NowSwap Protocol Logic Error - Revision history

Azoundria at 01:48, 4 May 2023

2023-05-04T01:48:42Z

← Older revision		Revision as of 19:48, 3 May 2023
Line 1:		Line 1:
	{{Imported Case Study\|source=https://www.quadrigainitiative.com/casestudy/nowswapprotocollogicerror.php}}		{{Imported Case Study 2\|source=https://www.quadrigainitiative.com/casestudy/nowswapprotocollogicerror.php}}
	{{Unattributed Sources}}		{{Unattributed Sources}}

	[[File:Nowswap.jpg\|thumb\|NowSwap]]The NowSwap protocol stored customer funds in their smart contract hot wallets, which was not only not audited but closed source. Due to an exploit, a vulnerability which was apparently similar to one exploited in April on Uranium Finance, $1m in assets were stolen.		[[File:Nowswap.jpg\|thumb\|NowSwap]]The NowSwap protocol stored customer funds in their smart contract hot wallets, which was not only not audited but closed source. Due to an exploit, a vulnerability which was apparently similar to one exploited in April on Uranium Finance, $1m in assets were stolen.

	This is a global/international case not involving a specific country.		This is a global/international case not involving a specific country.<ref name="openblocksecgithub-2342" /><ref name="etherscan-4016" /><ref name="blocksecteamtwitter-4017" /><ref name="peckshieldtwitter-4018" /><ref name="nowswap-4019" /><ref name="nowswaporgtwitter-4020" /><ref name="nowswap-4021" /><ref name="puputhrashingtwitter-4022" /><ref name="etherscan-4023" /><ref name="nowswap-4024" /><ref name="halborn-4025" /><ref name="slowmisthacked-1160" /><ref name="nowswaparchive-7536" />
	<ref name="openblocksecgithub-2342" /><ref name="etherscan-4016" /><ref name="blocksecteamtwitter-4017" /><ref name="peckshieldtwitter-4018" /><ref name="nowswap-4019" /><ref name="nowswaporgtwitter-4020" /><ref name="nowswap-4021" /><ref name="puputhrashingtwitter-4022" /><ref name="etherscan-4023" /><ref name="nowswap-4024" /><ref name="halborn-4025" /><ref name="slowmisthacked-1160" /><ref name="nowswaparchive-7536" />

	== About NowSwap ==		== About NowSwap ==
Line 76:		Line 75:
	!Description		!Description
	\|-		\|-
	\|September 15th, 2021 ~~12:00:00 AM~~		\|September 15th, 2021
	\|Main Event		\|Main Event
	\|Expand this into a brief description of what happened and the impact. If multiple lines are necessary, add them here.		\|Expand this into a brief description of what happened and the impact. If multiple lines are necessary, add them here.
Line 84:		Line 83:
	\|		\|
	\|}		\|}

			== Technical Details ==
			This section includes specific detailed technical analysis of any security breaches which happened. What specific software vulnerabilities contributed to the problem and how were they exploited?

	== Total Amount Lost ==		== Total Amount Lost ==
Line 103:		Line 105:
	== Ongoing Developments ==		== Ongoing Developments ==
	What parts of this case are still remaining to be concluded?		What parts of this case are still remaining to be concluded?
			== General Prevention Policies ==
			We have advocated in our framework for the majority of customer funds to exist in multi-signature cold storage, while the hot smart contract portion would be fully insured by self insurance or our proposed industry insurance fund. In this way, no customer funds would have been lost in the breach. We also propose that new projects should be subject to a couple of expert validations prior to launch, which in this case would have a reasonable chance of detecting the exploit when reviewing the smart contract.
			== Individual Prevention Policies ==
			{{Prevention:Individuals:Placeholder}}

			{{Prevention:Individuals:End}}

			== Platform Prevention Policies ==
			{{Prevention:Platforms:Placeholder}}

			{{Prevention:Platforms:End}}

			== Regulatory Prevention Policies ==
			{{Prevention:Regulators:Placeholder}}

	== Prevention ~~Policies ==~~		{{Prevention:Regulators:End}}
	We have advocated in our framework for the majority of customer funds to exist in multi-signature cold storage, while the hot smart contract portion would be fully insured by self insurance or our proposed industry insurance fund. In this way, no customer funds would have been lost in the breach. We also propose that new projects should be subject to a couple of expert validations prior to launch, which in this case would have a reasonable chance of detecting the exploit when reviewing the smart contract.

