{"post_stream":{"posts":[{"id":12870,"name":"","username":"Franklin","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/f/3e96dc/{size}.png","created_at":"2023-09-26T11:01:04.383Z","cooked":"\u003ch3\u003e\u003ca name=\"p-12870-pr-with-payload-1\" class=\"anchor\" href=\"#p-12870-pr-with-payload-1\" aria-label=\"Heading link\"\u003e\u003c/a\u003ePR with Payload\u003c/h3\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/BalancerMaxis/multisig-ops/pull/530\" class=\"onebox\" target=\"_blank\" rel=\"noopener nofollow ugc\"\u003ehttps://github.com/BalancerMaxis/multisig-ops/pull/530\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eSummary\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eRestore brand trust in Balancer by assisting DNS hack users, allowing them to immediately recover 75% of lost funds, while Balancer continues to investigate this incident.  Users claiming immediate restitution shall forfeit all further claims relating to this incident, with any further recovery accruing to the Balancer DAO.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eBackground\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eOn September 19, the Balancer frontend was attacked via social engineering on EuroDNS, the domain register used for .fi TLDs.\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"https://twitter.com/Balancer/status/1704281611326357567\" class=\"onebox\" target=\"_blank\" rel=\"noopener nofollow ugc\"\u003ehttps://twitter.com/Balancer/status/1704281611326357567\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eDue to prompt action from community members, damage was mitigated, and control was quickly restored.\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"https://twitter.com/Balancer/status/1705250633782313431\" class=\"onebox\" target=\"_blank\" rel=\"noopener nofollow ugc\"\u003ehttps://twitter.com/Balancer/status/1705250633782313431\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"https://twitter.com/Balancer/status/1704552285395894422\" class=\"onebox\" target=\"_blank\" rel=\"noopener nofollow ugc\"\u003ehttps://twitter.com/Balancer/status/1704552285395894422\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eUnfortunately, users interacting with the Balancer frontend while the attack was ongoing were affected.  Final damage numbers have not been published.  However, rough estimates would be around 200-300K USD.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eMotivation\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eBrand trust is the public’s perception of a brand’s reliability and trustworthiness, as informed by both personal experience and marketing communication. It’s a complex concept that encompasses a variety of factors, including security and privacy, product quality, customer service, brand mission and values, and political or philanthropic efforts.  In crypto, brand trust is an important, and arguably the most vital, differentiator between comparable products in competitive market conditions.\u003c/p\u003e\n\u003cp\u003eBrand trust is a critical component of brand loyalty. Customers who trust a brand are more likely to utilize it again, even if they have a negative experience from time to time or one-off experiences that don’t meet their expectations.\u003c/p\u003e\n\u003cp\u003eConsistency is another strong component of successful branding.  Communicating the same values in the same voice at every customer touchpoint–treating all users alike–is important in creating an authentic brand.  Inconsistent actions are unpredictable, and unpredictability dissuades consumers.\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"https://forum.balancer.fi/t/bip-xxx-decide-on-direction-of-restitution-for-affected-lps-in-boosted-pool-incident/5187\"\u003e[BIP-XXX] Decide on direction of restitution for affected LPs in Boosted Pool Incident\u003c/a\u003e is an excellent example of striving to restore brand trust.  While Balancer is neither obligated to provide restitution, nor responsible for user actions, the community has nonetheless found it worthwhile to seek a resolution to the first hack and make its users whole.\u003c/p\u003e\n\u003cp\u003eSimilar, Balancer should attempt to take any possible actions within its power to mitigate harm caused by the second hack as well to known, affected users.  We propose that verified actors affected by the DNS hack be allowed to claim 75% of their lost funds from Balancer while it continues to investigate this incident, forfeiting further claims to their lost funds, with any additional funds recovered going to the Balancer DAO.  By doing so, Balancer will be not only be able to restore, but grow its brand trust, which will be essential if it seeks to succeed in the long term.  In today’s competitive marketplace, users have more choices than ever before, and are increasingly demanding, especially with consumer security and safety. Consumers want to interact with brands, like Balancer, that can provide a safe transactional environment and positive overall experience.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eSpecification\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eUpon approval of this BIP, immediately send $117,806.25 USDC (72.0528468675 ETH) to address 0xD14f076044414C255D2E82cceB1CB00fb1bBA64c, a verified, known, damaged wallet, who will be providing an on-chain signature for wallet verification referencing this BIP in the comments below, along with a statement forgoing all further claims to restitution.  The amount to be sent is 75% of the $157,075 USD (96.07046249 ETH) total lost by this wallet during the attack period across 5 transactions, which can be verified on chain \u003ca href=\"https://etherscan.io/address/auramaxi.eth\" rel=\"noopener nofollow ugc\"\u003ehere\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003eFurther:\u003c/p\u003e\n\u003cp\u003e1.The max budget for this program shall be 350K USD.\u003cbr\u003e\n2. A 60 day reporting window shall by announced via appropriate channels, including Discord and Twitter, following approval of this BIP, with a second reminder at 30 days, and a final reminder in the final week to deadline.  The 60 day claim period will start upon announcement of the claim window.\u003cbr\u003e\n3. To submit claims, users will \u003ca href=\"https://etherscan.io/verifiedSignatures\" rel=\"noopener nofollow ugc\"\u003everify wallet ownership\u003c/a\u003e and report any DNS hack losses via a Google Form, which shall be prepared by a volunteer committee of 5 well-qualified, objective individuals with experience in DeFi opsec, who shall serve as a technical advisory committee to process these transactions.  Because a widely used angel drainer was used in this attack, it’s not possible to determine whether tokens drained during the timeframe of the attack were from user interactions with the Balancer FE or from elsewhere.  Some blockers can be put in place to prevent potential double-dipping from the attacker himself, such as gathering identifying information on the claim form.  But ultimately, whether a user making a claim was truly affected will come down to a human call.  If the committee reviews a claim, finds it satisfactory, submits a BIP, and governance approves that BIP, then that claim is legitimized.\u003cbr\u003e\n4. To validate and approve claims, the committee will verify the address and transaction details on Etherscan, arriving at an independent total to be compared against details submitted on the Google Form.  Should the details match, the claim shall be recommended for processing.  Should the details conflict, the claim will be rejected for resubmission.\u003cbr\u003e\n5. To execute, the committee will aggregate all claims in batches, and prepare two BIPs to be approved by governance–one BIP to be submitted 30 days after the start of the 60 day claim period announcement, the second BIP to be submitted at the 60 day deadline.  Each BIP shall include a list of affected wallet addresses and amounts, and be sent to the Balancer DAO signers on the following Tuesday after each BIP has been approved, who shall use transaction builder to execute one multi-send transaction to send the verified amounts to the affected wallets.