Azoundria: Created page with "{{Imported Case Study With About|source=https://www.quadrigainitiative.com/casestudy/excommunitysmartcontractvulnerability.php}} {{Unattributed Sources}} EXcommunity Logo From TwitterEXCommunity is a community for ex-lovers to connect together. On May 28th, the smart contract suffered an attack, which netted the attacker $37k. The exact mechanism of the attack has not yet been published. The EXCommunity made a post about continuing if bugs..."

2024-09-17T19:45:10Z

Created page with "{{Imported Case Study With About|source=https://www.quadrigainitiative.com/casestudy/excommunitysmartcontractvulnerability.php}} {{Unattributed Sources}} thumb|EXcommunity Logo From TwitterEXCommunity is a community for ex-lovers to connect together. On May 28th, the smart contract suffered an attack, which netted the attacker $37k. The exact mechanism of the attack has not yet been published. The EXCommunity made a post about continuing if bugs..."

New page

{{Imported Case Study With About|source=https://www.quadrigainitiative.com/casestudy/excommunitysmartcontractvulnerability.php}}
{{Unattributed Sources}}

[[File:Excommunity.jpg|thumb|EXcommunity Logo From Twitter]]EXCommunity is a community for ex-lovers to connect together. On May 28th, the smart contract suffered an attack, which netted the attacker $37k. The exact mechanism of the attack has not yet been published. The EXCommunity made a post about continuing if bugs were found, but did not officially acknowledge or provide any postmortem of the bug, nor have they promised any compensation for anyone who may have been affected.<ref name="slowmisthackedarchive-14249" /><ref name="slowmistteamtwitter-14273" /><ref name="excommunity2024twitter-14274" /><ref name="excommunity2024twitter-14275" /><ref name="excommunity2024twitter-14276" /><ref name="excommunity2024twitter-14277" /><ref name="chainaegistwitter-14278" /><ref name="oklink-14279" /><ref name="excommunity2024twitter-14280" /><ref name="bscscan-14281" />

== About EXCommunity ==
"Join EX Community: where past meets future! Reconnect, heal, and grow in a safe, friendly space. Find new friends or rekindle old flames. Come rediscover yourself with us!"

"Dive into the world of emotions with EX Community's latest innovation: the largest meme coin community for emotional connections! Join us as we link the past, seize the present, and embrace the future together."

== The Reality ==
This sections is included if a case involved deception or information that was unknown at the time. Examples include:

* When the service was actually started (if different than the "official story").
* Who actually ran a service and their own personal history.
* How the service was structured behind the scenes. (For example, there was no "trading bot".)
* Details of what audits reported and how vulnerabilities were missed during auditing.

== What Happened ==
"According to monitoring by the SlowMist security team, EXcommunity on BNBChain is suspected of being attacked, resulting in a loss of approximately $37,000."
{| class="wikitable"
|+Key Event Timeline - EXcommunity Smart Contract Vulnerability
!Date
!Event
!Description
|-
|May 2nd, 2024 9:08:00 AM MDT
|EXCommunity posts for the first time on Twitter to promote.
|
|-
|May 18th, 2024 4:50:00 AM MDT
|Fake Telegram Group
|The comunity is targeted by a fake Telegram group.
|-
|May 28th, 2024 12:05:33 PM MDT
|Attack Transaction
|The attack transaciton happens which drains the funds.
|-
|May 28th, 2024 12:40:00 PM MDT
|Another Promotional Tweet
|EXCommunity posts again to promote their group.
|-
|May 28th, 2024 8:49:00 PM MDT
|SlowMist Tweet
|SlowMist posts a tweet about identifying suspicious activity related to the EXcommunity smart contract.
|-
|May 28th, 2024 10:09:00 PM MDT
|ChainAegis Tweet
|ChainAegis tweets an analysis which includes a review of the transaction and the loss amount of $37k.
|-
|May 29th, 2024 1:58:00 AM MDT
|EXCommunity Update
|EXCommunity posts an update about how, even if they encounter bugs, they will continue to move forward. There is no mention that a bug actually happened.
|}

== Technical Details ==
This section includes specific detailed technical analysis of any security breaches which happened. What specific software vulnerabilities contributed to the problem and how were they exploited?

== Total Amount Lost ==
37k ChainAegis and SlowMist.

The total amount lost has been estimated at $37,000 USD.

== Immediate Reactions ==
"According to monitoring by the SlowMist security team, EXcommunity on BNBChain is suspected of being attacked, resulting in a loss of approximately $37,000."

== Ultimate Outcome ==
"The EX community is moving forward in an innovative mode. Even if we encounter bugs, we will quickly fix them and prepare to launch a new platform. At the end of June, the APP will be launched soon! The international community will kick off in Kuala Lumpur on June 20, where we will welcome families to join us on our journey at the end of July. Wait patiently, wonderful things are about to appear!"

== Total Amount Recovered ==
There do not appear to have been any funds recovered in this case.

What funds were recovered? What funds were reimbursed for those affected users?

== Ongoing Developments ==
What parts of this case are still remaining to be concluded?
== Individual Prevention Policies ==
{{Prevention:Individuals:Placeholder}}

{{Prevention:Individuals:End}}

== Platform Prevention Policies ==
{{Prevention:Platforms:Placeholder}}

{{Prevention:Platforms:End}}

== Regulatory Prevention Policies ==
{{Prevention:Regulators:Placeholder}}

{{Prevention:Regulators:End}}

== References ==
<references><ref name="slowmisthackedarchive-14249">[https://web.archive.org/web/20240604181328/https://hacked.slowmist.io/ SlowMist Hacked - SlowMist Zone] (Jun 12, 2024)</ref>

<ref name="slowmistteamtwitter-14273">[https://twitter.com/SlowMist_Team/status/1795648617530995130 @SlowMist_Team Twitter] (Jun 14, 2024)</ref>

<ref name="excommunity2024twitter-14274">[https://twitter.com/EXcommunity2024/status/1786050045286261104 @EXcommunity2024 Twitter] (Jun 14, 2024)</ref>

<ref name="excommunity2024twitter-14275">[https://twitter.com/EXcommunity2024/status/1786109900978020405 @EXcommunity2024 Twitter] (Jun 14, 2024)</ref>

<ref name="excommunity2024twitter-14276">[https://twitter.com/EXcommunity2024/status/1795726390341558521 @EXcommunity2024 Twitter] (Jun 14, 2024)</ref>

<ref name="excommunity2024twitter-14277">[https://twitter.com/EXcommunity2024/status/1795525666374586669 @EXcommunity2024 Twitter] (Jun 14, 2024)</ref>

<ref name="chainaegistwitter-14278">[https://twitter.com/ChainAegis/status/1795668816640475376 @ChainAegis Twitter] (Jun 14, 2024)</ref>

<ref name="oklink-14279">[https://www.oklink.com/bsc/address/0xb1de93dae1cddf429eec9db30b78759d17495758 BNB Chain Address 0xb1de...495758 | Blockchain Explorer | OKLink] (Jun 14, 2024)</ref>

<ref name="excommunity2024twitter-14280">[https://twitter.com/EXcommunity2024/status/1791783377110254066 @EXcommunity2024 Twitter] (Jun 14, 2024)</ref>

<ref name="bscscan-14281">[https://bscscan.com/tx/0x5446bf2b57749abdab01813a50ce36246177f3437599f3a56bc1554f596b2c3a BNB Smart Chain Transaction Hash (Txhash) Details | BscScan] (Jun 14, 2024)</ref></references>

EXcommunity Smart Contract Vulnerability - Revision history