Author: ronalthapa

  • Will DEXs Take Over Centralized Exchanges after FTX Collapse?

    Will DEXs Take Over Centralized Exchanges after FTX Collapse?

    “Not your keys, not your crypto” — this decade-old mantra has taken full effect after the FTX collapse. Crypto users have lost faith in centralized exchanges (CEXs) and are migrating to decentralized exchanges (DEXs) instead. Though a non-custodial option seem to be an ideal solution, it would likely take a long time until price discovery shifts from centralized to decentralized platforms. Let’s take a closer look.

    Impact of FTX Collapse on Centralized Exchanges

    Almost every centralized platform in the crypto industry had done business with FTX, and some companies bore the brunt of the collapse such as BlockFi, Genesis Trading, and KuCoin. Crypto users around the globe found they could no longer withdraw assets from several crypto exchanges as the contagion spreads.

    FTX’s collapse is a symptom of a problem inherent to centralized exchanges, also known as custodial exchanges. Customers’ tokens parked on the platform are exposed to the risk the exchange could go bust. Because crypto has no government depositary schemes to cover losses, customers of insolvent exchanges must wait for bankruptcy courts to regain what remains of their funds — if there is any left after other investors claim their share.

    Given the circumstances, all crypto exchanges including Binance have been implementing proof-of-reserves to verify they have enough assets to cover all customers’ funds. Though it is a good transparency initiative, investors still fear for the safety of their funds. As a result, many CEX customers rushed to withdraw their funds, opting for non-custodial solutions. This is where DEXs come in.

    Rise of Decentralized Exchanges after FTX Collapse

    Soon after FTX’s downfall, decentralized exchanges saw a vertical spike in trading volume. According to DeFi Llama, the monthly DEX volume showed an increase of 80% from $57.6 billion in October to $103.8 in November. At the time of writing, Uniswap had the largest trading volume with 60%, followed by Curve (9.6%), PancakeSwap (9%), DODO Exchange (8%), and Balancer (3%).

    Monthly DEX Trading Volume (Source: DeFi Llama)

    Moreover, Uniswap also surpassed Coinbase in daily ETH trading volume on November 14 ($1.1 billion vs $600 million). This is significant as CEXs have always been dominant in trading large market cap coins given their deep liquidity. It strongly indicates traders are moving away from CEXs.

    This is compounded by the fact that Bitcoin (BTC) has been exiting CEX wallets at a record pace. According to on-chain data analytics Glassnode, BTC withdrawals from CEX to self-custody wallets is unfolding at a historic rate of 106k BTC monthly. This accounts for $3.7 billion worth of Bitcoins over the past week. Simultaneously, hardware wallet providers such as Ledger and Trezor reported its highest sales day. Check out some of these wallets:

    Advantages of Decentralized Exchanges

    Decentralized exchanges, also known as non-custodial exchanges, are decentralized finance (DeFi) protocols that allow users to trade directly with other users via smart contracts, without handing over management of their funds to an intermediary or custodian.

    They are non-custodial, which means users have full and exclusive control of their wallet’s private keys. This is the opposite of putting your assets on CEXs as they hold onto the wallets and keys on your behalf. This feature makes it impossible for centralized players to siphon user funds, and is why people are doing their trading on DEXs instead.

    Transactions on DEXs are facilitated through the use of smart contracts, and liquidity pools are funded by other users. As such, there is significantly reduced counterparty risk — you do not need to trust other users, only the code. There are three types of DEXs that uses different protocols: automated market makers (AMM), order book DEXs, and DEX aggregators. But they are all programmed to determine the best price for an asset, all while offering a better rate for users compared to CEXs.

    Moreover, anyone can earn passive income if they provide liquidity to the protocol. On the other hand, CEXs are managed by a centralized organization such as a bank or a small handful of professional trading firms or market makers. In this case, since liquidity is concentrated in these actors, CEX maker and taker fees are much higher than DEX swap fees. Additionally, they can also choose to withdraw their assets during periods of volatility, restricting trades when users need it most.

    Challenges Facing Decentralized Exchanges

    Despite the many critical advantages DEXs offer, it has several downsides that hinders widespread adoption:

    Relies Heavily on Centralized Exchanges

    Most DEXs are dependent on price oracles (i.e. Chainlink) that source data from CEXs. As such, an attacker can manipulate the price of an asset on a particular DEX, leading to inaccurate price data being fed to all protocols which rely on that DEX as a price oracle.

    A flash loan attack is a common method to trick price oracles. In such events, attackers essentially create false arbitrage opportunities by instantaneously borrowing, swapping, depositing large numbers of tokens, tricking price oracles that the target token’s price is being moved on a single exchange.

    This creates a disparity which can then be arbitraged, allowing the sale or purchase of assets at above or below market price. Polygon’s Quickswap was a victim of this attack in October 2022.

    DEX Transactions are Slower than CEX

    Trading on DEXs are often much slower because all trades take place on the blockchain. It takes time for blocks to be validated and transactions to go through. On the other hand, CEX trades are almost instantaneous because they take place on proprietary matching engines instead of the blockchain. These engines are complex software that synchronizes and combines data from thousands of trading pairs at the same time.

    Liquidity Issues and Impermanent Loss

    DEXs cannot yet compete with large CEXs in size as they cannot offer as much liquidity. When they do not have enough liquidity, large orders can incur slippages in which the buyer pays above-market prices on their order. As such, a lack of liquidity can deter institutional participation as large orders are likely to suffer from slippage.

    On another note, liquidity providers are exposed to a risk of impermanent loss when depositing two assets for a specific trading pair. In most cases, liquidity providers end up withdrawing more of the token that lost value and less of the one that gained value because the ratio of tokens held in the pool changes as trades occur.

    Smart Contract Vulnerabilities

    Although there is significantly reduced counterparty risk when using DEXs, there is still the issue of smart contract vulnerabilities that can be exploited by hackers. Smart contract codes are publicly available and anyone can review their code. Therefore, exploitable bugs can still slip past audits and other code reviews.

    This is a problem inherent to all DeFi protocols. Over the past two years, we have seen numerous hacks on cross-chain bridges, hot wallets, staking platforms, and even entire blockchain infrastructures.

    See also: 10 Best Smart Contract Security Auditing Firms in 2022

    Future Landscape of Crypto Exchanges

    In the wake of FTX’s collapse, users’ confidence in centralized exchanges are waning and the crypto community expects a shift toward decentralized platforms. However, according to JPMorgan and several other financial analysts, centralized exchanges will continue to control the majority of global digital-asset trading volumes. Although DEX trading volume has surged over the past month, it is a possibility that it reflects the automatic liquidations following the FTX collapse, and does not indicate the start of a long-term trend.