\u003cbr\u003e\n6. Further claims following the 60 day period will require a new BIP and must go through governance.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eVoting\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eTo ensure the effectiveness of public relations campaigns, immediate action is necessary.  Consequently, we’d respectfully request that this BIP be moved to vote this week.\u003c/p\u003e\n\u003ch3\u003e\u003ca name=\"p-12870-technical-specification-2\" class=\"anchor\" href=\"#p-12870-technical-specification-2\" aria-label=\"Heading link\"\u003e\u003c/a\u003eTechnical specification\u003c/h3\u003e\n\u003cp\u003eThe DAO Multisig \u003ccode\u003e0x10A19e7eE7d7F8a52822f6817de8ea18204F2e4f\u003c/code\u003e will interact with USDC \u003ccode\u003e0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\u003c/code\u003e by writing \u003ccode\u003etransfer\u003c/code\u003e passing the affected user address identified as auramaxi.eth as the recipient \u003ccode\u003e0xD14f076044414C255D2E82cceB1CB00fb1bBA64c \u003c/code\u003e and amount \u003ccode\u003e117806250000\u003c/code\u003e\u003c/p\u003e","post_number":1,"post_type":1,"posts_count":24,"updated_at":"2023-09-27T19:53:56.275Z","reply_count":2,"reply_to_post_number":null,"quote_count":0,"incoming_link_count":90,"reads":52,"readers_count":51,"score":545.4,"yours":false,"topic_id":5218,"topic_slug":"bip-443-restore-brand-trust-in-balancer-by-assisting-dns-hack-users","display_username":"","primary_group_name":null,"flair_name":null,"flair_url":null,"flair_bg_color":null,"flair_color":null,"flair_group_id":null,"badges_granted":[],"version":23,"can_edit":false,"can_delete":false,"can_recover":false,"can_see_hidden_post":false,"can_wiki":false,"link_counts":[{"url":"https://github.com/BalancerMaxis/multisig-ops/pull/530","internal":false,"reflection":false,"title":"BIP-443: Restore Brand Trust in Balancer by Assisting DNS Hack Users by Xeonus · Pull Request #530 · BalancerMaxis/multisig-ops · GitHub","clicks":11},{"url":"https://etherscan.io/address/auramaxi.eth","internal":false,"reflection":false,"title":"auramaxi.eth | Address 0xD14f076044414C255D2E82cceB1CB00fb1bBA64c | Etherscan","clicks":3},{"url":"https://twitter.com/Balancer/status/1704281611326357567","internal":false,"reflection":false,"clicks":3},{"url":"https://twitter.com/Balancer/status/1705250633782313431","internal":false,"reflection":false,"clicks":2},{"url":"https://twitter.com/Balancer/status/1704552285395894422","internal":false,"reflection":false,"clicks":1},{"url":"https://etherscan.io/verifiedSignatures","internal":false,"reflection":false,"title":"View, Sign \u0026 Verify Message Signatures | Etherscan","clicks":0},{"url":"https://forum.balancer.fi/t/bip-445-decide-on-direction-of-restitution-for-affected-lps-in-boosted-pool-incident/5187","internal":true,"reflection":false,"title":"[BIP-445] Decide on direction of restitution for affected LPs in Boosted Pool Incident","clicks":0},{"url":"https://forum.balancer.fi/t/karpatkey-delegate-thread/5334/8","internal":true,"reflection":true,"title":"Karpatkey Delegate Thread","clicks":0},{"url":"https://forum.balancer.fi/t/rfc-linear-pool-hack-restitution/5504/4","internal":true,"reflection":true,"title":"[RFC] Linear pool hack restitution","clicks":0},{"url":"https://forum.balancer.fi/t/bip-498-assisting-dns-hack-victims-final-batch/5369","internal":true,"reflection":true,"title":"[BIP-498] Assisting DNS hack victims - final batch","clicks":0},{"url":"https://forum.balancer.fi/t/bip-535-assisting-dns-hack-victims-final-batch-payment/5507","internal":true,"reflection":true,"title":"[BIP-535] Assisting DNS hack victims - final batch payment","clicks":0},{"url":"https://forum.balancer.fi/t/aura-delegate-thread/3729/40","internal":true,"reflection":true,"title":"Aura Delegate Thread","clicks":0},{"url":"https://forum.balancer.fi/t/bip-455-assisting-dns-hack-victims/5259","internal":true,"reflection":true,"title":"[BIP-455] Assisting DNS hack victims","clicks":0}],"read":true,"user_title":"","bookmarked":false,"actions_summary":[{"id":2,"count":3}],"moderator":false,"admin":false,"staff":false,"user_id":1694,"hidden":false,"trust_level":2,"deleted_at":null,"user_deleted":false,"edit_reason":null,"can_view_edit_history":true,"wiki":false,"post_url":"/t/bip-443-restore-brand-trust-in-balancer-by-assisting-dns-hack-users/5218/1","can_accept_answer":false,"can_unaccept_answer":false,"accepted_answer":false,"topic_accepted_answer":null},{"id":12871,"name":"","username":"Jojo","avatar_template":"/user_avatar/forum.balancer.fi/jojo/{size}/2433_2.png","created_at":"2023-09-26T11:30:25.839Z","cooked":"\u003cp\u003eWant to add another point of view to this.\u003c/p\u003e\n\u003cp\u003eIs Balancer obligated to reimburse affected users? No.\u003cbr\u003e\nShould Balancer do so? Well, probably yes, from my perspective, though it’s generally debatable.\u003c/p\u003e\n\u003cp\u003eLet’s also consider another perspective: utility.\u003cbr\u003e\nIf Balancer were to take a proactive approach and reimburse the affected users, it would send a very powerful signal: we are a protocol that takes care of our users when something goes wrong, even if that issue isn’t directly our fault.\u003cbr\u003e\nThe value of such a statement, in terms of reputation, likely exceeds the cost that the protocol would incur. This cost might even be recouped from the responsible third-party vendor.\u003c/p\u003e\n\u003cp\u003eIn my opinion, the above proposal should be put to a vote and receive a “yes.” This is not only because I personally believe it’s the right thing to do, but also because it could enhance the brand’s value far beyond the potential cost.\u003c/p\u003e","post_number":2,"post_type":1,"posts_count":24,"updated_at":"2023-09-26T11:30:25.839Z","reply_count":1,"reply_to_post_number":null,"quote_count":0,"incoming_link_count":0,"reads":39,"readers_count":38,"score":117.8,"yours":false,"topic_id":5218,"topic_slug":"bip-443-restore-brand-trust-in-balancer-by-assisting-dns-hack-users","display_username":"","primary_group_name":null,"flair_name":null,"flair_url":null,"flair_bg_color":null,"flair_color":null,"flair_group_id":null,"badges_granted":[],"version":1,"can_edit":false,"can_delete":false,"can_recover":false,"can_see_hidden_post":false,"can_wiki":false,"read":true,"user_title":null,"bookmarked":false,"actions_summary":[{"id":2,"count":5}],"moderator":false,"admin":false,"staff":false,"user_id":2557,"hidden":false,"trust_level":2,"deleted_at":null,"user_deleted":false,"edit_reason":null,"can_view_edit_history":true,"wiki":false,"post_url":"/t/bip-443-restore-brand-trust-in-balancer-by-assisting-dns-hack-users/5218/2","can_accept_answer":false,"can_unaccept_answer":false,"accepted_answer":false,"topic_accepted_answer":null},{"id":12872,"name":"","username":"jameskbh","avatar_template":"/user_avatar/forum.balancer.fi/jameskbh/{size}/2430_2.png","created_at":"2023-09-26T12:17:08.825Z","cooked":"\u003cp\u003eI believe this should have the same treatment as the \u003ca href=\"https://forum.balancer.fi/t/bip-xxx-decide-on-direction-of-restitution-for-affected-lps-in-boosted-pool-incident/5187/20\"\u003eprevious case\u003c/a\u003e for the following reasons:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eThe users were trying to interact with Balancer FE, unaware that something was wrong;\u003c/li\u003e\n\u003cli\u003eWhile what happened was not \u003cem\u003estrictly\u003c/em\u003e Balancer’s fault, it was an issue on a SP that Balancer hired to provide the service;\u003c/li\u003e\n\u003cli\u003eThe reputational damage will probably be larger than the economic one.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eAs a quick answer is important in cases like this, I support this going to a vote this week too.