Rumor Refutation Studio Cracks TGE Incident:
There has been a lot of buzz on Twitter, with a studio bypassing the IDO front-end restrictions to directly call the contract.
Just now, a programmer verified this and found that there is a logic for validating signatures within the contract. Asymmetric encryption is used here, where the mobile IDO client must use the private key to generate a _sign, and then call the contract. Within the contract, a public key is calculated from the request parameters and compared with the key in the contract; if they match, the process is successful.
There is a key point here: the studio cannot obtain the private key corresponding to the public key. The signing action must be implemented by calling the BN interface, so everyone can confidently trust Binance's technical capabilities.