Odaily Planet Daily News SlowMist Security Team disclosed that there is a security vulnerability in the ReachMe.io platform. Researchers @im23pds and @T41nk_ found that they could successfully bypass the payment threshold of 1BNB (about 600 US dollars) and send a private message to CZ by paying only 0.01BNB (about 6 US dollars). The vulnerability involves a payment verification logic defect, and attackers can construct special transactions to bypass fee detection.
SlowMist has informed the project party of the details of the vulnerability in accordance with industry standards, and the platform has now completed emergency repairs.