Key Takeaways
Last month an unlucky Oasis user unwittingly sent approximately 63 ETH to the wrong address.
The user assumed the funds were lost forever, but fortunately their plight caught the attention of the MakerDAO team.
In a remarkable turn of events, the engineering team was able to recover the funds for the owner.
After more than three weeks of thinking they had lost 63 ETH forever, an Oasis user was notified that their funds had been returned. The MakerDAO Protocol engineering team was able to return what the user described as “literally everything I had in the world besides my car.”
MakerDAO Makes Things Right
In a mix of engineering ingenuity and genuine concern, the MakerDao Protocol’s engineering team found a way to recover roughly $240,000 worth of lost ETH for its owner.
In a Reddit post from 23 days ago, a user detailed the harrowing experience of sending roughly 63 ETH to the wrong address. In a video uploaded to YouTube after losing the ETH, the user details exactly what they did as a warning to others. According to the user, they simply connected their Metamask wallet to Oasis, switched the network from Ethereum Mainnet to Arbitrum, and deposited the ETH into the DAI token bridge on Arbitrum.
The problem was that the token bridge was only available for DAI—not ETH. Even though ETH might sometimes be used to interact with the Maker Protocol, that was not the case here.
In the same Reddit post, the user ended with:
“This was literally everything I had in the world besides my car. I’m not posting for sympathy, I just want everyone to know so it doesn’t happen to them… I know I’m the one who made the transaction. I take responsibility for that.”
Yet sympathy they got. Sam MacPherson, of the protocol engineering team at MakerDAO, detailed what happened next in a tweet. Since Ethereum addresses are “deterministically generated,” any smart contact address on Layer 2 that has “previously been deployed by a Layer 1 EOA” can be replicated.
An EOA is an Externally Owned Account, which is a normal Ethereum address with private keys, rather than simply a contract account (such as might be used in DeFi contracts). The Layer 2 address the funds corresponded with corresponded to a known Proxy contract on Layer 1, and so the engineering team was able to insert arbitrary smart contract code into the receiving Layer 2 address.
The engineers then used the Layer 1 ProxyRegistry deployment to find the nonce, as the smart contracts need to share the same deploying address and the same nonce in order to deploy on the EOA. They then initiated arbitrary (“self-sends with no call data or value attached”) smart contracts to Arbitrum from the EOA (the user’s ETH wallet) until they got to the desired nonce, which allowed them to deploy the contract they wanted.
As MacPherson concludes: “Once we have the Proxy deployed at the target address we can issue a command to send the ETH back to the original user and voila we recovered the ETH!”
In other words, the engineering team effectively found a way to reverse a blockchain transaction.
Upon receiving the returned ETH, the user updated on Reddit:
“I honestly cannot believe this. As soon as I realized what had happened, I was positive it was gone forever… These guys had no obligation to me whatsoever and yet they still took the time to figure out how to do something that many people, including myself, thought would be impossible.”
It may turn out that “impossible” is only a word, after all.
(Disclaimer: At the time of writing, the author of this piece held BTC, ETH, and several other cryptocurrencies.)
The information on or accessed through this website is obtained from independent sources we believe to be accurate and reliable, but Decentral Media, Inc. makes no representation or warranty as to the timeliness, completeness, or accuracy of any information on or accessed through this website. Decentral Media, Inc. is not an investment advisor. We do not give personalized investment advice or other financial advice. The information on this website is subject to change without notice. Some or all of the information on this website may become outdated, or it may be or become incomplete or inaccurate. We may, but are not obligated to, update any outdated, incomplete, or inaccurate information.
You should never make an investment decision on an ICO, IEO, or other investment based on the information on this website, and you should never interpret or otherwise rely on any of the information on this website as investment advice. We strongly recommend that you consult a licensed investment advisor or other qualified financial professional if you are seeking investment advice on an ICO, IEO, or other investment. We do not accept compensation in any form for analyzing or reporting on any ICO, IEO, cryptocurrency, currency, tokenized sales, securities, or commodities.
See full terms and conditions.
$12.4M Lost as DeFi Platform pNetwork Suffers Exploit
News
Sep. 20, 2021
pNetwork is the latest cross-chain DeFi project to suffer a multi-million dollar hack. pNetwork Suffers Hack pNetwork, a cross-chain asset transfer protocol, has suffered an exploit. The DeFi project announced…
What is Rarible: A DAO for NFTs
What was once dismissed as a silly and expensive sector, NFTs give creators access to global markets in a way that’s never been possible before, and it’s all thanks to blockchain.Those familiar…
$5M in Ethereum Lost in THORChain Exploit
THORChain is the latest DeFi attack victim. THORChain Pauses Network After Attack THORChain has been exploited. The DeFi network, which focuses on cross-chain interoperability between protocols like Bitcoin and Ethereum,…
$7 Million Lost in Flash Loan Attack on BSC’s BurgerSwap
Another Binance Smart Chain app has suffered a flash loan attack. More than $7 million of users’ funds was drained from BurgerSwap last night. BurgerSwap Suffers Attack Flash loan attackers…
