Stellar

<div class="cryptonews">
 <p class="is-style-lead">Smart contract development firm Thirdweb has discovered security vulnerabilities that potentially “affect various smart contracts in the Web3 ecosystem.”</p>
 <p>Thirdweb, an all-in-one development platform that provides EVM smart contracts, says it found a vulnerability in a popular open-source library that could potentially affect some pre-built smart contracts, including some of its own.</p>
 <figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
  <div class="wp-block-embed__wrapper">
   <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
    <p lang="en" dir="ltr">IMPORTANT <br><br>On November 20th, 2023 6pm PST, we became aware of a <a rel="noopener noreferrer nofollow" title="security" href="https://thebittimes.com/tag/security.html">security</a> vulnerability in a commonly used open-source library in the web3 industry.<br><br>This impacts a variety of <a rel="noopener noreferrer nofollow" title="smart" href="https://thebittimes.com/tag/smart.html">smart</a> <a rel="noopener noreferrer nofollow" title="contract" href="https://thebittimes.com/tag/contract.html">contract</a>s across the web3 ecosystem, including some of thirdweb’s pre-built <a rel="noopener noreferrer nofollow" title="smart" href="https://thebittimes.com/tag/smart.html">smart</a> <a rel="noopener noreferrer nofollow" title="contract" href="https://thebittimes.com/tag/contract.html">contract</a>s.…</p>— thirdweb (@thirdweb) December 5, 2023
   </blockquote>
  </div>
 </figure>
 <p>The team added that the smart contract vulnerability has not yet been exploited, but warned customers that the exploit could cause smart contract vulnerabilities.</p>
 <div class="cn-block-related-link">
  <svg class="cn-block-related-link__icon icon" aria-hidden="true"><use xlink:href="#"></use>
  </svg> <span class="cn-block-related-link__prefix"> You might also like: </span> Stellar initiates security audits for imminent Soroban smart contracts platform
 </div>
 <p>The firm warned users who deployed its contracts before Nov. 22 to “take mitigation measures” either on their own or through a tool provided by the company.</p>
 <blockquote class="wp-block-quote">
  <p>“We understand that this will cause disruption, and we are treating the mitigation of the issue with the utmost seriousness. We will be offering a retroactive gas grant to cover fees for contract mitigations.”</p> <cite>Thirdweb team</cite>
 </blockquote>
 <p>In June, an experiment by OpenZeppelin showed that AI can be a useful tool for detecting some <a rel="noopener noreferrer nofollow" title="security" href="https://thebittimes.com/tag/security.html">security</a> vulnerabilities, although GPT-4’s <a rel="noopener noreferrer nofollow" title="smart" href="https://thebittimes.com/tag/smart.html">smart</a> <a rel="noopener noreferrer nofollow" title="contract" href="https://thebittimes.com/tag/contract.html">contract</a> <a rel="noopener noreferrer nofollow" title="Category Analysis" href="https://thebittimes.com/analysis.html">Analysis</a> cannot replace human <a rel="noopener noreferrer nofollow" title="security" href="https://thebittimes.com/tag/security.html">security</a> audits.</p>
 <p>In some cases, even with strict guidance, the AI was unable to develop the right strategy. This highlights the potential of artificial intelligence tools to improve audit effectiveness when the auditor specifically knows what to look for.</p>
 <div class="cn-block-related-link">
  <svg class="cn-block-related-link__icon icon" aria-hidden="true"><use xlink:href="#"></use>
  </svg> <span class="cn-block-related-link__prefix"> You might also like: </span> Circle to launch new smart contract platform
 </div> <span class="google-news-banner__label">Follow Us on Google News</span>
</div>
<p>Source: <a rel="noopener noreferrer nofollow" target="_blank" href="https://thebittimes.com/thirdweb-reveals-major-security-flaw-in-common-smart-contracts-tbt72612.html">https://thebittimes.com/thirdweb-reveals-major-security-flaw-in-common-smart-contracts-tbt72612.html</a></p>

Thirdweb reveals major security flaw in common smart contracts

TheBitTimes

Other articles published on Dec 5, 2023

How Does the Triple Threat of Investment Give NFT Value?

Kinetex integrates with Connext for a unified DeFi ecosystem

Altcoin Market Cap Set To Surge and Reach $747.988B: Analyst

Palm Foundation Offers $45,000 Grant to Artists Exhibited at Patio by ZsONAMACO (5 Dec)

Binance Initiates Zero-Fee Trading For 6 Cryptocurrency Pairs

Shiba Inu Burn Rate Surges With Over 8 Billion SHIB Burned, Here’s The Trigger

Join our free newsletter for daily crypto updates!