\u003c/p\u003e","post_number":3,"post_type":1,"posts_count":24,"updated_at":"2023-09-26T12:17:08.825Z","reply_count":0,"reply_to_post_number":null,"quote_count":0,"incoming_link_count":1,"reads":39,"readers_count":38,"score":102.8,"yours":false,"topic_id":5218,"topic_slug":"bip-443-restore-brand-trust-in-balancer-by-assisting-dns-hack-users","display_username":"","primary_group_name":null,"flair_name":null,"flair_url":null,"flair_bg_color":null,"flair_color":null,"flair_group_id":null,"badges_granted":[],"version":1,"can_edit":false,"can_delete":false,"can_recover":false,"can_see_hidden_post":false,"can_wiki":false,"link_counts":[{"url":"https://forum.balancer.fi/t/bip-xxx-decide-on-direction-of-restitution-for-affected-lps-in-boosted-pool-incident/5187/20","internal":true,"reflection":false,"title":"[BIP-445] Decide on direction of restitution for affected LPs in Boosted Pool Incident","clicks":1}],"read":true,"user_title":null,"bookmarked":false,"actions_summary":[{"id":2,"count":4}],"moderator":false,"admin":false,"staff":false,"user_id":2556,"hidden":false,"trust_level":2,"deleted_at":null,"user_deleted":false,"edit_reason":null,"can_view_edit_history":true,"wiki":false,"post_url":"/t/bip-443-restore-brand-trust-in-balancer-by-assisting-dns-hack-users/5218/3","can_accept_answer":false,"can_unaccept_answer":false,"accepted_answer":false,"topic_accepted_answer":null},{"id":12873,"name":"Tritium","username":"Tritium","avatar_template":"/user_avatar/forum.balancer.fi/tritium/{size}/2011_2.png","created_at":"2023-09-26T13:08:08.386Z","cooked":"\u003cp\u003eThank you very much to Aura for taking the lead on this.  This looks like reasonable governance to me.  A few things that I think should be added to the spec to make it fit into our multisig processes and procedures.\u003c/p\u003e\n\u003cp\u003e1: A max budget for this program, after which more governance will be required.\u003cbr\u003e\n2: A clear and formalized method for submitting, validating, approving and executing payout requests.\u003cbr\u003e\n2a:  At best this would be via governance conducted 1-3 times over the 60 day period.\u003cbr\u003e\n2b: If more frequent payouts are desired, a technical committee should be appointed to assess requests against a clear set of parameters as part of this BIP.  This committee should be responsible for and authorize to request relevent transaction execution by the DAO multisig,  referencing the specification in this BIP.\u003c/p\u003e","post_number":4,"post_type":1,"posts_count":24,"updated_at":"2023-09-26T13:08:08.386Z","reply_count":0,"reply_to_post_number":null,"quote_count":0,"incoming_link_count":7,"reads":37,"readers_count":36,"score":72.4,"yours":false,"topic_id":5218,"topic_slug":"bip-443-restore-brand-trust-in-balancer-by-assisting-dns-hack-users","display_username":"Tritium","primary_group_name":null,"flair_name":null,"flair_url":null,"flair_bg_color":null,"flair_color":null,"flair_group_id":null,"badges_granted":[],"version":1,"can_edit":false,"can_delete":false,"can_recover":false,"can_see_hidden_post":false,"can_wiki":false,"read":true,"user_title":"","bookmarked":false,"actions_summary":[{"id":2,"count":2}],"moderator":false,"admin":false,"staff":false,"user_id":1852,"hidden":false,"trust_level":2,"deleted_at":null,"user_deleted":false,"edit_reason":null,"can_view_edit_history":true,"wiki":false,"post_url":"/t/bip-443-restore-brand-trust-in-balancer-by-assisting-dns-hack-users/5218/4","can_accept_answer":false,"can_unaccept_answer":false,"accepted_answer":false,"topic_accepted_answer":null},{"id":12874,"name":"Chrom","username":"Chrom","avatar_template":"/user_avatar/forum.balancer.fi/chrom/{size}/1933_2.png","created_at":"2023-09-26T13:09:08.447Z","cooked":"\u003cp\u003eIt’s the right thing to do based on what happened imo.\u003c/p\u003e\n\u003cp\u003eTwo most notable things imo:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eIn this market, affected users will value this approach.\u003c/li\u003e\n\u003cli\u003eIt also shows that the Balancer can take responsibility even though it’s not completely necessary (at least for others).\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSo, I support this proposal and the timelines for implementing it. \u003cimg src=\"https://emoji.discourse-cdn.com/twitter/+1.png?v=12\" title=\":+1:\" class=\"emoji\" alt=\":+1:\" loading=\"lazy\" width=\"20\" height=\"20\"\u003e\u003c/p\u003e\n\u003cp\u003eThanks, Tritium for being practical here. =)\u003c/p\u003e\n\u003cp\u003eI think all points make sense and should be implemented asap.\u003c/p\u003e\n\u003cp\u003eAs for the last point, who do you think can be responsible for this? Maxis or a different committee?\u003c/p\u003e","post_number":5,"post_type":1,"posts_count":24,"updated_at":"2023-09-26T13:15:05.936Z","reply_count":1,"reply_to_post_number":null,"quote_count":0,"incoming_link_count":0,"reads":37,"readers_count":36,"score":57.4,"yours":false,"topic_id":5218,"topic_slug":"bip-443-restore-brand-trust-in-balancer-by-assisting-dns-hack-users","display_username":"Chrom","primary_group_name":null,"flair_name":null,"flair_url":null,"flair_bg_color":null,"flair_color":null,"flair_group_id":null,"badges_granted":[],"version":3,"can_edit":false,"can_delete":false,"can_recover":false,"can_see_hidden_post":false,"can_wiki":false,"read":true,"user_title":null,"bookmarked":false,"actions_summary":[{"id":2,"count":1}],"moderator":false,"admin":false,"staff":false,"user_id":2299,"hidden":false,"trust_level":2,"deleted_at":null,"user_deleted":false,"edit_reason":null,"can_view_edit_history":true,"wiki":false,"post_url":"/t/bip-443-restore-brand-trust-in-balancer-by-assisting-dns-hack-users/5218/5","can_accept_answer":false,"can_unaccept_answer":false,"accepted_answer":false,"topic_accepted_answer":null},{"id":12875,"name":"Tritium","username":"Tritium","avatar_template":"/user_avatar/forum.balancer.fi/tritium/{size}/2011_2.png","created_at":"2023-09-26T13:17:25.159Z","cooked":"\u003cp\u003eI tend to agree with this sentiment and also approve of this BIP.  Many of the users involved seem to be very regular Balancer users and supporters who are now in a financially stressed situation, and it seems the cost to bail them out is relatively low.   It’s good to take care of our own.\u003c/p\u003e\n\u003cp\u003eThat being said wallets are getting a lot better these days and phishing a lot more prevalent.   I didn’t try but I imagine a wallet like Rabby would have blocked/made it very hard to sign this transaction for most users for a number of reasons.\u003c/p\u003e\n\u003cp\u003eMost of the responsibility for managing personal OpSec and being sure what you sign sits with users, and today there is tooling that makes it pretty easy to be a lot more safe.\u003c/p\u003e\n\u003cp\u003eI really think this is the last time we should do this.  I strongly advise users who are operating in DeFi to spend a good deal of time learning about and improving your personal OpSec, and making sure you are using the best tooling to keep you safe.  I also advise being careful when installing such tooling and to take your time doing so.  Your keys, your coins, your responsibility for what you sign.\u003c/p\u003e\n\u003cp\u003eI stand ready to connect any 7+ figure addresses with real web3 OpSec experts who can advise you/help you to make sure you keep your funds SaFu.  Feel free to reach out to me on the Balancer Discord or message me here on the Forum.\u003c/p\u003e\n\u003cp\u003eI think this BIP would be stronger if part of the process of accepting/claiming the 75% involved surrendering all claims to further restitution and accepting some degree of personal responsibility for what happened.\u003c/p\u003e","post_number":6,"post_type":1,"posts_count":24,"updated_at":"2023-09-26T13:53:28.584Z","reply_count":1,"reply_to_post_number":2,"quote_count":0,"incoming_link_count":0,"reads":37,"readers_count":36,"score":57.4,"yours":false,"topic_id":5218,"topic_slug":"bip-443-restore-brand-trust-in-balancer-by-assisting-dns-hack-users","display_username":"Tritium","primary_group_name":null,"flair_name":null,"flair_url":null,"flair_bg_color":null,"flair_color":null,"flair_group_id":null,"badges_granted":[],"version":3,"can_edit":false,"can_delete":false,"can_recover":false,"can_see_hidden_post":false,"can_wiki":false,"read":true,"user_title":"","reply_to_user":{"id":2557,"username":"Jojo","name":"","avatar_template":"/user_avatar/forum.balancer.fi/jojo/{size}/2433_2.png"},"bookmarked":false,"actions_summary":[{"id":2,"count":3}],"moderator":false,"admin":false,"staff":false,"user_id":1852,"hidden":false,"trust_level":2,"deleted_at":null,"user_deleted":false,"edit_reason":null,"can_view_edit_history":true,"wiki":false,"post_url":"/t/bip-443-restore-brand-trust-in-balancer-by-assisting-dns-hack-users/5218/6","can_accept_answer":false,"can_unaccept_answer":false,"accepted_answer":false,"topic_accepted_answer":null},{"id":12876,"name":"Tritium","username":"Tritium","avatar_template":"/user_avatar/forum.balancer.fi/tritium/{size}/2011_2.png","created_at":"2023-09-26T13:18:49.051Z","cooked":"\u003cp\u003eThe Maxi’s are pretty slammed.  