Flagged Accounts - W1 February 2024
Incident Summary
On 2024-01-29 16:23 UTC, we found an abnormal behavior where a wallet would receive Party Stamps for Unicorn Party apps (Bumper Corns and Mob Run) after stashing-in on Rainbow Rumble.
With this discovery, we found a number of wallets that exploited (or tried to exploit) these abnormally generated Party Stamps by stashing them out and committing unsanctioned RBW extractions. The resulting exploit occurred when players stashed in on Rainbow Rumble, those were duplicated on Unicorn Party, allowing for a double extract (“printing” RBW).
Our findings are as follows:
We found nine (9) addresses that extracted a total of 64,335 RBW through Party Stamps generated by Rainbow Rumble stash-ins.
We found twenty-nine (29) other addresses that attempted to extract a total of 280,000 RBW through Party Stamps generated by Rainbow Rumble stash-ins. Note that no RBW was actually extracted by these addresses.
Furthermore, we found that these latter twenty-nine (29) wallets were connected to one of the nine (9) wallets that succeeded in extracting RBW through this means.
The issue involving the unintentional generation of Party Stamps when stashing-in on Rainbow Rumble has now been fixed.
Follow-up action
This exploitation warrants a ban without warning under Section D of the Crypto Unicorns Ban Policy, which clearly outlines the following offense:
Exploiting smart contracts to “print” currency that was not legitimately earned in-game.
In light of these findings, penalties will be enforced on the following offending wallets, with red indicating an immediate ban and yellow indicating a formal warning.
Flagged wallets that do not cease behavior that infringes upon the Ban Policy within 7 days from the time of posting will be Temporarily Suspended.
For more information, read the Ban Implementation Details here. For additional information on the Ban Policy, definition of terms, and more, feel free to consult the original proposal thread on the Crypto Unicorns Governance forum. For further inquiries, please contact our team on Zendesk.