馃敀 Minor Security Breach Disclosed
馃敀 Minor Security Breach Disclosed
馃敀 QA Server Breach
Incident Details
AGPLOfficial disclosed a targeted security breach of their QA developer's VPS server. The attack exploited knowledge of their docker-compose.yml configuration, which wasn't intended for public VPS deployment.
Limited Impact
- No sensitive data compromised
- No private keys or code exposed
- QA developer had access only to public AGPL code
- Main branch and data records remained secure
- Blast radius contained to single VPS server
Security Measures
The team's existing protocols prevented escalation:
- QA developer operates with restricted access by policy
- Multistage code review process in place
- No malicious pull requests were submitted
Response Actions
CF@AGPLOfficial is implementing preventive measures including updates to work processes, infrastructure setup, and QA guidelines to prevent similar incidents.
The disclosure aligns with the team's transparency policy of sharing all security-related events, regardless of severity.
Very minor security incident but its our policy to always share anything security related. Our QA dev's VPS was breached yesterday - this attack was targeted as it required understanding specific details of our services setup, specifically our docker-compose.yml file which was
馃敡 Terra Classic DEX Wrapping Contracts Enter Devnet Testing
Terra Classic's wrapping contracts have entered devnet testing phase after completing unit tests. The contracts are being tested on the cl8y-dex-terraclassic repository. **Key Features:** - **1% wrap/unwrap fee** split equally between [UST1CMM.com](http://ust1cmm.com) treasury (50%) and onchain burn tax (50%) - Wrapped tokens can be traded on cl8y DEX **without onchain taxes** - Designed to increase locked USTC and LUNC in treasury while supporting USTR repeg **Benefits:** - Supports ecosystem burn mechanism - Increases onchain demand for USTC and LUNC - Encourages liquidity provision without reducing trading volume - Addresses memecoin preference for non-LUNC/USTC pairs The development team is seeking community feedback before deployment, as this is the optimal time for design adjustments. The core DEX features including fee tiers, TWAP oracles, and LP provisioning have completed devnet testing and are now in QA phase.
馃寜 CL8Y Bridge Completes First Real-Value Cross-Chain Transfer
**Major Milestone Achieved** The CL8Y bridge has successfully completed its first real-value token transfer between Binance Smart Chain (BSC) and TerraClassic. Users can verify the transaction on-chain, though caution is advised as final quality assurance checks are underway. **Key Details:** - First live cross-chain CL8Y transfer now complete - Transaction verifiable at [bridge.cl8y.com/verify](https://bridge.cl8y.com/verify?hash=0x32d0e93d5d780cdd4802251e67603be59567051b0537ea5ad8df170f227470c2) - Team conducting final QA and fixing minor UI bugs - Official go-ahead expected within 24 hours **Recent Progress:** - Core bridge functionality passed all tests - Low rate limits initially in place for safety - Plans to connect $ustr and $ustc tokens - TerraClassic CL8Y DEX development underway The bridge moved from testnet to mainnet after a week-long monitoring period. Users are encouraged to wait for the official launch announcement before conducting significant transfers.
馃 TidalDex Broker Bot Launches Conversational Trading
**TidalDex has launched conversational swaps** on their Telegram broker bot, allowing users to execute trades through natural language commands. **Key Features:** - Use `/llm_app` command to start chatting with the trading bot - Execute swaps through conversational interface - Currently has limited functionality but operational **What's Coming:** - Support for preregistration USTC app on BSC - Enhanced trading capabilities The bot represents a step toward **more intuitive DeFi interactions**, removing technical barriers for users who prefer conversational interfaces over traditional trading UIs. *Try the bot on Telegram to experience AI-powered trading firsthand.*
USTR Preregistration Dapp Adds Mobile Wallet Support for BSC and TerraClassic
The **USTR Preregistration dapp** now supports mobile wallets for both BSC and TerraClassic networks. **Supported TerraClassic wallets:** - Keplr Mobile - LuncDash Mobile - TerraStation Mobile - Galaxy Station Mobile - Leap Mobile - Cosmostation Mobile *Note: TrustWallet support is not currently available.* All wallets use **WalletConnect** for connectivity. For enhanced privacy, developers recommend using the in-app browser or desktop browser when possible. This update addresses previously logged wallet requests and expands accessibility for mobile users across both supported blockchain networks.