I think there is a war room going on with some folks already doing research.  I’ll ask to get them to take a look at this BIP and suggest someone from there come back with suggestions.\u003c/p\u003e","post_number":7,"post_type":1,"posts_count":24,"updated_at":"2023-09-26T13:26:35.016Z","reply_count":0,"reply_to_post_number":5,"quote_count":0,"incoming_link_count":0,"reads":35,"readers_count":34,"score":22.0,"yours":false,"topic_id":5218,"topic_slug":"bip-443-restore-brand-trust-in-balancer-by-assisting-dns-hack-users","display_username":"Tritium","primary_group_name":null,"flair_name":null,"flair_url":null,"flair_bg_color":null,"flair_color":null,"flair_group_id":null,"badges_granted":[],"version":2,"can_edit":false,"can_delete":false,"can_recover":false,"can_see_hidden_post":false,"can_wiki":false,"read":true,"user_title":"","reply_to_user":{"id":2299,"username":"Chrom","name":"Chrom","avatar_template":"/user_avatar/forum.balancer.fi/chrom/{size}/1933_2.png"},"bookmarked":false,"actions_summary":[{"id":2,"count":1}],"moderator":false,"admin":false,"staff":false,"user_id":1852,"hidden":false,"trust_level":2,"deleted_at":null,"user_deleted":false,"edit_reason":null,"can_view_edit_history":true,"wiki":false,"post_url":"/t/bip-443-restore-brand-trust-in-balancer-by-assisting-dns-hack-users/5218/7","can_accept_answer":false,"can_unaccept_answer":false,"accepted_answer":false,"topic_accepted_answer":null},{"id":12877,"name":"Markus","username":"markus","avatar_template":"/user_avatar/forum.balancer.fi/markus/{size}/880_2.png","created_at":"2023-09-26T13:23:56.877Z","cooked":"\u003cp\u003eHow would claims be verified?\u003c/p\u003e","post_number":8,"post_type":1,"posts_count":24,"updated_at":"2023-09-26T13:23:56.877Z","reply_count":0,"reply_to_post_number":null,"quote_count":0,"incoming_link_count":0,"reads":33,"readers_count":32,"score":51.6,"yours":false,"topic_id":5218,"topic_slug":"bip-443-restore-brand-trust-in-balancer-by-assisting-dns-hack-users","display_username":"Markus","primary_group_name":null,"flair_name":null,"flair_url":null,"flair_bg_color":null,"flair_color":null,"flair_group_id":null,"badges_granted":[],"version":1,"can_edit":false,"can_delete":false,"can_recover":false,"can_see_hidden_post":false,"can_wiki":false,"read":true,"user_title":null,"bookmarked":false,"actions_summary":[{"id":2,"count":1}],"moderator":false,"admin":false,"staff":false,"user_id":289,"hidden":false,"trust_level":2,"deleted_at":null,"user_deleted":false,"edit_reason":null,"can_view_edit_history":true,"wiki":false,"post_url":"/t/bip-443-restore-brand-trust-in-balancer-by-assisting-dns-hack-users/5218/8","can_accept_answer":false,"can_unaccept_answer":false,"accepted_answer":false,"topic_accepted_answer":null},{"id":12879,"name":"","username":"Jojo","avatar_template":"/user_avatar/forum.balancer.fi/jojo/{size}/2433_2.png","created_at":"2023-09-26T13:31:04.388Z","cooked":"\u003cp\u003eMmm wanna add some colours to this.\u003c/p\u003e\n\u003cp\u003eI have worked in cyber threat intelligence for several years.\u003c/p\u003e\n\u003cp\u003eOne thing happens: common attack vectors, if applied to field/industries in which they are new, tend to be successful especially in the beginning, because users are on average just not aware of where the danger might lie. As an example, Middle East and Eurasian APT in the past years used (and still use), effectively, a phishing technique with fake email job offers. This technique, quite basic, is inherited from the (apparent) cultural behaviour of middle east users to check a lot this type of content. Initially this technique proved to be very effective against western targets, just because western users were not used to be brainwired about a possible threat coming in this form.\u003c/p\u003e\n\u003cp\u003eA DNS redirect is something that used to be a common as attack vector (when is possible to execute) and quite effective. If I bookmark \u003ca href=\"http://google.com/\"\u003egoogle.com\u003c/a\u003e and I go there I tend to not even think it could be a fake website build from scratch. Since this technique is quite effective, the only real defence has been using third party vendors that are less prone to be exploited. Regarding this point, avoind using the .fi domain is a good and safe move, even at the cost of the brand that has universally be known so far as “\u003ca href=\"http://balancer.fi/\"\u003ebalancer.fi\u003c/a\u003e”. On this, props to you and the team.\u003c/p\u003e\n\u003cp\u003eWhile I agree that wallets are getting better, and that some users were probably prompted to not sign, for the reasons highlighted above the burden of this attack should not be put on the victims.\u003c/p\u003e","post_number":10,"post_type":1,"posts_count":24,"updated_at":"2023-09-26T13:31:04.388Z","reply_count":1,"reply_to_post_number":6,"quote_count":0,"incoming_link_count":1,"reads":35,"readers_count":34,"score":77.0,"yours":false,"topic_id":5218,"topic_slug":"bip-443-restore-brand-trust-in-balancer-by-assisting-dns-hack-users","display_username":"","primary_group_name":null,"flair_name":null,"flair_url":null,"flair_bg_color":null,"flair_color":null,"flair_group_id":null,"badges_granted":[],"version":1,"can_edit":false,"can_delete":false,"can_recover":false,"can_see_hidden_post":false,"can_wiki":false,"link_counts":[{"url":"http://google.com/","internal":false,"reflection":false,"title":"Google","clicks":0},{"url":"http://balancer.fi/","internal":false,"reflection":false,"title":"Balancer DeFi Liquidity Protocol","clicks":0}],"read":true,"user_title":null,"reply_to_user":{"id":1852,"username":"Tritium","name":"Tritium","avatar_template":"/user_avatar/forum.balancer.fi/tritium/{size}/2011_2.png"},"bookmarked":false,"actions_summary":[{"id":2,"count":2}],"moderator":false,"admin":false,"staff":false,"user_id":2557,"hidden":false,"trust_level":2,"deleted_at":null,"user_deleted":false,"edit_reason":null,"can_view_edit_history":true,"wiki":false,"post_url":"/t/bip-443-restore-brand-trust-in-balancer-by-assisting-dns-hack-users/5218/10","can_accept_answer":false,"can_unaccept_answer":false,"accepted_answer":false,"topic_accepted_answer":null},{"id":12881,"name":"Tritium","username":"Tritium","avatar_template":"/user_avatar/forum.balancer.fi/tritium/{size}/2011_2.png","created_at":"2023-09-26T13:45:31.910Z","cooked":"\u003cp\u003eI’ll accept your assessment here ser.  I still stand ready to connect high value wallets with OpSec experts.  If you have big bags in DeFi and are not one, you should be talking to one.\u003c/p\u003e","post_number":12,"post_type":1,"posts_count":24,"updated_at":"2023-09-26T13:46:41.684Z","reply_count":0,"reply_to_post_number":10,"quote_count":0,"incoming_link_count":0,"reads":35,"readers_count":34,"score":37.0,"yours":false,"topic_id":5218,"topic_slug":"bip-443-restore-brand-trust-in-balancer-by-assisting-dns-hack-users","display_username":"Tritium","primary_group_name":null,"flair_name":null,"flair_url":null,"flair_bg_color":null,"flair_color":null,"flair_group_id":null,"badges_granted":[],"version":1,"can_edit":false,"can_delete":false,"can_recover":false,"can_see_hidden_post":false,"can_wiki":false,"read":true,"user_title":"","reply_to_user":{"id":2557,"username":"Jojo","name":"","avatar_template":"/user_avatar/forum.balancer.fi/jojo/{size}/2433_2.png"},"bookmarked":false,"actions_summary":[{"id":2,"count":2}],"moderator":false,"admin":false,"staff":false,"user_id":1852,"hidden":false,"trust_level":2,"deleted_at":null,"user_deleted":false,"edit_reason":null,"can_view_edit_history":true,"wiki":false,"post_url":"/t/bip-443-restore-brand-trust-in-balancer-by-assisting-dns-hack-users/5218/12","can_accept_answer":false,"can_unaccept_answer":false,"accepted_answer":false,"topic_accepted_answer":null},{"id":12882,"name":"Mike B","username":"Mike_B","avatar_template":"/user_avatar/forum.balancer.fi/mike_b/{size}/838_2.png","created_at":"2023-09-26T13:53:58.251Z","cooked":"\u003cp\u003eThis proposal is not really proper without a max budget put in place in the snapshot vote itself.  