CryptoMediaClub
Monday, July 7, 2025
  • All news
  • Bitcoin
  • Ethereum
  • Altcoins
  • NFT
  • Blockchain
  • Analysis
No Result
View All Result
  • All news
  • Bitcoin
  • Ethereum
  • Altcoins
  • NFT
  • Blockchain
  • Analysis
No Result
View All Result
CryptoMediaClub
No Result
View All Result
Home Blockchain

CertiK to launch compensation plan for $2M Merlin DEX exploit

26.04.2023
A A
0
124
VIEWS
ShareShare

Blockchain security firm CertiK is launching a compensation plan to cover the $2 million lost during a public sale of decentralized exchange Merlin’s MAGE token.

In a statement to Cointelegraph on April 26, CertiK reiterated it is investigating the exit scam and has also enlisted the remaining Merlin team to initiate the compensation plan. It said:

“Initial investigations indicate that the rogue developers are based in Europe, and CertiK will collaborate with law enforcement authorities to track them down if direct negotiation is unsuccessful.”

The blockchain security company is urging the rogue developer to return 80% of the stolen funds, conceding 20% as a white hat bounty.

The firm also pointed out that private key privileges are “committed to assisting impacted users” despite them being outside the scope of a smart contract audit.

Merlin lost about $850,000 worth of USD Coin (USDC) and some more relatively illiquid tokens on April 26 during its three-day MAGE token public sale without any hard cap. Blockchain data suggests that an exploiter with control over the liquidity pool was able to easily siphon the funds.

We did some research on Merlin smart contracts and we identified the malicious code responsible for the draining of funds.
These two lines of code in the initialize function are essentially granting approval for the feeTo address to transfer an unlimited (type(uint256).max)… pic.twitter.com/mIksh4HkhB

— eZKalibur ∎ (@zkaliburDEX) April 26, 2023

CertiK, which audited Merlin’s code, responded with its initial findings pointing to a “potential private key management issue.”

We’re actively investigating the @TheMerlinDEX incident. Initial findings point to a potential private key management issue rather than an exploit as the root-cause.
While audits cannot prevent private key issues, we always highlight best practices to projects.
Should any foul…

— CertiK (@CertiK) April 26, 2023

Crypto Twitter questioned the CertiK audit, implying that there might be a rug pull.

Verichains founder Thanh Nguyen alluded to a “backdoor” present in Merlin’s code, saying it is a “clear security risk as there is no use case that requires its approval.”

3/4 However, in the Merlin code, there is a "backdoor" code (L87-88) that allows the feeTo of MerlinFactory to transfer all assets in the pair, in addition to the fee in the swap function. This backdoor is a clear security risk as there is no use case that requires its approval. pic.twitter.com/HAnwZT27ZS

— Thanh Nguyen (@redragonvn) April 26, 2023

“While audits can identify potential risks and vulnerabilities, they cannot prevent malicious activities on the part of rogue developers such as rug pulls,” CertiK said in a statement to Cointelegraph. “We encourage users to look for projects with a ‘KYC Badge’ as an added layer of security, signifying that the project has voluntarily gone through a KYC vetting process.”

Related: Ordinals Finance has conducted a $1M rug pull: CertiK

The firm explained that doing so can help reduce and mitigate the risk of insider threats such as rug pulls.

CertiK said it would continue providing updates on its compensation plan and ongoing investigation.

This article was updated to reflect that only CertiK had proposed a compensation plan for the Merlin DEX exploit.

Share10Tweet6ShareSharePin2

Related Posts

Tether USDT: Massive 1 Billion Minting Sparks Crucial Market Shift
Blockchain

Tether USDT: Massive 1 Billion Minting Sparks Crucial Market Shift

04.07.2025
0

Skip to content

Read moreDetails
Hancom With Pioneers RWA Space with Gold-Backed Stablecoin

Hancom With Pioneers RWA Space with Gold-Backed Stablecoin

03.07.2025
Stablecoin Revenue Soars: Companies Post Massive $10 Billion Annual Earnings

Stablecoin Revenue Soars: Companies Post Massive $10 Billion Annual Earnings

03.07.2025
Kazakhstan Crypto Reserve: Unlocking a Bold Future for National Digital Assets

Kazakhstan Crypto Reserve: Unlocking a Bold Future for National Digital Assets

30.06.2025
Web3 Security: GoPlus Unveils Crucial Clarification on Venus Protocol $2M Theft

Web3 Security: GoPlus Unveils Crucial Clarification on Venus Protocol $2M Theft

25.06.2025
Load More
Next Post
Binance.​US enables free Web3 domain creation for American users

Binance.​US enables free Web3 domain creation for American users

0 0 votes
Рейтинг статьи
Subscribe
Notify of
guest
guest
0 комментариев
Oldest
Newest Most Voted
Inline Feedbacks
View all comments

Recommended

Tether Explores Lending Opportunities in the Commodities Trading Sector

Tether Explores Lending Opportunities in the Commodities Trading Sector

9 months ago
Solana Price Prediction as SOL Becomes 5th Largest Coin in the World – Can SOL Overtake Ethereum?

Solana Price Prediction as SOL Becomes 5th Largest Coin in the World – Can SOL Overtake Ethereum?

1 year ago
BlockSec Releases Phalcon Fork Toolkit for Collaborative Testing on Private Chains

BlockSec Releases Phalcon Fork Toolkit for Collaborative Testing on Private Chains

2 years ago
Bitcoin at “Make or Break Moment” as $46K Support Comes Under Scrutiny: ARK

Bitcoin at “Make or Break Moment” as $46K Support Comes Under Scrutiny: ARK

10 months ago

Categories

  • All news
  • Altcoins
  • Analysis
  • Bitcoin
  • Blockchain
  • Ethereum
  • NFT
No Result
View All Result

Highlights

Russian Ministry Starts Compiling National Registry of Crypto Mining Rigs

Brazil’s Central Bank Hack Sparks $40M Crypto Laundering in BTC, ETH

Drake Compares Love Life to Bitcoin Price Swings in New Lyrics

Ethereum Price Prediction: ETH Holds Narrow Range as ETF Demand Builds – Is a Breakout Near?

Mercado Bitcoin to Tokenize $200M in RWAs on XRP Ledger, Ripple Reveals

XRP Price Prediction: Is Consolidation Over? Crypto Michael’s Chart Hints at Explosive Move

Trending

UK’s Smarter Web Company Acquires $24M Worth of Bitcoin, Holdings Reach 1,000 BTC
All news

UK’s Smarter Web Company Acquires $24M Worth of Bitcoin, Holdings Reach 1,000 BTC

07.07.2025
0

The Smarter Web Company, a London-listed technology firm, has announced the acquisition of an additional 226.42 Bitcoin...

US Secret Service Builds $400M Crypto War Chest From Seized Scams Over 10 Years

US Secret Service Builds $400M Crypto War Chest From Seized Scams Over 10 Years

07.07.2025
[LIVE] Crypto News Today: Latest Updates for July 7, 2025 – “Fiat Is Hopeless”: Elon Musk Says ‘America Party’ Will Embrace Bitcoin

[LIVE] Crypto News Today: Latest Updates for July 7, 2025 – “Fiat Is Hopeless”: Elon Musk Says ‘America Party’ Will Embrace Bitcoin

07.07.2025
Russian Ministry Starts Compiling National Registry of Crypto Mining Rigs

Russian Ministry Starts Compiling National Registry of Crypto Mining Rigs

07.07.2025
Brazil’s Central Bank Hack Sparks $40M Crypto Laundering in BTC, ETH

Brazil’s Central Bank Hack Sparks $40M Crypto Laundering in BTC, ETH

07.07.2025
  • All news
  • Altcoins
  • Bitcoin
  • Blockchain
  • Ethereum
  • NFT
  • Analysis
Editor: cryptomediaclub.com@gmail.com
Advertising: digestmediaholding@gmail.com

Disclaimer: Information found on CryptoMediaClub is those of writers quoted. It does not represent the opinions of CryptoMediaClub on whether to sell, buy or hold any investments. You are advised to conduct your own research before making any investment decisions. Use provided information at your own risk.
CryptoMediaClub covers fintech, blockchain and Bitcoin bringing you the latest crypto news and analyses on the future of money.

© 2023 Crypto News. All Rights Reserved

No Result
View All Result
  • All news
  • Bitcoin
  • Ethereum
  • Altcoins
  • NFT
  • Blockchain
  • Analysis

Disclaimer: Information found on CryptoMediaClub is those of writers quoted. It does not represent the opinions of CryptoMediaClub on whether to sell, buy or hold any investments. You are advised to conduct your own research before making any investment decisions. Use provided information at your own risk.
CryptoMediaClub covers fintech, blockchain and Bitcoin bringing you the latest crypto news and analyses on the future of money.

© 2023 Crypto News. All Rights Reserved

wpDiscuz