Content directory:
·"Memory pool sniper emerges", OrdiBots users were robbed halfway
· Mint and Ordibots were announced two days ago as “a milestone in digital art on the Bitcoin blockchain”
On the morning of November 29, OrdiBots (@OrdiBots), "the first interactive 3D AR Ordinals project completely engraved on the Bitcoin blockchain" posted on the social platform that Ordibots became the first to be attacked by a front-running attack. ) affected projects.
At the same time, OrdiBots officials said that they have collected the addresses affected by the memory pool sniping. Over the next few days, OrdiBots will airdrop a new Ordibot to each address, with custom characteristics to compensate for front-running situations.
NFT trading platform Magic Eden (@MEonBTC) also issued a post expressing recognition, while noting that Magic Eden is deploying a solution to prevent this from happening in any future releases.
This accident happened yesterday, but OrdiBots' response today also made it recognized by the community.
"Memory pool sniper emerges", OrdiBots users are "robbed halfway"
At noon yesterday, many members of the community pointed out that OrdiBots was stuck, and a large number of errors also occurred, such as network error, can not fetch token, unisats wallet front-end not showing, failure after signing, etc. OrdiBots officials later stated that an announcement would be made soon.
During this period, some community KOLs analyzed the reasons for this matter. For example, community KOL danny huuep (@huuep) posted a detailed analysis of the problems in this incident.
He said that most Ordinal markets currently use PSBT for Ordinal transactions - the seller signs an open and partially signed Bitcoin transaction, the buyer completes it and the market broadcasts the complete Bitcoin transaction.
Here’s the catch: a transaction partially signed by the seller can be signed by any buyer, so anyone can retrieve the complete transaction, strip out the buyer’s address and payment, and replace it with their own: “Use Update With high fees, new buyers will purchase serial numbers because that is the transaction that miners will confirm."
He believes that if a market used PSBT for the popular Ordinal minting in this way, then anyone willing to pay the fee could mint any amount of coins from the mempool: "The whitelist doesn't matter, (an attacker can) directly Enter the memory pool and bypass the whitelist."
The solution to the problem is to change the transaction method. In this regard, community KOL and Ordinals contributor DrJinglee (@ordjingle) also pointed out that this gathering behavior completely bypassed the whitelist setting of the launch pad and was directly hijacked halfway: "Ordibot became the first time in the history of Ordinals that it encountered a big attack A large-scale roadblock robbery."
In this regard, Ordibots added in its statement that the new airdrops used by Ordibots to compensate for user losses will still be generated by the Ordibots parent company and maintain their on-chain origins.
Two days ago, Mint and Ordibots were announced as “a milestone in digital art on the Bitcoin blockchain.”
In fact, before this attack, OrdiBots had just released the mint guide for the OrdiBots 3D series on November 27, and the attack occurred during the mint process on the evening of November 28.
But this cannot stop the enthusiasm of the community. As an open source CC0 IP project, OrdiBots allows anyone to use digital assets for commercial purposes without crediting the original team or creator, emphasizing its commitment to decentralized ownership and utilization.
At the same time, OrdiBots also promises not to obtain profits or royalties from the secondary market of artworks, maintain the integrity of the collection concept and avoid it becoming a pure financial speculation, in order to cultivate a community rooted in digital art appreciation and decentralization principles. driven ecosystem.
This narrative and gameplay therefore attract many Bitcoin enthusiasts. However, it is undeniable that there are loopholes in the current transaction process and methods, so users and players need to carefully assess the risks.
