Etherеum

Jailbreak Veteran Discloses a Bug in Optimism: It Was Possible to Create Infinite ETH!

Earn money with the top Binance exchange

Ethereum’s most popular second-layer scalability solution Optimism was vulnerable to the «Unbridled Optimism» attack — so were its forks, Boba and Metis.

Infinite Ethers for potential Optimism attackers

Seasoned developer Jay Freeman who is well-known as co-founder of Orchid and core developer of iOS Jailbreak and Cydia tools, released a detailed blog post on how Go-Ethereum fork Optimism could have been hacked.

Last week, I discovered (and reported) a critical bug (which has been fully patched) in @optimismPBC (a «layer 2 scaling solution» for Ethereum) that would have allowed an attacker to print arbitrary quantity of tokens, for which I won a $2,000,042 bounty. https://t.co/J6KOlU8aSW

— Jay Freeman (saurik) (@saurik) February 10, 2022

According to his detailed explanation, a malicious actor could «mint» an arbitrary number of ETH tokens on any blockchain that utilizes Optimism Virtual Machine (OVM).

This could have been achieved by repeatedly triggering the SELFDESRUCT op-code on a contract with mainnet Ethers on balance. By doing so, attackers could increase their ETH holdings to infinite.

Also, Optimism forks Boba and Metis were prone to similar attacks design.

Bug fixed, $2M bounty comes to white-hat hacker

As per the statement of the Optimism team, their experts confirmed that the bug was never exploited by ‘real’ hackers: as such, all of the users’ funds are safe.

An emergence patch was released to Optimism mainnet and Kovan testnet just hours after the bug was disclosed. All forks and bridge providers were alerted: they should update their software to L2Geth version v0.5.11 in order to keep their systems synchronized with Optimism.

The platform awarded the maximum bounty amount of $2,000,042 to Freeman through the Immunefi bug bounty instrument. The white-hat hacker announced he will cover the accident on Feb.18 during the ETHDenver conference.

   
Source

Показать больше

Добавить комментарий

Кнопка «Наверх»
  • bitcoinBitcoin (BTC) $ 19,833.91 1.01%
  • ethereumEthereum (ETH) $ 1,475.60 7.84%
  • tetherTether (USDT) $ 1.00 0.36%
  • cardanoCardano (ADA) $ 0.469033 0.07%
  • dogecoinDogecoin (DOGE) $ 0.059629 1.14%
  • daiDai (DAI) $ 1.00 0.15%
  • matic-networkPolygon (MATIC) $ 0.822157 2.35%
  • tronTRON (TRX) $ 0.061573 1.03%
  • ethereum-classicEthereum Classic (ETC) $ 34.58 5.06%
  • leo-tokenLEO Token (LEO) $ 4.88 4.19%
  • cosmosCosmos Hub (ATOM) $ 15.06 11.95%
  • litecoinLitecoin (LTC) $ 56.14 5.01%
  • okbOKB (OKB) $ 15.26 0.2%
  • chainlinkChainlink (LINK) $ 7.51 4.32%
  • ftx-tokenFTX (FTT) $ 24.26 1.55%
  • crypto-com-chainCronos (CRO) $ 0.106789 2.42%
  • moneroMonero (XMR) $ 145.87 1.35%
  • stellarStellar (XLM) $ 0.103072 0.54%
  • bitcoin-cashBitcoin Cash (BCH) $ 118.77 1.07%
  • algorandAlgorand (ALGO) $ 0.298097 1.21%
  • vechainVeChain (VET) $ 0.023421 0.73%
  • eosEOS (EOS) $ 1.43 0.18%
  • hedera-hashgraphHedera (HBAR) $ 0.061364 1.06%
  • tezosTezos (XTZ) $ 1.53 0.69%
  • theta-tokenTheta Network (THETA) $ 1.09 0.29%
  • kucoin-sharesKuCoin (KCS) $ 9.23 0.1%
  • zcashZcash (ZEC) $ 58.65 1.95%
  • iotaIOTA (MIOTA) $ 0.263541 0.12%
  • huobi-tokenHuobi (HT) $ 4.59 0.44%
  • neoNEO (NEO) $ 9.17 3.22%
  • ravencoinRavencoin (RVN) $ 0.054665 14.82%
  • havvenSynthetix Network (SNX) $ 2.60 0.29%
  • gatechain-tokenGate (GT) $ 4.23 1.31%
  • makerMaker (MKR) $ 666.86 2.79%
  • zilliqaZilliqa (ZIL) $ 0.033929 0.59%
  • enjincoinEnjin Coin (ENJ) $ 0.490715 0.29%
  • dashDash (DASH) $ 44.32 1.29%
  • basic-attention-tokenBasic Attention (BAT) $ 0.317353 0.43%
  • blockstackStacks (STX) $ 0.348065 0.05%
  • wavesWaves (WAVES) $ 4.28 1.24%
  • bitcoin-goldBitcoin Gold (BTG) $ 23.42 1.99%
  • nemNEM (XEM) $ 0.041851 0.86%
  • decredDecred (DCR) $ 26.00 3.77%
  • holotokenHolo (HOT) $ 0.002060 0.67%
  • qtumQtum (QTUM) $ 2.99 0.55%
  • omisegoOMG Network (OMG) $ 1.75 0.71%
  • 0x0x (ZRX) $ 0.284558 1%
  • hiveHive (HIVE) $ 0.552787 0.26%
  • iconICON (ICX) $ 0.256807 0.59%
  • ontologyOntology (ONT) $ 0.227977 0.35%
  • siacoinSiacoin (SC) $ 0.003792 1%
  • digibyteDigiByte (DGB) $ 0.009731 1.03%
  • liskLisk (LSK) $ 0.995014 0.18%
  • statusStatus (SNT) $ 0.028599 5.02%
  • republic-protocolREN (REN) $ 0.112108 2.98%
  • nanoNano (XNO) $ 0.797619 6.69%
  • numeraireNumeraire (NMR) $ 16.19 2.76%
  • steemSteem (STEEM) $ 0.217842 0.95%
  • augurAugur (REP) $ 7.41 1.03%
  • kyber-networkKyber Network Crystal Legacy (KNCL) $ 1.97 3.79%
  • bitcoin-diamondBitcoin Diamond (BCD) $ 0.171303 2.03%
  • ethlendAave [OLD] (LEND) $ 0.787895 3.55%
  • bytomBytom (BTM) $ 0.009709 0.87%
  • energiEnergi (NRG) $ 0.190896 11.04%
%d такие блоггеры, как: