Merlin, an Ethereum-based decentralized exchange (DEX) utilizing zkSync layer-2 protocol, suffered an exploit in which roughly $1.8 million in funds were lost.
This occurred despite having received an audit from smart-contract auditor CertiK. Since the disclosure, the Merlin team has advised users to revoke wallet permissions connected to its site and has announced that it is currently analyzing possible methodologies for the exploit.
Developer announcement 📢 Can everyone revoke connected site access on your wallets/sign permission https://t.co/YRxH7IUU4TWe are analysing the exploit of our protocol and would stress that everyone carries out this step as a precaution.More updates will be provided
— Merlin (@TheMerlinDEX) April 26, 2023
CertiK, the firm which issued the audit, claimed in its preliminary investigation that the incident may have originated from a private key management issue, rather than an exploit. The firm highlighted the „centralization risk” in its audit while als
We współpracy z: https://cryptodaily.co.uk/2023/04/certik-audited-dex-merlin-exploited-for-1-point-8m
