ID:
omni-real-estate-token-1416
100 pts
Platform:
Type:
Category:
Method:
Data Sources:
Binance Smart Chain
Assets
Token
Contract Vulnerabilities
Extended Method:
Insufficient check, claim reward calculation bug
Days in Operation:
617
(1.69 Years)
100 pts each
Omni Estate Group and Passive Income are pioneers in the region's real estate market and blockchain technology. With a stronghold of 22.000 properties in our database and counting, we are at the forefront of the market as the most trusted real estate agent, tech partner and feature among the top-agencies for the world's most innovative agencies.
'The Omni Real Estate Group's ORT token contract was hacked. The loss is ~ 236BNB - due to the insufficient check of the arguments in the StakingPool contract. The attacker can invest 1 wei and withdraw to claim rewards (e.g., ORT tokens).
Specifically, the reward is calculated by the _Check_reward function according to the deposit duration and amount. However, the duration is derived from the input parameter end_date, whose value is not checked.
While in the _Check_reward function, if the durations parameter is not valid, a default state variable (total_percent) is returned which is 6000e18 at the beginning of the attack.
DISCLAIMER: While web3rekt has used the best efforts in aggregating and maintaining this database, this web site makes no representations or warranties with respect to the accuracy or completeness of its information and data herein, and specifically disclaim any implied warranties of merchantability or fitness for any particular purpose.
Under no circumstances, shall web3rekt be liable for any loss of profit or funds, any regulatory or governmental penalties, any legal costs, or any other commercial and non-commercial damages, including but not limited to special, incidental, consequential, or other damages from any or all usage of the data and information derived from this database.