Azoundria: Created page with "{{Imported Case Study With About|source=https://www.quadrigainitiative.com/casestudy/nftperpclearinghousecriticalbug.php}} {{Unattributed Sources}} nftperp Logo/Homepagenftperp is a perpetual futures decentralized exchange (dex) for NFTs, allowing users to speculate on floor prices of popular projects like Bored Ape Yacht Club and CryptoPunks. Recently, the platform identified a critical bug in its clearingHouse contract, prompting the susp..."

2024-09-18T19:41:34Z

Created page with "{{Imported Case Study With About|source=https://www.quadrigainitiative.com/casestudy/nftperpclearinghousecriticalbug.php}} {{Unattributed Sources}} thumb|nftperp Logo/Homepagenftperp is a perpetual futures decentralized exchange (dex) for NFTs, allowing users to speculate on floor prices of popular projects like Bored Ape Yacht Club and CryptoPunks. Recently, the platform identified a critical bug in its clearingHouse contract, prompting the susp..."

New page

{{Imported Case Study With About|source=https://www.quadrigainitiative.com/casestudy/nftperpclearinghousecriticalbug.php}}
{{Unattributed Sources}}

[[File:Nftperpxyz.jpg|thumb|nftperp Logo/Homepage]]nftperp is a perpetual futures decentralized exchange (dex) for NFTs, allowing users to speculate on floor prices of popular projects like Bored Ape Yacht Club and CryptoPunks. Recently, the platform identified a critical bug in its clearingHouse contract, prompting the suspension of vulnerable contracts. However, all lost funds were recovered, and efforts are underway to resume trading and withdrawals.<ref name="slowmisthackedarchive-14374" /><ref name="spreekawaytwitter-14396" /><ref name="binance-14397" /><ref name="coinlive-14398" /><ref name="nftperptwitter-14399" /><ref name="coinmarketcap-4651" />

== About nftperp ==
"Long or short NFTs. nftperp is a perpetual futures dex for NFTs."

"What is nftperp?
Think you can predict the floor prices for CryptoPunks, Bored Ape Yacht Club, Doodles, and other blue-chip NFT projects?

NFTs have become a huge part of web3. Whether you’re in it for the tech, the art, or just to be part of the amazing communities, NFTs are here to stay.

However, with nftperp, you can now speculate on the floor prices of NFT projects including Bored Ape Yacht Club, CryptoPunks and more.

Are these projects “WAGMI” or “NGMI”?

Put your trading cap on and find out!"

== The Reality ==
This sections is included if a case involved deception or information that was unknown at the time. Examples include:

* When the service was actually started (if different than the "official story").
* Who actually ran a service and their own personal history.
* How the service was structured behind the scenes. (For example, there was no "trading bot".)
* Details of what audits reported and how vulnerabilities were missed during auditing.

== What Happened ==
"On June 14, NFT perpetual contract trading platform nftperp announced on Twitter that a critical bug had been found in the clearingHouse contract."
{| class="wikitable"
|+Key Event Timeline - nftperp Clearing House Critical Bug
!Date
!Event
!Description
|-
|June 13th, 2024 5:05:00 PM MDT
|Twitter Announcement
|The nftperp account announces a critical bug being discovered in the clearingHouse contract. The contract has been suspended.
|-
|June 17th, 2024 10:52:00 PM MDT
|Market Relaunch Announced
|The relaunch of the market is announced on Twitter.
|-
|June 18th, 2024 9:09:00 AM MDT
|Incident Report On Discord
|The nftperp team announces that the have released the full incident report through their discord channel.
|}

== Technical Details ==
This section includes specific detailed technical analysis of any security breaches which happened. What specific software vulnerabilities contributed to the problem and how were they exploited?

== Total Amount Lost ==
200+ ETH x $3,469.28 = 693856

The total amount lost has been estimated at $694,000 USD.

== Immediate Reactions ==
"On June 14, NFT perpetual contract trading platform nftperp announced on Twitter that a critical bug had been found in the clearingHouse contract. All vulnerable contracts have been suspended until further notice. On June 15, nftperp stated that all funds lost due to the vulnerability had been successfully recovered. The developers are currently prioritizing the resumption of the contracts so trading and withdrawal can go live."

"We've identified a critical bug in one of our contracts (clearingHouse) - all vulnerable contracts have been paused until further notice. Our team is actively assessing the situation and will provide updates shortly."

== Ultimate Outcome ==
"@nftperp was compromised yesterday for 200+ ETH and has successfully retrieved ALL the funds.

Funds were also returned on Munchables and @BloomOnBlast by the person who did the exploit.

Anecdotally it really like a new paradigm where more and more exploits are being returned. Have things changed, @zachxbt?

Either way, I am happy to see it."

"According to Odaily, NFT perpetual contract trading platform, Nftperp, has announced the recovery of all funds lost due to a previously discovered vulnerability. The developers are currently prioritizing the restoration of contracts to ensure normal trading and withdrawal operations.

Due to some differences between the marked prices and index prices, the team is seeking a safe method to resume trading and is about to release a detailed account of the events that occurred in the past 20 hours."

== Total Amount Recovered ==
All funds.

The total amount recovered has been estimated at $694,000 USD.

== Ongoing Developments ==
What parts of this case are still remaining to be concluded?
== Individual Prevention Policies ==
{{Prevention:Individuals:Placeholder}}

{{Prevention:Individuals:End}}

== Platform Prevention Policies ==
{{Prevention:Platforms:Placeholder}}

{{Prevention:Platforms:End}}

== Regulatory Prevention Policies ==
{{Prevention:Regulators:Placeholder}}

{{Prevention:Regulators:End}}

== References ==
<references><ref name="slowmisthackedarchive-14374">[https://web.archive.org/web/20240617180525/https://hacked.slowmist.io/ SlowMist Hacked - SlowMist Zone] (Accessed Jun 20, 2024)</ref>

<ref name="spreekawaytwitter-14396">[https://twitter.com/spreekaway/status/1801410447637086285 @spreekaway Twitter] (Accessed Jun 21, 2024)</ref>

<ref name="binance-14397">[https://www.binance.com/en/square/post/2024-06-15-nft-perpetual-contract-trading-platform-nftperp-recovers-lost-funds-due-to-vulnerability-9490450326769 https://www.binance.com/en/square/post/2024-06-15-nft-perpetual-contract-trading-platform-nftperp-recovers-lost-funds-due-to-vulnerability-9490450326769] (Accessed Jun 21, 2024)</ref>

<ref name="coinlive-14398">[https://www.coinlive.com/news-flash/542707 nftperp recovered the funds lost due to the previous vulnerability and is restoring trading and withdrawal services] (Accessed Jun 21, 2024)</ref>

<ref name="nftperptwitter-14399">[https://twitter.com/nftperp/status/1802927228050645059 @nftperp Twitter] (Accessed Jun 21, 2024)</ref>

<ref name="coinmarketcap-4651">[https://coinmarketcap.com/currencies/ethereum/historical-data/ https://coinmarketcap.com/currencies/ethereum/historical-data/] (Accessed Dec 21, 2021)</ref></references>

Nftperp Clearing House Critical Bug - Revision history