If you've missed it you wouldn't have got anything significant anyway, but if you are among those who contributed to the TRYBE platfrom early today was the day of a significant airdrop (or airgrab to be more precise)
So of course i've checked my EOSFlare balance early to check the status of the drop. Seeing the promised amount dropped several times. As this is not the first time a block explorer has shown transaction twice i didn't wonder too much.
But then is saw the post by @thecastle and had to check formyself. This is what eosflare showed me, right after 12 transaction sending me the promised airdrop... each!
So WTF happened here?
TRYBE in an effort to remain transparent explained the situation in-depth in a new article:
Basically the were able to revert the token transfer, and claim it back, on the basis that they have control over it. According to TRYBE it's nothing they have invented, but is an EOS core function they made use of.
And eventually i received the amount of TRYBE promised for the drop.
So what's the issue here?
Well i don't doubt the 100% honesty of the TRYBE people and their eagerness to fix the issue quickly. Having said that, i feel highly uncomfortable with the possibility that a dapp can simply revoke tokens they distributed, even without the pleasantry by TRYBE of explaining the situation. This is highly problematic, as it opens a door for bad actors a possibility to perform exit scams or similar at any time they please.
In times of b1 intending to scrap the constitution to a stump those possibilities are highly worrying, and benefits bad actors only?
So what should happen.
These kind of transactions should just not be possible, at least not just like that. I see at list the requirement for multisig, where a majority of bps would need to agree for these transactions to be reversed.
Another possibility would have been to call for ECAF for an emergincy order.
I dont blame the Trybe folks for taking the most effective measures to fox things. But this features is a crying vulnerability that needs to be removed.