TechFlow reports that security researchers Pawel Wylecial and "E.Laszlo" have released a report detailing a vulnerability in Friendtech's user interface implementation, which has caused traders to overpay for "keys" on the blockchain-based social media application. Approximately 43,173 transactions have been sent through the flawed frontend by users so far.
The bug is described as stemming from cached information in the user interface prior to transaction creation, causing a desynchronization with the blockchain during interim periods—typically triggered when another user trades "keys" for the same account. This issue is most likely to occur during frequent key trading.
The researchers claim they reported this vulnerability to the Friendtech team, who classified it as "out of scope."
