Azoundria: Created page with "{{Imported Case Study With About|source=https://www.quadrigainitiative.com/casestudy/dysonmoneydeprecatedvaultcontract.php}} {{Unattributed Sources}} Dyson Money Logo/HomepageDyson Money emptied some rewards out of a deprecated vault contract, which captured the attention of security researchers at SlowMist. According to Dyson Money, there was no exploit at all, and the transaction was falsely flagged. While SlowMist has publicly praised th..."

2024-09-18T19:43:00Z

Created page with "{{Imported Case Study With About|source=https://www.quadrigainitiative.com/casestudy/dysonmoneydeprecatedvaultcontract.php}} {{Unattributed Sources}} thumb|Dyson Money Logo/HomepageDyson Money emptied some rewards out of a deprecated vault contract, which captured the attention of security researchers at SlowMist. According to Dyson Money, there was no exploit at all, and the transaction was falsely flagged. While SlowMist has publicly praised th..."

New page

{{Imported Case Study With About|source=https://www.quadrigainitiative.com/casestudy/dysonmoneydeprecatedvaultcontract.php}}
{{Unattributed Sources}}

[[File:Dysonmoney.jpg|thumb|Dyson Money Logo/Homepage]]Dyson Money emptied some rewards out of a deprecated vault contract, which captured the attention of security researchers at SlowMist. According to Dyson Money, there was no exploit at all, and the transaction was falsely flagged. While SlowMist has publicly praised the Dyson Money team for their quick response, they haven't outright stated there was no exploit and the situation continues to be listed on the SlowMist hacked page.<ref name="slowmisthackedarchive-14374" /><ref name="slowmistteamtwitter-14416" /><ref name="dysonmoneytwitter-14417" /><ref name="dysonmoney-14418" /><ref name="dysonmoneydocs-14419" />

== About Dyson Money ==
"Achieve maximum yield with Dyson - the DeFi platform by Sphere Finance that unlocks the full potential of your assets."

"Dyson is a decentralized & multichain yield-maximiser. It maximizes yield through carefully crafted strategies which are managed on-chain, making perpetual yield farming accessible to the average user.

Every strategy is secured and automated by smart contracts. Dyson automatically harvests & reinvests yield rewards to ensure compounding interest to depositors. The vaults created for Dyson's strategies are completely permission-less & trust-less, meaning that users are completely in control of their crypto & can withdraw at any time they like."

== The Reality ==
This sections is included if a case involved deception or information that was unknown at the time. Examples include:

* When the service was actually started (if different than the "official story").
* Who actually ran a service and their own personal history.
* How the service was structured behind the scenes. (For example, there was no "trading bot".)
* Details of what audits reported and how vulnerabilities were missed during auditing.

== What Happened ==
"According to monitoring by the SlowMist security team, Dyson on BNBChain was attacked, resulting in a loss of approximately $31,000."
{| class="wikitable"
|+Key Event Timeline - Dyson Money Deprecated Vault Contract
!Date
!Event
!Description
|-
|June 17th, 2024 1:39:00 AM MDT
|SlowMist Tweet
|SlowMist tweets about having noticed that the Dyson smart contract on BNBChain appears has "potential suspicious activity".
|-
|June 18th, 2024 1:09:00 PM MDT
|Clarification Tweet
|
|-
|June 24th, 2024 10:13:00 AM MDT
|SlowMist Praise
|SlowMist mentions that the "issue was caused by a deprecated vault contract"
|}

== Technical Details ==
This section includes specific detailed technical analysis of any security breaches which happened. What specific software vulnerabilities contributed to the problem and how were they exploited?

== Total Amount Lost ==
SlowMist claimed $31k.

No funds were lost.

== Immediate Reactions ==
"We wanted to address the ongoing situation with SlowMist and their recent post about potential suspicious activity detected on our protocol.

Transparency is one of our core values, and we believe it's important to provide clarity and context to you.

@SlowMist_Team, a respected blockchain security firm doing amazing work in keeping our space safe, flagged what was perceived as unusual on-chain activity on Dyson yesterday.

However, we want to assure you that this activity is not an exploit or any cause for concern.

After a thorough investigation, we have determined that the activity in question was simply a large amount of unharvested rewards being taken out of a relatively small position in one of our deprecated vaults.

This vault, while not actively promoted or utilized, continues to generate yield.

We have been in communication with the SlowMist team and have provided them with a detailed explanation of the situation, and they have kindly acknowledged our response.

We take security and transparency extremely seriously, and have implemented rigorous security measures to ensure the safety of our protocols and your assets.

We appreciate @SlowMist_Team's vigilance in identifying potential risks, and also their commitment to clarity and transparency.

Once again, we want to assure our community that there has been no exploit or malicious activity within our ecosystem.

We remain committed to open communication and will continue to provide updates on any developments or concerns that may arise.

If you have any further questions or require additional clarification, please do not hesitate to reach out to us in our Discord server (link below).

Thank you for your continued trust and support as we work to build a transparent, secure, and valuable ecosystem for all"

== Ultimate Outcome ==
"After confirmation, this issue was caused by a deprecated vault contract. The Dyson team has quickly addressed the situation, and their responsible attitude towards the community is praiseworthy."

== Total Amount Recovered ==
There do not appear to have been any funds recovered in this case.

What funds were recovered? What funds were reimbursed for those affected users?

== Ongoing Developments ==
What parts of this case are still remaining to be concluded?
== Individual Prevention Policies ==
{{Prevention:Individuals:Placeholder}}

{{Prevention:Individuals:End}}

== Platform Prevention Policies ==
{{Prevention:Platforms:Placeholder}}

{{Prevention:Platforms:End}}

== Regulatory Prevention Policies ==
{{Prevention:Regulators:Placeholder}}

{{Prevention:Regulators:End}}

== References ==
<references><ref name="slowmisthackedarchive-14374">[https://web.archive.org/web/20240617180525/https://hacked.slowmist.io/ SlowMist Hacked - SlowMist Zone] (Accessed Jun 20, 2024)</ref>

<ref name="slowmistteamtwitter-14416">[https://twitter.com/SlowMist_Team/status/1802606892428177440 @SlowMist_Team Twitter] (Accessed Jun 25, 2024)</ref>

<ref name="dysonmoneytwitter-14417">[https://twitter.com/dyson_money/status/1803143128527819165 @dyson_money Twitter] (Accessed Jun 25, 2024)</ref>

<ref name="dysonmoney-14418">[https://www.dyson.money/ Dyson | Part of the Sphere Finance Ecosystem] (Accessed Jun 25, 2024)</ref>

<ref name="dysonmoneydocs-14419">[https://docs.dyson.money/ Overview | Dyson] (Accessed Jun 25, 2024)</ref></references>

Dyson Money Deprecated Vault Contract - Revision history