April 24th, 2023 — Update on the recent exploit on FilDA, a multi-chain lending platform
We want to assure our users that we are taking every possible step to recover the stolen funds and prevent future incidents. We appreciate the support and input of our community, ecosystem partners and exchanges in this matter.
We have reached out to the exploiter via on-chain messaging and have started a conversation through Etherscan chat. As a result, 160K ELA and 21K DAI have now been returned. Considering the successful negotiations so far, a resolution is underway, and we would like to offer a bounty if the remaining exploited funds are returned before we proceed with further options.
Additionally, we want to make it clear that we take this incident very seriously and have involved law enforcement in pursuing the case. Meanwhile, we shall keep working with all parties to resolve the situation and ensure the safety of our users.
Meanwhile, we have reviewed the contract code and made the attack path ineffective by modifying the configuration. We are also preparing to fix the problem permanently by adjusting the code as appropriate. We have identified the affected addresses and are reaching out to these users to assist them in any way possible.
Preventing a repeat of this occurrence is our top priority as we move forward. We will continue to work with the community and security experts to strengthen our platform’s security measures.
We want to thank our friends at @slowmist_team for their valuable insights and information during the investigation. We encourage any users who have suffered losses to contact us through our Telegram group (https://t.me/FilDAcommunity) and report any losses to an administrator. Please note that we will not contact you first.
We will continue to keep you updated on any developments in this matter. Thank you for your patience and understanding.
The FilDA Team
