Mozart Finance Developer Exploit - Revision history

Azoundria at 23:46, 2 May 2023

2023-05-02T23:46:49Z

← Older revision		Revision as of 17:46, 2 May 2023
Line 1:		Line 1:
	{{Imported Case Study\|source=https://www.quadrigainitiative.com/casestudy/mozartfinancedisappears.php}}		{{Imported Case Study 2\|source=https://www.quadrigainitiative.com/casestudy/mozartfinancedisappears.php}}
	{{Unattributed Sources}}		{{Unattributed Sources}}

Line 6:		Line 6:
	The project was relaunched and obtained an audit from Hacken instead. There were no further problems noted. The website appears to be down at the moment, though social media is still online.		The project was relaunched and obtained an audit from Hacken instead. There were no further problems noted. The website appears to be down at the moment, though social media is still online.

	This is a global/international case not involving a specific country.		This is a global/international case not involving a specific country.<ref name="example-715" /><ref name="certik-1251" /><ref name="mozartfinancearchive-3109" /><ref name="mozartfinance-3110" /><ref name="coinmarketcap-3111" /><ref name="mozartfinancemedium-3112" /><ref name="reddit-3113" /><ref name="mozartfinancetwitter-3114" /><ref name="bscdotnews-3115" /><ref name="mozartfinancemedium-3116" /><ref name="immunebytesgithub-3117" /><ref name="mozartfinancegithub-3118" /><ref name="testnet-3119" /><ref name="bscscan-3120" /><ref name="certikorgtwitter-5458" />
	<ref name="example-715" /><ref name="certik-1251" /><ref name="mozartfinancearchive-3109" /><ref name="mozartfinance-3110" /><ref name="coinmarketcap-3111" /><ref name="mozartfinancemedium-3112" /><ref name="reddit-3113" /><ref name="mozartfinancetwitter-3114" /><ref name="bscdotnews-3115" /><ref name="mozartfinancemedium-3116" /><ref name="immunebytesgithub-3117" /><ref name="mozartfinancegithub-3118" /><ref name="testnet-3119" /><ref name="bscscan-3120" /><ref name="certikorgtwitter-5458" />

	== About Mozart Finance ==		== About Mozart Finance ==
Line 79:		Line 78:
	!Description		!Description
	\|-		\|-
	\|April 5th, 2021 ~~12:00:00 AM~~		\|April 5th, 2021
	\|Main Event		\|Main Event
	\|Expand this into a brief description of what happened and the impact. If multiple lines are necessary, add them here.		\|Expand this into a brief description of what happened and the impact. If multiple lines are necessary, add them here.
Line 87:		Line 86:
	\|		\|
	\|}		\|}

			== Technical Details ==
			This section includes specific detailed technical analysis of any security breaches which happened. What specific software vulnerabilities contributed to the problem and how were they exploited?

	== Total Amount Lost ==		== Total Amount Lost ==
Line 106:		Line 108:
	== Ongoing Developments ==		== Ongoing Developments ==
	What parts of this case are still remaining to be concluded?		What parts of this case are still remaining to be concluded?
			== General Prevention Policies ==
			The source of the problem was an anonymous developer who was able to create an exploit and provide a final modified version of code after the audit.
			== Individual Prevention Policies ==
			{{Prevention:Individuals:Placeholder}}

			{{Prevention:Individuals:End}}

			== Platform Prevention Policies ==
			{{Prevention:Platforms:Placeholder}}

			{{Prevention:Platforms:End}}

			== Regulatory Prevention Policies ==
			{{Prevention:Regulators:Placeholder}}

	== Prevention ~~Policies ==~~		{{Prevention:Regulators:End}}
	~~The source of the problem was an anonymous developer who was able to create an exploit and provide a final modified version of code after the audit.~~

	== References ==		== References ==
	<references><ref name="example-715">[https://example.com Example Domain] (Mar 22, 2021)</ref>		<references><ref name="example-715">[https://example.com Example Domain] (Mar 23, 2021)</ref>

