ParaSwap

Artificial Intelligence

Security

You can also read this news on COINTURK NEWS: <a href="https://en.coin-turk.com/paraswap-acts-swiftly-to-prevent-major-fund-loss-due-to-security-flaw/" data-wpel-link="internal" rel="noopener noreferrer nofollow">ParaSwap Acts Swiftly to Prevent Major Fund Loss Due to Security Flaw</a> 
The decentralized finance (<a href="https://coin-turk.com/cream-finance-coin-nedir" data-wpel-link="internal" rel="noopener noreferrer nofollow">DeFi</a>) platform ParaSwap discovered a security vulnerability in its newly launched Augustus v6 contract and averted significant fund loss through timely white hat intervention. On March 18th, the ParaSwap Augustus v6 contract went live, aiming to increase swap efficiency and reduce transaction fees. However, the contract contained a critical security flaw that could allow hackers to drain funds upon approval.
<h2 class="p1" style="text-align: justify" id="proactive-steps-by-the-paraswap-team">Proactive Steps by the ParaSwap Team</h2>
ParaSwap paused its v6 application programming interface (API) shortly after discovering the security flaw on March 20th and secured potential losses through a white hat attack.
<img loading="lazy" loading="lazy" decoding="async" class="aligncenter wp-image-330645" src="https://coin-turk.com/wp-content/uploads/2024/03/paraswap-.jpg" alt="" width="500" height="737">
ParaSwap recommended all users to revoke permissions for the Augustus v6 contract to prevent further fund loss until the vulnerability was neutralized. Despite ParaSwap’s efforts to retract the vulnerable v6 contract and inform users of the necessary steps, a hacker managed to withdraw approximately $24,000 from four different addresses.
ParaSwap announced that a total of 386 addresses were affected by the security flaw. The protocol also asked users to report any fund losses that may not have been detected during the preliminary investigation.
<img loading="lazy" loading="lazy" decoding="async" class="aligncenter wp-image-330646 size-full" src="https://coin-turk.com/wp-content/uploads/2024/03/paraswap-ekip.webp" alt="" width="1492" height="790">
In addition, ParaSwap disabled support for the vulnerable v6 contract in its recently updated user interface and reverted to using v5. The team stated the following:
<blockquote>
 “We have successfully retrieved funds for all addresses and more details about the reimbursement process will be shared soon.”
</blockquote>
<h2 class="p1" style="text-align: justify" id="software-bugs-and-artificial-intelligence">Software Bugs and Artificial Intelligence</h2>
Users affected by the process remain at risk unless they revoke their approvals, and ParaSwap recommends using services like Revoke to ensure their security.
Following this incident, the field of artificial intelligence came into focus again. Productive AI tools like ChatGPT-4 are good at generating code but cannot fully serve as reliable security auditors. A pair of researchers from Salus Security, a blockchain security company with offices in North America, Europe, and Asia, stated in a recently published research paper:
“GPT-4, can be a useful tool for assisting in smart contract audits, especially in parsing code and providing vulnerability hints. However, considering its limitations in detecting vulnerabilities, it cannot fully replace professional audit tools and experienced auditors at this time.”
<h5>The post first appeared on COINTURK NEWS: <a href="https://en.coin-turk.com/paraswap-acts-swiftly-to-prevent-major-fund-loss-due-to-security-flaw/" data-wpel-link="internal" rel="noopener noreferrer nofollow">ParaSwap Acts Swiftly to Prevent Major Fund Loss Due to Security Flaw</a></h5>

ParaSwap Acts Swiftly to Prevent Major Fund Loss Due to Security Flaw

Table of Contents

COINTURK NEWS

Other articles published on Mar 20, 2024

Bitcoin price retraces 30 days ahead of halving in historical pattern

Insider Insights: The 3 Altcoins Forecasted to Experience Explosive Price Growth

Binance Mulls Delisting MobileCoin

Ethereum Foundation Under Investigation by Unnamed Authority

Finance experts set Terra Classic price for end of 2024

Trezor X Account Hacked: How Much Was Taken In The Fake Crypto Presale?

Join our free newsletter for daily crypto updates!