Dedaub receives $40,000 vulnerability bounty for disclosing Uniswap reentry vulnerability

01/03 15:33

security firm Dedaub has announced that it has received a 40,000 USDC security vulnerability bounty from Uniswap Labs for disclosing a serious vulnerability in Uniswap that had the potential to reenter and deplete users' funds. However, the Uniswap team has resolved the vulnerability and redeployed the Universal Router smart contract on all chains and the funds are safe. Uniswap is releasing the Universal Router smart contract in November 2022, which unifies ERC20 and NFT exchanges into a single exchange router that allows users to perform heterogeneous operations, for example, exchanging multiple Tokens and NFTs in a single transaction. The router embeds a scripting language for various Token operations, and such commands may include transmissions to third-party (and possibly untrusted) recipients," says Dedaub. If third-party code is invoked at any point during a transmission, that code can re-enter the UniversalRouter and temporarily claim any Token in the contract. dedaub recommends that Uniswap add a re-entry lock to the new router's core execution and redeploy it."

1Giảm giá1Chia sẻ

Tuyên bố miễn trừ trách nhiệm：Nội dung trên không đại diện cho quan điểm của HTX.，HTX không đưa ra bất kỳ lời khuyên giao dịch nào.。