{"requested":"opengov:37","threadKey":"opengov:37","generation":"6690c444c3e1fdf2","total":6,"rows":[{"commentId":"s67cafa9ebae1e37097aee759","parentId":null,"replyToId":null,"author":{"account":{"accountId":"0x14367fce4aed48f2417aa18bb14ff2638ede82f93a313070364788e611bfef45","address":"1TW9Ygr9c2gQ76EZB9qyM2infUxn7Pt8CJBNQZiZ18UXSRk","emoji":"🦇","tag":null,"identity":{"display":"xupanweb3","verified":true,"email":"","web":"","twitter":"@xupanweb3"},"profile":null},"legacyName":null},"body":"big YES.  \nwhitehat is our friends,  Perhaps we need to launch white hat challenges from time to time","bodyFormat":"markdown","hidden":false,"hiddenReason":null,"deleted":false,"createdAt":"2025-03-07T13:54:38.863Z","editedAt":null,"revision":0,"upvotes":4,"source":{"name":"subsquare","id":"67cafa9ebae1e37097aee759","cid":null,"height":1},"position":{"side":"Aye","conviction":"Locked5x","balance":"8000000000000000000","weighted":"40000000000000000000"},"media":{},"replies":[]},{"commentId":"s67cafd91bae1e37097aee75b","parentId":null,"replyToId":null,"author":{"account":{"accountId":"0xd67d4219e96c3cf32a654c1fc9170e39c10f199bb450bfa9f7135455583d183b","address":"15rETVdaQP2rmVwKpoD3fYonjPQrW7tARC2evWhbLajV35Ts","emoji":"🦓","tag":null,"identity":null,"profile":null},"legacyName":null},"body":"Thank you for notifying mr/mrs 🎩\nOf course this behaviour helps and needs to be incentivized.","bodyFormat":"markdown","hidden":false,"hiddenReason":null,"deleted":false,"createdAt":"2025-03-07T14:07:13.543Z","editedAt":null,"revision":0,"upvotes":0,"source":{"name":"subsquare","id":"67cafd91bae1e37097aee75b","cid":null,"height":2},"position":{"side":"Aye","conviction":"Locked6x","balance":"85000000000000000","weighted":"510000000000000000"},"media":{},"replies":[]},{"commentId":"s67caff5abae1e37097aee75d","parentId":null,"replyToId":null,"author":{"account":{"accountId":"0x327ec31690c7c592136d8de3995e8fc81ceeb558cc36b632cc9d1efbac3ae80f","address":"129D3vfBWY5XhjZZV2Q36CoW5DrzPWAxrQAhDfhANukZtqru","emoji":"🐒","tag":null,"identity":null,"profile":null},"legacyName":null},"body":"big AYE, i honor the whitehat","bodyFormat":"markdown","hidden":false,"hiddenReason":null,"deleted":false,"createdAt":"2025-03-07T14:14:50.800Z","editedAt":null,"revision":0,"upvotes":2,"source":{"name":"subsquare","id":"67caff5abae1e37097aee75d","cid":null,"height":3},"position":{"side":"Aye","conviction":"Locked2x","balance":"1766000000000000000","weighted":"3532000000000000000"},"media":{},"replies":[]},{"commentId":"s67cb7b13bae1e37097aee761","parentId":null,"replyToId":null,"author":{"account":{"accountId":"0x45544800f3a7825fddf5fe36fee2304852b3593d5f3d87d20000000000000000","address":"0xf3a7825fddf5fe36fee2304852b3593d5f3d87d2","emoji":"🐲","tag":null,"identity":null,"profile":null},"legacyName":null},"body":"Good day to the entire progressive community! To be honest, I am starting to explore new areas of activity here (please, do not judge too harshly). I have, of course, read the entire post above, and for my understanding, this is all very complex information! I am deeply convinced that intelligent people should be rewarded financially! For which I will also vote YES. And if I understood correctly, a potential attacker would need $50,000,000 to hack the system!? And I did not quite understand: Has this error already been fixed or just discovered?","bodyFormat":"markdown","hidden":false,"hiddenReason":null,"deleted":false,"createdAt":"2025-03-07T23:02:43.963Z","editedAt":null,"revision":0,"upvotes":0,"source":{"name":"subsquare","id":"67cb7b13bae1e37097aee761","cid":null,"height":4},"position":{"side":"Aye","conviction":"Locked2x","balance":"4000000000000000","weighted":"8000000000000000"},"media":{},"replies":[{"commentId":"s67ccbf6cbae1e37097aee765","parentId":"s67cb7b13bae1e37097aee761","replyToId":"s67cb7b13bae1e37097aee761","author":{"account":{"accountId":"0xee92a79760d0480aab1a940b0abab817dfcde83655e4d2c71682ce272b26ef0a","address":"16PoxoUdcLsEvsWQNVLUM2zyozKYa87Ebv1u7YcmYpTV9eFk","emoji":"🐅","tag":null,"identity":{"display":"Jose Crypto","verified":true,"email":"jose.cryptodot@gmail.com","web":"","twitter":"@J0seRafael12"},"profile":null},"legacyName":null},"body":"[@0xf3a7...87D2](/account/7KATdGbUxgJ9ZpuoNrMS8qcsHLFemdZXQzQiCcxijzi53rsG) Yes, measures were taken to prevent the attack\n\nfrom https://jakpan.hashnode.dev/hydration-oracle-manipulation-post-mortem\n\nsays \"This is also where we implemented additional limit to prevent the attack completely.