    DEX users are still confined to a relatively small base of niche traders and investors, and their interfaces can be difficult to navigate. At this stage, CEXs still provide a better user experience, fiat gateways, and deeper liquidity. To date, Uniswap has a total of 4.5 million users cumulatively, whereas Coinbase has a total verified user base of 108 million.

    With that being said, DeFi is still in its infancy. Development in liquidity protocols, safekeeping mechanisms, and user interfaces is needed to fully realize the potential of non-custodial trading services. As long as DEXs can compete with CEXs in terms of liquidity and speed, we may start to see widespread adoption or even a full-on switch to DEXs. After all, decentralized infrastructures are key to preventing centralized collapses, something we, as the community, has had enough of for the past year.

  • Proof-of-Reserves Explained: Essential for Crypto Exchanges

    Proof-of-Reserves Explained: Essential for Crypto Exchanges

    In light of the FTX collapse, cryptocurrency exchanges are implementing proof-of-reserves (PoR) as a form of on-chain accounting that shows their entire holdings and customers’ assets. As centralized entities, this is a big step towards a more transparent crypto ecosystem, but some argue it might not be enough to regain investor trust. In this article, we will explain how PoR works and why it matters.

    What is Proof-of-Reserves (PoR)?

    Proof-of-reserves (PoR) is a cryptographic method to verify that an exchange has enough assets to cover all customers’ deposits. In doing so, the exchange ensures customers they have sufficient liquidity on hand to process all withdrawals, should a bank run occur.

    This came to light after FTX secretly used $10 billion of customer funds to prop up its sister company Alameda Research, which ultimately led to a liquidity crunch amidst mass withdrawals.

    This has left the crypto community wondering what other crypto exchanges might be doing with customer assets. As a result, Binance CEO Chengpeng Zhao (CZ) urged all crypto exchanges to do PoR, albeit Kraken was one of the first exchanges to prove their reserves in February 2022.

    How Does Proof-of-Reserves Work?

    Proof-of-reserves essentially involves taking a snapshot of all balances held on the exchange which are aggregated into a Merkle tree — a data structure designed to encapsulate and encrypt data. These Merkle trees, also known as hash trees, function as a map of the exchanges’ assets and liabilities (customers’ tokens).

    From there, a Merkle root is obtained, which is a cryptographic fingerprint that uniquely identifies the combination of these balances at the time when the snapshot was taken. Afterwards, digital signatures produced by the exchange are collected, which prove ownership over the on-chain addresses with publicly verifiable balances. To put it simply, the exchange discloses these addresses and provides proof that they have access to the associated private key.

    Because Merkle trees are part of blockchain technology, anyone can compare and verify if these balances exceed or match the customers’ balances represented in the Merkle tree. In the case of crypto exchanges, this process is either self-attested by the exchange or carried out by an independent third-party audit. As of now, most crypto exchanges have been working with Nansen, a blockchain analytics platform, for their PoR audit.

    Downsides of Proof-of-Reserves

    Although proof-of-reserves is certainly a step in the right direction, there are still several improvements that could be made to enhance transparency and trust.

    Proof-of-Reserves are Pointless without Proof of Liabilities

    A proof-of-reserve audit without disclosure of total liabilities, not just customers’ tokens, does not paint a full picture of an exchange’s solvency. This would include anything the exchange owes such as debts and taxes. Kraken CEO Jesse Powell expressed that Binance’s PoR is pointless without liabilities. This is also in reference to other platforms publishing their PoR without mentioning any liabilities. He also added that accounts with negative balances must also be included in the sum of total liabilities.

    However, the problem is that these liabilities are NOT on-chain, which means an independent auditor has to step in. At that point, crypto exchanges will have to provide the same proof as all public and regulated companies provide — audited financial statements. (Clonazepam) Coinbase is one of the few exchanges to do this. Since they are a public company subject to U.S. regulations, they have already been proving their reserves using balance sheets audited by the SEC.

    Therefore, the most reliable way to prove an exchange’s assets are more than its liabilities is via third-party auditors. In fact, CZ responded to Powell’s comments that Binance would involve third-party auditors to audit their PoR results.

    Proof-of-Reserves Audits Can be Falsified

    Although the cryptographic proof do not lie, it can be manipulated and framed to look healthy. There is the issue of crypto exchanges moving their funds right after the snapshot for the audit was taken. Recently, Crypto.com mistakenly transferred 280,000 ETH to a Gate.io address after it released its proof-of-reserves audit. Many speculated that exchanges were borrowing assets to show a healthy balance sheet, only to return them after the snapshot.

    Moreover, a PoR audit is only as good as its verifier. There is also the issue of exchanges colluding with third-party audits to produce false results. Unless the exchange is audited by a reputable source such as the Big Four accounting firms, we will just have to take their word for it.

    Proof-of-Reserves Do Not Prevent Customer Fund Misappropriation

    Even then, audits and attestations may not suffice. At its core, crypto exchanges are not the same as banks — crypto is not insured by government depositary schemes. Even if all the steps are done correctly, customers can still lose their crypto if mishandled.

    Merkle tree-based PoR would not prevent the misappropriation of customer funds completely. It only tracks the money, providing information. It does not provide customers with greater control over their funds. If the exchange is caught in the act, you would not be able to get your crypto back as it is likely to be tied up in litigation.

    Not your keys, not your crypto. We strongly suggest keeping your crypto on hardware wallets such as Ledger Nano X, Ledger Nano S Plus, Ledger Nano S, Trezor One or Trezor Model T.

    Why Proof-of-Reserves is Crucial

    At the end of the day, proof-of-reserves is the first step towards a more transparent crypto ecosystem. In effect, it functions as a verification tool to filter out fraudulent crypto exchanges, albeit not completely.

    By leveraging blockchain technology, PoR brings crypto exchanges closer to the treasuries of DeFi protocols, allowing anyone to trace funds on-chain at any time. However, there is much to improve in this aspect. But with on-demand, real-time tracking of exchange reserves, the industry is working towards a decentralized and trustless system, where customers do not need to trust the institution, only the math.

  • Is Solana (SOL) Dead After FTX Bankruptcy?

    Is Solana (SOL) Dead After FTX Bankruptcy?

