Arbitrum pays a code bounty hunter 400 ETH for finding a bridge vulnerability between Ethereum and Arbitrum Nitro

09/21 01:28

According to The Block, details emerged this morning of a vulnerability and bounty paid by Arbitrum. The patched exploit could have compromised more than $250 million. The vulnerability was discovered by pseudonymous solidity bounty hunter “0xriptide.” It could have affected any user who attempted to bridge funds from Ethereum to Arbitrum Nitro, 0xriptide said. His initial search for the Arbitrum exploit began a few weeks ago ahead of the Arbitrum Nitro upgrade. Upon his initial investigation, he found a vulnerability where the bridging contract was able to accept deposits, even though the contract was initialized previously. After digging into the uninitialized address, 0xriptide found that a hacker would be able to set their own address as the bridge, mimicking the actual contract, and steal all the incoming ETH deposits from Etheruem to Arbitrum Nitro. Arbitrum has paid 0xriptide 400 ETH (about $520,000) as compensation for alerting it to the vulnerability.

Rialzista3Mi piaceCondividi

Disclaimer：Il contenuto di cui sopra non rappresenta le posizioni di HTX.，HTX non fornisce alcuna raccomandazione di trading.。