Pizza DeFi EOS Spiderman Hack Incident - Revision history

Azoundria: Another 30 minutes complete. Additional sources merged in. Prevention completed. Information moved around.

2023-09-12T18:36:37Z

Another 30 minutes complete. Additional sources merged in. Prevention completed. Information moved around.

Azoundria at 21:34, 7 May 2023

2023-05-07T21:34:39Z

← Older revision		Revision as of 15:34, 7 May 2023
Line 1:		Line 1:
	{{Imported Case Study\|source=https://www.quadrigainitiative.com/casestudy/pizzadefieosspidermanhackincident.php}}		{{Imported Case Study 2\|source=https://www.quadrigainitiative.com/casestudy/pizzadefieosspidermanhackincident.php}}
	{{Unattributed Sources}}		{{Unattributed Sources}}

	[[File:Pizzadefi.jpg\|thumb\|Pizza DeFi]]Pizza DeFi includes an EOS lending platform which was vulnerable and targeted by hackers. The way the EOS network works, it's possible for block producers to vote to freeze accounts or return funds. However, the hacker moved the funds to 1.37M different accounts, and threatened to send all the funds to normal accounts if a $3m bounty was not paid. Through negotiations, a $500k bounty was agreed upon, and the rest of the funds were returned.		[[File:Pizzadefi.jpg\|thumb\|Pizza DeFi]]Pizza DeFi includes an EOS lending platform which was vulnerable and targeted by hackers. The way the EOS network works, it's possible for block producers to vote to freeze accounts or return funds. However, the hacker moved the funds to 1.37M different accounts, and threatened to send all the funds to normal accounts if a $3m bounty was not paid. Through negotiations, a $500k bounty was agreed upon, and the rest of the funds were returned.

	This is a global/international case not involving a specific country.		This is a global/international case not involving a specific country.<ref name="cryptosec-5385" /><ref name="utoday-5386" /><ref name="pizzaprofitwitter-5387" /><ref name="pizzafinance-5388" /><ref name="pizzastaticsource-5389" /><ref name="pizzafinancemedium-5390" /><ref name="natpdevelopermedium-5391" /><ref name="bloks-5392" /><ref name="fairyprooftmedium-5393" /><ref name="etherscan-5394" /><ref name="pizzaprofitwitter-5395" /><ref name="pizzaprofitwitter-5396" /><ref name="pizzaprofitwitter-5397" /><ref name="pizzaprofitwitter-5398" /><ref name="pizzaprofitwitter-5399" /><ref name="pizzaprofitwitter-5400" /><ref name="pizzaprofitwitter-5401" /><ref name="pizzaprofitwitter-5402" /><ref name="pizzaprofitwitter-5403" /><ref name="pizzaprofitwitter-5404" /><ref name="pizzaprofitwitter-5405" /><ref name="pizzaprofitwitter-5406" /><ref name="pizzaprofitwitter-5407" /><ref name="pizzaprofitwitter-5408" /><ref name="slowmistteamtwitter-5409" /><ref name="slowmisthacked-3935" />
	<ref name="cryptosec-5385" /><ref name="utoday-5386" /><ref name="pizzaprofitwitter-5387" /><ref name="pizzafinance-5388" /><ref name="pizzastaticsource-5389" /><ref name="pizzafinancemedium-5390" /><ref name="natpdevelopermedium-5391" /><ref name="bloks-5392" /><ref name="fairyprooftmedium-5393" /><ref name="etherscan-5394" /><ref name="pizzaprofitwitter-5395" /><ref name="pizzaprofitwitter-5396" /><ref name="pizzaprofitwitter-5397" /><ref name="pizzaprofitwitter-5398" /><ref name="pizzaprofitwitter-5399" /><ref name="pizzaprofitwitter-5400" /><ref name="pizzaprofitwitter-5401" /><ref name="pizzaprofitwitter-5402" /><ref name="pizzaprofitwitter-5403" /><ref name="pizzaprofitwitter-5404" /><ref name="pizzaprofitwitter-5405" /><ref name="pizzaprofitwitter-5406" /><ref name="pizzaprofitwitter-5407" /><ref name="pizzaprofitwitter-5408" /><ref name="slowmistteamtwitter-5409" /><ref name="slowmisthacked-3935" />

	== About Pizza DeFi ==		== About Pizza DeFi ==
Line 87:		Line 86:
	!Description		!Description
	\|-		\|-
	\|December 8th, 2021 ~~12:00:00 AM~~		\|December 8th, 2021
	\|Main Event		\|Main Event
	\|Expand this into a brief description of what happened and the impact. If multiple lines are necessary, add them here.		\|Expand this into a brief description of what happened and the impact. If multiple lines are necessary, add them here.
Line 95:		Line 94:
	\|		\|
	\|}		\|}

			== Technical Details ==
			This section includes specific detailed technical analysis of any security breaches which happened. What specific software vulnerabilities contributed to the problem and how were they exploited?