	== References ==		== References ==

Azoundria at 23:52, 27 February 2023

2023-02-27T23:52:57Z

Azoundria: Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/nowswapprotocollogicerror.php}} NowSwapThe NowSwap protocol stored customer funds in their smart contract hot wallets, which was not only not audited but closed source. Due to an exploit, a vulnerability which was apparently similar to one exploited in April on Uranium Finance, $1m in assets were stolen. This is a global/international case not involving a specific count..."

2023-01-28T03:40:23Z

Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/nowswapprotocollogicerror.php}} thumb|NowSwapThe NowSwap protocol stored customer funds in their smart contract hot wallets, which was not only not audited but closed source. Due to an exploit, a vulnerability which was apparently similar to one exploited in April on Uranium Finance, $1m in assets were stolen. This is a global/international case not involving a specific count..."

New page

{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/nowswapprotocollogicerror.php}}

[[File:Nowswap.jpg|thumb|NowSwap]]The NowSwap protocol stored customer funds in their smart contract hot wallets, which was not only not audited but closed source. Due to an exploit, a vulnerability which was apparently similar to one exploited in April on Uranium Finance, $1m in assets were stolen.

This is a global/international case not involving a specific country.

== About NowSwap ==
"Nowswap is a DEX with lower transaction fees for smaller trades." "The Nowswap protocol is a new decentralized exchange that supports low transaction fees for retail-sized swaps. This is accomplished through the world’s first dynamic transaction fee design that calculates its fee by looking at the trade size relative to the TVL. Through this design Nowswap aims to offer close to free token exchange for small trades."

"The idea for Nowswap emerged last year, when our developer, Jason, wondered why the transaction fee at Uniswap was set to 0.3% — and whether there were any alternatives that were more affordable."

"After spending much of Q4 2020 diving into the design of all available DEXes, Jason built the first iteration of Nowswap. It was successful at providing a drastically lower transaction fee in low volatility pairs compared to leading decentralized exchanges. At 0.1%, it reduced the transaction fee to be exactly ⅓ of what it would have been on Uniswap. This first iteration was launched on Ethereum mainnet in January 2021." On July 8th, the NowSwap team "officially launched the Nowswap Public Beta."

"In addition, the Nowswap Protocol plans to offer incentives for users who provide liquidity, more advanced trading tools, a governance token, as well as many more features to come." "The NowSwap contract code is not open-source, which makes it more difficult for bugs to be detected and reported by security researchers." "The liquidity pool was reduced from US$1,069,197 to US$24.15. The attacker made a profit of 536,000 USDT and 158 WETH. A total of more than 1 million US dollars."

"On 09/15/21, Nowswap’s Spot protocol was exploited and about $1M worth of TVL was drained. The cause was a bug in the pair contract that did not catch an invalid K value. The team started working on the incident and related follow-ups." "The details of the NowSwap hack are very familiar. They mirror the Uranium Finance hack that occurred in April 2021."

"The Uranium Finance and NowSwap hacks were made possible by an error when updating the smart contract’s code. The original code of the contract contained a value, K, of 1,000 in three different places. The update to the code changed this value in two places but not the third."

"The root cause of this incident was not due to missing 0 because Nowswap does not have any constant value in the K check formula." "Normally when a swap happens, (use input Token0 and output Token1 as an example) the amount0In and amount1Out are both positive, while the amount0Out and amount1In are both zero." "However, in the attack transaction, the hacker attempted to swap token0 for token0. Therefore, amount0In and amount0Out were both positive while the amount1In and amount1Out were both zero. Because the amountIn and amountOut of Token1 was zero, part of the K value check formula also became 0, which then bypassed all the subsequent safety checks. As a consequence, the attacker was able to swap an arbitrary amount of token out."

The "[h]acker created the malicious address and transferred 0.14723529 ETH from [an address] which is tagged as Huobi37." "Hacker’s contract for Nowswap was created." "The hacker made the attack through the transaction and swapped out ~158 WETH and ~535,706 USDT from the Nowswap liquidity pool to the Hacker’s address. The transaction was included in block 13229001." "Attacker swapped all USDT into ETH through 1inch." The "[a]ttacker [finally] deposited [the] ETH to Tornado.Cash in 4 transactions."