Multisig payloads should be voted upon, not left up to the discretion of individual teams.  Let’s do this proper and not give the maxis power to slip in arbitrary airdropped payments without any governance oversight.  I also don’t think it’s proper to assign other teams potentially risky work through governance without talking to them first.\u003c/p\u003e\n\u003cp\u003eIn terms of the proposal, I’m not entirely against it.  It hurts to see community members be affected by things like this.  But what I will say is that it is up to the user to check everything they sign with their crypto wallet.\u003cbr\u003e\n\u003cstrong\u003eDNS hijacks will continue to happen\u003c/strong\u003e in defi and I don’t know how much you can fault defi projects for the failings of web2 infrastructure.  There is not much precedent for defi projects paying out full value for dns hijacks, such as the one that happened with curve. You really should never be signing random approvals that pop up without making any actions on the webpage and I do think there is at least partially some fault on the users who fell for this.\u003c/p\u003e\n\u003cp\u003eThat all being said, I don’t want Balancer’s biggest supporters to be hurt from all this.  I’m not opposed to restitution in this instance but I am against making this precedent.  Individual defi projects cannot be liable for the uncapped losses of users who are not verifying what they use their wallet to sign.\u003c/p\u003e\n\u003cp\u003eThe proposal should be fixed so that the transactions that dao multisig makes are verifiable through a governance vote and not left up to a team who never consented to undertaking this responsibility.\u003c/p\u003e","post_number":13,"post_type":1,"posts_count":24,"updated_at":"2023-09-26T13:53:58.251Z","reply_count":0,"reply_to_post_number":null,"quote_count":0,"incoming_link_count":0,"reads":36,"readers_count":35,"score":127.2,"yours":false,"topic_id":5218,"topic_slug":"bip-443-restore-brand-trust-in-balancer-by-assisting-dns-hack-users","display_username":"Mike B","primary_group_name":null,"flair_name":null,"flair_url":null,"flair_bg_color":null,"flair_color":null,"flair_group_id":null,"badges_granted":[],"version":1,"can_edit":false,"can_delete":false,"can_recover":false,"can_see_hidden_post":false,"can_wiki":false,"read":true,"user_title":null,"bookmarked":false,"actions_summary":[{"id":2,"count":4}],"moderator":false,"admin":false,"staff":false,"user_id":1374,"hidden":false,"trust_level":2,"deleted_at":null,"user_deleted":false,"edit_reason":null,"can_view_edit_history":true,"wiki":false,"post_url":"/t/bip-443-restore-brand-trust-in-balancer-by-assisting-dns-hack-users/5218/13","can_accept_answer":false,"can_unaccept_answer":false,"accepted_answer":false,"topic_accepted_answer":null},{"id":12884,"name":"Markus","username":"markus","avatar_template":"/user_avatar/forum.balancer.fi/markus/{size}/880_2.png","created_at":"2023-09-26T14:47:27.032Z","cooked":"\u003caside class=\"quote no-group\" data-username=\"Franklin\" data-post=\"1\" data-topic=\"5218\"\u003e\n\u003cdiv class=\"title\"\u003e\n\u003cdiv class=\"quote-controls\"\u003e\u003c/div\u003e\n\u003cimg loading=\"lazy\" alt=\"\" width=\"24\" height=\"24\" src=\"https://avatars.discourse-cdn.com/v4/letter/f/3e96dc/48.png\" class=\"avatar\"\u003e Franklin:\u003c/div\u003e\n\u003cblockquote\u003e\n\u003col start=\"4\"\u003e\n\u003cli\u003eTo validate and approve claims, the committee will verify the address and transaction details on Etherscan, arriving at an independent total to be compared against details submitted on the Google Form. Should the details match, the claim shall be recommended for processing. Should the details conflict, the claim will be rejected for resubmission.\u003c/li\u003e\n\u003c/ol\u003e\n\u003c/blockquote\u003e\n\u003c/aside\u003e\n\u003cp\u003eCan you please clarify what this verification process wold look like?\u003c/p\u003e\n\u003cp\u003eThe attacker has been executing this attack for long before the hijack and continues to do so after Balancer regained control of the admin account. \u003ca href=\"https://etherscan.io/address/0x00006DEAcd9ad19dB3d81F8410EA2B45eA570000\" class=\"inline-onebox\" rel=\"noopener nofollow ugc\"\u003eFake_Phishing180397 | Address 0x00006DEAcd9ad19dB3d81F8410EA2B45eA570000 | Etherscan\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eIs your proposal that the Balancer DAO should refund any address hacked by them within the timeframe of the domain hijack?\u003c/p\u003e","post_number":15,"post_type":1,"posts_count":24,"updated_at":"2023-09-26T14:47:27.032Z","reply_count":1,"reply_to_post_number":null,"quote_count":1,"incoming_link_count":0,"reads":36,"readers_count":35,"score":57.2,"yours":false,"topic_id":5218,"topic_slug":"bip-443-restore-brand-trust-in-balancer-by-assisting-dns-hack-users","display_username":"Markus","primary_group_name":null,"flair_name":null,"flair_url":null,"flair_bg_color":null,"flair_color":null,"flair_group_id":null,"badges_granted":[],"version":1,"can_edit":false,"can_delete":false,"can_recover":false,"can_see_hidden_post":false,"can_wiki":false,"link_counts":[{"url":"https://etherscan.io/address/0x00006DEAcd9ad19dB3d81F8410EA2B45eA570000","internal":false,"reflection":false,"title":"Fake_Phishing180397 | Address 0x00006DEAcd9ad19dB3d81F8410EA2B45eA570000 | Etherscan","clicks":0}],"read":true,"user_title":null,"bookmarked":false,"actions_summary":[{"id":2,"count":1}],"moderator":false,"admin":false,"staff":false,"user_id":289,"hidden":false,"trust_level":2,"deleted_at":null,"user_deleted":false,"edit_reason":null,"can_view_edit_history":true,"wiki":false,"post_url":"/t/bip-443-restore-brand-trust-in-balancer-by-assisting-dns-hack-users/5218/15","can_accept_answer":false,"can_unaccept_answer":false,"accepted_answer":false,"topic_accepted_answer":null},{"id":12887,"name":"Fernando Martinelli","username":"Fernando","avatar_template":"/user_avatar/forum.balancer.fi/fernando/{size}/56_2.png","created_at":"2023-09-26T16:30:16.606Z","cooked":"\u003cp\u003eIs there any investigation that will be done to ensure the hacker didn’t pretend to be victim with various addresses, therefore doubly profiting from this attack (stealing from actual users but also from the DAO that will restitute funds he/she sent to him/herself)?\u003c/p\u003e","post_number":17,"post_type":1,"posts_count":24,"updated_at":"2023-09-26T16:30:16.606Z","reply_count":0,"reply_to_post_number":null,"quote_count":0,"incoming_link_count":0,"reads":33,"readers_count":32,"score":21.6,"yours":false,"topic_id":5218,"topic_slug":"bip-443-restore-brand-trust-in-balancer-by-assisting-dns-hack-users","display_username":"Fernando Martinelli","primary_group_name":null,"flair_name":null,"flair_url":null,"flair_bg_color":null,"flair_color":null,"flair_group_id":null,"badges_granted":[],"version":1,"can_edit":false,"can_delete":false,"can_recover":false,"can_see_hidden_post":false,"can_wiki":false,"read":true,"user_title":null,"bookmarked":false,"actions_summary":[{"id":2,"count":1}],"moderator":false,"admin":true,"staff":true,"user_id":2,"hidden":false,"trust_level":2,"deleted_at":null,"user_deleted":false,"edit_reason":null,"can_view_edit_history":true,"wiki":false,"post_url":"/t/bip-443-restore-brand-trust-in-balancer-by-assisting-dns-hack-users/5218/17","can_accept_answer":false,"can_unaccept_answer":false,"accepted_answer":false,"topic_accepted_answer":null},{"id":12888,"name":"Markus","username":"markus","avatar_template":"/user_avatar/forum.balancer.fi/markus/{size}/880_2.png","created_at":"2023-09-26T16:35:54.442Z","cooked":"\u003caside class=\"quote no-group\" data-username=\"Franklin\" data-post=\"1\" data-topic=\"5218\"\u003e\n\u003cdiv class=\"title\"\u003e\n\u003cdiv class=\"quote-controls\"\u003e\u003c/div\u003e\n\u003cimg loading=\"lazy\" alt=\"\" width=\"24\" height=\"24\" src=\"https://avatars.discourse-cdn.com/v4/letter/f/3e96dc/48.png\" class=\"avatar\"\u003e Franklin:\u003c/div\u003e\n\u003cblockquote\u003e\n\u003col start=\"3\"\u003e\n\u003cli\u003eTo submit claims, users will \u003ca