Indexed Finance thwarts hijackers, set to compensate 2021 hack victims

<p> <br />
<br /><img decoding="async" src="https://images.cointelegraph.com/cdn-cgi/image/format=auto,onerror=redirect,quality=90,width=840/https%3A//s3.cointelegraph.com/uploads/2023-11/e0450046-cc65-4213-a51f-440c31a3d9e7.jpg" /></p>
<div data-v-8081b7b6="">
<p>Indexed Finance, an Ethereum-based project that suffered a $16 million hack in 2021, has successfully thwarted two hijacking attempts. Control of the project’s decentralized autonomous organization (DAO) will be returned to its founders, who aim to allocate the remaining treasury to victims of the 2021 hack.</p>
<p>In a <a href="https://twitter.com/functi0nZer0/status/1728473843054903622?s=20" target="_blank" rel="noopener nofollow">thread</a> on X (formerly Twitter), Laurence Day, a former core contributor, detailed the efforts of the Indexed community in overcoming two hijacking attempts on the remaining treasury of the Indexed DAO. Both attackers acquired significant amounts of the protocol’s NDX token and aimed to take control of the DAO’s approximately $120,000 in digital asset holdings through malicious proposals.</p>
<p>The initial proposal, lacking a title or description in an apparent effort to avoid detection, was thwarted as Day and fellow community members mobilized the Indexed DAO for votes against it. The attacker’s proposal neared approval within an hour, but sufficient “No” votes were cast to prevent its passage.</p>
<blockquote>
<p lang="en" dir="ltr">Okay so here’s what just happened to the Indexed DAO</p>
<p>The wreckage can be seen in the Tally panel below</p>
<p>This is a long thread, but I want to record it somewhere <a href="https://t.co/wRTRZZcwhm">pic.twitter.com/wRTRZZcwhm</a></p>
<p>— laurence, backed by paradigm (@functi0nZer0) <a href="https://twitter.com/functi0nZer0/status/1728473843054903622?ref_src=twsrc%5Etfw">November 25, 2023</a></p></blockquote>
<p>Nonetheless, as the Indexed team had to openly coordinate votes against the proposal, Day anticipated the possibility of a copycat attack. Additionally, as Day <a href="https://twitter.com/functi0nZer0/status/1728473849304318292?s=20" target="_blank" rel="noopener nofollow">detailed</a> in his thread, an additional vulnerability could jeopardize funds beyond the DAO’s treasury if the DAO ends up in unfriendly control.</p>
<p>To mitigate the threat of a subsequent attack, the Indexed DAO approved a ‘poison pill’ proposal, granting them the authority to burn the remaining treasury funds if deemed necessary to deter potential attackers.</p>
<p><strong><em>Related: </em></strong><strong><em>Azuki DAO rebrands to ‘Bean’ as it drops lawsuit against founder</em></strong></p>
<p>Upon the anticipated second attack, the assailant initially sought to negotiate for 50% of the remaining treasury, as revealed in on-chain messages. Indexed founder Dillon Kellar responded by proposing $10,000 in DAI stablecoins which is issued by MakerDAO and warned of burning the entire treasury if the attacker refused.</p>
<p>With only four hours left until Kellar’s ultimatum, and following an attempt to counter-negotiate for $17,000, the attacker accepted the original offer and withdrew their malicious proposal. Authority over the DAO will now return to a multisig controlled by Day, Kellar, and the pseudonymous co-founder PR0, with plans to compensate victims of the 2021 hack using the remaining treasury funds.</p>
<p><strong><em>Magazine: </em></strong><strong><em>Are DAOs overhyped and unworkable? Lessons from the front lines</em></strong></p>
<p><template data-name="subscription_form" data-type="defi_newsletter"/></div>
<p><script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script><br />
<br /><br />
<br /><a href="https://cointelegraph.com/news/indexed-finance-thwarts-hijackers-set-to-compensate-2021-hack-victims">Source link </a></p><p>The post <a href="https://forextraderhub.com/indexed-finance-thwarts-hijackers-set-to-compensate-2021-hack-victims.html">Indexed Finance thwarts hijackers, set to compensate 2021 hack victims</a> first appeared on <a href="https://forextraderhub.com">Forex Trader Hub</a>.</p>