Azoundria: Created page with "{{Imported Case Study With About|source=https://www.quadrigainitiative.com/casestudy/matezgamingtokensmartcontractintegertruncation.php}} {{Unattributed Sources}} Matez Homepage/LogoMatez is a gaming token primarily promoted through Facebook and YouTube. The smart contract does not appear to have ever received any audit. On November 21st, the smart contract suffered from an exploit due to a truncation when integer types are converted...."

2025-01-13T21:35:28Z

Created page with "{{Imported Case Study With About|source=https://www.quadrigainitiative.com/casestudy/matezgamingtokensmartcontractintegertruncation.php}} {{Unattributed Sources}} thumb|Matez Homepage/LogoMatez is a gaming token primarily promoted through Facebook and YouTube. The smart contract does not appear to have ever received any audit. On November 21st, the smart contract suffered from an exploit due to a truncation when integer types are converted...."

New page

{{Imported Case Study With About|source=https://www.quadrigainitiative.com/casestudy/matezgamingtokensmartcontractintegertruncation.php}}
{{Unattributed Sources}}

[[File:Matezgamingtoken.jpg|thumb|Matez Homepage/Logo]]Matez is a gaming token primarily promoted through Facebook and YouTube. The smart contract does not appear to have ever received any audit. On November 21st, the smart contract suffered from an exploit due to a truncation when integer types are converted. There were a number of copycats who performed similar exploits after the original $80k exploit. It does not appear that the team has addressed any losses, though they are still responding and have subsequently posted on Telegram.<ref name="bscscan-17120" /><ref name="coinmarketcap-17121" /><ref name="bscscan-17122" /><ref name="livecoinwatch-17123" /><ref name="nominis-17124" /><ref name="newsletter-17125" /><ref name="coinranking-17126" /><ref name="matez-17127" /><ref name="facebook-17128" /><ref name="instagram-17129" /><ref name="matezofficialtelegram-17130" /><ref name="matezofficialtwitter-17131" /><ref name="cryptoxjungletwitter-17132" />

== About Matez Gaming Token ==
"Our vision is to empower gamers with true ownership of in-game assets, seamless play-to-earn opportunities, and secure, transparent transactions. We aim to unite a global gaming community through blockchain innovation, creating a fair and inclusive ecosystem for all. Join the revolution with Matez Gaming Token!"

"Our mission is to revolutionize the gaming industry by empowering players with true ownership of assets, enabling play-to-earn opportunities, and fostering a global, inclusive gaming community powered by blockchain technology. Play. Earn. Own. With Matez Gaming Token!"

"1. Earn Rewards While You Play: With Matez, your gaming skills have tangible value. Earn Matez tokens by completing levels, defeating opponents, and achieving milestones in your favorite games. The more you play, the more you earn!

2. Seamless Integration: Say goodbye to complicated processes. Matez seamlessly integrates with leading gaming platforms, making it easy for you to start earning rewards without any hassle.

3. Community-driven: Join a thriving community of gamers and crypto enthusiasts. Engage with like-minded individuals, share strategies, and participate in exclusive tournaments and events hosted by Matez.

4. Secure and Transparent: Your security is our top priority. Built on the latest blockchain technology, Matez ensures secure transactions and complete transparency, giving you peace of mind with every move you make."

"We’re excited to share an inspiring experience from one of our leaders in Bangladesh, Azizul Islam. Azizul has been a dedicated Matezian and a source of guidance for our team, consistently embodying the values and drive that make Matez special. His journey with Matez has brought invaluable insights, challenges, and victories, demonstrating the impact of our community and vision in Bangladesh. As we grow together, stories like Azizul’s remind us of the power of resilience, collaboration, and shared purpose. Let’s take this moment to celebrate his contributions a

== The Reality ==
This sections is included if a case involved deception or information that was unknown at the time. Examples include:

* When the service was actually started (if different than the "official story").
* Who actually ran a service and their own personal history.
* How the service was structured behind the scenes. (For example, there was no "trading bot".)
* Details of what audits reported and how vulnerabilities were missed during auditing.

== What Happened ==
SlowMist reports that "Matez (MATEZ) on BSC is suspected to have been attacked, resulting in a loss of at least $80K."
{| class="wikitable"
|+Key Event Timeline - Matez Gaming Token Smart Contract Integer Truncation
!Date
!Event
!Description
|-
|November 12th, 2024 2:52:00 AM MST
|Facebook Post From Leader
|Azizul Islam, one of the leaders of the project, shares a compassionate speech on Facebook.
|-
|November 21st, 2024 9:10:47 PM MST
|Binance Smart Chain Transaction
|The malicious transaction happens on Binance Smart Chain.
|-
|November 21st, 2024 10:26:00 PM MST
|TenArmorAlert Posts Tweet
|TenArmorAlert reports that their system has detected multiple suspicious attacks involving the #MATEZ Token (@Matezofficial) on the Binance Smart Chain (BSC), resulting in a loss of at least $80K. The attacks exploit an integer truncation vulnerability in the stake function of the MatezStakingProgram contract. This flaw allows attackers to transfer a zero amount of tokens while the contract incorrectly recognizes it as a large stake, enabling them to claim tokens as profit. Numerous copycat transactions have occurred. The biggest beneficiary of these exploits has gained about $70K.
|-
|December 25th, 2024 4:47:26 AM MST
|YouTube Promotion Posted
|A promotion is made on YouTube with music by Hindi artist Vanshika Dixit.
|}

== Technical Details ==
"It appears that the stake function of the MatezStakingProgram contract contains a classic integer truncation vulnerability.