	== Total Amount Lost ==		== Total Amount Lost ==
Line 116:		Line 118:
	== Ongoing Developments ==		== Ongoing Developments ==
	What parts of this case are still remaining to be concluded?		What parts of this case are still remaining to be concluded?
			== General Prevention Policies ==
			The Pizza DeFi algorithm was audited by both Peckshield and SlowMist. However, smart contract hot wallets can still contain problems even with multiple audits. For this reason, it's recommended to limit the funds which are online in hot wallets, and store the majority of funds in offline multi-signature setups. Once a protocol has enough confidence, more funds can be placed online, backed by self insurance, industry insurance, or smart contract insurance underwriters.
			== Individual Prevention Policies ==
			{{Prevention:Individuals:Placeholder}}

			{{Prevention:Individuals:End}}

			== Platform Prevention Policies ==
			{{Prevention:Platforms:Placeholder}}

			{{Prevention:Platforms:End}}

			== Regulatory Prevention Policies ==
			{{Prevention:Regulators:Placeholder}}

	== Prevention ~~Policies ==~~		{{Prevention:Regulators:End}}
	The Pizza DeFi algorithm was audited by both Peckshield and SlowMist. However, smart contract hot wallets can still contain problems even with multiple audits. For this reason, it's recommended to limit the funds which are online in hot wallets, and store the majority of funds in offline multi-signature setups. Once a protocol has enough confidence, more funds can be placed online, backed by self insurance, industry insurance, or smart contract insurance underwriters.

	== References ==		== References ==

Azoundria at 17:48, 28 February 2023

2023-02-28T17:48:20Z

Azoundria: Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/pizzadefieosspidermanhackincident.php}} Pizza DeFiPizza DeFi includes an EOS lending platform which was vulnerable and targeted by hackers. The way the EOS network works, it's possible for block producers to vote to freeze accounts or return funds. However, the hacker moved the funds to 1.37M different accounts, and threatened to send all the funds to normal accounts i..."

2023-01-28T04:08:31Z

Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/pizzadefieosspidermanhackincident.php}} thumb|Pizza DeFiPizza DeFi includes an EOS lending platform which was vulnerable and targeted by hackers. The way the EOS network works, it's possible for block producers to vote to freeze accounts or return funds. However, the hacker moved the funds to 1.37M different accounts, and threatened to send all the funds to normal accounts i..."

New page

{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/pizzadefieosspidermanhackincident.php}}

[[File:Pizzadefi.jpg|thumb|Pizza DeFi]]Pizza DeFi includes an EOS lending platform which was vulnerable and targeted by hackers. The way the EOS network works, it's possible for block producers to vote to freeze accounts or return funds. However, the hacker moved the funds to 1.37M different accounts, and threatened to send all the funds to normal accounts if a $3m bounty was not paid. Through negotiations, a $500k bounty was agreed upon, and the rest of the funds were returned.

This is a global/international case not involving a specific country.

== About Pizza DeFi ==
"A Decentralized Financial Gateway" "EOS Based. Efficient, instant transaction, more diversified." "Decentralized Trading. No registration, no deposit/withdraw." "Trusted Transaction. On-chain, transparent and traceable." "PIZZA smart contract audit by SlowMist & PeckShield"

"eCurve was launched by the DAD DAO proposal number 64 as an Ethereum port of Curve. Ethereum uses unsigned parameters for this action and as a result does not require a positive value check on the EVM side." "The DAD DAO decided not to audit the code due to a lack of consensus on the DAO funds to be spent for eCurve. Previously the DAD DAO contracts were audited by Sentnl and no critical issues were found. The community debated many times whether to audit the remaining code but due to a lack of available funds and consensus, the DAO did not go ahead with the audit."

"On December 8, 2021, eCurve, a DAPP deployed on EOS was attacked." "12/8, 8pm, hacker itsspiderman used exploit in eCurve to mint infinite Tripool tokens and deposit as collateral in PIZZA platform, drained all valuable assets." "The hacker attacked eCurve and minted infinite LP tokens called TRIPOOL. Beside using the TRIPOOL tokens to withdraw all liquidity in target eCurve pools, the hacker also collateralized them in PIZZA Lend, and borrowed all tokens with value." "PIZZA losses $5 millions worth of tokens. We are working with slowmist, BPs, and other projects to manage to retrieve." "By using a large number of Tripool tokens, the hacker was able to open over-collateralized positions and drain real valuable assets and withdraw them to his or her own wallet. The lost tokens are valued at $5 million."

