Immediate Request to Freeze ALL Decentraland Names and Related Transactions
Proposal Details
Description
Immediate Request to Freeze Decentraland Names and Related Transactions Over 1,000 Decentraland Names were stolen directly from user accounts. I call for an immediate investigation and, where technically and legally possible, an immediate freeze or suspension of all Decentraland Name smart-contract activity, affected accounts, and related transactions to prevent further losses and unauthorized transfers. This matter requires urgent attention to protect users and preserve evidence while the incident is investigated.
Voting Rationale
supporting Poutine.
I am not the only victim
I'm not sure hence why I vote invalid. I assume the damage is done. But please let me stress... I am really sorry man. Lost for words. Truly
Immediate Request to Freeze ALL Decentraland Names and Related Transactions This proposal is now in status: FINISHED. Voting Results: * Yes 32% 1,184,942 VP (7 votes) * No 67% 2,440,009 VP (3 votes) * Invalid question/options 1% 53,944 VP (1 votes)
I'd vote "yes," just to allow for some reflection on the subject, but I don't really agree with freezing everything.
Voting yes to move this forward so that dao and foundation officials can take the next steps, suggest solutions, or otherwise provide support.
**Jason, and everyone affected by the recent hack, I am truly sorry - this is a devastating situation.** I voted No, but not lightly. My concern is that this would set a dangerous and irreversible precedent. The exploit did not compromise any of Decentraland’s own contracts; it exploited the outdated approvals on Magic Eden. If we decide to rewind ownership on the basis of an external marketplace failure, I believe it would become extremely difficult to draw a clear line for any potential future incidents. I wish everyone hit by this a fast and fair recovery.
Its been mentioned by the white hats that this is a Payment Processor v2 contract vulnerability and that all you need to do is the revoke the permissions, not a collections contract issue. Unfortunately that PP v2 contract isn't pausable on Limit Break's end. Basically all NFTs are affected so long as you've given permission when using ME. DCL can launch a new contract and issue a new set of NAMEs but if the wallet is still vulnerable with permissions still enabled there's no point, those names will still get drained. Also, sorry to hear you lost your names. I hope kolonel is your wallet at least? Saw those transactions https://x.com/0xQuit/status/2103410682368512505
It seems unfair to punish all Name holders because you have failed to practice proper asset security. Why do you think it is reasonable to punish everyone because you are currently personally having an issue?
Thank you, I hope this is something possible the other users who lost names perhaps have not realised yet,
Are those possibilities ? Deploy a new NAME contract seeded from a snapshot taken at block X before the theft, then modify Decentraland applications to treat that new contract as authoritative. Migrate the ecosystem to a new contract with additional protections such as freezing or recovery controls. (that would be the ideal scenario to help the future of the platform)
These hacking incidents are becoming increasingly sophisticated. At the moment, there doesn’t seem to be anything in place to properly support users when something like this happens. My previous experience with the bounty program showed me how difficult it can be to reach someone with the right knowledge, experience, and judgment to handle these situations effectively. At the same time, stolen assets are still being freely bought, sold, transferred, and used by members of the community, which only makes the situation more concerning. I’m not sure what can be done or whether there is a process in place for this, but time is critical right now.
I've lost all my DCL names over 1,000+ due to Magic Eden Limit Break Hack along with many others. I've already notified Opensea and they are marked as Suspicious and can't be traded on OS I ask for a freeze on Decentraland name smart contract effective immediately until this issue is sorted. This is one of the wallets: 0x94cf72b077fdf3a7927b1cd023a179c7103da708 Decentraland Wearables might be next, I call for an investigation and also freeze the DCL Wearables contracts for the time being.
10 Comments