It would take weeks to figure out precisely what had happened, but it appeared that the platform had been fooled into severely undervaluing tokens that belonged to its users and selling them to the attacker at an extreme discount. Indexed was built on the Ethereum blockchain, a public ledger where transaction details are stored, which meant there was a record of the attack.
They pulled out their laptops and dug into the platform's code, with the help of a handful of acquaintances and Day's cat, Finney (named after Bitcoin pioneer Hal Finney), who perched on his shoulder in support. “All I said was, ‘What?' ” Kellar recalls. He picked up the phone to hear a breathless Day explaining that the platform had been attacked. Kellar was sitting in his mom's living room six time zones away near Austin, disassembling a DVD player so he could salvage one of its lasers. Something was very wrong.ĭay jumped up, spilling his food on the floor, and ran into his bedroom to call Dillon Kellar, a co-founder of Indexed.
But he knew enough to be alarmed: A user had bought up certain tokens at drastically deflated values, which shouldn't have been possible. “If you didn't know what you were looking at, you might say, ‘Nice-looking trade,' ” Day says. The colleague had sent over a screenshot showing a recent trade, followed by a question mark. The text was from a colleague who worked with him on Indexed Finance, a cryptocurrency platform that creates tokens representing baskets of other tokens-like an index fund, but on the blockchain. On October 14, in a house near Leeds, England, Laurence Day was sitting down to a dinner of fish and chips on his couch when his phone buzzed.