"The eCurve hack revolved around not requiring a positive balance of stable coins to be passed to the ecurve3pool1 contract. This issue existed in tandem with only requiring that positive amounts trigger an inline action for a transfer of a stable coin." "The hack begins with the attacker depositing USDC/DAI/USDT to receive an initial TRIPOOL balance." "This TRIPOOL balance is then transferred back to the ecurve3pool1 contract which is immediately followed by a call to the withdrawimbl action. In this action, a negative amount is passed for 1 of the 3 stable coins which as stated previously does not trigger an associated inline transfer which would have failed."

"The attacker made a deposit of 3.66853 USDCs, 3.669928 DAIs, and 55.1576 USDTs to ecurve3pool1 and obtained 62.103274 TRIPOOL tokens. The attacker converted 46.205931 TRIPOOL tokens to 248 DAIs and 248 USDCs. Bugs that existed in the implementation of staking and withdrawal were exploited by the attacker."

"The attacker repeatedly staked and withdrew USDCs and DAIs and eventually staked 900,000 DAIs and 900,000 USDCs. The attacker withdrew 900,000 DAIs and 900,000 USDCs, obtained 28.22 million TRIPOOL tokens and cashed out the TRIPOOL tokens. The attacker cashed out 14.72 million TRIPOOL tokens to 20,000 USDCs, 1.05 million DAIs and 1.85 million USDTs. The attacker converted 1.50 million TRIPOOL tokens to 134,000 USNs in eCurve’s USN pool. The attacker staked 12 million TRIPOOL tokens to the Pizza application as collateral and borrowed 330,000 EOSs, 130,000 DFSs, 3,933 BOXs, 1655 YFCs, 35900 TAGs, 660,000 USDTs, 78.81 million TPTs, 454,000 KEYs, 10.55 million DAPPs, 3.5679 PBTCs, 4.61 million CHEXs, 1.24 million OGXs, 39.629223 ETHs, 0.4584 USNs, 1.99 million USDCs, 8.79 million IQs, 1.374 BTCs, 2.07 million USDBs, 520,000 OUSDs, 2346 BOXAIs, and 0.6914 PETHs. The total exploited assets were valued at around 10 million USDs."

"The stable coins appear to be rotated so as to not deplete the contract of one stable coin before the hack may be completed. The result of passing this negative amount allows the hacker to receive a return of TRIPOOL as well as the positive stable coins. The limit on how many stable coins that can be entered is dictated by the TRIPOOL amount." "[T]here is no positive balance check for the minamounts parameter. What we do see is a check to ensure that the asset exists in the tokeninfo2 table and that the symbol matches." "The hacker then repeats this process of depositing the received stable coins, receiving more TRIPOOL tokens, then using those TRIPOOL tokens to withdraw larger and larger amounts of stable coins until the contract is depleted of all stable coins."

"One validation check that would have saved the contract would have been the addition of a positive balance check as well as a validity check (as seen in the eosio.token smart contract)." "Another would have been to assert if a non-positive balance was sent."

"The hacker then deposited 12,000,000 TRIPOOL for collateral to pizza for a massive loan which yielded 331,044.7153 EOS as well as several other tokens. Some of these tokens were converted to EOS as well. The hacker created 1.4M EOS accounts. RAM used to create EOS accounts is not recoverable."

"We received the alert and immediately verified that a hack incident has just happened. The first reaction was to contact both the eCurve team and the producing block producers. Confirm the hack and find out the basic cause of it. Confirm the hacker accounts, especially the ones that store the stolen tokens. Contact with the top 21 BPs, host a zoom call that the BPs can join (so you can explain to them what happens, provide them with on-chain evidences and how you want them to help)."

"The token recovering is unprecedented tough, we are trying the best and will update with the community if there is any progress." "The classic way of dealing with hacking incidents since 2018 was to ask all 21 BPs to blacklist the target hacker accounts. If all 21 BPs ban the target accounts, the transactions from the target accounts will all be rejected. And the problem is it’s almost impossible to ask all 21 BPs to keep the black list."