    Over the past two years, Solana has risen to be one of the largest blockchains by both market cap and usage, rivalling that of Ethereum. This rapid growth was largely driven by Sam Bankman-Fried (SBF), former CEO of recently bankrupt exchange FTX, who was a huge proponent of the project. In light of the FTX contagion, Solana was hit hard, leaving investors to question the state of the ecosystem.

    In case you are out of the loop, we have covered the entire timeline of the FTX contagion in chronological order listed down below:

    How is Solana Affected by the FTX Collapse?

    Solana (SOL) Token Holdings of FTX

    According to an FTX balance sheet shared with investors, the exchange held $982 million in SOL. It is also reported by CoinDesk that the second largest holding of Alameda Research, the sister company of FTX, is SOL. It stands to reason that FTX and Alameda might have dumped their holdings to raise liquidity, though not confirmed.

    Since the beginning of FTX’s downfall, SOL has tanked -59% in price, putting it at -94% below its all-time high. It is also expected that many investors have exited their SOL position out of fear.

    Moreover, FTX and Alameda Research purchased 50.52 million SOL tokens from Solana Foundation and 7.56 million SOL from Solana Labs, representing nearly 11% of the total supply. On the bright side, most of these tokens are vested through a linear monthly unlock mechanism, which means FTX do not have them in custody yet. The last of these unlocks will occur by January 2028.

    Given FTX and Alameda are undergoing bankruptcy, their tokens will be frozen once unlocked, preventing further sell pressure. But it is likely that proceedings will involve liquidating SOL to repay FTX creditors.

    Massive TVL Decline in Solana’s DeFi Ecosystem

    Apart from SOL’s price, Solana’s DeFi ecosystem has also been severely impacted. Since the beginning of FTX’s downfall, more than $700 million have exited Solana’s ecosystem, leaving just a mere $285 million in total value locked (TVL) at the time of writing, according to DeFi Llama.

    A lot of this has to do with Project Serum, an order book based decentralized exchange (DEX) laying at the heart of Solana’s entire DeFi ecosystem, providing liquidity and pricing data to many other major DeFi protocols. Unfortunately, Serum was launched by SBF, and most of its liquidity comes from FTX and Alameda. Moreover, the recent FTX hack revealed that the private key of Serum’s program was compromised, suggesting FTX insiders were in control of them. As a result, Serum developers forked the program to separate from FTX and protect end-users.

    Depegged Wrapped Tokens on Solana

    Another critical issue is that wrapped tokens notably soBTC and soETH are depegged. This is because these wrapped assets are backed by collateral held in FTX, but because their liquidity dried up, no one knows if FTX still has the underlying assets. As a result, these wrapped tokens are no longer redeemable.

    This is very problematic, because almost all DeFi protocols have soBTC and soETH as collateral since it is accepted as the de facto BTC and ETH in Solana. But if underlying assets are completely invalid, then these wrapped tokens have no value, which could worsen the contagion.

    Will Solana Make a Comeback?

    It is important to remember that this collapse is from centralized players and not from decentralized protocols. The technology behind the Solana blockchain is not affected. Though Solana is experiencing big price declines, its community remains resilient and bullish as they continue to build despite market sentiment.

    Better Technology for Solana

    Recently, Coinbase Cloud has been helping with the network upgrade of Solana, implementing (1) Quick UDP Internet Connections (QUIC), (2) Stake-weighted Quality-of-Service (QoS), and (3) local fee markets.

    1. QUIC gives validators more control over incoming traffic. It will help prevent spammed transactions from overwhelming validators like in the April 2022 outage.
    2. Stake-weighted QoS ensures that validators can forwards transactions to slot leaders based on stake-weight, regardless of network conditions. Even if the slot leader is being spammed, other validators should be able to forward transactions to them. This QoS feature has been rolled out with QUIC.
    3. Local fee markets allow users to have their transactions included over others by adding a prioritization fee. This addition unlocks a new dimension in competing for transaction inclusion, whereas in the past, spamming was the only way to compete.

    Moreover, Google Cloud is running a block-producing validator on Solana, introducing Blockchain Node Engine to the blockchain next year. All of these features together will immensely increase the throughput capacity of the network.

    Improved Network Performance and Decentralization

    As a result of recent development, network performance has improved as average time to produce a block has decreased, increasing transactions per second. Moreover, active user number on Solana remains strong despite this year’s market downturn. As of October 2022, there are 11.5 million active accounts and 1.7 million active fee payers.

    Solana’s validator network is becoming more decentralized, ranking third on the Nakamoto Coefficient, a measurement for network decentralization. Furthermore, with FTX and Alameda expected to liquidate their SOL holdings, new buyers will come and help spread out the holding percentages, further increasing decentralization.

    Strong Developer Community

    In 2022, Solana has seen unprecedented developer activity across DeFi, DAOs, NFTs, GameFi, payments and mobile apps. Open source repos and developer activity on Solana surged this month, thanks to growing developer education resources and an easier onboarding experience. Additionally, DAO tooling and adoption has made it possible for large numbers of Solana projects to be managed on-chain.

    Solana also has a thriving NFT ecosystem. Even after the dip, it remains the second largest NFT ecosystem, according to CryptoSlam!. Solana NFTs are onboarding hundreds of thousands of users to the network, with over $3.6 billion in primary and secondary sales.

    According to sec3, a security research firm for Solana projects, thousands of developers are using, deploying, and auditing 1,000+ unique programs on Solana. Between the Phantom wallet, the NFT ecosystem, big partnerships with Instagram, and new use cases like StepN (move-to-earn), Solana continues to bring new users into the web3 space.

    Final Takeaway

    It is important to remember that Solana is NOT FTX. Even though Solana was heavily invested by FTX, its technology and decentralized protocol were never affected. The huge price declines we are currently seeing is most likely due to mass panic sells and forced liquidations of the FTX Group as well other ventures. As long as Solana continues to build, fresh healthy money will come flowing in the ecosystem.

  • FTX Hacked: Hacker Identity Revealed by Kraken

    FTX Hacked: Hacker Identity Revealed by Kraken

    FTX Advises Users to Delete App and Avoid Website

    On the same day FTX, FTX US, and Alameda Research filed for bankruptcy, more than $600 million was reportedly drained from the cryptocurrency exchange. Many FTX users reported that their wallet balance showed $0. Shortly afterwards, FTX officials confirmed on Telegram that a hack was ongoing, warning all users to delete the app and avoid visiting the website due to a possible malware attack.

    Source: FTX_Official (Telegram)

    See also: SBF vs CZ War: What’s Happening with FTX and Binance?

