2024

Wormhole

Aptos

April

Million

A security flaw in the Wormhole bridge on the Aptos network, if left undiscovered, could have resulted in $5 million worth of losses, according to blockchain security platform CertiK.&nbsp; 
The flaw, discovered and reported by CertiK, arose from an incorrect implementation of modifiers in the MOVE programming language.&nbsp; 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper"> 
 <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
 🚨 CertiK's security research team detected a critical bug in <a href="https://twitter.com/wormhole?ref_src=twsrc%5Etfw" target="_blank" rel="noopener">@wormhole</a>, a leading open source bridge for multichain applications. Discover how an incorrect application of the public(friend) and entry modifiers exposed the blockchain to potential multimillion-dollar exploits by… <a href="https://t.co/fOKgT6RaTC" target="_blank">pic.twitter.com/fOKgT6RaTC</a>— CertiK (@CertiK) <a href="https://twitter.com/CertiK/status/1790041168190788012?ref_src=twsrc%5Etfw" target="_blank" rel="noopener">May 13, 2024</a>
 </blockquote> 
 </div>
</figure> 
CertiK found a problem with the publish_event function in the Wormhole bridge, letting anyone use it. This could have led to fake transactions and big losses.&nbsp; 
After informing the Wormhole team, a patch was developed and implemented promptly, closing the security loophole and preventing potential exploitation. 
In addition to fixing the flaw, Wormhole reduced the governor rate limits on Aptos from $5 million to $1 million to limit potential losses in case of future exploits. This adjustment ensures enhanced security measures and minimizes risks for users.&nbsp; 
With the flaw patched, Wormhole performed a retrospective analysis, confirming no illicit fund transfers and assuring users’ balances remained safe. 
<blockquote class="wp-block-quote is-layout-flow wp-block-quote-is-layout-flow"> 
 Also Read: <a href="https://www.cryptotimes.io/2024/05/01/certik-april-sees-decline-in-crypto-hacking-losses/" target="_blank" rel="noreferrer noopener">CertiK: April Sees Decline in Crypto Hacking Losses</a> 
</blockquote>

CertiK Detects and Resolves $5 Million Wormhole Bridge Flaw

The Crypto Times

Other articles published on May 14, 2024

Coinbase CLO Rallies Binance, Ripple, Uniswap to Resist SEC's 'Gaslighting'

Ripple Seeks Confidentiality in SEC Case, as Top Analyst Predicts XRP Price Will Peak by September

Breaking: Jim Simons’ Renaissance Tech Invests in GameStop Shares and Bitcoin ETF

President Biden Blocks Chinese-Backed Crypto Mining Firm from Acquiring Land Near Wyoming Militar...

BlockDAG Lights Up Piccadilly Circus Amid Ethereum Price Prediction and Fantom (FTM) Market Cap C...

Cryptocurrency Developers Fight Back Against DOJ’s Money Transmission Stance

Join our free newsletter for daily crypto updates!