	<ref name="certik-1251">[https://www.certik.org/ CertiK Blockchain Security Leaderboard] (~~May 31~~, 2021)</ref>		<ref name="certik-1251">[https://www.certik.org/ CertiK Blockchain Security Leaderboard] (Jun 1, 2021)</ref>

	<ref name="mozartfinancearchive-3109">[https://web.archive.org/web/20210401201836/https://mozartfinance.io/ Mozart Finance] (Aug 20, 2021)</ref>		<ref name="mozartfinancearchive-3109">[https://web.archive.org/web/20210401201836/https://mozartfinance.io/ Mozart Finance] (Aug 21, 2021)</ref>

	<ref name="mozartfinance-3110">[https://mozartfinance.gitbook.io/mozart-finance/ Mozart Finance - Mozart Finance] (Aug 20, 2021)</ref>		<ref name="mozartfinance-3110">[https://mozartfinance.gitbook.io/mozart-finance/ Mozart Finance - Mozart Finance] (Aug 21, 2021)</ref>

	<ref name="coinmarketcap-3111">[https://coinmarketcap.com/currencies/mozart-finance/ Mozart Finance price today, MELODY to USD live, marketcap and chart \| CoinMarketCap] (Aug 20, 2021)</ref>		<ref name="coinmarketcap-3111">[https://coinmarketcap.com/currencies/mozart-finance/ Mozart Finance price today, MELODY to USD live, marketcap and chart \| CoinMarketCap] (Aug 21, 2021)</ref>

	<ref name="mozartfinancemedium-3112">[https://mozart-finance.medium.com/what-the-future-holds-for-the-mozart-finance-ecosystem-3d23f8ea8ad6 What the future holds for the Mozart Finance ecosystem? \| by Mozart Finance \| Medium] (Aug 20, 2021)</ref>		<ref name="mozartfinancemedium-3112">[https://mozart-finance.medium.com/what-the-future-holds-for-the-mozart-finance-ecosystem-3d23f8ea8ad6 What the future holds for the Mozart Finance ecosystem? \| by Mozart Finance \| Medium] (Aug 21, 2021)</ref>

	<ref name="reddit-3113">[https://www.reddit.com/r/defi/comments/mkr3hc/warning_mozartfinance_hacked_90k_tokens_minted/ <nowiki>[WARNING] mozart.finance hacked, 90k tokens minted, price down 90%. DON'T BUY THE DIP! : defi</nowiki>] (Sep 18, 2021)</ref>		<ref name="reddit-3113">[https://www.reddit.com/r/defi/comments/mkr3hc/warning_mozartfinance_hacked_90k_tokens_minted/ <nowiki>[WARNING] mozart.finance hacked, 90k tokens minted, price down 90%. DON'T BUY THE DIP! : defi</nowiki>] (Sep 19, 2021)</ref>

	<ref name="mozartfinancetwitter-3114">[https://twitter.com/MozartFinance/status/1379211972701515778 @MozartFinance Twitter] (Sep 18, 2021)</ref>		<ref name="mozartfinancetwitter-3114">[https://twitter.com/MozartFinance/status/1379211972701515778 @MozartFinance Twitter] (Sep 19, 2021)</ref>

	<ref name="bscdotnews-3115">[https://www.bsc.news/post/mozart-finance-have-been-hacked Mozart Finance Have Been Hacked] (Sep 18, 2021)</ref>		<ref name="bscdotnews-3115">[https://www.bsc.news/post/mozart-finance-have-been-hacked Mozart Finance Have Been Hacked] (Sep 19, 2021)</ref>

	<ref name="mozartfinancemedium-3116">[https://mozart-finance.medium.com/let-the-bug-hunt-begin-f892fa6b95a3 Let the bug hunt begin!. Dear Symphonists, \| by Mozart Finance \| Medium] (Sep 18, 2021)</ref>		<ref name="mozartfinancemedium-3116">[https://mozart-finance.medium.com/let-the-bug-hunt-begin-f892fa6b95a3 Let the bug hunt begin!. Dear Symphonists, \| by Mozart Finance \| Medium] (Sep 19, 2021)</ref>

