Saturday 3 December 2022
Home / none / MEVbots backdoor drains users’ Ethereum funds via arbitrage trading bot

MEVbots backdoor drains users’ Ethereum funds via arbitrage trading bot

MEV gain, an Ethereum arbitrage trading bot built by MEVbots, which claims to provide stress-free passive income, has been actively draining its users’ funds via a fund-stealing backdoor.

Arbitrage bots are programs that automate trading for profits based on historical market information. An investigation of MEVbots’ contract revealed a backdoor that allows the creators to drain Ether (ETH) from its users’ wallets.

The scam was first pointed out by Crypto Twitter’s monkwithchaos and later confirmed by blockchain investigator Peckshield.

Suspect account @chemzyeth promoting MEV services. Source: Google cache

Following the revelation, primary promoter of MEV chemzyeth disappeared from the internet.

chemzyeth’s Twitter account deleted after community callout. Source: Twitter

Peckshield further confirmed that at least six users had fallen victim to the backdoor attack.

Transaction of stolen funds from MEV gain’s fund-stealing backdoor. Source: Peckshield

However, considering that the contract is still active, at least 13,000 unwary followers of MEVbots on Twitter remain at risk of losing their funds.

Related: ETHW confirms contract vulnerability exploit, dismisses replay attack claims

Carrying forward the success of scalability-focused layer-2 solutions, Ethereum co-founder Vitalik Buterin shared his vision for layer-3 protocols. He stated:

“A three-layer scaling architecture that consists of stacking the same scaling scheme on top of itself generally does not work well. Rollups on top of rollups, where the two layers of rollups use the same technology, certainly do not.”

One of the use cases for layer-3 protocols, according to Buterin, is “customized functionality” — aimed at privacy-based applications which would utilize zk proofs to submit privacy-preserving transactions to layer 2.

Original Article

About Jude Savage

Check Also

The future of smart contract adoption for enterprises

Decentralized finance (DeFi) markets may have cooled down over the past year, but the technology powering these applications continues to advance. In particular, smart contract platforms that enable transactions to take place across DeFi applications are maturing to meet enterprise requirements. While it’s notable that enterprises have previously shown interest in DeFi use cases, smart contract limitations have hampered adoption. A report published by Grayscale Research in March puts this in perspective, noting that “Despite handling millions of transactions per day, smart contract platforms in their current state would be incapable of handling even 10% of the worlds’ internet traffic.” This notion is particularly troublesome considering the market opportunity behind DeFi. For instance, Grayscale Research’s report mentions that DeFi and Metaverse applications combined are likely to have a market capitalization much larger than the current digital asset market. How smart contracts ar..

Leave a Reply

Your email address will not be published. Required fields are marked *