href=\"https://etherscan.io/verifiedSignatures\" rel=\"noopener nofollow ugc\"\u003everify wallet ownership\u003c/a\u003e and report any DNS hack losses via a Google Form, which shall be prepared by a volunteer committee of 5 well-qualified, objective individuals with experience in DeFi opsec, who shall serve as a technical advisory committee to process these transactions\u003c/li\u003e\n\u003c/ol\u003e\n\u003c/blockquote\u003e\n\u003c/aside\u003e\n\u003cp\u003eI don’t think the DAO can/should approve this BIP without knowing who makes up this committee\u003c/p\u003e\n\u003caside class=\"quote no-group quote-modified\" data-username=\"Franklin\" data-post=\"1\" data-topic=\"5218\"\u003e\n\u003cdiv class=\"title\"\u003e\n\u003cdiv class=\"quote-controls\"\u003e\u003c/div\u003e\n\u003cimg loading=\"lazy\" alt=\"\" width=\"24\" height=\"24\" src=\"https://avatars.discourse-cdn.com/v4/letter/f/3e96dc/48.png\" class=\"avatar\"\u003e Franklin:\u003c/div\u003e\n\u003cblockquote\u003e\n\u003col start=\"5\"\u003e\n\u003cli\u003eTo execute, the committee will aggregate all claims in batches, and prepare three BIPs to be approved by governance–one BIP to be submitted in the following week after approval of this proposal,\u003c/li\u003e\n\u003c/ol\u003e\n\u003c/blockquote\u003e\n\u003c/aside\u003e\n\u003cp\u003eThis is too short of a time frame. Voting concludes on Tuesdays and another round starts on Thursdays. Not enough time to prepare the form and process the claims\u003c/p\u003e","post_number":18,"post_type":1,"posts_count":24,"updated_at":"2023-09-26T16:35:54.442Z","reply_count":0,"reply_to_post_number":null,"quote_count":1,"incoming_link_count":0,"reads":32,"readers_count":31,"score":6.4,"yours":false,"topic_id":5218,"topic_slug":"bip-443-restore-brand-trust-in-balancer-by-assisting-dns-hack-users","display_username":"Markus","primary_group_name":null,"flair_name":null,"flair_url":null,"flair_bg_color":null,"flair_color":null,"flair_group_id":null,"badges_granted":[],"version":1,"can_edit":false,"can_delete":false,"can_recover":false,"can_see_hidden_post":false,"can_wiki":false,"read":true,"user_title":null,"bookmarked":false,"actions_summary":[],"moderator":false,"admin":false,"staff":false,"user_id":289,"hidden":false,"trust_level":2,"deleted_at":null,"user_deleted":false,"edit_reason":null,"can_view_edit_history":true,"wiki":false,"post_url":"/t/bip-443-restore-brand-trust-in-balancer-by-assisting-dns-hack-users/5218/18","can_accept_answer":false,"can_unaccept_answer":false,"accepted_answer":false,"topic_accepted_answer":null},{"id":12889,"name":"Fernando Martinelli","username":"Fernando","avatar_template":"/user_avatar/forum.balancer.fi/fernando/{size}/56_2.png","created_at":"2023-09-26T16:55:11.917Z","cooked":"\u003caside class=\"quote no-group\" data-username=\"markus\" data-post=\"15\" data-topic=\"5218\"\u003e\n\u003cdiv class=\"title\"\u003e\n\u003cdiv class=\"quote-controls\"\u003e\u003c/div\u003e\n\u003cimg loading=\"lazy\" alt=\"\" width=\"24\" height=\"24\" src=\"https://yyz1.discourse-cdn.com/flex027/user_avatar/forum.balancer.fi/markus/48/880_2.png\" class=\"avatar\"\u003e markus:\u003c/div\u003e\n\u003cblockquote\u003e\n\u003cp\u003eThe attacker has been executing this attack for long before the hijack and continues to do so after Balancer regained control of the admin account. \u003ca href=\"https://etherscan.io/address/0x00006DEAcd9ad19dB3d81F8410EA2B45eA570000\"\u003eFake_Phishing180397 | Address 0x00006DEAcd9ad19dB3d81F8410EA2B45eA570000 | Etherscan\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/aside\u003e\n\u003cp\u003eThis means people could have been victim on other malicious frontends and Balancer DAO would be restituting them too. Is there a way for the committee to somehow filter these out?\u003c/p\u003e","post_number":19,"post_type":1,"posts_count":24,"updated_at":"2023-09-26T16:55:11.917Z","reply_count":1,"reply_to_post_number":15,"quote_count":1,"incoming_link_count":0,"reads":30,"readers_count":29,"score":11.0,"yours":false,"topic_id":5218,"topic_slug":"bip-443-restore-brand-trust-in-balancer-by-assisting-dns-hack-users","display_username":"Fernando Martinelli","primary_group_name":null,"flair_name":null,"flair_url":null,"flair_bg_color":null,"flair_color":null,"flair_group_id":null,"badges_granted":[],"version":1,"can_edit":false,"can_delete":false,"can_recover":false,"can_see_hidden_post":false,"can_wiki":false,"read":true,"user_title":null,"bookmarked":false,"actions_summary":[],"moderator":false,"admin":true,"staff":true,"user_id":2,"hidden":false,"trust_level":2,"deleted_at":null,"user_deleted":false,"edit_reason":null,"can_view_edit_history":true,"wiki":false,"post_url":"/t/bip-443-restore-brand-trust-in-balancer-by-assisting-dns-hack-users/5218/19","can_accept_answer":false,"can_unaccept_answer":false,"accepted_answer":false,"topic_accepted_answer":null},{"id":12891,"name":"Tritium","username":"Tritium","avatar_template":"/user_avatar/forum.balancer.fi/tritium/{size}/2011_2.png","created_at":"2023-09-26T21:45:20.298Z","cooked":"\u003cp\u003eBeen thinking about this off and on today.  Committees are tricky in a decentralised environment, especially when they are making financial decisions for others.   Perhaps a committee is a good idea here, but more time and thought and discussion should go into it before we codify something in my opinion.  It is clear there are a lot of dragons here.\u003c/p\u003e\n\u003cp\u003eOn the other hand, it seems like there are already a few clear cut cases of members of our community and regular users of the Balancer Protocol who lost money in incident and a desire to show good faith and quickly take care of them.  Could we just simplify this BIP to focus on the clear cut cases that we have already identified or can identify before it is felt there is need for this to go to snapshot.   Then everything would be in place for payout assuming all conditions of payout were met.\u003c/p\u003e\n\u003cp\u003eWe can figure the rest out later, once the post mortem is complete, and we perhaps have details like how long the attack was running for before the Metamask block came up, and how many unique users there were to the site during that time, and after the block.\u003c/p\u003e","post_number":21,"post_type":1,"posts_count":24,"updated_at":"2023-09-26T22:58:07.493Z","reply_count":0,"reply_to_post_number":null,"quote_count":0,"incoming_link_count":0,"reads":33,"readers_count":32,"score":21.6,"yours":false,"topic_id":5218,"topic_slug":"bip-443-restore-brand-trust-in-balancer-by-assisting-dns-hack-users","display_username":"Tritium","primary_group_name":null,"flair_name":null,"flair_url":null,"flair_bg_color":null,"flair_color":null,"flair_group_id":null,"badges_granted":[],"version":3,"can_edit":false,"can_delete":false,"can_recover":false,"can_see_hidden_post":false,"can_wiki":false,"read":true,"user_title":"","bookmarked":false,"actions_summary":[{"id":2,"count":1}],"moderator":false,"admin":false,"staff":false,"user_id":1852,"hidden":false,"trust_level":2,"deleted_at":null,"user_deleted":false,"edit_reason":null,"can_view_edit_history":true,"wiki":false,"post_url":"/t/bip-443-restore-brand-trust-in-balancer-by-assisting-dns-hack-users/5218/21","can_accept_answer":false,"can_unaccept_answer":false,"accepted_answer":false,"topic_accepted_answer":null},{"id":12893,"name":"Tritium","username":"Tritium","avatar_template":"/user_avatar/forum.balancer.fi/tritium/{size}/2011_2.png","created_at":"2023-09-27T01:48:41.807Z","cooked":"\u003cp\u003eIt’s your BIP, but something that the Maxis can write into a clear spec/payload that dictates some on-chain actions, perhaps pending sign-off from legal, is something we can easily execute on and  is important.\u003c/p\u003e\n\u003cp\u003eIn my opinion, it’s better to leave most of the rest for later, but perhaps there are other opinions and I don’t mean to drown them out nor trump other points of view.\u003c/p\u003e\n\u003cp\u003eWould also like a little feedback from the GRC.