"We took both approaches but made the second one our main direction, because as mentioned above, it’s almost impossible to get all 21 BPs to add certain accounts to a blacklist. From 9pm to 00:30, it took three and half hours to actually draft the proposal that could limit the target accounts’ actions. In order to make it happens, it requires 15/21 approvals from the producing BPs. All BPs were being extremely helpful, we spent one more hour to explain and review the ongoing situation and the proposal itself. At 01:47 am, eventually, we got the approvals from 15 block producers (check the image below for a detailed list)."

"However, the hacker created 1.37 millions EOS accounts over the past 4 and half hours and sent 98% of the stolen tokens to these accounts. In average each account got around $6~7. Also, as a revenge for the PIZZA team to call the BPs, the hacker airdropped many tokens to random accounts. So basically here was a “you call the cop and the robbers kill several hostage as a warning” situation."

"[W]ell, some accounts were not so random, “gaotiancheng ” for example, this account was created right bef\ore his huge airdrop, with suspicious initial EOS transaction and suspicious KYC info in both Huobi and Alipay. However, in the next day we managed to collect the list of the 1.37 millions hacker accounts, we didn’t include the “gaotiancheng” because 100% confirmed."

"12/11, continued to verify the target accounts, tested the proposal. Contact with BPs and provided them with review methods. Set target action time to 12/12 night. 12/11 Midnight, the hacker asked for $3 millions ransom and threat to send all stolen funds to normal users if BPs attempt to restrict his accounts."

"12/12, 2 am, fight or flight. Evaluated the cost of resource the hacker had to take to transfer all tokens. Decided to bring the plan forward. Set target action time to 12/12, 10 am. Contacted all 21 BPs. 12/12, 10:30 am, proposal voting started. 12/12, noon, hacker saw the proposal and threaten to send all tokens to normal accounts. 12/12. afternoon, negotiations. Between PIZZA and hack, and also among the BPs. 12/12, 4 pm, 15 approvals received. Hacker agree with the $500K ransom."

"Exchanged 500K DAI with itsspiderman's 1.37 millions accounts. We also asked for a temporary access to the active permissions of both "itsspiderma1" and "itsspiderman", in order to make clearing more efficient. We will return these two keys back to Mr.Spider when things settles."

"Under this circumstances, we snapshot the current prices of the target tokens, and will compensate the depositors with equivalent USDT tokens. Snapshot time: 12/15, 08:15pm, UTC+8. Thank you." "Regathering tokens from a millions accounts back to one account is 10x more difficult than sending them from one account to one million accounts. Damaging is always easier than building/fixing."

"12/23, all services on PIZZA Lend Resumed. PIZZA started to work with ENF to design a recovering framework to provide a more convenient and standardized process to resolve similar incidents in the future." "After this hack, PIZZA will only open a very limited list of collaterals. The truth is that we have too many collateral choices that really qualifies, and this is obviously not an excuse to set a lower standard."

"There is also a patch that introduces a lending cap to the PIZZA platform, it will filter out most of the unexpected extreme price movements or infinite inflated tokens like what’s in this eCurve hack. In the end, there will also be a new ENF working group: Recover+. PIZZA team will work with the EOS network foundation to design a crisis management framework to help EOS projects coping with hacking incidents. The phase one work is expected to be done by the end of April."

"We are minting a NFT series to honor this great recovering. The NFT is for all parties who help to get back the money. Including those who voluntarily return the lost tokens. Leave comment if you have any ideas or suggestions. Thank you!"

"Thanks everyone who help in this incident, without your kindly support PIZZA might have just been crashed and never be able to continue contribute like it was. We can’t thank you more enough, it’s only hard work and contribution to the community can repay the debts we owe you. Let’s together go for a better future."

This is a global/international case not involving a specific country.

The background of the exchange platform, service, or individuals involved, as it would have been seen or understood at the time of the events.

Include:

* Known history of when and how the service was started.
* What problems does the company or service claim to solve?
* What marketing materials were used by the firm or business?
* Audits performed, and excerpts that may have been included.
* Business registration documents shown (fake or legitimate).
* How were people recruited to participate?
* Public warnings and announcements prior to the event.

Don't Include:
* Any wording which directly states or implies that the business is/was illegitimate, or that a vulnerability existed.
* Anything that wasn't reasonably knowable at the time of the event.
There could be more than one section here. If the same platform is involved with multiple incidents, then it can be linked to a main article page.

== The Reality ==
This sections is included if a case involved deception or information that was unknown at the time. Examples include:

* When the service was actually started (if different than the "official story").
* Who actually ran a service and their own personal history.
* How the service was structured behind the scenes. (For example, there was no "trading bot".)
* Details of what audits reported and how vulnerabilities were missed during auditing.

