The Amps exploit was due to an unprotected reinitializer on their upgradeable contract. The attacker called reinitialize, set themselves as the owner, and changed the implementation to a malicious contract. This is a very common bug in upgradeable contracts. (1/5)

https://farcaster.xyz/phil/0x1aa4e6f9

huge props to @horsefacts.eth for the fix and @phil and @ampsfun for how they handled it + remediation

very glad everyone was made whole and that it wasn't worse than it was 🙏

Elevating onchain creators 

@nodefoundation @brightmoments 
@ampsfun

I work at the posts office

terminally.online