Certik’s response teams worked hard to understand the situation and gauge the impact on our community. The “Merlin DEX” test report highlights the risk of centralization in the section “Attempts to decentralize”.
According to the official Twitter, DEX Merlin eco-zkSync claims it analyzes protocol vulnerabilities and reminds users to revoke the wallet’s signature and connection page access on its official website.
Developer announcement 📢
Can everyone revoke connected site access on your wallets/sign permission https://t.co/YRxH7IUU4T
We are analysing the exploit of our protocol and would stress that everyone carries out this step as a precaution.
More updates will be provided
— Merlin (@TheMerlinDEX) April 26, 2023
“We are analyzing the exploit of our protocol and would stress that everyone carries out this step as a precaution. More updates will be provided” Project share.
Merlin is a permission-less, community-centric DEX built on ZkSync with a liquidity environment that is robust and efficient. Earlier today, it was reported that Merlin’s liquidity had dried up and that hackers had stolen $1.82 million in funds.
Bobie, the founder of Web3 knowledge graph protocol 0xScope, tweeted that the liquidity of the zkSync eco Merlin DEX was exhausted, and hackers stole $1.82 million in funds and transferred them to Ethereum.
Reportedly, Merlin announced on April 24 that they passed the CertiK audit and conducted a public sale at 23:00 yesterday.
DISCLAIMER: The Information on this website is provided as general market commentary and does not constitute investment advice. We encourage you to do your own research before investing.