    Tether Blacklists Stolen USDT of the FTX Hack

    A sizeable portion of the stolen funds contained USDT. After FTX’s announcement, Tether immediately blacklisted $31.4 million worth of USDT linked to the transactions. According to ZachXBT, a blockchain investigator widely trusted by the DeFi community, the blacklisted USDT were made up of $3.9 million USDT on Avalanche and $27.5 million USDT on Solana.

    By blacklisting the stolen USDT, hackers will not be able to move them to other accounts or exchange them for other crypto. To compensate victims of the hack, Tether will burn the blacklisted USDT and reissue equal amounts of tokens to the original owner(s).

    FTX Hack Speculated to be an Inside Job

    Suspicions circulated on Twitter that the “hack” was a smokescreen for FTX insiders (possibly Sam Bankman-Fried himself) to run off with the funds. The timing of it all was too much of a coincidence to suggest an external attacker taking advantage of the situation.

    A former senior FTX employee, quoted by Autism Capital, believed that it was impossible for someone outside of FTX to have so much root access so quickly, suggesting an inside job is highly likely. To corroborate this, FTX CTO Gary Wang was seen making major changes to FTX’s GitHub code, which implies that the source of the “hack” began there.

    Dyma Budorin, co-founder and CEO of Hacken, also concurred that it was an inside job, albeit the “hacker” was inexperienced and sloppy.

    Kraken Reveals Hacker Identity to be FTX Insider

    The crypto community kept a close eye on the movement of the stolen funds, and discovered that one of the wallet addresses was linked to a Kraken exchange, where the hacker offloaded funds to a Tron wallet. This was a huge blunder for the hacker as Kraken holds know-your-customer (KYC) information of all registered accounts, allowing them to track down the wallet user.

    As a result, Kraken CSO Nick Percoco announced on Twitter than they know the identity of the hacker, and are assisting law enforcement agencies with the investigation. Percoco later confirmed that the wallet indeed belongs to a verified account registered by FTX. Sam Bankman-Fried and FTX will be making a public statement regarding this issue.

    To follow up on the investigation, Kraken has frozen accounts associated with the FTX Group and Alameda Research. They assured that they maintain full reserves and other Kraken clients are not affected.

  • SBF vs CZ War: What’s Happening with FTX and Binance?

    SBF vs CZ War: What’s Happening with FTX and Binance?

    Binance CEO Changpeng Zhao (CZ) and FTX CEO Sam Bankman-Fried (SBF), two of the most powerful men in the crypto industry, have been going toe to toe with each other on Twitter. But this fight is much bigger than both of them, as FUDs and controversies surrounding SBF and FTX could potentially impact the crypto industry. In this article, we will break down the core timeline of the feud and explain how its outcome could affect every investor in the crypto space.

    For the latest update. Check out our latest video- IT’S OVER: Binance to Acquire FTX

    IT’S OVER: Binance to Acquire FTX

    Alameda Research Reportedly Insolvent

    The current drama surrounding CZ and SBF began when the balance sheet of Alameda Research, the sister quantitative trading firm of FTX, was leaked. According to a private document CoinDesk reviewed, out of $14.6 billion in total assets of Alameda, $3.66 billion is in FTT, FTX’s native token, and $2.16 billion in FTT collateral. Other significant assets also include $3.37 billion of crypto tokens connected to SBF in one form or another including Solana (SOL), Serum (SRM), and more.

    This is a big red flag as it indicates that the majority of Alameda’s net equity is FTX’s own centrally controlled token printed out of thin air, making it completely illiquid. Let’s look at it this way: the current market cap of FTT is $2.3 billion and Alameda’s numbers show an excess of nearly 200% of the total circulating supply of FTT. This means that Alameda’s assets cannot be sold without severely impacting the market.

    Many crypto experts drew parallels from Celsius Network’s collapse as Alameda is following the same model, leading to widespread rumors of Alameda going insolvent.

    CEO of Alameda Research Caroline Ellison asserted on Twitter that the balance sheet only reflects a few of their biggest long positions, and the company actually has over $10 billion in assets that are not included in the balance sheet. However, this does not address the issue that Alameda is holding $5 billion worth of “magic money” reported on their balance sheet.

    Binance Liquidates Its Entire FTT Holdings

    Shortly after the leak, CZ posted a Twitter thread announcing Binance’s full exit from its FTT holdings. But they will do so in a way that minimizes market impact, selling it on the open market at monthly intervals. CZ fired shots at SBF stating that liquidating their FTT is a post-exit risk management, learning from the Terra Luna collapse. This implicated that FTX could potentially repeat history, heading into a death spiral if a bank run were to happen.

    Shortly after, Ellison responded to CZ that Alameda was willing to buy all of Binance’s FTT holdings at $22. Several members of the crypto community believed that the response seemed desperate and was a buyback red flag. CZ eventually declined the bid, and further added that he will not support “people who lobby against other industry players behind their backs.” This is in reference to SBF allegedly supporting the DCCPA draft bill last month that could pose significant threats to DeFi.

    If SBF’s alleged political stance is the match and Alameda’s balance sheet is gasoline, then CZ liquidating its entire FTT holdings is striking the match.

    This series of events sparked a lot of FUD in the crypto community, resulting in staggering outflows as people were rushing to withdraw funds from FTX, with stablecoin outflows from FTX reaching $451 million according to Nansen data. Reports also show a 4-8 hour delay and increased fees in FTX withdrawals, upsetting many FTX users. At the time of writing, FTT token has dropped 39% from its weekly high.

    Sam Bankman-Fried’s Response to Insolvency Rumors

    SBF recently issued a response (update: Tweet deleted) assuring people that FTX and its assets are fine. He explains that FTX has enough capital to cover all client holdings and is processing all withdrawals. In response to the cause of the overall situation, SBF stated that a competitor is targeting them with false rumors, throwing shade at CZ. Ironically, at the end of SBF’s Twitter thread, he calls for collaboration with CZ for the ecosystem.

    Though as calm as SBF is handling the situation, it does not address the issue that Alameda is holding $5 billion worth of FTT tokens printed out of thin air, the very same model that led to the collapse of Celsius. It is impossible to sell an illiquid asset without severely impacting the market. But at the end of the day, FTX is a highly reputable organization with a lot of resources and manpower.

    Larry Cermak, Vice President of Research at The Block, believes that FTX and Alameda has the size to weather through the storm, and that FTX going insolvent is near 0%. He also mentioned however that it is clear there are liquidity issues with FTX currently. Other crypto experts also agreed but also advised investors to treat the situation with caution.

