A white hat hacker and iOS Cydia jailbreak software developer has earned a reward of $2 million (about Rs. 15 crore) just after fixing a “significant bug” in Ethereum Layer 2 scaling challenge Optimism which could have allowed hackers to create as considerably Ether in an Optimism account balance as they wanted. Optimism introduced that the bug was uncovered earlier this thirty day period and has been subsequently fixed by an iOS developer who goes by the name Jay Freeman on Twitter, letting him to generate a single of the premier bug-obtaining awards to date.
In a thorough blog site publish, Freeman (@saurik) spelled out on Twitter that the bug would “allow an attacker to copy funds on any chain applying his OVM 2. go-Ethereum fork.” For his endeavours, Freeman obtained a person of the premier bug-acquiring awards to date, with a whole award of $2,000,042 (around Rs. 15 crore).
Last 7 days, I found out (and reported) a crucial bug (which has been completely patched) in @optimismPBC (a “layer 2 scaling option” for Ethereum) that would have allowed an attacker to print arbitrary amount of tokens, for which I received a $2,000,042 bounty. https://t.co/J6KOlU8aSW
— Jay Freeman (saurik) (@saurik) February 10, 2022
In accordance to the Optimism staff, “The bug allowed the development of ETH on Optimism by regularly activating the SELFDESTRUCT opcode on a agreement that experienced an ETH harmony.”
We’re amazingly grateful to saurik for spending so much time examining our protocol in excess of the year–adequate to come across this sort of an significant correct! We really recommend you examine out his in-depth breakdown. We are going to award the comprehensive $2,000,042 promised in our bug bounty. https://t.co/536XK2Bfa5 pic.twitter.com/p8PZujKaDg
— Optimism (@optimismPBC) February 10, 2022
In a independent weblog article, the Optimism workforce famous that its chain record confirmed that the bug was not exploited, apart from an staff unintentionally activating the Ethereum Etherscan facts startup, but “no usable surplus was produced.”
“The take care of was analyzed and deployed to the Optimism Kovan and Mainnet networks (together with all infrastructure vendors) in just several hours of affirmation,” the workforce mentioned, thanking Infura, QuickNode, and Alchemy for the rapid response periods.
“We have also alerted many vulnerable forks of Optimism and bridge providers to the difficulty. All of these initiatives have utilized the expected fix.”
At the end of final 12 months, Optimism taken off its whitelist, permitting any developer to start making jobs on the Optimism community. Prior to this, the community was only available to sure jobs this sort of as Uniswap and Synthetix. This limitation made it easier for developers to detect and fix prospective bugs.
As per its internet site, Optimism identifies as a Layer-2 scaling protocol for Ethereum applications and is meant to look, truly feel and behave like Ethereum but less expensive and quicker. As for builders developing on Optimism, the enterprise attempts to make the swap absent from the primary Ethereum community as seamless as probable with no getting to go by way of a long process.
Cryptocurrency is an unregulated electronic currency, not a lawful tender and matter to marketplace threats. The information furnished in the article is not intended to be and does not represent economic suggestions, investing suggestions or any other suggestions or recommendation of any form supplied or endorsed by NDTV. NDTV shall not be accountable for any decline arising from any investment dependent on any perceived recommendation, forecast or any other information contained in the post.