	<ref name="immunebytesgithub-3117">[https://github.com/ImmuneBytes/Smart-Contract-Audit-Reports/blob/main/Mozart%20Finance/Mozart%20Finance%20(PIANO)%20-%20Final%20Audit%20Report.pdf Smart-Contract-Audit-Reports/Mozart Finance (PIANO) - Final Audit Report.pdf at main · ImmuneBytes/Smart-Contract-Audit-Reports · GitHub] (Sep 18, 2021)</ref>		<ref name="immunebytesgithub-3117">[https://github.com/ImmuneBytes/Smart-Contract-Audit-Reports/blob/main/Mozart%20Finance/Mozart%20Finance%20(PIANO)%20-%20Final%20Audit%20Report.pdf Smart-Contract-Audit-Reports/Mozart Finance (PIANO) - Final Audit Report.pdf at main · ImmuneBytes/Smart-Contract-Audit-Reports · GitHub] (Sep 19, 2021)</ref>

	<ref name="mozartfinancegithub-3118">[https://github.com/mozartfinance/audits/blob/main/Mozart_SC_Audit_Report%20(3).pdf audits/Mozart_SC_Audit_Report (3).pdf at main · mozartfinance/audits · GitHub] (Sep 18, 2021)</ref>		<ref name="mozartfinancegithub-3118">[https://github.com/mozartfinance/audits/blob/main/Mozart_SC_Audit_Report%20(3).pdf audits/Mozart_SC_Audit_Report (3).pdf at main · mozartfinance/audits · GitHub] (Sep 19, 2021)</ref>

	<ref name="testnet-3119">[https://testnet.bscscan.com/address/0x1111cF91D816cF52b689E987e417006595d74391#code Contract Address 0x1111cF91D816cF52b689E987e417006595d74391 \| BscScan] (Sep 18, 2021)</ref>		<ref name="testnet-3119">[https://testnet.bscscan.com/address/0x1111cF91D816cF52b689E987e417006595d74391#code Contract Address 0x1111cF91D816cF52b689E987e417006595d74391 \| BscScan] (Sep 19, 2021)</ref>

	<ref name="bscscan-3120">[https://bscscan.com/address/0xd46936677B2C1Bb696F2b67c55239331E2b7Cd42#code Contract Address 0xd46936677B2C1Bb696F2b67c55239331E2b7Cd42 \| BscScan] (Sep 18, 2021)</ref>		<ref name="bscscan-3120">[https://bscscan.com/address/0xd46936677B2C1Bb696F2b67c55239331E2b7Cd42#code Contract Address 0xd46936677B2C1Bb696F2b67c55239331E2b7Cd42 \| BscScan] (Sep 19, 2021)</ref>

	<ref name="certikorgtwitter-5458">[https://mobile.twitter.com/certikorg/status/1379971240736219140 https://mobile.twitter.com/certikorg/status/1379971240736219140] (Jan 10, 2022)</ref></references>		<ref name="certikorgtwitter-5458">[https://mobile.twitter.com/certikorg/status/1379971240736219140 https://mobile.twitter.com/certikorg/status/1379971240736219140] (Jan 10, 2022)</ref></references>

Azoundria at 17:30, 22 February 2023

2023-02-22T17:30:31Z

← Older revision		Revision as of 11:30, 22 February 2023
Line 1:		Line 1:
	{{Imported Case Study\|source=https://www.quadrigainitiative.com/casestudy/mozartfinancedisappears.php}}		{{Imported Case Study\|source=https://www.quadrigainitiative.com/casestudy/mozartfinancedisappears.php}}
			{{Unattributed Sources}}