    SBF vs CZ: Who won the war?

    CZ emerges as the clear winner in the war between SBF vs CZ. SBF indirectly admitted defeat on 9th November 2022 when he announced that he agreed to a “strategic transaction with Binance for FTX.com”. This, agreement, however, fell through as detailed in our article- Binance will NOT acquire FTX: What is next?

    The SBF vs CZ war finally ended with CZ coming out victorious on 11th November 2022, when SBF announced he had filed FTX, FTX US, and Alameda for voluntary Chapter 11 bankruptcy in the US.

    Now with FTX exchange out of the picture, CZ’s Binance exchange comes out top. Binance now has the highest 24-hour trading volume and page visits out of all the centralized cryptocurrency exchanges according to CoinGecko.

    Top cryptocurrency exchanges ranking (Source: CoinGecko)
  • Binance Will NOT Acquire FTX: What is Next?

    Binance Will NOT Acquire FTX: What is Next?

    Binance CEO Changpeng Zhao (CZ) decided that Binance will not go through with the deal to acquire FTX, one day after he announced that he intended to acquire FTX. This shocking turn of events could create a ripple effect throughout the crypto market, affecting all investors and businesses. In case you are out of the loop, our previous article “SBF vs CZ War” covers the core timeline of what has been happening that led to this event. You can also check out our latest video — FTX Collapsing: Biggest Disaster in Crypto? for more insight.

    Why Did Binance Back Out of the Acquisition Deal?

    Binance announced on Twitter that they will not go through with the deal to acquire FTX as a result of “corporate due diligence” and “mishandled customer funds” in FTX’s books pending investigations by U.S. regulatory agencies.

    This is in reference to speculations of FTX violating its own terms of service by using customer funds for trading and loaning it out to Alameda Research for a bailout in Q2 2022 following the Terra Luna collapse. To simply put, instead of keeping customer funds on FTX as liquid cash, FTX used customer funds to buy FTT tokens to bail out Alameda. (https://www.algerie360.com/)

    After this revelation, FTX users were rushing to cash out fearing the exchange might be going insolvent. This led to a liquidity crunch, forcing FTX to halt all crypto withdrawals. We are talking about at least $8 billion of user funds stuck on the exchange which possibly cannot be saved, according to Wall Street Journal.

    This is the most likely scenario, ascertained and corroborated by many crypto experts. jonwu.eth on Twitter gives a perfect summary of how everything went down. Funnily enough, FTX CEO Sam Bankman-Fried (SBF) deleted his Tweet which he assured clients that their assets are fully protected. But as of now, these speculations are not officially confirmed. This is where U.S. regulators (SEC, DOJ) are stepping in to investigate FTX for potential securities-law violations, according to Wall Street Journal.

    How This Will Affect All Investors

    Binance acknowledged that the collapse of FTX will severely impact all retail investors, but will continue to build towards a stronger decentralized ecosystem. This is reiterated by CZ in his internal message sent to all Binance teams globally.

    source: @cz_binance (Twitter)

    It is not just user funds that are stuck on FTX, but other crypto projects’ as well. According to CoinDesk, many crypto businesses and ventures have exposure to FTX in one way or another, whether via storing funds, providing liquidity or borrowing and lending. This affects all ecosystems throughout the crypto industry as wild price swings trigger a domino effect of forced liquidations across the market, similar to Three Arrows Capital or Voyager Digital after the Terra Luna collapse.

    It is the first time Bitcoin (BTC) has fallen below $16,000 since November 2020, a 77% decrease from its all-time high last year. Since BTC has broken past its first support level of $19,000, it would take time for its range to be established after capitulation event. As BTC is the first and largest cryptocurrency by market cap, it practically dictates the price actions of all altcoins including Ethereum (ETH). We can expect the market to be highly volatile in the coming weeks.

    source: @CryptoCapo_ (Twitter)
  • Binance to Acquire FTX: What This Means for All Investors

    Binance to Acquire FTX: What This Means for All Investors

    On 8th November 2022, Binance CEO Changpeng Zhao (CZ) announced on Twitter that Binance intends to fully acquire FTX to help cover their liquidity crunch after FTX CEO Sam Bankman-Fried (SBF) reached out to Binance for help. In case you are out of the loop, our previous article “SBF vs CZ War” covers the core timeline of what has been happening that led to this acquisition.

    In this article, we will break down the acquisition events as it unfolds and explain how this will affect every investor in the crypto space. You can also check out our latest video — FTX Collapsing: Biggest Disaster in Crypto? for more insight.

    FTX Halts Withdrawals due to Liquidity Crunch

    According to a report by Reuters, SBF sent an internal message on Tuesday morning to company employees stating that around $6 billion had been withdrawn out of FTX. Given the situation, FTX had no choice but to halt all crypto withdrawals due to lack of liquidity, which confirmed insolvency rumors about FTX.

    Since the liquidity of FTX and Alameda Research are mostly held in illiquid FTT (FTX native token) instead of liquid cash, there was no way for FTX users to cash out their funds. Moreover, no strategic investors and partners of FTX were able to help cover their billions of dollars in debt. As a last resort, SBF turned to none other than CZ who has more than enough resources and manpower to rescue him.

    Binance to Acquire FTX

    Hours after the withdrawal suspension, CZ announced on Twitter that Binance signed a non-binding Letter of Intent (LOI), intending to fully acquire FTX and help cover the liquidity crunch to protect users. For the time being, Binance is conducting a full Demand Draft (DD) in which they are assessing the situation about the acquisition.

    However, keep in mind that the LOI is non-binding, which means Binance has the discretion to pull out from the deal at any time. But if it goes through, FTX will be officially owned by Binance, possibly marking it the biggest moment in crypto history.

    On the withdrawal end, Binance has helped FTX on clearing out withdrawal backlogs. According to a Tweet by SBF, this will clear out liquidity crunches and all assets will be covered 1:1. However, some users are still experiencing withdrawal delays as shown by the comments under the Tweet.

    What will Happen to FTX Users after Binance Acquisition?

    Although this may seem like a big move for Binance, the outcome created a ripple effect that could potentially affect every investor in the crypto space. Good or not, only time will tell.

    Binance May Damage the Long-Term Interests of Crypto

    As we have learned from FTX’s downfall as well as Terra Luna’s collapse, one thing is for certain in the crypto space: nothing is certain. No one saw it coming. The same could be said about Binance as well. (https://www.blazeair.com/) That is not to say that Binance is next, but the possibility is never zero.

