Azoundria at 22:12, 28 January 2025

2025-01-28T22:12:32Z

← Older revision		Revision as of 16:12, 28 January 2025
Line 1:		Line 1:
	{{Imported Case Study With About\|source=https://www.quadrigainitiative.com/casestudy/~~mintrisespricesreentrancyattack~~.php}}		{{Imported Case Study With About\|source=https://www.quadrigainitiative.com/casestudy/mintrisespriceswmrpreentrancypricemanipulationattack.php}}
	{{Unattributed Sources}}		{{Unattributed Sources}}

Line 5:		Line 5:


	<ref name="slowmisthackedarchive-14571" /><ref name="slowmistteamtwitter-14584" /><ref name="oklink-14585" /><ref name="mintrisespricestwitter-14586" /><ref name="mintrisespricestwitter-14587" /><ref name="mintrisespricestwitter-14588" /><ref name="chainaegistwitter-14589" />		<ref name="slowmisthackedarchive-14571" /><ref name="slowmistteamtwitter-14584" /><ref name="oklink-14585" /><ref name="mintrisespricestwitter-14586" /><ref name="mintrisespricestwitter-14587" /><ref name="mintrisespricestwitter-14588" /><ref name="chainaegistwitter-14589" /><ref name="x-17629" />

	== About MintRisesPrices ==		== About MintRisesPrices ==
Line 21:		Line 21:
	"MintRisesPrices on BNBChain suffered a reentrancy attack, resulting in a loss of approximately $59,000."		"MintRisesPrices on BNBChain suffered a reentrancy attack, resulting in a loss of approximately $59,000."
	{\| class="wikitable"		{\| class="wikitable"
	\|+Key Event Timeline - MintRisesPrices Reentrancy Attack		\|+Key Event Timeline - MintRisesPrices (WMRP) Reentrancy Price Manipulation Attack
	!Date		!Date
	!Event		!Event
Line 102:		Line 102:
	<ref name="mintrisespricestwitter-14588">[https://twitter.com/MintRisesPrices/status/1790650774655258784 @MintRisesPrices Twitter] (Accessed Jul 8, 2024)</ref>		<ref name="mintrisespricestwitter-14588">[https://twitter.com/MintRisesPrices/status/1790650774655258784 @MintRisesPrices Twitter] (Accessed Jul 8, 2024)</ref>

	<ref name="chainaegistwitter-14589">[https://twitter.com/ChainAegis/status/1808335545061220613 @ChainAegis Twitter] (Accessed Jul 8, 2024)</ref></references>		<ref name="chainaegistwitter-14589">[https://twitter.com/ChainAegis/status/1808335545061220613 @ChainAegis Twitter] (Accessed Jul 8, 2024)</ref>

			<ref name="x-17629">[https://x.com/MetaTrustAlert/status/1808327516064829946 x.com] (Accessed Jan 28, 2025)</ref></references>

Azoundria: Created page with "{{Imported Case Study With About|source=https://www.quadrigainitiative.com/casestudy/mintrisespricesreentrancyattack.php}} {{Unattributed Sources}} MintRisesPrices Logo/PromotionMintRisesPrices is a cryptocurrency wealth protocol, with a token which is designed to go up in price and not down, which appears to have targeted the Chinese cryptocurrency investment market with space-themed promotions. There is controversy as to whether or n..."

2024-09-18T21:08:19Z

Created page with "{{Imported Case Study With About|source=https://www.quadrigainitiative.com/casestudy/mintrisespricesreentrancyattack.php}} {{Unattributed Sources}} thumb|MintRisesPrices Logo/PromotionMintRisesPrices is a cryptocurrency wealth protocol, with a token which is designed to go up in price and not down, which appears to have targeted the Chinese cryptocurrency investment market with space-themed promotions. There is controversy as to whether or n..."

New page

{{Imported Case Study With About|source=https://www.quadrigainitiative.com/casestudy/mintrisespricesreentrancyattack.php}}
{{Unattributed Sources}}

[[File:Mintrisesprices.jpg|thumb|MintRisesPrices Logo/Promotion]]MintRisesPrices is a cryptocurrency wealth protocol, with a token which is designed to go up in price and not down, which appears to have targeted the Chinese cryptocurrency investment market with space-themed promotions. There is controversy as to whether or not this constitutes a honeypot, as this is presumably accomplished by preventing selling of the tokens. This protocol was attacked through a re-entrancy attack and the attacker managed to get away with $59,000. The protocol appears to have relaunched in a new smart contract.

<ref name="slowmisthackedarchive-14571" /><ref name="slowmistteamtwitter-14584" /><ref name="oklink-14585" /><ref name="mintrisespricestwitter-14586" /><ref name="mintrisespricestwitter-14587" /><ref name="mintrisespricestwitter-14588" /><ref name="chainaegistwitter-14589" />

== About MintRisesPrices ==
"A crypto wealth protocol that only goes up and never goes down!"

