Telcoin, a company known for developing financial applications for mobile users, including trading and remittance tools, recently faced a significant security challenge. The firm experienced an exploit leading to the unauthorized transfer of $1.2 million from some users’ accounts. However, in a commendable move, The company has managed to restore all user balances within weeks of the incident, according to a statement provided to CoinDesk.

The exploit, which occurred in late December, was attributed to a flaw in the interaction between the company’s digital wallet and a proxy contract on the Polygon network. The fault resulted in incorrect storage function executions, leading to a reduction in user balances within the Telcoin mobile application. Despite the setback, the company’s swift response has been noteworthy.

Paul Neuner, the founder and CEO of Telcoin, expressed his pride in the team’s quick action. “Deciding to preemptively restore affected user wallets from our company treasury was a no-brainer, and I’m proud of the team for making that happen in record time,” he stated.

Technical details of the exploit on Telcoin

The technical issue that led to the exploit was a misconfiguration in the way Telcoin’s digital wallet interacted with a proxy contract on the Polygon network. The misconfiguration resulted in the proxy contract performing certain storage functions incorrectly. Fortunately, no admin keys were compromised during the incident, which meant that the broader Telcoin ecosystem remained unaffected.

In response to the exploit, Telcoin took proactive measures to safeguard its users. The company preemptively restored funds from its treasury while simultaneously working with leading blockchain security experts and law enforcement to freeze and recover the stolen funds. The decisive action not only helped in mitigating the impact of the exploit but also demonstrated the company’s commitment to user security and trust.

Following the restoration of user balances, the company has also witnessed a remarkable 400% increase in deposits. The surge can be attributed to the improved bullish sentiment among users, who appreciated the company’s quick and effective response to the security breach. Telcoin’s handling of the situation seems to have reinforced user confidence in the platform, leading to a notable boost in user engagement and trust.