== What Happened ==
The specific events of the loss and how it came about. What actually happened to cause the loss and some of the events leading up to it.
{| class="wikitable"
|+Key Event Timeline - Pizza DeFi EOS Spiderman Hack Incident
!Date
!Event
!Description
|-
|December 8th, 2021 12:00:00 AM
|Main Event
|Expand this into a brief description of what happened and the impact. If multiple lines are necessary, add them here.
|-
|
|
|
|}

== Total Amount Lost ==
The total amount lost has been estimated at $5,000,000 USD.

How much was lost and how was it calculated? If there are conflicting reports, which are accurate and where does the discrepancy lie?

== Immediate Reactions ==
How did the various parties involved (firm, platform, management, and/or affected individual(s)) deal with the events? Were services shut down? Were announcements made? Were groups formed?

== Ultimate Outcome ==
What was the end result? Was any investigation done? Were any individuals prosecuted? Was there a lawsuit? Was any tracing done?

A bounty of $500,000 USD was paid for the discovery.

== Total Amount Recovered ==
The total amount recovered has been estimated at $4,500,000 USD.

What funds were recovered? What funds were reimbursed for those affected users?

== Ongoing Developments ==
What parts of this case are still remaining to be concluded?

== Prevention Policies ==
The Pizza DeFi algorithm was audited by both Peckshield and SlowMist. However, smart contract hot wallets can still contain problems even with multiple audits. For this reason, it's recommended to limit the funds which are online in hot wallets, and store the majority of funds in offline multi-signature setups. Once a protocol has enough confidence, more funds can be placed online, backed by self insurance, industry insurance, or smart contract insurance underwriters.

== References ==
[https://cryptosec.info/defi-hacks/ Comprehensive List of DeFi Hacks & Exploits - CryptoSec] (Jan 8)

[https://u.today/eos-defi-platform-hacked-5-million-in-users-funds-stolen EOS DeFi Platform Hacked, $5 Million in Users' Funds Stolen] (Jan 8)

[https://twitter.com/PizzaProFi/status/1468869822389768192 @PizzaProFi Twitter] (Jan 8)

[https://pizza.finance/ PIZZA] (Jan 8)

[https://pizza-static-source.bitzhihu.com/pdf/PIZZA-Page-Intro-en.pdf https://pizza-static-source.bitzhihu.com/pdf/PIZZA-Page-Intro-en.pdf] (Jan 8)

[https://pizza-finance.medium.com/a-brief-review-on-the-12-08-spiderman-hacking-incident-8739c23322ab https://pizza-finance.medium.com/a-brief-review-on-the-12-08-spiderman-hacking-incident-8739c23322ab] (Jan 8)

[https://medium.com/@NatPDeveloper/ecurve-hack-code-review-43feb35793a0 https://medium.com/@NatPDeveloper/ecurve-hack-code-review-43feb35793a0] (Jan 8)

[https://bloks.io/transaction/a7392b4e2b3ebc68345c91f538114eeb51cea48584783f2b162b7d4e94f725df?tab=traces https://bloks.io/transaction/a7392b4e2b3ebc68345c91f538114eeb51cea48584783f2b162b7d4e94f725df?tab=traces] (Jan 8)

[https://medium.com/@FairyproofT/fairyproofs-analysis-of-the-attack-on-ecurve-5e2a004981f0 https://medium.com/@FairyproofT/fairyproofs-analysis-of-the-attack-on-ecurve-5e2a004981f0] (Jan 8)

[https://etherscan.io/address/0x04F2e9E40780d94203D818e6E7b8EbFCeAE5a6a4#tokentxns Address 0x04F2e9E40780d94203D818e6E7b8EbFCeAE5a6a4 | Etherscan] (Jan 8)

[https://twitter.com/PizzaProFi/status/1473224632346234882 @PizzaProFi Twitter] (Jan 8)

[https://twitter.com/PizzaProFi/status/1473222564667617281 @PizzaProFi Twitter] (Jan 8)

[https://twitter.com/PizzaProFi/status/1473192176796717056 @PizzaProFi Twitter] (Jan 8)

[https://twitter.com/PizzaProFi/status/1472458309827710979 @PizzaProFi Twitter] (Jan 8)

[https://twitter.com/PizzaProFi/status/1471305536956108800 @PizzaProFi Twitter] (Jan 8)

[https://twitter.com/PizzaProFi/status/1471287235722964998 @PizzaProFi Twitter] (Jan 8)

[https://twitter.com/PizzaProFi/status/1471136386120040450 @PizzaProFi Twitter] (Jan 8)

