whether the beneficiary role is eligible to receive the airdrop. When performing the first check, it will check whether the recipient passed in by the user is signed by the beneficiary role, so the random incoming recipient address cannot pass the check if it is not signed by the beneficiary. If you specify a beneficiary address to construct a signature, even if it can pass the signature check, it will not pass the second check of airdrop eligibility. The airdrop claim eligibility check is carried out through the Merkel certificate, and the certificate should be officially generated by the Connext protocol. Therefore, users who are not eligible to receive airdrops cannot bypass the check to receive airdrops from others.