👀 Look at what happened today with Unleash Protocol (a finance platform originating from the United States that operates on the Story network to manage copyrights and trademarks), because the truth is it leaves an important lesson for everyone.
It turns out that this application just took a hard hit: they took almost 4 million dollars in the blink of an eye. The craziest part is that it wasn't because the system had a super complicated programming error that a genius discovered, but for something much more 'human'.
Imagine that for the platform to function securely, several people are supposed to agree to authorize any significant changes; it's like a safe needing three different keys to open. Well, someone managed to gain control of those 'master keys' and, without anyone else's permission, changed the rules of the game to withdraw funds from users to their own account.
Among the coins they took are WIP, USDC, WETH, stIP, and vIP. As soon as the attacker had these assets in their possession, they sent them straight to a coin mixer called Tornado Cash so that no one could trace where they ended up. Meanwhile, at Unleash, they had no choice but to shut everything down and ask people to please not even think about touching the page or connecting their wallets for now because the investigation is still just beginning.
This reminds us that, no matter how modern an application is, if those who manage it don't take good care of those main keys, our money will always be on the line. We must tread carefully, family! 😉❤️