\u003c/p\u003e","post_number":23,"post_type":1,"posts_count":24,"updated_at":"2023-09-27T01:51:37.895Z","reply_count":0,"reply_to_post_number":22,"quote_count":0,"incoming_link_count":0,"reads":31,"readers_count":30,"score":21.2,"yours":false,"topic_id":5218,"topic_slug":"bip-443-restore-brand-trust-in-balancer-by-assisting-dns-hack-users","display_username":"Tritium","primary_group_name":null,"flair_name":null,"flair_url":null,"flair_bg_color":null,"flair_color":null,"flair_group_id":null,"badges_granted":[],"version":1,"can_edit":false,"can_delete":false,"can_recover":false,"can_see_hidden_post":false,"can_wiki":false,"read":true,"user_title":"","reply_to_user":{"id":1694,"username":"Franklin","name":"","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/f/3e96dc/{size}.png"},"bookmarked":false,"actions_summary":[{"id":2,"count":1}],"moderator":false,"admin":false,"staff":false,"user_id":1852,"hidden":false,"trust_level":2,"deleted_at":null,"user_deleted":false,"edit_reason":null,"can_view_edit_history":true,"wiki":false,"post_url":"/t/bip-443-restore-brand-trust-in-balancer-by-assisting-dns-hack-users/5218/23","can_accept_answer":false,"can_unaccept_answer":false,"accepted_answer":false,"topic_accepted_answer":null},{"id":12896,"name":"zilayo","username":"zilayo","avatar_template":"/user_avatar/forum.balancer.fi/zilayo/{size}/2821_2.png","created_at":"2023-09-27T10:45:27.177Z","cooked":"\u003cp\u003eAgreed.\u003c/p\u003e\n\u003cp\u003eDefi protocols shouldn’t be liable for users not checking what they’re signing with their wallets, but it’s important for Balancer to restore brand trust atm.\u003c/p\u003e\n\u003cp\u003eGiven the capped $350k budget, I don’t see any issues with this proposal.\u003c/p\u003e\n\u003cp\u003eThe BIPs should also contain the transaction for each address where they were drained.\u003c/p\u003e\n\u003cp\u003eAs \u003ca class=\"mention\" href=\"/u/fernando\"\u003e@Fernando\u003c/a\u003e mentioned, it’s possible that victims on other malicious frontends will submit claims.\u003cbr\u003e\nIn order to be eligible I think it should be evident that addresses submitted have used Balancer in the past, and potentially within a given timeframe (used Balancer within the past 1/3/6 months etc).\u003c/p\u003e","post_number":25,"post_type":1,"posts_count":24,"updated_at":"2023-09-27T10:45:37.012Z","reply_count":0,"reply_to_post_number":19,"quote_count":0,"incoming_link_count":0,"reads":29,"readers_count":28,"score":20.8,"yours":false,"topic_id":5218,"topic_slug":"bip-443-restore-brand-trust-in-balancer-by-assisting-dns-hack-users","display_username":"zilayo","primary_group_name":null,"flair_name":null,"flair_url":null,"flair_bg_color":null,"flair_color":null,"flair_group_id":null,"badges_granted":[],"version":1,"can_edit":false,"can_delete":false,"can_recover":false,"can_see_hidden_post":false,"can_wiki":false,"read":true,"user_title":null,"reply_to_user":{"id":2,"username":"Fernando","name":"Fernando Martinelli","avatar_template":"/user_avatar/forum.balancer.fi/fernando/{size}/56_2.png"},"bookmarked":false,"actions_summary":[{"id":2,"count":1}],"moderator":false,"admin":false,"staff":false,"user_id":2767,"hidden":false,"trust_level":2,"deleted_at":null,"user_deleted":false,"edit_reason":null,"can_view_edit_history":true,"wiki":false,"post_url":"/t/bip-443-restore-brand-trust-in-balancer-by-assisting-dns-hack-users/5218/25","can_accept_answer":false,"can_unaccept_answer":false,"accepted_answer":false,"topic_accepted_answer":null},{"id":12900,"name":"Tritium","username":"Tritium","avatar_template":"/user_avatar/forum.balancer.fi/tritium/{size}/2011_2.png","created_at":"2023-09-27T16:07:02.369Z","cooked":"\u003cp\u003eNot sure the treasury really has 96 ETH to spare.   It would probably be better to specify sending USDC.  I suppose there is 96 ETH that we could send and buy to backfill with a separate BIP, but I we kind of need gas runway and USDC is normally what we pay in.\u003c/p\u003e\n\u003cp\u003eAlso budget is in USDC so easier if payout is denominated in the same coin.\u003c/p\u003e","post_number":27,"post_type":1,"posts_count":24,"updated_at":"2023-09-27T16:07:24.992Z","reply_count":0,"reply_to_post_number":26,"quote_count":0,"incoming_link_count":0,"reads":23,"readers_count":22,"score":19.6,"yours":false,"topic_id":5218,"topic_slug":"bip-443-restore-brand-trust-in-balancer-by-assisting-dns-hack-users","display_username":"Tritium","primary_group_name":null,"flair_name":null,"flair_url":null,"flair_bg_color":null,"flair_color":null,"flair_group_id":null,"badges_granted":[],"version":1,"can_edit":false,"can_delete":false,"can_recover":false,"can_see_hidden_post":false,"can_wiki":false,"read":true,"user_title":"","reply_to_user":{"id":1694,"username":"Franklin","name":"","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/f/3e96dc/{size}.png"},"bookmarked":false,"actions_summary":[{"id":2,"count":1}],"moderator":false,"admin":false,"staff":false,"user_id":1852,"hidden":false,"trust_level":2,"deleted_at":null,"user_deleted":false,"edit_reason":null,"can_view_edit_history":true,"wiki":false,"post_url":"/t/bip-443-restore-brand-trust-in-balancer-by-assisting-dns-hack-users/5218/27","can_accept_answer":false,"can_unaccept_answer":false,"accepted_answer":false,"topic_accepted_answer":null},{"id":12906,"name":"AuraMaxi","username":"auramaxi.eth","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/a/9d8465/{size}.png","created_at":"2023-09-27T19:43:51.155Z","cooked":"\u003cp\u003eHello everyone, I verify ownership of the AuraMaxi.eth wallet.\u003c/p\u003e\n\u003cp\u003eHere is my digital signature:\u003c/p\u003e\u003caside class=\"onebox allowlistedgeneric\" data-onebox-src=\"https://etherscan.io/verifySig/25225\"\u003e\n  \u003cheader class=\"source\"\u003e\n      \u003cimg src=\"https://canada1.discourse-cdn.com/flex027/uploads/balancer/original/2X/d/d1d7cc933998481bdfab9100187de0e032f3f1b9.png\" class=\"site-icon\" data-dominant-color=\"3D4A69\" width=\"48\" height=\"48\"\u003e\n\n      \u003ca href=\"https://etherscan.io/verifySig/25225\" target=\"_blank\" rel=\"noopener\"\u003eetherscan.io\u003c/a\u003e\n  \u003c/header\u003e\n\n  \u003carticle class=\"onebox-body\"\u003e\n    \n\n\u003ch3\u003e\u003ca href=\"https://etherscan.io/verifySig/25225\" target=\"_blank\" rel=\"noopener\"\u003eEthereum Verified Signed Message\u003c/a\u003e\u003c/h3\u003e\n\n  \u003cp\u003eThe Ethereum BlockChain Explorer, API and Analytics Platform\u003c/p\u003e\n\n\n  \u003c/article\u003e\n\n  \u003cdiv class=\"onebox-metadata\"\u003e\n    \n    \n  \u003c/div\u003e\n\n  \u003cdiv style=\"clear: both\"\u003e\u003c/div\u003e\n\u003c/aside\u003e\n\n\u003cp\u003eI give up claims to any further compensation related to this situation.\u003c/p\u003e\n\u003cp\u003eThanks everyone for all your assistance on this. I really, really appreciate it. Special thanks to \u003ca class=\"mention\" href=\"/u/fernando\"\u003e@Fernando\u003c/a\u003e \u003ca class=\"mention\" href=\"/u/0xmaha\"\u003e@0xMaha\u003c/a\u003e \u003ca class=\"mention\" href=\"/u/tritium\"\u003e@Tritium\u003c/a\u003e \u003ca class=\"mention\" href=\"/u/franklin\"\u003e@Franklin\u003c/a\u003e \u003ca class=\"mention\" href=\"/u/0xDanko\"\u003e@0xDanko\u003c/a\u003e and everyone else helping get this addressed so swiftly. Thank you \u003ca class=\"mention\" href=\"/u/jojo\"\u003e@Jojo\u003c/a\u003e \u003ca class=\"mention\" href=\"/u/jameskbh\"\u003e@jameskbh\u003c/a\u003e \u003ca class=\"mention\" href=\"/u/chrom\"\u003e@Chrom\u003c/a\u003e \u003ca class=\"mention\" href=\"/u/zilayo\"\u003e@zilayo\u003c/a\u003e and \u003ca class=\"mention\" href=\"/u/markus\"\u003e@markus\u003c/a\u003e for your helpful comments on this proposal. I’m very grateful to you for the consideration and great care with which this has been handled.\u003c/p\u003e\n\u003cp\u003eA year ago I decided to dig into DeFi and settled on Balancer as the platform to focus my energies and resources on. A major reason for that is that Balancer is one of the few “well-lighted places” in DeFi, organized, well-designed and providing value to many protocols. The thing enabling all that is of course the skilled community of people operating behind and in front of the curtain. Thank you again.