	[[File:Mozartfinance.jpg\|thumb\|Mozart Finance]]Mozart Finance launched their yield farming project with a professional audit from ImmuneBytes. However, they apparently also hired an external developer who installed a backdoor so they could withdraw funds after the audit.		[[File:Mozartfinance.jpg\|thumb\|Mozart Finance]]Mozart Finance launched their yield farming project with a professional audit from ImmuneBytes. However, they apparently also hired an external developer who installed a backdoor so they could withdraw funds after the audit.
Line 6:		Line 7:

	This is a global/international case not involving a specific country.		This is a global/international case not involving a specific country.
			<ref name="example-715" /><ref name="certik-1251" /><ref name="mozartfinancearchive-3109" /><ref name="mozartfinance-3110" /><ref name="coinmarketcap-3111" /><ref name="mozartfinancemedium-3112" /><ref name="reddit-3113" /><ref name="mozartfinancetwitter-3114" /><ref name="bscdotnews-3115" /><ref name="mozartfinancemedium-3116" /><ref name="immunebytesgithub-3117" /><ref name="mozartfinancegithub-3118" /><ref name="testnet-3119" /><ref name="bscscan-3120" /><ref name="certikorgtwitter-5458" />

	== About Mozart Finance ==		== About Mozart Finance ==
Line 57:		Line 59:

	Don't Include:		Don't Include:

	* Any wording which directly states or implies that the business is/was illegitimate, or that a vulnerability existed.		* Any wording which directly states or implies that the business is/was illegitimate, or that a vulnerability existed.
	* Anything that wasn't reasonably knowable at the time of the event.		* Anything that wasn't reasonably knowable at the time of the event.
Line 79:		Line 80:
	\|-		\|-
	\|April 5th, 2021 12:00:00 AM		\|April 5th, 2021 12:00:00 AM
	\|~~First~~ Event		\|Main Event
	\|~~This is an expanded~~ description of what happened and the impact. If multiple lines are necessary, add them here.		\|Expand this into a brief description of what happened and the impact. If multiple lines are necessary, add them here.
	\|-
	\|
	\|
	\|
	\|-		\|-
	\|		\|
Line 103:		Line 100:

	== Total Amount Recovered ==		== Total Amount Recovered ==
	~~It is unknown how much was~~ recovered.		There do not appear to have been any funds recovered in this case.

	What funds were recovered? What funds were reimbursed for those affected users?		What funds were recovered? What funds were reimbursed for those affected users?
Line 114:		Line 111:

	== References ==		== References ==
	[https://example.com Example Domain] (Mar 22)		<references><ref name="example-715">[https://example.com Example Domain] (Mar 22, 2021)</ref>

	[https://www.certik.org/ CertiK Blockchain Security Leaderboard] (May 31)		<ref name="certik-1251">[https://www.certik.org/ CertiK Blockchain Security Leaderboard] (May 31, 2021)</ref>

	[https://web.archive.org/web/20210401201836/https://mozartfinance.io/ Mozart Finance] (Aug 20)		<ref name="mozartfinancearchive-3109">[https://web.archive.org/web/20210401201836/https://mozartfinance.io/ Mozart Finance] (Aug 20, 2021)</ref>

	[https://mozartfinance.gitbook.io/mozart-finance/ Mozart Finance - Mozart Finance] (Aug 20)		<ref name="mozartfinance-3110">[https://mozartfinance.gitbook.io/mozart-finance/ Mozart Finance - Mozart Finance] (Aug 20, 2021)</ref>

	[https://coinmarketcap.com/currencies/mozart-finance/ Mozart Finance price today, MELODY to USD live, marketcap and chart \| CoinMarketCap] (Aug 20)		<ref name="coinmarketcap-3111">[https://coinmarketcap.com/currencies/mozart-finance/ Mozart Finance price today, MELODY to USD live, marketcap and chart \| CoinMarketCap] (Aug 20, 2021)</ref>

