{"id":48590,"date":"2023-04-27T06:41:15","date_gmt":"2023-04-27T10:41:15","guid":{"rendered":"https:\/\/coinscreed.com\/staging\/?p=48590"},"modified":"2023-04-27T06:41:17","modified_gmt":"2023-04-27T10:41:17","slug":"merlin-dex-users-to-get-2m-compensation-after-rugpull-scam","status":"publish","type":"post","link":"https:\/\/coinscreed.com\/staging\/merlin-dex-users-to-get-2m-compensation-after-rugpull-scam\/","title":{"rendered":"Merlin DEX Users to Get $2M Compensation After Rugpull Scam"},"content":{"rendered":"\n<p>Blockchain audit firm <a href=\"https:\/\/coinscreed.com\/staging\/crypto-scammers-use-black-market-identities-for-fraud-certik.html\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">CertiK<\/a> will cover the losses of Merlin DEX users affected by a rogue developer who drained the protocol\u2019s liquidity pool.<\/p>\n\n\n\n<figure class=\"wp-block-image aligncenter size-full is-resized\"><img fetchpriority=\"high\" decoding=\"async\" src=\"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/04\/money.jpg\" alt=\"Merlin DEX Users to Get $2M Compensation After Rugpull Scam\" class=\"wp-image-48595\" width=\"654\" height=\"392\" srcset=\"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/04\/money.jpg 680w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/04\/money-300x180.jpg 300w\" sizes=\"(max-width: 654px) 100vw, 654px\" \/><\/figure>\n\n\n\n<p>Merlin DEX, a decentralized exchange based on zkSync technology, <a href=\"https:\/\/decrypt.co\/138023\/rogue-developers-drain-merlin-dex-of-1-82-million\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">was exploited for over $1.8 million <span class=\"wpil-link-icon\" title=\"Link goes to external site.\" style=\"margin: 0 0 0 5px;\"><svg width=\"24\" height=\"24\" style=\"height:16px; width:16px; fill:#000000; stroke:#000000; display:inline-block;\" viewBox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" xmlns:svg=\"http:\/\/www.w3.org\/2000\/svg\"><g id=\"wpil-svg-outbound-7-icon-path\" fill=\"none\" clip-path=\"url(#clip0_31_188)\">\r\n                            <path d=\"M9.16724 14.8891L20.1672 3.88908\" stroke-linecap=\"round\"\/>\r\n                            <path d=\"M13.4497 3.53554L20.5208 3.53554L20.5208 10.6066\" stroke-linecap=\"round\" stroke-linejoin=\"round\"\/>\r\n                            <path d=\"M17.5 13.5L17.5 16.26C17.5 17.4179 17.5 17.9968 17.2675 18.4359C17.0799 18.7902 16.7902 19.0799 16.4359 19.2675C15.9968 19.5 15.4179 19.5 14.26 19.5L7.74 19.5C6.58213 19.5 6.0032 19.5 5.56414 19.2675C5.20983 19.0799 4.92007 18.7902 4.73247 18.4359C4.5 17.9968 4.5 17.4179 4.5 16.26L4.5 9.74C4.5 8.58213 4.5 8.0032 4.73247 7.56414C4.92007 7.20983 5.20982 6.92007 5.56414 6.73247C6.0032 6.5 6.58213 6.5 7.74 6.5L11 6.5\" stroke-linecap=\"round\"\/>\r\n                        <\/g>\r\n                        <defs>\r\n                            <clipPath id=\"clip0_31_188\">\r\n                                <rect fill=\"white\" height=\"24\" width=\"24\"\/>\r\n                            <\/clipPath>\r\n                        <\/defs><\/svg><\/span><\/a>on Wednesday by a rogue developer with access to the protocol\u2019s smart contracts. <\/p>\n\n\n\n<p>The attack happened during a public sale of the protocol\u2019s native token, mage (MAGE), despite Merlin's audit from blockchain security firm CertiK.<\/p>\n\n\n\n<p>A rug pull is an exit scam in which the perpetrators create a new token, launch a liquidity pool, and pair it with a base token, like <a href=\"https:\/\/coinscreed.com\/staging\/price-of-eth-to-plummet-by-4000-on-fears.html\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">ether (ETH)<\/a> or a stablecoin like dai (DAI). <\/p>\n\n\n\n<p>A protocol uses a large pool of tokens, called a liquidity pool, to fulfill trades instead of an order book system that requires buyers and sellers to list and wait for their trade orders.<\/p>\n\n\n\n<p>The rogue developer was able to withdraw all the liquidity from Merlin\u2019s pool, leaving users with worthless tokens. The developer also tried to cover their tracks by deleting the protocol\u2019s website, Twitter account, and Telegram group.<\/p>\n\n\n\n<p>CertiK will compensate affected users for their losses and investigate the incident. They plan to initiate a compensation plan to cover lost funds. The audit firm said in an email to CoinDesk that it is \u201cactively investigating\u201d the incident and will initiate a compensation plan to cover the lost funds for affected users.<\/p>\n\n\n\n<p>CertiK stated that the rogue developers are in Europe and will cooperate with law enforcement if negotiation fails. The firm urged the developer to return 80% of the stolen funds and accept a 20% white hat bounty.<\/p>\n\n\n\n<p>CertiK also said it would help impacted users despite private key issues. The firm also cautioned users to research new projects and token sales.<\/p>\n\n\n\n<p>Merlin DEX was one of the first decentralized exchanges to use zkSync, a layer-2 scaling solution that aims to improve the speed and cost of transactions on Ethereum.<\/p>\n\n\n\n<p>The protocol claimed to offer its users low fees, high throughput, and privacy features. However, the rug pull scam has exposed the vulnerability of new and untested projects in the crypto space.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Blockchain audit firm CertiK will cover the losses of Merlin DEX users affected by a rogue developer who drained the protocol\u2019s liquidity pool. Merlin DEX, a decentralized exchange based on zkSync technology, was exploited for over $1.8 million on Wednesday by a rogue developer with access to the protocol\u2019s smart contracts. The attack happened during [&hellip;]<\/p>\n","protected":false},"author":44,"featured_media":48595,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[11476],"tags":[10415,1400,366],"class_list":["post-48590","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-hacks-and-scams","tag-certik-2","tag-dex","tag-scam"],"jetpack_featured_media_url":"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/04\/money.jpg","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts\/48590","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/users\/44"}],"replies":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/comments?post=48590"}],"version-history":[{"count":0,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts\/48590\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/media\/48595"}],"wp:attachment":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/media?parent=48590"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/categories?post=48590"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/tags?post=48590"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}