An attacker compromised the Amps contract 12 hours ago, stealing ~$6,700 USDC from 112 Amps users. 

@phil and the Amps team fixed the issue and refunded users. @horsefacts and the Farcaster team have been assisting. Farcaster wallets are safe and unaffected.

Who was affected?

Users who gave Amps an allowance to withdraw USDC from their wallet to purchase likes and recasts were affected.

Users who simply used Amps to receive funds for likes and recasts are unaffected. Users who did not use Amps are unaffected.

What happened?

The Amps team will publish a detailed report soon.  In short, their contract had a vulnerability and the attacker was able to withdraw USDC that the users have given Amps permission to withdraw. 

Some users gave Amps the permission to withdraw all USDC from their wallet, and the attacker was able to withdraw all USDC. 

Are Farcaster wallets unsafe?

No, Farcaster wallets remain safe to use. The exploit is entirely within the Amps contract and only affects users who explicitly gave Amps the permission to access their USDC.

What should I do to be safe?

Never give permissions to withdraw unlimited funds (as a user) and never ask for these permissions (as a dev). It is safer to ask user to transfer in a fixed amount (e.g. 100 USDC), and top up as needed.

Omg. Bunch of 🤡s everywhere 🤦‍♀️

“No, Farcaster wallets remain safe to use.”

The Arsenal, motorbikes, and plant based foods

A girl in a TOMBOY 🌎
(Shaping in /autist; Building SynSync)

crypto since '69 baby | on my @griv bullposting arc

yeah i never used amps and will never do (maybe as a founder yes i will), i don't want to buy engagement as of now (too early for me and also makes me look like a scammer since this is an alt)

Haven't used that sh** in ages. Only used it when it came out, to support the frame creator. Fk caring about if my casts get seen or not, I know it does (people I send it to see it). People just ignore, and they should.

farcaster wallets are indeed safe to use 

not sure what contract @amps is using but there are different types of erc contracts with different functions

i see the users who approved unlimited usdc as clowns here

here's an example of how NOT to do comms as a founder or leader.

instead: take ownership of your mistakes and apologize. like an adult.

soldier of Good. 🪖🥰 
producer × DJ. 🎧 🪩 
working on /campfire. 🫴🪵🔥
host of /downshift ⚙️ + /dww 🎧 +  /gtd 🛠️.
https://linktr.ee/0xdownshift

It's the same thing Borudtch did. All of them are scammers and grifters, posing like angels... wanting the best for the community. As if we're idiots. Lmao

Anytime I come online, I just see something that pisses me off, then I go back off 😩

call them the fk out. https://farcaster.xyz/downshift.eth/0xfd66565e