	[https://mozart-finance.medium.com/what-the-future-holds-for-the-mozart-finance-ecosystem-3d23f8ea8ad6 What the future holds for the Mozart Finance ecosystem? \| by Mozart Finance \| Medium] (Aug 20)		<ref name="mozartfinancemedium-3112">[https://mozart-finance.medium.com/what-the-future-holds-for-the-mozart-finance-ecosystem-3d23f8ea8ad6 What the future holds for the Mozart Finance ecosystem? \| by Mozart Finance \| Medium] (Aug 20, 2021)</ref>

	[https://www.reddit.com/r/defi/comments/mkr3hc/warning_mozartfinance_hacked_90k_tokens_minted/ <nowiki>[WARNING] mozart.finance hacked, 90k tokens minted, price down 90%. DON'T BUY THE DIP! : defi</nowiki>] (Sep 18)		<ref name="reddit-3113">[https://www.reddit.com/r/defi/comments/mkr3hc/warning_mozartfinance_hacked_90k_tokens_minted/ <nowiki>[WARNING] mozart.finance hacked, 90k tokens minted, price down 90%. DON'T BUY THE DIP! : defi</nowiki>] (Sep 18, 2021)</ref>

	[https://twitter.com/MozartFinance/status/1379211972701515778 @MozartFinance Twitter] (Sep 18)		<ref name="mozartfinancetwitter-3114">[https://twitter.com/MozartFinance/status/1379211972701515778 @MozartFinance Twitter] (Sep 18, 2021)</ref>

	[https://www.bsc.news/post/mozart-finance-have-been-hacked Mozart Finance Have Been Hacked] (Sep 18)		<ref name="bscdotnews-3115">[https://www.bsc.news/post/mozart-finance-have-been-hacked Mozart Finance Have Been Hacked] (Sep 18, 2021)</ref>

	[https://mozart-finance.medium.com/let-the-bug-hunt-begin-f892fa6b95a3 Let the bug hunt begin!. Dear Symphonists, \| by Mozart Finance \| Medium] (Sep 18)		<ref name="mozartfinancemedium-3116">[https://mozart-finance.medium.com/let-the-bug-hunt-begin-f892fa6b95a3 Let the bug hunt begin!. Dear Symphonists, \| by Mozart Finance \| Medium] (Sep 18, 2021)</ref>

	[https://github.com/ImmuneBytes/Smart-Contract-Audit-Reports/blob/main/Mozart%20Finance/Mozart%20Finance%20(PIANO)%20-%20Final%20Audit%20Report.pdf Smart-Contract-Audit-Reports/Mozart Finance (PIANO) - Final Audit Report.pdf at main · ImmuneBytes/Smart-Contract-Audit-Reports · GitHub] (Sep 18)		<ref name="immunebytesgithub-3117">[https://github.com/ImmuneBytes/Smart-Contract-Audit-Reports/blob/main/Mozart%20Finance/Mozart%20Finance%20(PIANO)%20-%20Final%20Audit%20Report.pdf Smart-Contract-Audit-Reports/Mozart Finance (PIANO) - Final Audit Report.pdf at main · ImmuneBytes/Smart-Contract-Audit-Reports · GitHub] (Sep 18, 2021)</ref>

	[https://github.com/mozartfinance/audits/blob/main/Mozart_SC_Audit_Report%20(3).pdf audits/Mozart_SC_Audit_Report (3).pdf at main · mozartfinance/audits · GitHub] (Sep 18)		<ref name="mozartfinancegithub-3118">[https://github.com/mozartfinance/audits/blob/main/Mozart_SC_Audit_Report%20(3).pdf audits/Mozart_SC_Audit_Report (3).pdf at main · mozartfinance/audits · GitHub] (Sep 18, 2021)</ref>

