Malicious code in mkr-vote-proxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e05531ac5fce7d87dbf96176e86c0753c627fa875718ce405741d2e18ebc3367 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4643 Malicious code in mkr-vote-proxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e05531ac5fce7d87dbf96176e86c0753c627fa875718ce405741d2e18ebc3367 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

BlockDev Sp. Z o.o: Steal all MKR from `flap` during liquidation by exploiting lack of validation in `flap.kick`

Summary: The flap contract provides the ability to auction DAI for MKR. That's a fundamental functionality of the MCD system, invoked usually from the vow contract. A flaw in the validation of calls to flap.kick, however, allows a malicious user to create "fake' auctions that can be later used to...