Blur is hiring a fullstack performance engineer. If you enjoy digging into browser internals, debugging rendering pipelines, and profiling network performance, reach out to us. JD below👇
Regarding the recent NPM supply-chain attack:
Blur users are completely unaffected by the vulnerability.
We’ve checked all deployments and source code and confirmed that none of the affected package versions exist in any Blur product.
Users are safe ✅
🚨 There’s a large-scale supply chain attack in progress: the NPM account of a reputable developer has been compromised. The affected packages have already been downloaded over 1 billion times, meaning the entire JavaScript ecosystem may be at risk.
The malicious payload works
HIRING ANNOUNCEMENT
Blur is hiring a senior backend engineer to build low latency data systems.
Join our small, high-powered engineering team with trading and systems backgrounds from Facebook, Five Rings Capital, and MIT.
jobs.blur.io/0000006f-b48b-…
HIRING ANNOUNCEMENT
Blur is hiring a senior backend engineer to build low latency data systems.
Join our small, high-powered engineering team with trading and systems backgrounds from Facebook, Five Rings Capital, and MIT.
HIRING ANNOUNCEMENT
Blur is hiring a senior backend engineer to build low latency data systems.
Join our small, high-powered engineering team with trading and systems backgrounds from Facebook, Five Rings Capital, and MIT.
34 addresses were affected by the incorrect flagging. We recalculated their airdrop and sent the affected addresses their proper airdrop amount plus a 20% bonus to account for the delay (17m BLAST in total with vesting applied).
Some users were incorrectly flagged in a detection script for inexecutable bids and loans. As a result, they didn’t receive their airdrop on Wednesday.
The script is being fixed now and the affected users will receive their corrected airdrops next week.