Trading leagues can be compromised

dYdX Chain
1

@MohamadHuman approached me with a problem where someone deposited 130 USDC into his account, which decreased his ROI.

As I found out, it was the account dydx1yk724rm3ln4kuespnv2ue5l3ufzm2mzxp0v43g, which was funded through Avalanche 0x0be644361240e6071902da465a9712347c0ad002 (a disposable account funded from OKX).

This is a serious bug in the ROI calculation for each account, especially for smaller leagues. Such cases could have happened across all seasons, potentially allowing for manipulation of one’s position.

Those accounts who were sabotaged
dydx1qsjfy4mw2gm6sr8j00jqka0kjkszr0dqy96ngl 100 usdc
F4CD2569F5FA649B72C09830AD5A9049F5A09C4214DA63CD7C8AEADF672C9D97

dydx1qhqeqw5faynhau8gmh8ek9nrj6asqgcmhjq0rw 100 usdc
5D8966AB5A720AE0B2695F67EAC3A8C795DBC0BCF42EB0B3BF9E913494E732A9

dydx1vre9t50c8d3uunz9grclgju5uvaxukumy367ur 129 usdc
610BFEA4B5F81AE40A33C0C4738CD9476DFB81999DE7ACA9B3DCE88E6FAF72ED

dydx13rf45zema787j07jatn5nferhyejf9lnnv2v6z 131 usdc
FDEC69C1CF7FBF0D97A2BCBCA2D20C25AA163673EE6C7CD4B400CA4F53918528

I briefly checked that there are many inter accounts transactions for those accounts in small leagues (silver and bronze).

Personally I dont have any motivation to dig deeper especially since stakeholders and validators dont have any plans to improve anything

4 Likes
2

if somebody wants to go deeper in the inter account transactions for silver and bronze leagues you can use my repo GitHub - Vovochka84/Small_leagues_dydx: Analysis of inter accounts transactions for s2-s6 bronze and silver leagues

2 Likes