The 0x decentralized exchange protocol was shut down this Saturday after the discovery of a potential exploit. No funds are missing, and the project re-deployed a new smart contract with the vulnerability patched.
The nature of the potential exploit was based on a feature of the Ethereum Virtual Machine and the way it handled smart contract code, and was discovered by @samczsun. The reason for the exploitable smart contract was possibly code meant to save gas on the Ethereum network. The vulnerability concerned the verification of wallet signatures, potentially allowing an attacker to fill certain orders with an invalid wallet signature.
The vulnerability does not affect the smart contract for the ZRX token itself, and t...