	[https://testnet.bscscan.com/address/0x1111cF91D816cF52b689E987e417006595d74391#code Contract Address 0x1111cF91D816cF52b689E987e417006595d74391 \| BscScan] (Sep 18)		<ref name="testnet-3119">[https://testnet.bscscan.com/address/0x1111cF91D816cF52b689E987e417006595d74391#code Contract Address 0x1111cF91D816cF52b689E987e417006595d74391 \| BscScan] (Sep 18, 2021)</ref>

	[https://bscscan.com/address/0xd46936677B2C1Bb696F2b67c55239331E2b7Cd42#code Contract Address 0xd46936677B2C1Bb696F2b67c55239331E2b7Cd42 \| BscScan] (Sep 18)		<ref name="bscscan-3120">[https://bscscan.com/address/0xd46936677B2C1Bb696F2b67c55239331E2b7Cd42#code Contract Address 0xd46936677B2C1Bb696F2b67c55239331E2b7Cd42 \| BscScan] (Sep 18, 2021)</ref>

	[https://mobile.twitter.com/certikorg/status/1379971240736219140 https://mobile.twitter.com/certikorg/status/1379971240736219140] (Jan 10)		<ref name="certikorgtwitter-5458">[https://mobile.twitter.com/certikorg/status/1379971240736219140 https://mobile.twitter.com/certikorg/status/1379971240736219140] (Jan 10, 2022)</ref></references>

Azoundria: Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/mozartfinancedisappears.php}} Mozart FinanceMozart Finance launched their yield farming project with a professional audit from ImmuneBytes. However, they apparently also hired an external developer who installed a backdoor so they could withdraw funds after the audit. The project was relaunched and obtained an audit from Hacken instead. There were no further probl..."

2023-01-26T05:36:06Z

Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/mozartfinancedisappears.php}} thumb|Mozart FinanceMozart Finance launched their yield farming project with a professional audit from ImmuneBytes. However, they apparently also hired an external developer who installed a backdoor so they could withdraw funds after the audit. The project was relaunched and obtained an audit from Hacken instead. There were no further probl..."

New page

{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/mozartfinancedisappears.php}}

[[File:Mozartfinance.jpg|thumb|Mozart Finance]]Mozart Finance launched their yield farming project with a professional audit from ImmuneBytes. However, they apparently also hired an external developer who installed a backdoor so they could withdraw funds after the audit.

The project was relaunched and obtained an audit from Hacken instead. There were no further problems noted. The website appears to be down at the moment, though social media is still online.

This is a global/international case not involving a specific country.

== About Mozart Finance ==
"Mozart Finance is a Binance Smart Chain defi project focused on yield farming and NFT's. Thе project developers are vеrу resilient іn making a platform whісh incorporates аll major applications оf DeFi lіkе yield farming, AMM, lotteries, betting, musical NFT's and much more. We expect that the platform will go big as time goes on."

"Mozart Finance is a fork from similar PancakeSwap and other Dex AMM DeFi projects. It aims to deliver DeFi features exclusively away from the traditional types. PIANO is the native token of the platform with the burn mechanisms embedded in its code to control inflation and a buy-back program to maintain the price."

"Low fees Using pancakeswap AMM while our is not finished trading fees are lower than other top decentralized exchanges too, so that's a double win for you!" "Trade directly from your wallet app (bsc wallet, metamask, trust wallet etc.) Unlike centralized exchanges like Binance or Coinbase, we don't hold your funds when you trade: you have 100% ownership of your own crypto. Do your own research!" "That's what we all are focused on. Musical NFT's are coming together with NFT's marketplace on BSC! Our roadmap will be updated shortly."

"According to the team, the last contract used on the test network was 100% secured; immunity Byte was paid to audit the code and was given a save rating." "ImmuneBytes team has performed thorough testing of the project starting with analyzing the code design patterns in which we reviewed the smart contract architecture to ensure it is structured and safe use of third-party smart contracts and libraries." "Our team then performed a formal line-by-line inspection of the Smart Contract in order to find any potential issues like Signature Replay Attacks, Unchecked External Calls, External Contract Referencing, Variable Shadowing, Race conditions, Transaction-ordering dependence, timestamp dependence, Dos attacks, and others."