"The incident was first identified through @PuPuThrashing’s tweet. The team also noticed this incident from the sudden drop in TVL shown in Nowswap’s Info Site."

"After discovering this attack, the team took immediate action. We first informed major stakeholders and the DeFi community about what happened."

"We are investigating the hack on our protocol."

"Then, we investigated the root cause of the incident with the help of smart contract security experts. The team compared the attack on Nimbus with the attack on Nowswap and found no correlation between the root causes. In addition, the team pieced together the on-chain and off-chain information to identify the hacker."

"The team has decided to take the Nowswap app site into maintenance to fully check the vulnerability of all features. The team is happy to provide bug bounties for developers providing help. We will continue to work with law enforcement to get the funds back."

"The Nowswap App is currently unavailable as we are investigating a vulnerability."

"This incident demonstrates the importance of open-sourcing code, staying aware of past security incidents in the DeFi space, and undergoing a complete security audit before launching any smart contract code to the blockchain. Taking any of these three steps might have enabled the vulnerability to be detected and fixed before an attacker exploited the project for $1 million in tokens."

"The Nowswap team has taken a painful lesson here. Moving forward, we are going to focus more on improving our test coverage to account for more edge cases. Although the protocol was running for 6 months and the protocol had
gone through 2 audits for the current version, we know this still does not guarantee safety. As for further development of Nowswap, the developers will open source early so that we can mitigate future risk. Additionally, we will provide complete documentation along with bug bounties for any white hats."

This is a global/international case not involving a specific country.

The background of the exchange platform, service, or individuals involved, as it would have been seen or understood at the time of the events.

Include:

* Known history of when and how the service was started.
* What problems does the company or service claim to solve?
* What marketing materials were used by the firm or business?
* Audits performed, and excerpts that may have been included.
* Business registration documents shown (fake or legitimate).
* How were people recruited to participate?
* Public warnings and announcements prior to the event.

Don't Include:
* Any wording which directly states or implies that the business is/was illegitimate, or that a vulnerability existed.
* Anything that wasn't reasonably knowable at the time of the event.
There could be more than one section here. If the same platform is involved with multiple incidents, then it can be linked to a main article page.

== The Reality ==
This sections is included if a case involved deception or information that was unknown at the time. Examples include:

* When the service was actually started (if different than the "official story").
* Who actually ran a service and their own personal history.
* How the service was structured behind the scenes. (For example, there was no "trading bot".)
* Details of what audits reported and how vulnerabilities were missed during auditing.

== What Happened ==
The specific events of the loss and how it came about. What actually happened to cause the loss and some of the events leading up to it.
{| class="wikitable"
|+Key Event Timeline - NowSwap Protocol Logic Error
!Date
!Event
!Description
|-
|September 15th, 2021 12:00:00 AM
|Main Event
|Expand this into a brief description of what happened and the impact. If multiple lines are necessary, add them here.
|-
|
|
|
|}

== Total Amount Lost ==
The total amount lost has been estimated at $1,069,000 USD.

How much was lost and how was it calculated? If there are conflicting reports, which are accurate and where does the discrepancy lie?

== Immediate Reactions ==
How did the various parties involved (firm, platform, management, and/or affected individual(s)) deal with the events? Were services shut down? Were announcements made? Were groups formed?

== Ultimate Outcome ==
What was the end result? Was any investigation done? Were any individuals prosecuted? Was there a lawsuit? Was any tracing done?

== Total Amount Recovered ==
There do not appear to have been any funds recovered in this case.

What funds were recovered? What funds were reimbursed for those affected users?

== Ongoing Developments ==
What parts of this case are still remaining to be concluded?

== Prevention Policies ==
We have advocated in our framework for the majority of customer funds to exist in multi-signature cold storage, while the hot smart contract portion would be fully insured by self insurance or our proposed industry insurance fund. In this way, no customer funds would have been lost in the breach. We also propose that new projects should be subject to a couple of expert validations prior to launch, which in this case would have a reasonable chance of detecting the exploit when reviewing the smart contract.

