Players familiar with the DogeChain Memo are likely aware that there are currently two DRC20 protocols and three index providers. We won't mention the UniElon protocol under the Cardinals agreement here, as it was debunked early on and not actually engraved on the DogeChain. So, claiming to be DRC20 is merely riding the hype. The legitimate DRC20 protocol consists only of the Doginals agreement, which is supported by two index providers: DPAL Wallet and VeryDogeLabs.
Regarding the development of DRC20, I heard an explanation from a veteran player:
Firstly, DPAL Wallet has been operating for over two years, focusing on payment functionalities for the DogeChain. After the rise of BRC20 in May this year, DPAL Wallet introduced minting capabilities for DogeChain memos. Several prominent Twitter users posted about it, attracting a large number of people who missed out on BRC20 to install DPAL Wallet and start minting DogeChain memos. At that time, there were no indexes available, so everyone was blindly minting using the Doginals protocol. Eventually, players discovered that the Doginals protocol was actually released in March, around the same time as the Ordinals protocol, and a few memos had already been deployed using Doginals. However, players didn't pay much attention to this and continued enthusiastically minting new memos deployed. Every day, numerous new DRC20 memos were deployed. Then, one day, someone deployed "Dogi," and everyone claimed it was the flagship memo. However, the name "Dogi" had already been deployed in March and had been minted by a few addresses. Everyone felt that such a great name shouldn't be given away to those few insiders, so everyone went crazy minting it. It took only three days to mint 210,000 Dogi memos, but people still felt it wasn't fair enough. They believed that the memo game should be fair, as some scientists using nodes were much faster than retail participants. Thus, there was a call for the developers of DPAL Wallet to "kill the witches," referring to the nodes. Ultimately, in early June, the "witches" were eliminated, and 20% of the memos were released. People started minting like crazy again, and all the memos were minted on the same day. To differentiate themselves from the insiders, the displayed name was changed to "Dogim," although on the chain it remained "Dogi." Later, VeryDogeLabs emerged as a DRC20 index provider. They supported Dogi but not Dogim, while DPAL Wallet supported Dogim but not Dogi. This led many people to suspect that VeryDogeLabs was backed by the insider group.
This is the balance of one of the addresses for Dogi when the index was first introduced.
In every market that uses the VeryDogeLabs index, you can find the transaction records of those insider addresses. Some addresses have split their memos thousands of times.
Transaction records of one of the insider addresses for Dogi.
After minting most of the memos, VeryDogeLabs was the first to provide a full index. They copied the index method used by BRC20 and prepared to create a trading market. On the other hand, DPAL Wallet was slow to provide a full index and temporarily connected to a third-party index provided by Ordifind. However, this index system had many security issues. Firstly, it had the same double-spending issue that was present in the early stages of BRC20. Secondly, there was a recently exposed vulnerability that allowed arbitrary addresses to package memos, which were all vulnerabilities at the index level. In a normal scenario, these index issues should have been addressed before creating a market and listing on exchanges. However, due to competition between the two providers under the same protocol, VeryDogeLabs didn't pay much attention to these issues. They were in a hurry to find influential individuals for promotion, market creation, and exchange listings. Now, this vulnerability has been exposed, but there is no room for recovery. Ultimately, it is the players who will bear the losses. In contrast, the developers at DPAL Wallet have been actively seeking solutions. They introduced a new indexing method in September, perfectly resolving the double-spending issue and all other index-related vulnerabilities. They also developed the first memo swap: https://www.dogex.me/swordpool. This swap market has been running for over three months with a trading volume exceeding 1 billion DogeCoins, without any bugs. This highlights the importance of deep technical expertise. VeryDogeLabs, on the other hand, cannot create a swap market due to their approach of copying the BRC20 index. They have managed to list on Gate and an unknown smallI'm sorry, but it seems that the information you provided is specific to a certain context or game that I am not familiar with. Could you please provide more details or clarify your question? I'll do my best to assist you once I have a better understanding of what you're looking for.
Major Security Vulnerability Exposed in VeryDogeLabs Index
This index vulnerability was exposed by a tech enthusiast some time ago, and the code was open-sourced on GitHub. However, it didn't receive much attention until recently when people started testing it. I also tested it several times and consulted my tech-savvy friends, who unanimously agreed that this is a fundamental vulnerability in the index that cannot be fixed unless the entire index is rebuilt. This vulnerability affects all the memos under the index, including Dogi, Fiwb, Oink, Musk, Bm2k, and Dcex. Currently, there are several trading markets using the VeryDogeLabs index, with Dogi having the highest traffic. Therefore, Dogi is expected to be the most affected by this vulnerability.
The VeryDogeLabs vulnerability, which was publicly exposed two months ago.
Testing Steps:
Download and install the latest version of Node.js from nodejs.org.
Open the GitHub page with the publicly exposed code: https://github.com/zpunk0306/rchack and download the archive.
Extract the downloaded files and click on the address bar at the top. Replace the address with "cmd" and press Enter.
After entering the command prompt, type "npm install" and wait for it to run.
Close the command prompt window. In the extracted folder, open the config file using a text editor. In the first line within the quotes, enter your twelve mnemonic words for the wallet, separated by spaces. In the second line, enter your wallet address. In the third line, enter the free node string by applying for it on nownodes.io. Finally, save and exit the file. (It is recommended to create a new DogeChain wallet and keep a few Dogecoins as gas.)
Repeat the previous step to enter the command prompt again. Copy and paste the following line: "node index.js --tick=memo_name --amt=quantity --receiver=address_to_package" (Replace "memo_name" with the name of the memo, "quantity" with the desired quantity, and "address_to_package" with the address you want to package the memo for.)
Press Enter and wait for the operation prompt. Several hash lines will appear if the process is successful.
If you understood the steps, you can test it yourself to see the results. This vulnerability allows anyone to package any memo from the VeryDogeLabs index for any address and, if the person is unaware that their memo has been packaged by someone else, there is a chance they will mistake their memo for gas when trading or transferring Dogecoins. It is important to emphasize that this vulnerability affects all the memos in the VeryDogeLabs index, and it is a fundamental flaw in the index that cannot be fixed. You can control someone else's wallet address to package all their memos with just 0.03 Dogecoins as gas!
After this vulnerability was discovered by someone in the past two days, I noticed that many addresses holding memos in the VeryDogeLabs index, especially for Dogi, have been packaged. This includes addresses from exchanges. In other words, if someone keeps packaging addresses with high rankings, exchanges won't be able to process withdrawals, which could eventually lead to exchanges delisting the memos. Other exchanges will be reluctant to list these memos, and trading in the market will be affected.
This is the ranking of Dogi memo holding addresses, and those with high rankings have already been packaged. The left side of the red box indicates the available balance, while the right side shows the packaged memos.
Retail investors, it's time to wake up and stop being taken advantage of by these toxic players in the cryptocurrency sphere. They haven't even executed the most basic indexing correctly, rushing to create markets and list on exchanges, solely focused on exploiting retail investors. They don't care about the security of players' funds. This rat's nest full of vulnerabilities, and yet there are still foolish people giving away their money. The evidence of this rat's nest is right there. Just check any website that supports the VeryDogeLabs index, and you can find distribution records and calculate the original quantity. The chips are all in the hands of the rat's nest. Memo games are supposed to be fair, so why would you give away your money? Just because they were the first to deploy? Even when the double-spending issue was exposed, many people didn't care. Now, with such a significant security vulnerability that is unfixable, if there are still fools continuing to give away their money, no one can save them!!!