"[A] project called Mozart finance that got hack by internal team. The developer left a backdoor in _mint function to a personal wallet address."

"Mozart’s contracted Solidity developer built a minting function in the PIANO contract’s code. He left the minter role in place, deeply rooted among the core functions of the contract."

"The deployed smart contract was swapped for a malicious one, containing the minting functions employed during the attack. These minting functions were not present in the code at the time of the audit." "[T]he original contract that was audited by ImmuneBytes did not have any externally exposed (public/external) mint functionality."

"The original code intended to have only a single minter role, the hacker, however, added a minter role for himself too. The attacker also did not transfer the Ownership to the intended recipient. The modified code also had an initial supply added to it, [[ uint256 private constant _initialSupply = 45000*10**18 ]], with the use of which a supply of 45K PIANOs would be transferred to whoever deployed the smart contract. This was something that the code did not intend to do, originally."

"The true logic of the project was based on a Decreasing Supply Model, implying that as the funds are transferred, 1% of the transferred tokens would be burned. For example, let’s say you were to farm 100 PIANOs. According to the project model, you would burn 1% of these 100 PIANOs and would acquire 99 PIANOs. The hacker altered this decreasing supply model such that no percentage of PIANOs were burnt, using transferFrom() function."

"We have been hacked. @cz_binance @binance Developer left a minting function from his address: 0xdA9f9d44F4c5022c789641802c10Da5992557D35."

"It turns out this outsourced developer slipped in a minting code without the original developers from the team and the project owners noticing. The project team had the code audited before deployment on the BSC network but failed to check the codes thoroughly again. After the audit it seems the outsourced developer must have handled the codes."

"For now, the team has warned traders through its handle to halt the purchase of $PIANO as the exploit hacker has minted over 100,000 PIANO tokens and is actively dumping."

“In short, we strongly advise you not to buy PIANO because the contract has NOT been fixed and is not safe. We are very sorry, but this is the inconvenient truth.”

"Users [had] the opportunity to vote any of the three options available to pick from; [a]irdrop new tokens to PIANO holders in a 1-to-1 ratio, [r]edeploy [the] PIANO smart contract and give a fair launch, or [c]lose the project."

"From the look of things, this is far from over for the Mozart Finance team as the odds are not on their side judging from the angry users’ response both on Twitter and Telegram platforms."

"That’s why we have decided to give our lovely community a chance to check our smart contract before we deploy them. This is our first ‘community check’ and it surely isn’t the last one! We plan to do this before the deployment of each and every smart contract — as transparent as possible."

"We’re happy to announce that the audit company our lovely community chose, Hacken, finished the official audit of MELODY contracts. After two reviews and thorough analysis of code functionalities, MELODY contracts passed its test with flying colors."

This is a global/international case not involving a specific country.

The background of the exchange platform, service, or individuals involved, as it would have been seen or understood at the time of the events.

Include:

* Known history of when and how the service was started.
* What problems does the company or service claim to solve?
* What marketing materials were used by the firm or business?
* Audits performed, and excerpts that may have been included.
* Business registration documents shown (fake or legitimate).
* How were people recruited to participate?
* Public warnings and announcements prior to the event.

Don't Include:

* Any wording which directly states or implies that the business is/was illegitimate, or that a vulnerability existed.
* Anything that wasn't reasonably knowable at the time of the event.
There could be more than one section here. If the same platform is involved with multiple incidents, then it can be linked to a main article page.

== The Reality ==
This sections is included if a case involved deception or information that was unknown at the time. Examples include:

* When the service was actually started (if different than the "official story").
* Who actually ran a service and their own personal history.
* How the service was structured behind the scenes. (For example, there was no "trading bot".)
* Details of what audits reported and how vulnerabilities were missed during auditing.

