A programmer with the nickname saurik (real name - Jay Freeman) from White Hat discovered a significant bug in the Optimism project, which allowed creating any number of ETH tokens on the account balance. Now the error has been fixed.
Optimism is a project to expand Ethereum (layer 2 network). These networks make it possible to process transfers outside the main Ethereum blockchain, which reduces the workload.
Freeman posted his story on his Twitter page. He managed to find a weak link in the code that allowed scammers to copy an infinite amount of cryptocurrency, since any Ethereum developer had the ability to allow automatic creation of new tokens for any fork of the network.
As a result, Jay was issued a check for $ 2 million. Optimism said that no one had time to exploit the mistake.
Optimism is a project to expand Ethereum (layer 2 network). These networks make it possible to process transfers outside the main Ethereum blockchain, which reduces the workload.
Last week, I discovered (and reported) a critical bug (which has been fully patched) in @optimismPBC (a "layer 2 scaling solution" for Ethereum) that would have allowed an attacker to print arbitrary quantity of tokens, for which I won a $2,000,042 bounty. https://t.co/J6KOlU8aSW
— Jay Freeman (saurik) (@saurik) February 10, 2022
Freeman posted his story on his Twitter page. He managed to find a weak link in the code that allowed scammers to copy an infinite amount of cryptocurrency, since any Ethereum developer had the ability to allow automatic creation of new tokens for any fork of the network.
As a result, Jay was issued a check for $ 2 million. Optimism said that no one had time to exploit the mistake.
Login or register to post comments
Comments 0