- Gem V2 NFT aggregator is now OpenSea Pro.
- Sentiment suffers a million-dollar reentrancy attack.
- ConsenSys publicly releases its Diligence Fuzzing tool.
- Rocket Pool increases its deposit pool limit.
This episode is made possible thanks to Ether Capital!
Looking for more transparency when it comes to your staking operations? Try out Ether Capital’s new staking dashboard. It’s a free analytics tool that tracks your rewards and monitors validator performance. Register today to try out the free beta version of Ether Capital’s staking dashboard: beta.ethcap.co
OpenSea Introduces Pro NFT Aggregator
OpenSea introduced OpenSea Pro, an NFT aggregator targeted at pro traders. OpenSea Pro is a rebrand of Gem V2, an aggregator acquired by OpenSea in April 2022. OpenSea is currently offering 0% marketplace fees for listings made through OpenSea Pro. Marketplace fees on OpenSea’s legacy platform were increased back to 2.5%.
According to OpenSea, its pro marketplace aggregates listings from over 170 NFT marketplaces. OpenSea Pro offers deep liquidity from aggregated collection offers, bids, and NFT pools. It also supports sweeping across marketplaces. Users who traded on Gem prior to March 31st are eligible to mint a commemorative Gemesis NFT.
Sentiment Suffers ~$1m Reentrancy Exploit
Sentiment, an under-collateralized lending protocol, suffered an exploit resulting in nearly $1 million worth of assets being drained from the protocol. According to Gearbox Protocol founder Mikhail Lazarev, the attacker was able to overprice their collateral to then borrow and withdraw assets from the Sentiment liquidity pools.
Lazarev also says the hacker used a read-only reentrancy Balancer bug to manipulate the price of LP tokens. Sentiment later sent an onchain message to the attacker offering a 10% bounty if funds are returned within 48 hours. If funds are not returned, Sentiment will offer the $95k bounty for information leading to an arrest.
ConsenSys Releases Diligence Fuzzing
ConsenSys publicly released Diligence Fuzzing, a greybox fuzzer used to automatically check code correctness and expose software bugs and vulnerabilities. ConsenSys previously released the tool to private beta in 2021. Anyone can now use Diligence Fuzzing to run automatic code tests, catch bugs, and generate reports.
While blackbox fuzzers quickly produce a high number of inputs, the generation paths are random. ConsenSys says its diligence greybox fuzzer is designed to test contract functions with cleverly selected semi-random inputs. The tool learns details about the target program’s behavior and structure to move execution toward new, deeper paths.
Rocket Pool Increases Deposit Pool Limit
Rocket Pool pDAO members have executed a change increase to the protocol’s deposit pool limit. Up to 18,000 ether can now be held in the deposit contract. The deposit pool is used by liquid stakers to mint and burn rETH. The increase comes in anticipation of a significant one-time increase in the rETH supply rate after the Atlas upgrade.
The limit increase will also diminish the premium on rETH in secondary markets. Atlas is an upgrade that will reduce staking requirements for mini pools, allowing node operators to deploy a mini pool with only 8 ether. The remaining ether is pooled from liquid stakers. Atlas is scheduled to launch on mainnet on Tuesday, April 18th.
MetaMask Implements NFT Support
MetaMask announced it will add support for ERC-721 and ERC-1155 NFTs in v10.28 of its browser extension wallet. NFTs will appear automatically as long as the automatic NFT detection toggle is enabled. The release also supports ERC-721 token transfers with support for ERC-1155 transfers coming soon. The release is now available for Chrome users.