Stellar

Smart contract development firm Thirdweb has discovered security vulnerabilities that potentially “affect various smart contracts in the Web3 ecosystem.” 
Thirdweb, an all-in-one development platform that provides EVM smart contracts, says it found a vulnerability in a popular open-source library that could potentially affect some pre-built smart contracts, including some of its own. 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper"> 
 <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
 IMPORTANT On November 20th, 2023 6pm PST, we became aware of a security vulnerability in a commonly used open-source library in the web3 industry. This impacts a variety of smart contracts across the web3 ecosystem, including some of thirdweb’s pre-built smart contracts.…— thirdweb (@thirdweb) <a href="https://twitter.com/thirdweb/status/1731841493407576247?ref_src=twsrc%5Etfw" target="_blank" rel="noopener">December 5, 2023</a>
 </blockquote>
 <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
 </div>
</figure> 
The team added that the smart contract vulnerability has not yet been exploited, but warned customers that the exploit could cause smart contract vulnerabilities. 
 You might also like: <a href="https://crypto.news/stellar-initiates-security-audits-for-imminent-soroban-smart-contracts-platform/"> Stellar initiates security audits for imminent Soroban smart contracts platform </a> 
The firm warned users who deployed its contracts before Nov. 22 to “take mitigation measures” either on their own or through a tool provided by the company. 
<blockquote class="wp-block-quote"> 
 “We understand that this will cause disruption, and we are treating the mitigation of the issue with the utmost seriousness. We will be offering a retroactive gas grant to cover fees for contract mitigations.” <cite>Thirdweb team</cite>
</blockquote> 
In June, an experiment by OpenZeppelin <a href="https://crypto.news/hacking-smart-contracts-with-ai-could-target-old-vulnerabilities-research-shows/">showed</a> that AI can be a useful tool for detecting some security vulnerabilities, although GPT-4’s smart contract analysis cannot replace human security audits. 
In some cases, even with strict guidance, the AI was unable to develop the right strategy. This highlights the potential of artificial intelligence tools to improve audit effectiveness when the auditor specifically knows what to look for. 
 You might also like: <a href="https://crypto.news/circle-to-launch-new-smart-contract-platform/"> Circle to launch new smart contract platform </a>

Thirdweb reveals major security flaw in common smart contracts

crypto.news

Other articles published on Dec 5, 2023

Shiba Inu Burn Rate Skyrockets by 7,686,774% as SHIB Surges 11%: What Caused the Spike in Burn Rate?

Leap Zero-Knowledge! Workshop Event Recap

Bitcoin Price Surpasses $44,000! What’s Next for BTC?

WOW EARN Unveils Layer 1 Blockchain, Redefining Efficiency and Global Accessibility (5 Dec)

On-chain data reveals a significant increase in large Cardano (ADA) transactions

Shiba Inu Set To Establish A New Era For Shibarium Burns

Join our free newsletter for daily crypto updates!