Watch Your EOS Registration: Wrong/Inappropriate Registration Might Cost 27 Million Dollars!
[Note] In case this link does not properly load, please visit the official PeckShield website for this blog: https://peckshield.com/2018/05/31/eos/
We have been updating EOS community about latest registration status and upcoming deadline for weeks, and made great efforts to urge the entire EOS community and related shareholders to take the necessary actions for smooth registration. As of today, we found that 29.98% EOS tokens are still NOT registered!
Today, we found another worrisome issue that requires immediate attention from EOS community. Among all registered (70.02%) EOS tokens, 0.23% EOS tokens are not properly registered. Based on today’s EOS price (12.40 USD), these improperly registered tokens are equivalent to ~27 million dollars (USD), which might be lost forever if not immediately re-registered before the EOS mainnet launch. With that, we strongly recommend token holders who had already finished the registration to re-examine the EOS keys carefully. Otherwise your registration might be invalidated!
Specifically, our analysis shows that there are two different ways that lead to an invalid registration:
- Using a public, known key: EOS6MRyAjQq8ud7hVNYcfnVPJqcVpscN5So8BhtHuGYqET5GDW5CV;
- Using a bad format key
In first case, since the EOS key is publicly known, your registered tokens might be immediately stolen by others. This particular case was reported by EOSAuthority today [1]. However, our analysis show that the registration issue is much more severe than we thought because of the second case.
In particular, as of today, we found there are 325 addresses (holding 1,898,293.185592935142 EOS tokens or 0.19% of total EOS distribution) registered to the public, known keys! And there are 1,243 registered keys with bad formats, which affected 0.04% of total EOS token share (or 361,771.056611104601 tokens).
We list the TOP 10 bad formats of wrongly-registered keys in the following table:
Here is the full list of improperly registered EOS token holders (with the two above cases combined) along with their token balances as of May-31–2018 00:00:00 AM +UTC. If your address is in the following list, please do the re-registration again! (Please follow the official guide [2] to generate keys securely.)
About US
PeckShield Inc. is a blockchain security company which aims to elevate the security, privacy, and usability of current blockchain ecosystem by offering top-notch, industry-leading services and products (e.g., smart contract auditing). Please contact us at Telegram, Twitter, or Email.
References
- [1] EOSAuthority: WE SAVED 10 MILLION DOLLARS OF EOS FROM HACKERS!
- [2] EOSIO: eosjs-ecc https://github.com/EOSIO/eosjs-ecc#usage-object-api