== References ==
[https://github.com/openblocksec/blocksec-incidents/blob/main/defi/2021.md blocksec-incidents/2021.md at main · openblocksec/blocksec-incidents · GitHub] (Aug 10)

[https://etherscan.io/tx/0x841aee53dfdab1a0eb32e8f9cafe32bdd2434dad2aca723577ddd2ceb98ca7db Ethereum Transaction Hash (Txhash) Details | Etherscan] (Oct 1)

[https://twitter.com/BlockSecTeam/status/1438101621049741313 @BlockSecTeam Twitter] (Oct 1)

[https://twitter.com/peckshield/status/1438061295534698498 @peckshield Twitter] (Oct 1)

[https://nowswap.org/ Nowswap] (Nov 12)

[https://twitter.com/nowswap_org/status/1438329668042584069 @nowswap_org Twitter] (Nov 12)

[https://nowswap.org/resources/nowswap-spot-postmortem-09-15-2021.pdf https://nowswap.org/resources/nowswap-spot-postmortem-09-15-2021.pdf] (Nov 12)

[https://twitter.com/PuPuThrashing/status/1438058002817323009 @PuPuThrashing Twitter] (Nov 12)

[https://etherscan.io/tx/0xf3158a7ea59586c5570f5532c22e2582ee9adba2408eabe61622595197c50713 Ethereum Transaction Hash (Txhash) Details | Etherscan] (Nov 12)

[https://nowswap.medium.com/?p=1853680013b3 https://nowswap.medium.com/?p=1853680013b3] (Nov 12)

[https://halborn.com/explained-the-nowswap-protocol-hack-september-2021/ Explained: The NowSwap Protocol Hack (September 2021) - Halborn] (Nov 12)

[https://hacked.slowmist.io/en/?c=Exchange SlowMist Hacked - SlowMist Zone] (Jun 25)

[https://web.archive.org/web/20211020030120/https://nowswap.org/resources/nowswap-spot-postmortem-09-15-2021.pdf Wayback Machine] (Apr 29)

← Older revision		Revision as of 17:52, 27 February 2023
Line 1:		Line 1:
	{{Imported Case Study\|source=https://www.quadrigainitiative.com/casestudy/nowswapprotocollogicerror.php}}		{{Imported Case Study\|source=https://www.quadrigainitiative.com/casestudy/nowswapprotocollogicerror.php}}
			{{Unattributed Sources}}

	[[File:Nowswap.jpg\|thumb\|NowSwap]]The NowSwap protocol stored customer funds in their smart contract hot wallets, which was not only not audited but closed source. Due to an exploit, a vulnerability which was apparently similar to one exploited in April on Uranium Finance, $1m in assets were stolen.		[[File:Nowswap.jpg\|thumb\|NowSwap]]The NowSwap protocol stored customer funds in their smart contract hot wallets, which was not only not audited but closed source. Due to an exploit, a vulnerability which was apparently similar to one exploited in April on Uranium Finance, $1m in assets were stolen.

	This is a global/international case not involving a specific country.		This is a global/international case not involving a specific country.
			<ref name="openblocksecgithub-2342" /><ref name="etherscan-4016" /><ref name="blocksecteamtwitter-4017" /><ref name="peckshieldtwitter-4018" /><ref name="nowswap-4019" /><ref name="nowswaporgtwitter-4020" /><ref name="nowswap-4021" /><ref name="puputhrashingtwitter-4022" /><ref name="etherscan-4023" /><ref name="nowswap-4024" /><ref name="halborn-4025" /><ref name="slowmisthacked-1160" /><ref name="nowswaparchive-7536" />

	== About NowSwap ==		== About NowSwap ==
Line 106:		Line 108:

	== References ==		== References ==
	[https://github.com/openblocksec/blocksec-incidents/blob/main/defi/2021.md blocksec-incidents/2021.md at main · openblocksec/blocksec-incidents · GitHub] (Aug 10)		<references><ref name="openblocksecgithub-2342">[https://github.com/openblocksec/blocksec-incidents/blob/main/defi/2021.md blocksec-incidents/2021.md at main · openblocksec/blocksec-incidents · GitHub] (Aug 11, 2021)</ref>

