Skip to content

Latest commit

 

History

History
35 lines (24 loc) · 1.46 KB

2022-10-27.md

File metadata and controls

35 lines (24 loc) · 1.46 KB
Raw

October 27th, 2022 - Marketplace failed to display NFTs
Reported on October-27-2022 12:00
Mitigation October-27-2022 15:00
Solution Completed TBD
Severity SEV-1

What happened?

Users started reporting on Discord that the marketplace was not loading properly. Metrics were displaying that all instances of the NFT Server (The service that provides nft data to the marketplace) were down and unable to go back live. The team started investigating the root cause of the issue and found a large amount of inbound requests to the server by a single actor that saturated the service, crashing it. A DoS attack was taking place.

Why did it happen?

  • The proper configurations were not set to prevent this kind of attacks.

Issue Timeline

  1. 2022-10-27 12:00 Users report that the marketplace is not working.
  2. 2022-10-27 13:00 Team starts investigating the root cause of the issue.
  3. 2022-10-27 15:00 Team stops the attack by updating WAF rules.
  4. 2022-10-27 15:00 Marketplace goes back to normal.

Impact

All users were unable to access the marketplace.

Solution

  • Update WAF rules to stop the attack.
  • Research and implement better DoS mitigation techniques.