Hey, I just replayed the space. For Transparency to the community:
The address is correct.
Our Team didn’t OFFER any bounty. The team at WR didn’t want to share the vulnerability until we agree on a bounty.
No NDA signed. The amount was undisclosed as WR team didn’t want to.
people already forgot how @wingriderscom saved Minswap from being hijacked? They found a major bug and help them to avoid disaster, for the good of Minswap and the good of the whole Cardano health. I don't forget.
Is @wingriderscom resorting to insulting everyone to try to be relevant?
Does anyone know whats so innovative about @wingriderscom? Maybe the VC Funding?
daomaker.com/company/wingri…
#cardano #ada $ada #hosky
We (Minswap users) & Cardano ecosystem as a whole, should all be thanking these lot for coming in & discovering the bug that would have irreparable damage to the confidence of the ecosystem/DEXEs (Minswap being their number 1 competition). I know they saved me thousands.
Let’s not fault WingRiders too hard though. They did work with MinSwap to ensure users assets were safe. They also brought stable coins to Cardano.
Personally I’m grateful to see so many talented teams building on Cardano and I’m still rooting for both companies 🙌
So how much ADA is that for saving $195m? 13.5k? End of the day, my ADA was on that DEX, so whether they took payment or not, I'm eternally grateful.
Sure, they may have spun the narrative, but there was nothing stopping MS (no NDA) from not paying them once they bug was fixed.
So first @wingriderscom creates this infographic making fun of dexes that came before them, now two cardanoscan TX's found show 5million MIN & 5million MINt were received as a bounty, prior to sharing their vulnerability to @MinswapDEX.
Yeah, both of these rub me the wrong way.
Some interesting drama in the Cardano DEX space today.
IMO asking for a bug bounty after an exploit is patched is fairly standard practice in the software industry.
Asking for a ransom before revealing the bug is not a great look.
has accomplished a lot and the community took notice.
I believe that the backlash towards @wingriderscom came due to:
1. the infographic
2. after continuously milking the "good faith" angle, we come to find out the payment was demanded before exploit was revealed.
The #Cardano Community is very simple. They want transparency above everything else, and the actions shown were not very transparent.
We need to be supporting all members of a fledgling Cardano eco-system. @wingriderscom saved Cardano from a reputation shattering event that we'd still have been paying the price for now. People SHOULD expect bug-bounties, esp. when it means empowering the competition. #BG21A.
I heard that Wingriders wanted a ransom from Minswap or else they wouldn't share the vulnerability, so they don't appear to be as big of a saints as they claim to be.
Word on the street also has that they sold the "bounty" right away = price dump.
@hoskytoken
@cardano_whale
2/2 Let's not forget that they had their source code reviewed by professional auditors and it was never caught. I now wonder if the other DEXs' smart contracts are REALLY secure. I guess we'll never know because they don't seem to have any plans on publishing their SCs.
You probably had bigger fish to fry than clarifying this for the public. Not making a fuss about it afterwards seems humble to me. 👍
@IOHK_Charles I assume you weren't aware when you praised Wingriders for notifying the Minswap team.
Hey @cardano_daily, when can we ask @wingriderscom questions since its an AMA?
Wingriders doesn't have to be saintly, they still saved the entire ecosystem a lot of potential grief. Why turn a blind eye to Minswap? They only gave fodder to the crypto world with their terrible demo and nearly ruined Cardano's reputation as being the only stable and secure L1
Dear @hoskytoken I found a flaw in @VEGAS_ADA_Pool code pay me 1 trillion $Hosky or I will exploit it and cause $Hosky to go to $1.00. Don’t make me do this doggy just pay me this is a good faith effort. #Cardano $ADA