Safeheron Alert: WEB3 Project FaceDAO Incurred Loss From Phishing

04/18/2022

By Safeheron Security Team

Disclosed by SlowMist Cos, the wallet managed by FaceDAO has incurred a loss of FACE tokens due to phishing. FaceDAO deployer has been phished to approve sending FACE tokens to the attacker's address.

Safeheron Suggestion

1. WEB 3.0 project better use Multi-Party Computation (MPC) to eliminate the single point of failure;

2. Operations concerning assets shall be under more risk checking and policy approval protection, to minimize the risks.