[https://twitter.com/PizzaProFi/status/1471093073849745409 @PizzaProFi Twitter] (Jan 8)

[https://twitter.com/PizzaProFi/status/1470961847410978818 @PizzaProFi Twitter] (Jan 8)

[https://twitter.com/PizzaProFi/status/1470759583706533895 @PizzaProFi Twitter] (Jan 8)

[https://twitter.com/PizzaProFi/status/1470399367643209730 @PizzaProFi Twitter] (Jan 8)

[https://twitter.com/PizzaProFi/status/1469974184050577409 @PizzaProFi Twitter] (Jan 8)

[https://twitter.com/PizzaProFi/status/1469972660956262403 @PizzaProFi Twitter] (Jan 8)

[https://twitter.com/PizzaProFi/status/1469148935901966343 @PizzaProFi Twitter] (Jan 8)

[https://twitter.com/SlowMist_Team/status/1468887418967584768 @SlowMist_Team Twitter] (Jan 8)

[https://hacked.slowmist.io/en/?c=EOS SlowMist Hacked - SlowMist Zone] (Nov 7)

← Older revision		Revision as of 11:48, 28 February 2023
Line 1:		Line 1:
	{{Imported Case Study\|source=https://www.quadrigainitiative.com/casestudy/pizzadefieosspidermanhackincident.php}}		{{Imported Case Study\|source=https://www.quadrigainitiative.com/casestudy/pizzadefieosspidermanhackincident.php}}
			{{Unattributed Sources}}

	[[File:Pizzadefi.jpg\|thumb\|Pizza DeFi]]Pizza DeFi includes an EOS lending platform which was vulnerable and targeted by hackers. The way the EOS network works, it's possible for block producers to vote to freeze accounts or return funds. However, the hacker moved the funds to 1.37M different accounts, and threatened to send all the funds to normal accounts if a $3m bounty was not paid. Through negotiations, a $500k bounty was agreed upon, and the rest of the funds were returned.		[[File:Pizzadefi.jpg\|thumb\|Pizza DeFi]]Pizza DeFi includes an EOS lending platform which was vulnerable and targeted by hackers. The way the EOS network works, it's possible for block producers to vote to freeze accounts or return funds. However, the hacker moved the funds to 1.37M different accounts, and threatened to send all the funds to normal accounts if a $3m bounty was not paid. Through negotiations, a $500k bounty was agreed upon, and the rest of the funds were returned.

	This is a global/international case not involving a specific country.		This is a global/international case not involving a specific country.
			<ref name="cryptosec-5385" /><ref name="utoday-5386" /><ref name="pizzaprofitwitter-5387" /><ref name="pizzafinance-5388" /><ref name="pizzastaticsource-5389" /><ref name="pizzafinancemedium-5390" /><ref name="natpdevelopermedium-5391" /><ref name="bloks-5392" /><ref name="fairyprooftmedium-5393" /><ref name="etherscan-5394" /><ref name="pizzaprofitwitter-5395" /><ref name="pizzaprofitwitter-5396" /><ref name="pizzaprofitwitter-5397" /><ref name="pizzaprofitwitter-5398" /><ref name="pizzaprofitwitter-5399" /><ref name="pizzaprofitwitter-5400" /><ref name="pizzaprofitwitter-5401" /><ref name="pizzaprofitwitter-5402" /><ref name="pizzaprofitwitter-5403" /><ref name="pizzaprofitwitter-5404" /><ref name="pizzaprofitwitter-5405" /><ref name="pizzaprofitwitter-5406" /><ref name="pizzaprofitwitter-5407" /><ref name="pizzaprofitwitter-5408" /><ref name="slowmistteamtwitter-5409" /><ref name="slowmisthacked-3935" />

	== About Pizza DeFi ==		== About Pizza DeFi ==
Line 119:		Line 121:

	== References ==		== References ==
	[https://cryptosec.info/defi-hacks/ Comprehensive List of DeFi Hacks & Exploits - CryptoSec] (Jan 8)		<references><ref name="cryptosec-5385">[https://cryptosec.info/defi-hacks/ Comprehensive List of DeFi Hacks & Exploits - CryptoSec] (Jan 8, 2022)</ref>

	[https://u.today/eos-defi-platform-hacked-5-million-in-users-funds-stolen EOS DeFi Platform Hacked, $5 Million in Users' Funds Stolen] (Jan 8)		<ref name="utoday-5386">[https://u.today/eos-defi-platform-hacked-5-million-in-users-funds-stolen EOS DeFi Platform Hacked, $5 Million in Users' Funds Stolen] (Jan 8, 2022)</ref>