\"","bodyFormat":"markdown","hidden":false,"hiddenReason":null,"deleted":false,"createdAt":"2025-03-08T22:06:36.403Z","editedAt":null,"revision":0,"upvotes":0,"source":{"name":"subsquare","id":"67ccbf6cbae1e37097aee765","cid":null,"height":6},"position":{"side":"Aye","conviction":"Locked1x","balance":"1000000000000000000","weighted":"1000000000000000000"},"media":{},"replies":[]}]},{"commentId":"s67cb7c5cbae1e37097aee762","parentId":null,"replyToId":null,"author":{"account":{"accountId":"0x45544800f3a7825fddf5fe36fee2304852b3593d5f3d87d20000000000000000","address":"0xf3a7825fddf5fe36fee2304852b3593d5f3d87d2","emoji":"🐲","tag":null,"identity":null,"profile":null},"legacyName":null},"body":"Yes, I also forgot to ask where these funds for payment will come from?","bodyFormat":"markdown","hidden":false,"hiddenReason":null,"deleted":false,"createdAt":"2025-03-07T23:08:12.941Z","editedAt":null,"revision":0,"upvotes":0,"source":{"name":"subsquare","id":"67cb7c5cbae1e37097aee762","cid":null,"height":5},"position":{"side":"Aye","conviction":"Locked2x","balance":"4000000000000000","weighted":"8000000000000000"},"media":{},"replies":[{"commentId":"s67ccbfb8bae1e37097aee766","parentId":"s67cb7c5cbae1e37097aee762","replyToId":"s67cb7c5cbae1e37097aee762","author":{"account":{"accountId":"0xee92a79760d0480aab1a940b0abab817dfcde83655e4d2c71682ce272b26ef0a","address":"16PoxoUdcLsEvsWQNVLUM2zyozKYa87Ebv1u7YcmYpTV9eFk","emoji":"🐅","tag":null,"identity":{"display":"Jose Crypto","verified":true,"email":"jose.cryptodot@gmail.com","web":"","twitter":"@J0seRafael12"},"profile":null},"legacyName":null},"body":"[@0xf3a7...87D2](/account/7KATdGbUxgJ9ZpuoNrMS8qcsHLFemdZXQzQiCcxijzi53rsG) the funds come from treasury, \n\nhttps://app.hydration.net/wallet/assets?account=13UVJyLnbVp9RBZYFwFGyDvVd1y27Tt8tkntv6Q7JVPhFsTB\n\nHere can check all the assets that the treasury have","bodyFormat":"markdown","hidden":false,"hiddenReason":null,"deleted":false,"createdAt":"2025-03-08T22:07:52.585Z","editedAt":null,"revision":0,"upvotes":0,"source":{"name":"subsquare","id":"67ccbfb8bae1e37097aee766","cid":null,"height":7},"position":{"side":"Aye","conviction":"Locked1x","balance":"1000000000000000000","weighted":"1000000000000000000"},"media":{},"replies":[]}]},{"commentId":"s67cd3602bae1e37097aee768","parentId":null,"replyToId":null,"author":{"account":{"accountId":"0x5ae602686c9573bff2ef0483bda7a9589bc9eb7a2e14f91296367c5785394b27","address":"134Bdvpf4EphtYv1A7Eg5QfrS9ZwGwygdN5uHzqijFjBuhzH","emoji":"🦓","emojiName":"Parakeet","emojiUrl":"https://cdn.discordapp.com/emojis/1074721851550466219.webp?size=32","tag":null,"identity":{"display":"Parakeet","verified":true,"email":"","web":"","twitter":""},"profile":null},"legacyName":null},"body":"I appreciate the transparency from the security team. <3\n\nEDIT: \nI am symbolically NAYing this. I will switch to AYE if it ever becomes close, because we must pay for it.\n\nThe symbolic NAY is because the 'attack' is so easily countered that I hardly consider it an attack and instead closer to someone using the regular functioning of our protocol. We can stop this with a high tip and a DCA or weight caps, and then we can close the door on the attacker not letting his funds leave hydration. I agree it is a 'bug' worthy of payment and I want to encourage these types of reports in the future, but 25k for something that can do no actual harm - no, that is not justified in my opinion. \n\nWhitehat, if you read this, I would love to hear your opinion. Feel free to respond here or DM me on discord (Parakeet)","bodyFormat":"markdown","hidden":false,"hiddenReason":null,"deleted":false,"createdAt":"2025-03-09T06:32:34.323Z","editedAt":"2025-03-10T17:18:03.464Z","revision":0,"upvotes":0,"source":{"name":"subsquare","id":"67cd3602bae1e37097aee768","cid":null,"height":8},"position":{"side":"Nay","conviction":"Locked1x","balance":"6000000000000000000","weighted":"6000000000000000000"},"media":{},"replies":[{"commentId":"s67cecf73bae1e37097aee76a","parentId":"s67cd3602bae1e37097aee768","replyToId":"s67cd3602bae1e37097aee768","author":{"account":{"accountId":"0xee92a79760d0480aab1a940b0abab817dfcde83655e4d2c71682ce272b26ef0a","address":"16PoxoUdcLsEvsWQNVLUM2zyozKYa87Ebv1u7YcmYpTV9eFk","emoji":"🐅","tag":null,"identity":{"display":"Jose Crypto","verified":true,"email":"jose.cryptodot@gmail.com","web":"","twitter":"@J0seRafael12"},"profile":null},"legacyName":null},"body":"[@Parakeet](/account/7KejvRw4GZvVjFQEDefAsBRd9iaTjVeUWczB44Mgu8Bue8JW) \nReading the report, it mentions that for the attack to occur, many factors are needed that would surely make it unprofitable or even impossible to do on realistic Omnipool setup, however it mentions that the oracle was manipulable and that this could affect other things later on, which is considered a good finding.\n\n\"Although it was possible to manipulate the price oracle, our simulations showed it would be infeasible to leverage this to do so profitably. We however understand, that this is a critical part of our protocol and could become an issue in the future.\n\nFor this reason we’ve decided to offer the whitehat highest payout for High tier of 25k$ which matches the lowest reward of Critical payout.\"","bodyFormat":"markdown","hidden":false,"hiddenReason":null,"deleted":false,"createdAt":"2025-03-10T11:39:31.239Z","editedAt":"2025-03-10T11:43:43.317Z","revision":0,"upvotes":0,"source":{"name":"subsquare","id":"67cecf73bae1e37097aee76a","cid":null,"height":9},"position":{"side":"Aye","conviction":"Locked1x","balance":"1000000000000000000","weighted":"1000000000000000000"},"media":{},"replies":[]},{"commentId":"s67cf1ee1bae1e37097aee76c","parentId":"s67cd3602bae1e37097aee768","replyToId":"s67cd3602bae1e37097aee768","author":{"account":{"accountId":"0x5ae602686c9573bff2ef0483bda7a9589bc9eb7a2e14f91296367c5785394b27","address":"134Bdvpf4EphtYv1A7Eg5QfrS9ZwGwygdN5uHzqijFjBuhzH","emoji":"🦓","emojiName":"Parakeet","emojiUrl":"https://cdn.discordapp.com/emojis/1074721851550466219.webp?size=32","tag":null,"identity":{"display":"Parakeet","verified":true,"email":"","web":"","twitter":""},"profile":null},"legacyName":null},"body":"[@Jose Crypto](/account/7NzNFJb2pfy2mZzdS2ky8okkXZL52fn2VAvAsc8jigvCtBec) \n\nThanks Jose. I have updated my comment with my thoughts. ","bodyFormat":"markdown","hidden":false,"hiddenReason":null,"deleted":false,"createdAt":"2025-03-10T17:18:25.137Z","editedAt":null,"revision":0,"upvotes":0,"source":{"name":"subsquare","id":"67cf1ee1bae1e37097aee76c","cid":null,"height":10},"position":{"side":"Nay","conviction":"Locked1x","balance":"6000000000000000000","weighted":"6000000000000000000"},"media":{},"replies":[]},{"commentId":"s67d1eedcbae1e37097aee773","parentId":"s67cd3602bae1e37097aee768","replyToId":"s67cd3602bae1e37097aee768","author":{"account":{"accountId":"0x45544800f3a7825fddf5fe36fee2304852b3593d5f3d87d20000000000000000","address":"0xf3a7825fddf5fe36fee2304852b3593d5f3d87d2","emoji":"🐲","tag":null,"identity":null,"profile":null},"legacyName":null},"body":"[@Parakeet](/account/7KejvRw4GZvVjFQEDefAsBRd9iaTjVeUWczB44Mgu8Bue8JW) \n\nIn discussion (dispute) the truth is born! I think that what you said above is a worthy criticism! To a certain extent, I agree with you! (I am pleased to read such criticism) ","bodyFormat":"markdown","hidden":false,"hiddenReason":null,"deleted":false,"createdAt":"2025-03-12T20:30:20.583Z","editedAt":null,"revision":0,"upvotes":0,"source":{"name":"subsquare","id":"67d1eedcbae1e37097aee773","cid":null,"height":11},"position":{"side":"Aye","conviction":"Locked2x","balance":"4000000000000000","weighted":"8000000000000000"},"media":{},"replies":[]}]}],"updates":[],"nextCursor":null,"positionsComplete":true,"locked":false}