\n
![](\"https:\/\/images.cointelegraph.com\/cdn-cgi\/image\/format=auto,onerror=redirect,quality=90,width=840\/https:\/\/s3.cointelegraph.com\/uploads\/2023-10\/fd3f3a05-0a0d-47aa-9bb2-4aa62cf002b9.jpg\")
<\/p>\n
\n<\/p>\n
The Stars Arena Web3 social media app on Avalanche has lost some of its funds due to a malicious attack, according to social media reports.\u00a0<\/p>\n
Stars Arena user Lilitch.eth discovered the exploit on Oct. 5 and announced it on X (formerly Twitter), claiming that over $1 million was lost. The Stars Arena team confirmed the attack, calling it a \u201cwar\u201d against the app. They said the attack only resulted in approximately $2,000 in losses and that the exploit had been patched.<\/p>\n
\nTHE EXPLOIT HAS BEEN FIXED.<\/p>\n
BUT DON\u2019T GET THIS WRONG WE ARE AT WAR.<\/p>\n
We\u2019re being targeted by malicious actors in the space that want to steal your money.<\/p>\n
The little guy is under attack. <\/p>\n
You are under attack.<\/p>\n
Your right to platform diversity is under attack.<\/p>\n
Don\u2019t get it\u2026 pic.twitter.com\/DmbMdf9cAq<\/a><\/p>\n
\u2014 Stars Arena (@starsarenacom) October 5, 2023<\/a><\/p><\/blockquote>\n
Similar to Friend.tech, Stars Arena allows users to buy \u201cshares,\u201d tokenized assets issued by content creators. The issuers can grant token owners access to exclusive content or other perks. Avalanche has seen a surge of activity<\/a> since Stars Arena was launched, with the network\u2019s daily transaction count increasing by over 186% from Oct. 3 to 4.<\/p>\n
On Oct. 5, Lilitch.eth declared on X that \u201c1.1 million dollars are being drained right now because of noob devs who couldn\u2019t make a copy of Friend.tech that will work properly. If you hold ANY SHARES in StarsArena you should sell while you still can.\u201d In the post, they showed a screenshot of a smart contract that contained approximately 107,329 AVAX (AVAX<\/a>), worth over $1 million at the time.<\/p>\n
\n@starsarenacom<\/a>, you fucked up<\/p>\n
1.1 million dollars are being drained right now because of noob devs who couldn’t make a copy of https:\/\/t.co\/h7traLwG9i<\/a> that will work properly<\/p>\n
If you hold ANY SHARES in StarsArena you should sell while you still can<\/p>\n
read next⬇️ pic.twitter.com\/HzgXvJc8ju<\/a><\/p>\n
\u2014 lilitch.eth (@0xlilitch) October 5, 2023<\/a><\/p><\/blockquote>\n
In response, some users accused Lilitch.eth of \u201cfudding\u201d (spreading fear, uncertainty and doubt). For example, ZSwap developer Mork claimed<\/a> that \u201cno exploiter can profit from this because the gas to run the tx is higher than the Avax extracted\u201d and that \u201cthey are proxy contracts – able to be updated.\u201d<\/p>\n
Related: <\/strong>Friend.tech revenue surges over 10,000 ETH, TVL tops 30,000 ETH<\/strong><\/a><\/em><\/p>\n
The Stars Arena team responded with a post on X stating that \u201cTHE EXPLOIT HAS BEEN FIXED.\u201d It claimed that attackers had been spending $5 in gas to drain $1 from the app in an attempt to destroy its credibility with \u201ccoordinated FUD.\u201d The team held<\/a> a Twitter Spaces event to explain to users what was happening, during which it stated that only around $2,000 had been lost in the attack.<\/p>\n
Responding to the team\u2019s post, Lilitch.eth\u00a0denied<\/a> that attackers had been spending $5 in gas to drain $1. \u201cNobody was spending 5$ to get 1$ from your TVL, chill,\u201d they stated, claiming instead that attackers stopped whenever gas prices became too high to make the attack profitable. Lilitch.eth also denied waging \u201cwar\u201d against the app. In another post, they claimed to support the app now that it has been patched, stating<\/a>, \u201cThe conflict was resolved, we are friend now. @starsarena to the moon.\u201d<\/p>\n
Friend.tech users have been facing a wave of SIM-swap attacks<\/a>, leaving its users and those of similar apps on edge. On Oct. 5, the Friend.tech team implemented a function to remove login methods<\/a> to help combat the problem.<\/p>\n<\/div>\n