	[https://twitter.com/PizzaProFi/status/1468869822389768192 @PizzaProFi Twitter] (Jan 8)		<ref name="pizzaprofitwitter-5387">[https://twitter.com/PizzaProFi/status/1468869822389768192 @PizzaProFi Twitter] (Jan 8, 2022)</ref>

	[https://pizza.finance/ PIZZA] (Jan 8)		<ref name="pizzafinance-5388">[https://pizza.finance/ PIZZA] (Jan 8, 2022)</ref>

	[https://pizza-static-source.bitzhihu.com/pdf/PIZZA-Page-Intro-en.pdf https://pizza-static-source.bitzhihu.com/pdf/PIZZA-Page-Intro-en.pdf] (Jan 8)		<ref name="pizzastaticsource-5389">[https://pizza-static-source.bitzhihu.com/pdf/PIZZA-Page-Intro-en.pdf https://pizza-static-source.bitzhihu.com/pdf/PIZZA-Page-Intro-en.pdf] (Jan 8, 2022)</ref>

	[https://pizza-finance.medium.com/a-brief-review-on-the-12-08-spiderman-hacking-incident-8739c23322ab https://pizza-finance.medium.com/a-brief-review-on-the-12-08-spiderman-hacking-incident-8739c23322ab] (Jan 8)		<ref name="pizzafinancemedium-5390">[https://pizza-finance.medium.com/a-brief-review-on-the-12-08-spiderman-hacking-incident-8739c23322ab https://pizza-finance.medium.com/a-brief-review-on-the-12-08-spiderman-hacking-incident-8739c23322ab] (Jan 8, 2022)</ref>

	[https://medium.com/@NatPDeveloper/ecurve-hack-code-review-43feb35793a0 https://medium.com/@NatPDeveloper/ecurve-hack-code-review-43feb35793a0] (Jan 8)		<ref name="natpdevelopermedium-5391">[https://medium.com/@NatPDeveloper/ecurve-hack-code-review-43feb35793a0 https://medium.com/@NatPDeveloper/ecurve-hack-code-review-43feb35793a0] (Jan 8, 2022)</ref>

	[https://bloks.io/transaction/a7392b4e2b3ebc68345c91f538114eeb51cea48584783f2b162b7d4e94f725df?tab=traces https://bloks.io/transaction/a7392b4e2b3ebc68345c91f538114eeb51cea48584783f2b162b7d4e94f725df?tab=traces] (Jan 8)		<ref name="bloks-5392">[https://bloks.io/transaction/a7392b4e2b3ebc68345c91f538114eeb51cea48584783f2b162b7d4e94f725df?tab=traces https://bloks.io/transaction/a7392b4e2b3ebc68345c91f538114eeb51cea48584783f2b162b7d4e94f725df?tab=traces] (Jan 8, 2022)</ref>

	[https://medium.com/@FairyproofT/fairyproofs-analysis-of-the-attack-on-ecurve-5e2a004981f0 https://medium.com/@FairyproofT/fairyproofs-analysis-of-the-attack-on-ecurve-5e2a004981f0] (Jan 8)		<ref name="fairyprooftmedium-5393">[https://medium.com/@FairyproofT/fairyproofs-analysis-of-the-attack-on-ecurve-5e2a004981f0 https://medium.com/@FairyproofT/fairyproofs-analysis-of-the-attack-on-ecurve-5e2a004981f0] (Jan 8, 2022)</ref>

	[https://etherscan.io/address/0x04F2e9E40780d94203D818e6E7b8EbFCeAE5a6a4#tokentxns Address 0x04F2e9E40780d94203D818e6E7b8EbFCeAE5a6a4 \| Etherscan] (Jan 8)		<ref name="etherscan-5394">[https://etherscan.io/address/0x04F2e9E40780d94203D818e6E7b8EbFCeAE5a6a4#tokentxns Address 0x04F2e9E40780d94203D818e6E7b8EbFCeAE5a6a4 \| Etherscan] (Jan 8, 2022)</ref>

	[https://twitter.com/PizzaProFi/status/1473224632346234882 @PizzaProFi Twitter] (Jan 8)		<ref name="pizzaprofitwitter-5395">[https://twitter.com/PizzaProFi/status/1473224632346234882 @PizzaProFi Twitter] (Jan 8, 2022)</ref>