This flaw allowed the attacker to transfer a zero amount of tokens while being recognized by the contract as having staked a large amount. Consequently, the attacker was able to claim tokens as profit.

Lots of copycat txns."

== Total Amount Lost ==
The total amount lost has been estimated at $80,000 USD.

How much was lost and how was it calculated? If there are conflicting reports, which are accurate and where does the discrepancy lie?

== Immediate Reactions ==
SlowMist reports that "Matez (MATEZ) on BSC is suspected to have been attacked, resulting in a loss of at least $80K."

The TenArmorAlert system reported detecting "multiple suspicious attacks involving #MATEZ Token @Matezofficial on #BSC, resulting in an approximately loss of at least $80K so far."

== Ultimate Outcome ==
What was the end result? Was any investigation done? Were any individuals prosecuted? Was there a lawsuit? Was any tracing done?

== Total Amount Recovered ==
The total amount recovered is unknown.

What funds were recovered? What funds were reimbursed for those affected users?

== Ongoing Developments ==
What parts of this case are still remaining to be concluded?
== Individual Prevention Policies ==
{{Prevention:Individuals:Placeholder}}

{{Prevention:Individuals:End}}

== Platform Prevention Policies ==
{{Prevention:Platforms:Placeholder}}

{{Prevention:Platforms:End}}

== Regulatory Prevention Policies ==
{{Prevention:Regulators:Placeholder}}

{{Prevention:Regulators:End}}

== References ==
<references><ref name="bscscan-17120">[https://bscscan.com/tx/0x840b0dc64dbb91e8aba524f67189f639a0bc94ee9256c57d79083bb3fd46ec91 BNB Smart Chain Transaction Hash (Txhash) Details | BscScan] (Accessed Jan 13, 2025)</ref>

<ref name="coinmarketcap-17121">[https://coinmarketcap.com/dexscan/bsc/0xc0319e8f278be2228fd0bad12edfec7b25d16d54/ MATEZ/USDT Real-time On-chain PancakeSwap v3 (BSC) DEX Data] (Accessed Jan 13, 2025)</ref>

<ref name="bscscan-17122">[https://bscscan.com/token/0x010c0d77055a26d09bb474ef8d81975f55bd8fc9 Matez (MATEZ) Token Tracker | BscScan] (Accessed Jan 13, 2025)</ref>

<ref name="livecoinwatch-17123">[https://www.livecoinwatch.com/price/Matez-MATEZ Matez (MATEZ) live coin price, charts, markets & liquidity] (Accessed Jan 13, 2025)</ref>

<ref name="nominis-17124">[https://www.nominis.io/post/crypto-security-incidents-november-2024 Crypto Security Incidents November 2024] (Accessed Jan 13, 2025)</ref>

<ref name="newsletter-17125">[https://newsletter.blockthreat.io/p/blockthreat-week-47-2024 BlockThreat - Week 47, 2024] (Accessed Jan 13, 2025)</ref>

<ref name="coinranking-17126">[https://coinranking.com/coin/r6IlpuV5d+matez-matez Matez (MATEZ) - Price & Chart | Coinranking] (Accessed Jan 13, 2025)</ref>

<ref name="matez-17127">[https://matez.io/ Matez] (Accessed Jan 13, 2025)</ref>

<ref name="facebook-17128">[https://www.facebook.com/Matezofficialpage Matezofficialpage - Facebook] (Accessed Jan 13, 2025)</ref>

<ref name="instagram-17129">[https://www.instagram.com/matezofficial/ https://www.instagram.com/matezofficial/] (Accessed Jan 13, 2025)</ref>

<ref name="matezofficialtelegram-17130">[https://t.me/s/Matezofficial MATEZ OFFICIAL – Telegram] (Accessed Jan 13, 2025)</ref>

<ref name="matezofficialtwitter-17131">[https://twitter.com/Matezofficial @Matezofficial Twitter] (Accessed Jan 13, 2025)</ref>

<ref name="cryptoxjungletwitter-17132">[https://twitter.com/CryptoxJungle/status/1859897257044402225 @CryptoxJungle Twitter] (Accessed Jan 13, 2025)</ref></references>

Matez Gaming Token Smart Contract Integer Truncation - Revision history