Slow Fog: ReachMe once had a messaging fee bypass vulnerability, allowing users to send messages to Zhao Changpeng at a low cost

ChainCatcher news, the Slow Mist security team recently disclosed that a logical vulnerability was found in the paid chat platform ReachMe io under the BNB Chain ecosystem, which allows bypassing the preset fee mechanism to send messages to any KOL (including Zhao Changpeng) at a very low cost.

Researchers successfully sent a message to Zhao Changpeng for 0.01 BNB, bypassing the originally set message fee of 1 BNB. The vulnerability stemmed from the contract not verifying the consistency between the on-chain transfer amount and the price set on the front end. This vulnerability has now been promptly fixed.