\u003c/p\u003e","post_number":29,"post_type":1,"posts_count":24,"updated_at":"2023-09-27T19:43:51.155Z","reply_count":1,"reply_to_post_number":null,"quote_count":0,"incoming_link_count":6,"reads":28,"readers_count":27,"score":235.6,"yours":false,"topic_id":5218,"topic_slug":"bip-443-restore-brand-trust-in-balancer-by-assisting-dns-hack-users","display_username":"AuraMaxi","primary_group_name":null,"flair_name":null,"flair_url":null,"flair_bg_color":null,"flair_color":null,"flair_group_id":null,"badges_granted":[],"version":1,"can_edit":false,"can_delete":false,"can_recover":false,"can_see_hidden_post":false,"can_wiki":false,"link_counts":[{"url":"https://etherscan.io/verifySig/25225","internal":false,"reflection":false,"title":"Ethereum Verified Signed Message","clicks":12}],"read":true,"user_title":null,"bookmarked":false,"actions_summary":[{"id":2,"count":7}],"moderator":false,"admin":false,"staff":false,"user_id":2768,"hidden":false,"trust_level":2,"deleted_at":null,"user_deleted":false,"edit_reason":null,"can_view_edit_history":true,"wiki":false,"post_url":"/t/bip-443-restore-brand-trust-in-balancer-by-assisting-dns-hack-users/5218/29","can_accept_answer":false,"can_unaccept_answer":false,"accepted_answer":false,"topic_accepted_answer":null}],"stream":[12870,12871,12872,12873,12874,12875,12876,12877,12879,12881,12882,12884,12887,12888,12889,12891,12893,12896,12900,12906,12907,12908,12909,12910]},"timeline_lookup":[[1,1129],[17,1128]],"fancy_title":"[BIP-443] Restore Brand Trust in Balancer by Assisting DNS Hack Users","id":5218,"title":"[BIP-443] Restore Brand Trust in Balancer by Assisting DNS Hack Users","posts_count":24,"created_at":"2023-09-26T11:01:04.330Z","views":2191,"reply_count":19,"like_count":50,"last_posted_at":"2023-09-27T22:48:24.789Z","visible":true,"closed":false,"archived":false,"has_summary":false,"archetype":"regular","slug":"bip-443-restore-brand-trust-in-balancer-by-assisting-dns-hack-users","category_id":11,"word_count":3745,"deleted_at":null,"user_id":1694,"featured_link":null,"pinned_globally":false,"pinned_at":null,"pinned_until":null,"image_url":null,"slow_mode_seconds":0,"draft":null,"draft_key":"topic_5218","draft_sequence":null,"unpinned":null,"pinned":false,"current_post_number":1,"highest_post_number":33,"deleted_by":null,"actions_summary":[{"id":4,"count":0,"hidden":false,"can_act":false},{"id":8,"count":0,"hidden":false,"can_act":false},{"id":10,"count":0,"hidden":false,"can_act":false},{"id":7,"count":0,"hidden":false,"can_act":false}],"chunk_size":20,"bookmarked":false,"topic_timer":null,"message_bus_last_id":0,"participant_count":11,"show_read_indicator":false,"thumbnails":null,"slow_mode_enabled_until":null,"tags_disable_ads":false,"related_topics":null,"summarizable":false,"has_cached_summary":false,"has_accepted_answer":false,"can_create_shared_issue":false,"shared_issue_visible":false,"discourse_zendesk_plugin_zendesk_id":null,"discourse_zendesk_plugin_zendesk_url":"https://your-url.zendesk.com/agent/tickets/","details":{"can_edit":false,"notification_level":1,"participants":[{"id":1852,"username":"Tritium","name":"Tritium","avatar_template":"/user_avatar/forum.balancer.fi/tritium/{size}/2011_2.png","post_count":8,"primary_group_name":null,"flair_name":null,"flair_url":null,"flair_color":null,"flair_bg_color":null,"flair_group_id":null,"trust_level":2},{"id":2557,"username":"Jojo","name":"","avatar_template":"/user_avatar/forum.balancer.fi/jojo/{size}/2433_2.png","post_count":4,"primary_group_name":null,"flair_name":null,"flair_url":null,"flair_color":null,"flair_bg_color":null,"flair_group_id":null,"trust_level":2},{"id":289,"username":"markus","name":"Markus","avatar_template":"/user_avatar/forum.balancer.fi/markus/{size}/880_2.png","post_count":3,"primary_group_name":null,"flair_name":null,"flair_url":null,"flair_color":null,"flair_bg_color":null,"flair_group_id":null,"trust_level":2},{"id":2,"username":"Fernando","name":"Fernando Martinelli","avatar_template":"/user_avatar/forum.balancer.fi/fernando/{size}/56_2.png","post_count":2,"primary_group_name":null,"flair_name":null,"flair_url":null,"flair_color":null,"flair_bg_color":null,"flair_group_id":null,"admin":true,"trust_level":2},{"id":1408,"username":"Xeonus","name":"Xeonus","avatar_template":"/user_avatar/forum.balancer.fi/xeonus/{size}/3621_2.png","post_count":1,"primary_group_name":null,"flair_name":null,"flair_url":null,"flair_color":null,"flair_bg_color":null,"flair_group_id":null,"admin":true,"trust_level":2},{"id":1374,"username":"Mike_B","name":"Mike B","avatar_template":"/user_avatar/forum.balancer.fi/mike_b/{size}/838_2.png","post_count":1,"primary_group_name":null,"flair_name":null,"flair_url":null,"flair_color":null,"flair_bg_color":null,"flair_group_id":null,"trust_level":2},{"id":2768,"username":"auramaxi.eth","name":"AuraMaxi","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/a/9d8465/{size}.png","post_count":1,"primary_group_name":null,"flair_name":null,"flair_url":null,"flair_color":null,"flair_bg_color":null,"flair_group_id":null,"trust_level":2},{"id":1694,"username":"Franklin","name":"","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/f/3e96dc/{size}.png","post_count":1,"primary_group_name":null,"flair_name":null,"flair_url":null,"flair_color":null,"flair_bg_color":null,"flair_group_id":null,"trust_level":2},{"id":2299,"username":"Chrom","name":"Chrom","avatar_template":"/user_avatar/forum.balancer.fi/chrom/{size}/1933_2.png","post_count":1,"primary_group_name":null,"flair_name":null,"flair_url":null,"flair_color":null,"flair_bg_color":null,"flair_group_id":null,"trust_level":2},{"id":2767,"username":"zilayo","name":"zilayo","avatar_template":"/user_avatar/forum.balancer.fi/zilayo/{size}/2821_2.png","post_count":1,"primary_group_name":null,"flair_name":null,"flair_url":null,"flair_color":null,"flair_bg_color":null,"flair_group_id":null,"trust_level":2},{"id":2556,"username":"jameskbh","name":"","avatar_template":"/user_avatar/forum.balancer.fi/jameskbh/{size}/2430_2.png","post_count":1,"primary_group_name":null,"flair_name":null,"flair_url":null,"flair_color":null,"flair_bg_color":null,"flair_group_id":null,"trust_level":2}],"created_by":{"id":1694,"username":"Franklin","name":"","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/f/3e96dc/{size}.png"},"last_poster":{"id":2557,"username":"Jojo","name":"","avatar_template":"/user_avatar/forum.balancer.fi/jojo/{size}/2433_2.png"},"links":[{"url":"https://etherscan.io/verifySig/25225","title":"Ethereum Verified Signed Message","internal":false,"attachment":false,"reflection":false,"clicks":12,"user_id":2768,"domain":"etherscan.io","root_domain":"etherscan.io"},{"url":"https://github.com/BalancerMaxis/multisig-ops/pull/530","title":"BIP-443: Restore Brand Trust in Balancer by Assisting DNS Hack Users by Xeonus · Pull Request #530 · BalancerMaxis/multisig-ops · GitHub","internal":false,"attachment":false,"reflection":false,"clicks":11,"user_id":1694,"domain":"github.com","root_domain":"github.com"},{"url":"https://snapshot.org/#/balancer.eth/proposal/0x8a489c8bfcb64b1a7086d6b67bc660d2a5b8d8988a67c1f310d69f172d30f01f","title":"Snapshot","internal":false,"attachment":false,"reflection":false,"clicks":8,"user_id":1408,"domain":"snapshot.org","root_domain":"snapshot.org"},{"url":"https://etherscan.io/address/auramaxi.eth","title":"auramaxi.eth | Address 0xD14f076044414C255D2E82cceB1CB00fb1bBA64c | Etherscan","internal":false,"attachment":false,"reflection":false,"clicks":3,"user_id":1694,"domain":"etherscan.io","root_domain":"etherscan.io"},{"url":"https://twitter.com/Balancer/status/1704281611326357567","title":null,"internal":false,"attachment":false,"reflection":false,"clicks":3,"user_id":1694,"domain":"twitter.com","root_domain":"twitter.com"},{"url":"https://twitter.com/Balancer/status/1705250633782313431","title":null,"internal":false,"attachment":false,"reflection":false,"clicks":2,"user_id":1694,"domain":"twitter.com","root_domain":"twitter.com"},{"url":"https://twitter.com/Balancer/status/1704552285395894422","title":null,"internal":false,"attachment":false,"reflection":false,"clicks":1,"user_id":1694,"domain":"twitter.com","root_domain":"twitter.com"},{"url":"https://forum.balancer.fi/t/bip-xxx-decide-on-direction-of-restitution-for-affected-lps-in-boosted-pool-incident/5187/20","title":"[BIP-445] Decide on direction of restitution for affected LPs in Boosted Pool Incident","internal":true,"attachment":false,"reflection":false,"clicks":1,"user_id":2556,"domain":"forum.balancer.fi","root_domain":"balancer.fi"}]},"bookmarks":[]}