The site will be offline until bug fixes can be applied and tested fully. As it sits users funds are safe and most of the damage caused by the user who found the bug has been mitigated with the amount being stolen being less than 30 HIVE. I'll be personally replacing the 30 HIVE ( 27.985 actually ) stolen from the site when my powerdown comes out. The account that found the bug is @troll3838 who is a resident of Hong Kong, and while they didn't inform me of finding the bug in the withdrawal code and then proceeded to attempt to drain the balance of the site's account I luckily was able to catch them as they redeposited, with the majority of the potentially stolen funds recovered as they attempted to withdraw more. Incredibly lucky that I happened to have the server console open and detected what was going on.. The whole thing could have been far, far worse..
While the situation sucks and I've got a long ass night ahead of me patching and testing the sites code overall having ended up paying just less than 30 HIVE to have this bug found and brought to my attention is not a bad price. The price could have been far higher had he been able to continue repeating the bug although regardless of the amount of funds lost I'd be covering them from my own pocket. A bit of an eye opener to say the least but good to find this bug now and patch it rather than it be found down the road and have the financial damages be something that would have taken long periods of time to rectify. So thank you to @troll3838 for finding this bug, fuck you for not telling me about it and trying to take the bankroll and enjoy the 27.985 HIVE, Consider it your bug bounty.
In the interest of transparency I've made this post to inform the site users of why the site is down and what happened. While a bit embarrassing to admit a bug like this was found after developing the site for as long as I have been ultimately glad that this bug has been found so I can fix it.
I'll make a post when I get the site back up and running again.. After stringent testing to ensure that the bug has been patched and shit like this can't happen again. Thanks for reading and sorry to my regulars for the downtime due to this bug. Site will be back as soon as I fix this.
Vote KLYE for Witness, Every Single Vote Helps, Thanks for the Support!
Need to get in Contact with KLYE?
Join the Official #KLYE Discord Server Today!
Looking for an Affordable, Secure & Reliable Server Host for Your Witness Server or Other Web Related Projects? Check out Privex.io!