	[https://twitter.com/PizzaProFi/status/1473222564667617281 @PizzaProFi Twitter] (Jan 8)		<ref name="pizzaprofitwitter-5396">[https://twitter.com/PizzaProFi/status/1473222564667617281 @PizzaProFi Twitter] (Jan 8, 2022)</ref>

	[https://twitter.com/PizzaProFi/status/1473192176796717056 @PizzaProFi Twitter] (Jan 8)		<ref name="pizzaprofitwitter-5397">[https://twitter.com/PizzaProFi/status/1473192176796717056 @PizzaProFi Twitter] (Jan 8, 2022)</ref>

	[https://twitter.com/PizzaProFi/status/1472458309827710979 @PizzaProFi Twitter] (Jan 8)		<ref name="pizzaprofitwitter-5398">[https://twitter.com/PizzaProFi/status/1472458309827710979 @PizzaProFi Twitter] (Jan 8, 2022)</ref>

	[https://twitter.com/PizzaProFi/status/1471305536956108800 @PizzaProFi Twitter] (Jan 8)		<ref name="pizzaprofitwitter-5399">[https://twitter.com/PizzaProFi/status/1471305536956108800 @PizzaProFi Twitter] (Jan 8, 2022)</ref>

	[https://twitter.com/PizzaProFi/status/1471287235722964998 @PizzaProFi Twitter] (Jan 8)		<ref name="pizzaprofitwitter-5400">[https://twitter.com/PizzaProFi/status/1471287235722964998 @PizzaProFi Twitter] (Jan 8, 2022)</ref>

	[https://twitter.com/PizzaProFi/status/1471136386120040450 @PizzaProFi Twitter] (Jan 8)		<ref name="pizzaprofitwitter-5401">[https://twitter.com/PizzaProFi/status/1471136386120040450 @PizzaProFi Twitter] (Jan 8, 2022)</ref>

	[https://twitter.com/PizzaProFi/status/1471093073849745409 @PizzaProFi Twitter] (Jan 8)		<ref name="pizzaprofitwitter-5402">[https://twitter.com/PizzaProFi/status/1471093073849745409 @PizzaProFi Twitter] (Jan 8, 2022)</ref>

	[https://twitter.com/PizzaProFi/status/1470961847410978818 @PizzaProFi Twitter] (Jan 8)		<ref name="pizzaprofitwitter-5403">[https://twitter.com/PizzaProFi/status/1470961847410978818 @PizzaProFi Twitter] (Jan 8, 2022)</ref>

	[https://twitter.com/PizzaProFi/status/1470759583706533895 @PizzaProFi Twitter] (Jan 8)		<ref name="pizzaprofitwitter-5404">[https://twitter.com/PizzaProFi/status/1470759583706533895 @PizzaProFi Twitter] (Jan 8, 2022)</ref>

	[https://twitter.com/PizzaProFi/status/1470399367643209730 @PizzaProFi Twitter] (Jan 8)		<ref name="pizzaprofitwitter-5405">[https://twitter.com/PizzaProFi/status/1470399367643209730 @PizzaProFi Twitter] (Jan 8, 2022)</ref>

	[https://twitter.com/PizzaProFi/status/1469974184050577409 @PizzaProFi Twitter] (Jan 8)		<ref name="pizzaprofitwitter-5406">[https://twitter.com/PizzaProFi/status/1469974184050577409 @PizzaProFi Twitter] (Jan 8, 2022)</ref>

	[https://twitter.com/PizzaProFi/status/1469972660956262403 @PizzaProFi Twitter] (Jan 8)		<ref name="pizzaprofitwitter-5407">[https://twitter.com/PizzaProFi/status/1469972660956262403 @PizzaProFi Twitter] (Jan 8, 2022)</ref>

	[https://twitter.com/PizzaProFi/status/1469148935901966343 @PizzaProFi Twitter] (Jan 8)		<ref name="pizzaprofitwitter-5408">[https://twitter.com/PizzaProFi/status/1469148935901966343 @PizzaProFi Twitter] (Jan 8, 2022)</ref>

	[https://twitter.com/SlowMist_Team/status/1468887418967584768 @SlowMist_Team Twitter] (Jan 8)		<ref name="slowmistteamtwitter-5409">[https://twitter.com/SlowMist_Team/status/1468887418967584768 @SlowMist_Team Twitter] (Jan 8, 2022)</ref>

	[https://hacked.slowmist.io/en/?c=EOS SlowMist Hacked - SlowMist Zone] (Nov 7)		<ref name="slowmisthacked-3935">[https://hacked.slowmist.io/en/?c=EOS SlowMist Hacked - SlowMist Zone] (Nov 8, 2021)</ref></references>