== What Happened ==
The specific events of the loss and how it came about. What actually happened to cause the loss and some of the events leading up to it.
{| class="wikitable"
|+Key Event Timeline - Mozart Finance Developer Exploit
!Date
!Event
!Description
|-
|April 5th, 2021 12:00:00 AM
|First Event
|This is an expanded description of what happened and the impact. If multiple lines are necessary, add them here.
|-
|
|
|
|-
|
|
|
|}

== Total Amount Lost ==
The total amount lost is unknown.

How much was lost and how was it calculated? If there are conflicting reports, which are accurate and where does the discrepancy lie?

== Immediate Reactions ==
How did the various parties involved (firm, platform, management, and/or affected individual(s)) deal with the events? Were services shut down? Were announcements made? Were groups formed?

== Ultimate Outcome ==
What was the end result? Was any investigation done? Were any individuals prosecuted? Was there a lawsuit? Was any tracing done?

== Total Amount Recovered ==
It is unknown how much was recovered.

What funds were recovered? What funds were reimbursed for those affected users?

== Ongoing Developments ==
What parts of this case are still remaining to be concluded?

== Prevention Policies ==
The source of the problem was an anonymous developer who was able to create an exploit and provide a final modified version of code after the audit.

== References ==
[https://example.com Example Domain] (Mar 22)

[https://www.certik.org/ CertiK Blockchain Security Leaderboard] (May 31)

[https://web.archive.org/web/20210401201836/https://mozartfinance.io/ Mozart Finance] (Aug 20)

[https://mozartfinance.gitbook.io/mozart-finance/ Mozart Finance - Mozart Finance] (Aug 20)

[https://coinmarketcap.com/currencies/mozart-finance/ Mozart Finance price today, MELODY to USD live, marketcap and chart | CoinMarketCap] (Aug 20)

[https://mozart-finance.medium.com/what-the-future-holds-for-the-mozart-finance-ecosystem-3d23f8ea8ad6 What the future holds for the Mozart Finance ecosystem? | by Mozart Finance | Medium] (Aug 20)

[https://www.reddit.com/r/defi/comments/mkr3hc/warning_mozartfinance_hacked_90k_tokens_minted/ <nowiki>[WARNING] mozart.finance hacked, 90k tokens minted, price down 90%. DON'T BUY THE DIP! : defi</nowiki>] (Sep 18)

[https://twitter.com/MozartFinance/status/1379211972701515778 @MozartFinance Twitter] (Sep 18)

[https://www.bsc.news/post/mozart-finance-have-been-hacked Mozart Finance Have Been Hacked] (Sep 18)

[https://mozart-finance.medium.com/let-the-bug-hunt-begin-f892fa6b95a3 Let the bug hunt begin!. Dear Symphonists, | by Mozart Finance | Medium] (Sep 18)

[https://github.com/ImmuneBytes/Smart-Contract-Audit-Reports/blob/main/Mozart%20Finance/Mozart%20Finance%20(PIANO)%20-%20Final%20Audit%20Report.pdf Smart-Contract-Audit-Reports/Mozart Finance (PIANO) - Final Audit Report.pdf at main · ImmuneBytes/Smart-Contract-Audit-Reports · GitHub] (Sep 18)

[https://github.com/mozartfinance/audits/blob/main/Mozart_SC_Audit_Report%20(3).pdf audits/Mozart_SC_Audit_Report (3).pdf at main · mozartfinance/audits · GitHub] (Sep 18)

[https://testnet.bscscan.com/address/0x1111cF91D816cF52b689E987e417006595d74391#code Contract Address 0x1111cF91D816cF52b689E987e417006595d74391 | BscScan] (Sep 18)

[https://bscscan.com/address/0xd46936677B2C1Bb696F2b67c55239331E2b7Cd42#code Contract Address 0xd46936677B2C1Bb696F2b67c55239331E2b7Cd42 | BscScan] (Sep 18)

[https://mobile.twitter.com/certikorg/status/1379971240736219140 https://mobile.twitter.com/certikorg/status/1379971240736219140] (Jan 10)