Confirmed! A single hairdryer, twice breaching the decentralized oracle, $POLY 's "physical vulnerability" is more deadly than the code.

In April, at Paris Charles de Gaulle Airport, a thermometer standing by the roadside recorded a sudden temperature spike of over 3 degrees Celsius within minutes, then quickly dropped back. This was not an abnormal climate event, but someone using a battery-powered hairdryer aimed at the sensor.

According to French media reports, the anomalies occurred on April 6 and 15. Before each temperature peak, a small-probability temperature range on a prediction market platform was precisely bet on. Two accounts with a few dozen dollars in capital each ultimately took away about $34k. The first account was created only two days before the anomaly occurred.

The French meteorological agency later inspected the sensor, found physical traces of human interference, and filed criminal charges with the gendarmerie. Under French law, interfering with the automated data processing systems of public institutions can result in up to seven years in prison and a fine of 300,000 euros.

This scam’s technical barrier was almost zero. The Paris temperature contract on the prediction market relies on a clear chain of data: physical sensor → French meteorological agency → Weather Underground → on-chain smart contract.

The latter half of the chain, the smart contract, was audited, with automated and real-time data transmission. The only weak point was the starting point: that unfenced, camera-less thermometer accessible to anyone. An attacker only needed to understand the settlement rules and create a brief high-temperature spike in the evening or at night to rewrite the official maximum temperature record for that day.

The platform’s response is intriguing. It did not issue any public statement; the only action taken was to replace the settlement data source from Charles de Gaulle Airport to Le Bourget Airport. The profits were not recovered, and the market settled normally according to the on-chain record. However, the new sensor was also exposed outdoors, with no physical protection.

This was not the platform’s first controversy. Past market observers pointed out that traders had been accused of manipulating U.S. election odds for tens of millions of dollars; also, a whale used a large amount of governance tokens to force the settlement of a disputed market. Compared to those operations requiring huge capital, this attack cost only a hairdryer.

This incident is full of absurdity. A prediction market based on the immutability of blockchain was easily defeated by the most primitive physical means. Cryptography audited the contract code, but no one audited that thermometer.

Currently, the platform operates 173 active weather markets, most of which rely on a single physical sensor at a specific location for settlement. When the sensor is used solely for meteorological purposes, its credibility stems from the lack of motivation to tamper. Once it becomes a financial settlement endpoint, the motivation structure changes completely, but physical protections are not upgraded accordingly.

That thermometer faithfully recorded the air temperature it sensed; it just didn’t know that the wind it blew out had already turned into dollars.


Follow me: for more real-time analysis and insights into crypto markets! $BTC $ETH $SOL

#Gate13周年现场直击 #WCTC trading contest with 8 million USDT in prizes #Bitcoin rebound

BTC-0.91%
ETH-3.17%
SOL-3.27%
View Original
This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
  • Reward
  • Comment
  • Repost
  • Share
Comment
Add a comment
Add a comment
No comments
  • Pin