    After all, despite Binance being a highly reputable crypto exchange and CZ’s passion and commitment to building a truly decentralized ecosystem, it is a centralized business at the end of the day. With FTX out of the equation, Binance will be the undisputed powerhouse in the crypto industry, which goes against the idea of decentralization, the core pillar of crypto. If Binance falls, the crypto market goes back to the dark ages. Gracey Chen, Managing Director of Bitget, said on Twitter that Binance’s acquisition of FTX harms decentralization and could damage the long-term interests of the industry.

    Nevertheless, CZ assures the public that the business model of Binance is aligned with decentralization and puts user security first. He asserted that Binance has never used BNB as collateral for loans and has never taken on debt. He also added that all crypto exchanges should incorporate merkle-tree proof-of-reserves, since fractional reserves only work for banks and not crypto exchanges. This reflects CZ’s proactiveness in building a more secure and decentralized ecosystem.

    Increased Scrutiny and Regulations on Crypto Exchanges

    Binance’s acquisition of FTX has definitely raised major concerns for government authorities. Several CEOs of other major crypto exchanges such as Jesse Powell (Kraken), Brian Armstrong (Coinbase), Jeremy Allaire (Circle), and Kris Marszalek (Crypto.com) expressed on Twitter that government authorities might step in next to enforce more heavy-handed regulations.

    Although strict regulations could stabilize the market and protect user funds, it also limits digital freedom for retail investors as the whole point of crypto is trustless transactions without central authorities. It is basically a dilemma: too much involvement from the government defeats the purpose of the crypto space, too little breeds unregulated securities and malicious actors.

  • Bullish Chart Patterns Cheat Sheet: Crypto Technical Analysis

    Bullish Chart Patterns Cheat Sheet: Crypto Technical Analysis

    Technical analysis made easy with bullish chart patterns packed into a cheat sheet, so that you can make better trades at Bitcoin or other cryptos!

    Is Technical Analysis Useful?

    Crypto, as a new asset class, is volatile in nature. Its price fluctuates because it is heavily influenced by supply and demand, and it reflects how the public feels about the asset. This is known as market sentiment — bullish when prices are rising, bearish when prices are falling.

    The market is constantly changing. In many cases, it does not matter how you feel about it, it only matters how the market is going to feel about it.

    Market sentiment is a critical indicator to predict price movements and make investment decisions. An easy way to gauge market sentiment is by looking at chart patterns. They tend to repeat themselves, and once you are able to recognize them, it becomes easier to strategize your entries and exits.

    However, it is important to note that they are NOT a guarantee that the market will move in that predicted direction. It should only serve as a frame of reference for you to feel how the market moves.

    Bullish Chart Patterns

    These are some of the most common bullish chart patterns you will see in the market. This cheat sheet will help you identify real-time candlestick patterns whenever you’re on Binance, or other crypto exchanges, so that you can time your entries better.

    Ascending Triangle (Bullish)

    Ascending Triangle (Bullish)

    An ascending triangle is a bullish pattern which signifies the continuation of an uptrend, hence “ascending” triangle. It can be drawn onto the chart by (1) placing a horizontal line along the swing highs, which is the resistance, and then (2) drawing an ascending trend line along the swing lows, which is the support.

    Ascending triangles often have more than two identical peak highs which allow for the resistance line to be horizontal.

    The pattern completes itself when the trend breaks through the resistance, continuing the uptrend. This signifies that the asset has a high buying pressure, and buyers are most likely opting for a long position.

    Falling Wedges (Bullish)

    Falling Wedges (Bullish)

    A falling wedge occurs when the trend line is sandwiched between two downwardly sloping lines, getting narrower as the resistance line gets closer to the support line. In this case, the line of resistance is steeper than the support.

    It may seem like a downward trend but it isn’t. In fact, it is a reversal pattern. A falling wedge is usually indicative that an asset’s price will drop before it rises and breaks through the level of resistance, as shown in the second picture above.

    A falling wedge usually signals the end of the consolidation phase that facilitated a pull back lower. The consolidation phase happens when buyers regroup and attract new buying interest. It can be explained as the “calm before the storm.”

    Double Bottom (Bullish)

    Double Bottom (Bullish)

    A double bottom indicates a period of selling in which the price drops below the level of support. It will then rise to the level of resistance, before dropping again. It resembles a W shape, hence “double bottom.” Jokingly, the W stands for “win”!

    Finally, the trend will reverse and begin an uptrend as the market becomes more bullish. It may seem like a bearish trend, but it is in fact a bullish reversal pattern. This signifies the end of a downtrend and a shift towards an uptrend.

    It is important to note that most traders would jump the gun by entering a position before the pattern is activated. A double bottom is active only once the buyers break the neck line and secure a close above it. This is why it is important to wait for a close above the neck line before entering the market.

    Rounding Bottom (Bullish)

    Rounding Bottom (Bullish)

    A rounding bottom is both a bullish continuation and a reversal. During an uptrend, the price will drop slightly before rising once more. This would be a bullish continuation.

    Afterwards, the bullish reversal occurs when the price is in a downward trend and a rounding bottom forms before the trend reverses and continue upwards.

    Bull Flag and Pennant (Bullish)

    Bull Flag and Pennant (Bullish)

    A bull flag signals that the overall uptrend is likely to continue, followed by a consolidation. It resembles a flag fluttering upwards in the wind.

    Usually, there will be a significant increase during the early stages of the trend, before entering into a series of smaller upward or downward movements. This would be the pennant.

    Pennants can be either bullish or bearish, and they can represent a continuation or a reversal. The picture above is an example of a bullish continuation.

    While a pennant may seem similar to a wedge pattern, as mentioned in the previous section, wedges are much more narrower than pennants. Moreover, wedges differ from pennants because wedges are always ascending or descending, whereas pennants remain horizontal.

    Summary

    These are some of the most common bullish patterns you will see in the market. This cheat sheet will help you better time your entries when the market sentiment is bullish. However, it is important to note that crypto is volatile in general.

    These chart patterns are NOT a guarantee that the market will move in that predicted direction. It should only serve as a frame of reference for you to feel how the market moves.

  • Will Terra Luna Classic (LUNC) Make a Comeback? USTC Repeg?

    Will Terra Luna Classic (LUNC) Make a Comeback? USTC Repeg?

    Everyone loves a good comeback story. With Luna Classic now in the hands of the community, they are doing everything in their power to revive the ecosystem. Several crypto heavyweights such as Binance have also joined their cause. The question is, “will Luna Classic succeed long-term?” In this article, we will take a look at the recovery plan proposed by the Classic community and share some insights on the future direction of Luna Classic.