	[https://etherscan.io/tx/0x841aee53dfdab1a0eb32e8f9cafe32bdd2434dad2aca723577ddd2ceb98ca7db Ethereum Transaction Hash (Txhash) Details \| Etherscan] (Oct 1)		<ref name="etherscan-4016">[https://etherscan.io/tx/0x841aee53dfdab1a0eb32e8f9cafe32bdd2434dad2aca723577ddd2ceb98ca7db Ethereum Transaction Hash (Txhash) Details \| Etherscan] (Oct 2, 2021)</ref>

	[https://twitter.com/BlockSecTeam/status/1438101621049741313 @BlockSecTeam Twitter] (Oct 1)		<ref name="blocksecteamtwitter-4017">[https://twitter.com/BlockSecTeam/status/1438101621049741313 @BlockSecTeam Twitter] (Oct 2, 2021)</ref>

	[https://twitter.com/peckshield/status/1438061295534698498 @peckshield Twitter] (Oct 1)		<ref name="peckshieldtwitter-4018">[https://twitter.com/peckshield/status/1438061295534698498 @peckshield Twitter] (Oct 2, 2021)</ref>

	[https://nowswap.org/ Nowswap] (Nov 12)		<ref name="nowswap-4019">[https://nowswap.org/ Nowswap] (Nov 13, 2021)</ref>

	[https://twitter.com/nowswap_org/status/1438329668042584069 @nowswap_org Twitter] (Nov 12)		<ref name="nowswaporgtwitter-4020">[https://twitter.com/nowswap_org/status/1438329668042584069 @nowswap_org Twitter] (Nov 13, 2021)</ref>

	[https://nowswap.org/resources/nowswap-spot-postmortem-09-15-2021.pdf https://nowswap.org/resources/nowswap-spot-postmortem-09-15-2021.pdf] (Nov 12)		<ref name="nowswap-4021">[https://nowswap.org/resources/nowswap-spot-postmortem-09-15-2021.pdf https://nowswap.org/resources/nowswap-spot-postmortem-09-15-2021.pdf] (Nov 13, 2021)</ref>

	[https://twitter.com/PuPuThrashing/status/1438058002817323009 @PuPuThrashing Twitter] (Nov 12)		<ref name="puputhrashingtwitter-4022">[https://twitter.com/PuPuThrashing/status/1438058002817323009 @PuPuThrashing Twitter] (Nov 13, 2021)</ref>

	[https://etherscan.io/tx/0xf3158a7ea59586c5570f5532c22e2582ee9adba2408eabe61622595197c50713 Ethereum Transaction Hash (Txhash) Details \| Etherscan] (Nov 12)		<ref name="etherscan-4023">[https://etherscan.io/tx/0xf3158a7ea59586c5570f5532c22e2582ee9adba2408eabe61622595197c50713 Ethereum Transaction Hash (Txhash) Details \| Etherscan] (Nov 13, 2021)</ref>

	[https://nowswap.medium.com/?p=1853680013b3 https://nowswap.medium.com/?p=1853680013b3] (Nov 12)		<ref name="nowswap-4024">[https://nowswap.medium.com/?p=1853680013b3 https://nowswap.medium.com/?p=1853680013b3] (Nov 13, 2021)</ref>

	[https://halborn.com/explained-the-nowswap-protocol-hack-september-2021/ Explained: The NowSwap Protocol Hack (September 2021) - Halborn] (Nov 12)		<ref name="halborn-4025">[https://halborn.com/explained-the-nowswap-protocol-hack-september-2021/ Explained: The NowSwap Protocol Hack (September 2021) - Halborn] (Nov 13, 2021)</ref>

	[https://hacked.slowmist.io/en/?c=Exchange SlowMist Hacked - SlowMist Zone] (Jun 25)		<ref name="slowmisthacked-1160">[https://hacked.slowmist.io/en/?c=Exchange SlowMist Hacked - SlowMist Zone] (Jun 26, 2021)</ref>

	[https://web.archive.org/web/20211020030120/https://nowswap.org/resources/nowswap-spot-postmortem-09-15-2021.pdf Wayback Machine] (Apr 29)		<ref name="nowswaparchive-7536">[https://web.archive.org/web/20211020030120/https://nowswap.org/resources/nowswap-spot-postmortem-09-15-2021.pdf Wayback Machine] (Apr 29, 2022)</ref></references>