== The Reality ==
This sections is included if a case involved deception or information that was unknown at the time. Examples include:

* When the service was actually started (if different than the "official story").
* Who actually ran a service and their own personal history.
* How the service was structured behind the scenes. (For example, there was no "trading bot".)
* Details of what audits reported and how vulnerabilities were missed during auditing.

== What Happened ==
"MintRisesPrices on BNBChain suffered a reentrancy attack, resulting in a loss of approximately $59,000."
{| class="wikitable"
|+Key Event Timeline - MintRisesPrices Reentrancy Attack
!Date
!Event
!Description
|-
|May 14th, 2024 11:22:00 PM MDT
|Launch Date Promotion
|An initial post by the MintRisesPrices account simply has the date of May 18th. This is a response to a tweet asking "When will MRP launch? Is there a group?" on a deleted post.
|-
|May 15th, 2024 1:49:00 AM MDT
|Multiple Promotion Banners
|Multiple promotional banners are released as well as a slogan for "[a] crypto wealth protocol that only goes up and never goes down!"
|-
|July 2nd, 2024 7:14:39 AM MDT
|Blockchain Transaction
|The re-entrancy attack transaction happens on the blockchain. This is the transaction later referenced by ChainAegis.
|-
|July 2nd, 2024 8:17:00 PM MDT
|SlowMist Tweet
|SlowMist posts a tweet to announce that they have found potential suspicious activity related to the MintRisesPrices smart contract. The address of the smart contract is provided.
|-
|July 2nd, 2024 9:02:00 PM MDT
|ChainAegis Tweet
|ChainAegis tweets a notice about the re-entrancy attack along with the transaction on the Binance Smart Chain. The service warns that this is "also a high-risk token (honeypot), please do not trade it."
|-
|July 3rd, 2024 12:55:00 AM MDT
|End Of Minting Phase
|In a Chinese post, the project announces the end of the minting phase and requests users to transfer their assets to a new smart contract address. A new smart contract address of 0xF114A2d1521eF04F81930b7E03C2e438aD89C375 is provided.
|}

== Technical Details ==
This section includes specific detailed technical analysis of any security breaches which happened. What specific software vulnerabilities contributed to the problem and how were they exploited?

== Total Amount Lost ==
The total amount lost has been estimated at $59,000 USD.

How much was lost and how was it calculated? If there are conflicting reports, which are accurate and where does the discrepancy lie?

== Immediate Reactions ==
"The MRP casting phase has ended, and a fixed quantity MRP contract has been deployed!

Please ensure all users transfer their MRP assets to the new contract address for mapping before 2024-07-04 24:00:00. Additionally, addresses where casting has not yet ended should also transfer to the new contract address once; if there are no MRP assets yet, you can transfer 0 MRP for mapping. Please inform other users and the community. Thank you!"

== Ultimate Outcome ==
New Contract Address: 0xF114A2d1521eF04F81930b7E03C2e438aD89C375

== Total Amount Recovered ==
There do not appear to have been any funds recovered in this case.

What funds were recovered? What funds were reimbursed for those affected users?

== Ongoing Developments ==
What parts of this case are still remaining to be concluded?
== Individual Prevention Policies ==
{{Prevention:Individuals:Placeholder}}

{{Prevention:Individuals:End}}

== Platform Prevention Policies ==
{{Prevention:Platforms:Placeholder}}

{{Prevention:Platforms:End}}

== Regulatory Prevention Policies ==
{{Prevention:Regulators:Placeholder}}

{{Prevention:Regulators:End}}

== References ==
<references><ref name="slowmisthackedarchive-14571">[https://web.archive.org/web/20240705195425/https://hacked.slowmist.io/ SlowMist Hacked - SlowMist Zone] (Accessed Jul 5, 2024)</ref>

<ref name="slowmistteamtwitter-14584">[https://twitter.com/SlowMist_Team/status/1808324198861004903 @SlowMist_Team Twitter] (Accessed Jul 8, 2024)</ref>

<ref name="oklink-14585">[https://www.oklink.com/bsc/address/0xa0ba9d82014b33137b195b5753f3bc8bf15700a3 BNB Chain Address 0xa0ba...5700a3 | Blockchain Explorer | OKLink] (Accessed Jul 8, 2024)</ref>

<ref name="mintrisespricestwitter-14586">[https://twitter.com/MintRisesPrices/status/1808394028561621093 @MintRisesPrices Twitter] (Accessed Jul 8, 2024)</ref>

<ref name="mintrisespricestwitter-14587">[https://twitter.com/MintRisesPrices/status/1790613736631443780 @MintRisesPrices Twitter] (Accessed Jul 8, 2024)</ref>

<ref name="mintrisespricestwitter-14588">[https://twitter.com/MintRisesPrices/status/1790650774655258784 @MintRisesPrices Twitter] (Accessed Jul 8, 2024)</ref>

<ref name="chainaegistwitter-14589">[https://twitter.com/ChainAegis/status/1808335545061220613 @ChainAegis Twitter] (Accessed Jul 8, 2024)</ref></references>

MintRisesPrices Reentrancy Attack - Revision history

Azoundria at 22:12, 28 January 2025