Fire currency Korea website has been exposed web code hidden, to buy IEO shares without queuing

On the evening of April 22, a netizen who claimed to be a front-end programmer appeared on the Internet. It was reported that when he was snapping up PCI, the first phase of IEO project in Korea, he found out through the code that Korean website IEO of firecoin was snapping up "dirty".

He started by pointing to two codes: Is PrimeVip and inPrimeWhiteList. One is the VIP switch and the other is the white list switch. This value comes from the user interface: http://www.huobi.co.kr/-/p/open/v1/user/limit. The prime_identity in the interface is the VIP switch. When the value is 1, it means you are VIP. When the white list switch in the interface is true, it means you are in the white list.

At this point, the programmer opens a test program called fiddler and intercepts the modification of the http://www.huobi.co.kr/-/p/open/v1/prime/info interface to simulate a buying scenario that has not yet started, while intercepting the limit interface. Then he set the prime_identity mentioned above to 1, and nothing happened at this time. Then he set the white list switch above to true, and at this time the programmer actually found that there was no need to rush, queue, input verification code, he could directly order!

The above operation process can be understood as a cheating process to buy IEO plugins, understanding and operation does not seem to be very difficult.

Regarding this incident and plug-in cheating on the Internet, huobin also issued a notice at about 12 o 'clock on April 23, Beijing time, to explain and to offer certain compensation. The specific contents of the notice are as follows:

Dear Korean users of fire currency:

In view of your questions and feedback during the first Prime buying activity at 19:00 PM on April 22, 2019, we have made a detailed reply. We fully understand your feelings and hereby explain your concerns:

1. Questions about VIP: we stratified the VIP according to the HT holdings of users. "VIP" in the code refers to the users with more than 3000HT holdings. Believe the majority of technical staff can judge this part of the code did not play a role.

Ii. The role of "white list" in the code: before the panic buying, the official arranged an operating account for the project arrangement, and wrote this part into the "white list" code, not the official participating in the panic buying.

Iii. Anti-cheating errors and compensation measures in the first round: to our great disappointment, the anti-cheating script mechanism of the first prime was bypassed in the first round, and technicians started the backtracking mechanism and found that "special script" was used in several accounts of individual teams. We discovered and actively repaired the script in the first round of liquidation, and the second and third rounds avoided the continuation of the script.

The number of PCI purchases using "scripts" was 2,758,700 PCI purchases, involving 67 accounts, totaling $165,522. To compensate for the loss and opportunity cost of the first round participants, firemoney Korea has now purchased a total of 2758700 pcis of the first round of prime at the market price, and airdropped them to all customers who logged in and participated in the purchase before the first round of purchase in the early morning of 22nd (00:00 Singapore time).

Note: if a small part of the missing login, please contact the official, we will make up according to the actual situation.

Iv. As the original estimate was too conservative, most of the participants failed to make any achievements. In fact, the total number of participants involved in the snap up was more than 50,000, and the winning number was 597. The last two rounds of backtracking mechanism found no use of the "script" program.

Huobi Global and Huobi Korea exchange are both subsidiaries of Huobi group and have two independent operating systems. Please look at individual rules and project selection respectively.

The above problems caused to everyone's trouble and loss, fire currency Korea exchange deeply sorry! We in the future project activities will certainly take warning, as always with the user as the center, better service for every investor!

Please also be able to sincerely exchange with us, continue to provide us with valuable advice!

Thanks again for your support and feedback!

South Korean fire currency

April 23, 2019

Welcome to join the official BlockBeats community:

Telegram Subscription Group: https://t.me/theblockbeats

Telegram Discussion Group: https://t.me/BlockBeats_App

Official Twitter Account: https://twitter.com/BlockBeatsAsia