    History of Terra Luna

    The collapse of the Terra ecosystem in May 2022 was one of the most devastating black swan events in crypto history, wiping at least $60 billion off the market which triggered a dangerous domino effect across the industry such as the fall of Three Arrows Capital and Voyager Digital.

    Terraform Labs (TFL) developers shortly abandoned the Classic chain in support of Luna 2.0, the new Terra blockchain. This led to an overhaul of the community demographic, leaving only the validators and true believers of Luna Classic behind, not to mention millions of investors who are still holding onto LUNC or USTC with no exit opportunity.

    Luna Classic’s Chance at Redemption

    Despite its unfortunate history, there might be a glimmer of hope for Luna Classic. The technology and blockchain infrastructure are still there, and developers can still build on it. In fact, there are numerous DApps that have expressed an interest to return and build on Luna Classic. However, the ecosystem faces the opposite problem of most layer-one protocols. Instead of incentivizing user adoption with tokens, Luna Classic has hundreds of thousands of active users but no additional token incentives.

    This means that Luna Classic’s native tokens do not offer much utilities for developers to build off of, due to trillions of LUNC tokens in circulation and the USTC depeg. Therefore, in order to attract developers and builders to the Classic chain, the token situation must be addressed, and that is exactly what the community is doing right now.

    Luna Classic – Community-Driven Blockchain

    Community volunteers have self-organized into multiple groups to help build and restore the Luna Classic blockchain. Terra Rebels is one of the larger communities with seasoned developers and business professionals that is leading the recovery plan. None of the groups have any affiliation with TFL nor work under any central organization or established entities at this time. Essentially, the communities are filling the developer void impartially and in accordance with community proposals that pass the voting process. All codes are open to audits and feedbacks, and all community members have a say in vetting and implementing the code base.

    On August 26th 2022, after two months of disabled proof-of-stake validation in response to the collapse, governance was restored as citizens of Luna Classic could delegate, stake, and vote for the future of the ecosystem. As of now, proposals and the associated implementations are being passed by the Terra Classic Decentralized Autonomous Organization (DAO). When adopted, a new wave of delegators and validators from the community would stake on Luna Classic, built by community developers. This would be the beginning of a truly community-driven blockchain, but the path to that is still long and arduous.

    Recovery Plan of Luna Classic

    Deflationary Token Mechanism (Tax and Burn)

    On September 15th 2022, Terra Classic governance proposal 4661 passed with a 99.88% “yes” vote to enable a 1.2% tax and burn on all on-chain transactions. With more than 6 trillion LUNC in circulation, the main goal is to reduce the hyperinflated total supply until it reaches 10 billion LUNC. After that, the mechanism will be disabled via smart contract, and the total supply will not be changed. Based on the law of supply and demand, this creates scarcity which inherently increases the value of LUNC tokens. However, it takes more than just burning for LUNC to maintain a relatively stable price. There has to have a mechanism for LUNC to capture some of the value brought to the blockchain, otherwise it would be another exit race for all investors.

    The main concern for the tax and burn is that it would likely reduce on-chain activities, as core users and projects are affected. Terra Rebels addressed this in their white paper, stating that the community can structure the implementation to be flexible as time progresses. The tax rate can be changed via parameter proposal at any time and adjusted after every epoch. Nevertheless, the community has voiced with unity that they are willing to play their part.

    The bigger play here however is to reach out to major centralized exchanges (CEX) and implement the same tax and burn for all LUNC trades on their platform, since it only applies to on-chain transactions. As a result, several major CEXes such as Binance, KuCoin, Kraken, Huobi, MEXC Global, and more have joined the cause. Moreover, a petition has been filed on change.org to relist LUNC on Coinbase. It is important to note that the Terra ecosystem is still under strict government regulations as a result of the collapse. But if it succeeds, the help from the U.S. market would greatly accelerate the burning process.

    This goes to show the power of a unified and driven decentralized community, and perhaps the potential crypto heavyweights see in a Luna Classic comeback.

    USTC Repeg Proposal

    In October 2022, two factions of the Terra community proposed their own approach to repeg USTC. As both plans are new, there are no specific timings outlined. It is up to the community to debate these proposals and decide which approach is better.

    Proposal #1Algorithmic Fungible Token Debt Restructuring

    The first one jointly published by Alex Forshaw, Edward Kim and Maximilian Bryan presents the idea of minting 500 million LUNC to purchase Bitcoin as collateral for a new algorithmic fungible token (AFT) called USTN. The whole point of it is for current USTC holders to receive compensation meaningful relative to the current USD value of their holdings, making them as whole as possible under current legal constraints. It is akin to a debt-for-equity swap in traditional finance.

    However, this proposal was met with a lot of criticisms from the community, since minting more LUNC defeats the purpose of the tax and burn initiative. Although it would create a short-term growth cycle, it would most likely be unsustainable medium to long-term, due to the oversupply of LUNC.

    Shortly afterwards, Forshaw announced that the updated plan will not involve minting LUNC. Instead, USTN’s Bitcoin collateral will be managed by a tranche-based decentralized reserve system as outlined in section 5 of their original white paper. However, most of the community still do not like the idea of creating a new token. Why not just create mechanisms around USTC, bringing value to the ecosystem, instead of phasing it out? This is where the second proposal comes in.

    Proposal #2Quantitative Tightening to Incentivize New Businesses

    In response to Forshaw’s proposal, core developer Tobias Andersen (aka Zaradar) developed a different solution that focuses on improving USTC, instead of substituting it. Andersen believes that a USTC repeg could be accomplished by incentivizing new businesses to use Luna Classic’s existing blockchain infrastructure. The plan to achieve this however is a more “painful” journey as quoted by the author, but is more organic and sustainable in the long run.

    The plan adapts a form of quantitative tightening (QT), a traditional finance technique used by central banks to decrease liquidity in the economy. For Luna Classic, it would involve installing burn taxes and increasing interest rates on staking rewards. Rewards would be lowered and lock-up periods increased. The whole point is to significantly reduce the circulating supply of both USTC and LUNC, making the value networks sustainable long-term.

    As for incentivizing new businesses on the blockchain, the features include partitioned pools, where DApps can create their own commodity token which is captalized via LUNC and traded via USTC. Based on each pool, this brings another utility to USTC as a “value transfer”, with investors using the stablecoin to swap between pools. To help keep partitioned pools stable, a swap tax is applied when commodity tokens exit the partitioned pools into USTC. This process would be measured and regulated by the ABS keeper, which is a range of volatility guards and tax policies governed by the DAO.

