SlowMist: ReachMe Previously Had a Message Fee Bypass Vulnerability, Allowing Users to Send Messages to CZ at a Low Cost

BlockBeats News, March 28th, recently SlowMist Security Team disclosed that a logic vulnerability was found in the subscription-based messaging platform ReachMe io in the BNB Chain ecosystem. This vulnerability could bypass the preset fee mechanism and allow sending messages to any KOL (including CZ) at a very low cost.

The researchers successfully sent a message to CZ with only 0.01 BNB, bypassing the original 1 BNB message fee. The vulnerability was due to the contract failing to verify the consistency between on-chain transfer amounts and the front-end set price. The vulnerability has since been promptly patched.