Decentraland announces the Security Update

 

Decentraland

Recent LAND vulnerability report and what the Decentraland Foundation is doing to protect Decentraland's IP

The Decentraland Foundation is committed to upholding the security of Decentraland as well as to being transparent about what they do to achieve that goal. Recently, there’ve been two matters related to this topic that they wanted to update you on. One is a vulnerability to LAND contracts that was swiftly handled after being reported to them (all assets are safe), and the other is about their efforts to protect the Decentraland IP and by extension the Decentraland community.


LAND Vulnerability Situation
On March 12, a security researcher reported a critical vulnerability of the LAND smart contracts that allowed anyone to transfer LAND without a LAND owner’s permission. In response, the Decentraland Foundation urgently contacted the members of the DAO’s Security Advisory Board to amend the smart contracts, and the vulnerability was fixed within two hours of it being confirmed. Since then, the Foundation has conducted two additional audits of the LAND smart contracts to ensure that the situation was truly resolved before sharing this information with you, the Decentraland community.

How the Decentraland Foundation is protecting the Decentraland IP
Along with its mission of protecting Decentraland’s IP for the benefit of the community, the Foundation has entrusted its legal team to carry out all actions necessary to try and protect the Decentraland trademark and logo from being used by impersonators. Their legal team is also doing everything they can to remove web pages, domains, and applications with malicious content that seek to mislead the general public about their platform available at decentraland.org. To aid the legal team in this mission, the Foundation has hired reputable firms in IP research and enforcement, to detect infringing content and scams, and to take all necessary legal actions.

One of the firms they’ve contracted has already initiated three Uniform Domain Name Dispute Resolution Policy (UNDRP) claims before the WIPO Arbitration and Mediation Center and has recently succeeded with the result that the infringing domain has been transferred to the Foundation. In parallel, during the last months they have analyzed 881 website pages, 400 domains, 399 mobile, and desktop applications, and 1187 social media listings, resulting in 2 websites, 24 domains, and 5 Social Media accounts being successfully taken down.

The security of Decentraland and its community is one of the Foundation’s most important goals. To that end, they will continue to not only act reactively when a threat appears but also proactively, as they have reported to you today so that you can continue to enjoy the experience Decentraland and its community has to offer.

 

Previous Post Next Post