    However, some things are unclear in the proposal. Andersen did not explain exactly how a successful implementation of these would help USTC regain its peg, and more importantly maintain the peg. He only explained a way to appreciate the price of USTC with increased network activity on the blockchain. Unless there is a way to successfully prevent another death spiral, we would see $10 billion worth of USTC debt tear down any bull run with an avalanche of speculative mercenary capital.

    Rebuilding the Project Ecosystem

    In order to restore DApp and project support on the Luna Classic, Terra Rebels will restore inter-block communication (IBC) between Osmosis and Terra, re-enabling and unlocking the transfer of token and data between chains. Currently, more than 150 million USTC is stuck in Osmosis alone. Opening up the channel will allow users to transfer funds from Osmosis’ LUNC and USTC liquidity pools for use in other DApps.

    Moreover, on June 24th 2022, Terra Rebels launched “Rogue-1” TestNet to test governance parameter proposals and ensure the tax burn code is working. It also has the necessary upgrades in Cosmos smart contracts and IBC to communicate with the rest of the Cosmos ecosystem. Based upon the Luna v2 core, other projects built on Luna v2 will not require additional development as it is compatible with both blockchains. The core implementation is expected to be completed in 2023.

    Verdict on Luna Classic Comeback

    For Luna Classic, there is a sense of justice that is unprecedented in the history of crypto. People around the world have literally lost their life savings because of the collapse. Similar to how volunteers help rebuild communities who were hit by natural disasters, we are seeing the crypto community and even crypto powerhouses step in to help revive a project with a failed reputation and fix a problem they did not create.

    There is a reason why LUNC is still performing relatively well, ranking top 35 in market cap at the time of writing. Whereas LUNA is barely in the top 100, since it is more associated with Do Kwon and the TFL. This goes to show that the Classic chain is entirely governed and driven by the community, which is the essence of decentralization in the first place.

    Despite the communities’ effort, there is no way to be sure that the comeback of Luna Classic is written in the stars. As of now, the proposed plans of the community solely focus on reducing the hyperinflated token supply and attracting new businesses to the blockchain. And even if Luna Classic does make a comeback, we cannot know for certain that their token price and network activity will remain stable long-term. But it is reasonable (or optimistic) to assume that the plans being debated and deployed now are just the first step to recovery.

  • Why Do Cross-Chain Bridges Keep Getting Hacked?

    Why Do Cross-Chain Bridges Keep Getting Hacked?

    Out of all blockchain attacks, cross-chain bridges are one of the most targetted ones. Just last week, Binance lost $570 million as a result of an exploit on Binance Smart Chain’s Token Hub Bridge. Even Binance, one of the world’s secure and reputable cryptocurrency platforms, fell victim to a cross-chain bridge hack. This brings us to an important question: why do cross-chain bridges keep getting hacked, and why do people still use them despite its security risk?

    Why Do People Use Cross-Chain Bridges?

    One of the biggest limitations of blockchains has been their inability to work together. Each blockchain has its own protocols or smart contracts that are not compatible with other blockchains on a programmable level. As a result, you cannot spend Bitcoin in the Ethereum network, for example. This is where cross-chain bridges come in to provide interoperability.

    A cross-chain bridge connects two blockchains, enabling users to transfer data and liquidity from one chain to the other. It also allows users to access new protocols on other chains, making it so that developers from different blockchain communities can collaborate together. Moreover, with Lego-like composability of decentralized finance (DeFi) applications, cross-chain bridges can potentially open up a whole new world of efficient and creative financial services and products for users.

    Without cross-chain bridges, the crypto industry would be bottlenecked by network congestions, since there is no bridge to off-load data and transaction executions.

    Why are Cross-Chain Bridges Vulnerable?

    When you bridge an asset to another blockchain, it is not exactly “sent.” Instead, through smart contract execution, the assets are first deposited, locked, or burned on one blockchain. Afterwards, they are then credited, unlocked, or minted on the other blockchain in the form of a wrapped token.

    However, this asset conversion is not guaranteed. This is because cross-chain bridges are independent entities that do not belong to any blockchain. This means that no blockchain can verify that any asset is bridged, since they cannot access off-chain information. The bridging process mainly relies on two parties to ensure successful transfer:

    • Third-party oracles who interpret off-chain data for on-chain use.
    • Validators or custodians (DAO or smart contract) who safekeep the original asset and release the wrapped asset.

    As you can see, there are several layers of trust, not just during the token swap but throughout the entire bridging process. Users must additionally continue to trust that they will be able to bridge the wrapped token back in the future on a 1:1 basis. Herein lies the vulnerability of cross-chain bridges: with multiple processes and third-party involvements, there is a brief window of time where hackers can target any one of these actions in isolation, not to mention possible bugs or flaws in the smart contract coding in which hackers can exploit.

    How are Cross-Chain Bridges Hacked?

    A successful cross-chain bridge hack typically ends up with tokens being minted on one blockchain without a corresponding deposit on the other. There are three types of exploits to achieve this:

    Fake Deposits

    During the bridging process, each deposit has to be validated before allowing a transfer to go through. If a hacker can create a fake deposit that validates as a real one, they can trick the system into minting free tokens without putting in any money.

    This mostly happens due to a flaw in the logic of the smart contract coding, where both tokens share the same proof of event. This would allow the attacker to call the function to deposit one token with fake data that can generate proof to withdraw the other token on the other blockchain.

    This is what happened to Binance when the attacker managed to forge proof messages of non-existent tokens that were then accepted by the BSC Token Hub bridge.

    Signature Verification Bypass

    A digital signature is a process to verify transactions, using the private key to sign the transaction and its corresponding public key to authorize the sender. However, if the smart contract uses an outdated function, it may not be able to verify the correctness of certain instructions. As a result, an attacker could create an input account with malicious data to spoof previously valid digital signatures. This would allow them to bypass the verification step and generate proof messages to mint free tokens.

    The Wormhole hack is an example of this attack, where the hacker bypassed the verification step by injecting a spoofed SYSVAR account, enabling them to freely mint 120,000 wETH (worth $326 million at the time).

    Validator Majority Attack

    Some cross-chain bridges have validators that vote whether or not to approve certain transfers. Similar to a 51% attack, if an attacker controls a majority of the validators, they can approve any transaction, allowing them to withdraw free money. An infamous case of this is the Ronin Network hack, where the attacker took control five of the nine validator nodes and stole $620 million.