CertiK Discovers a Security Flaw in the Wormhole System on the Aptos Network

CertiK Discovers a Security Flaw in the Wormhole System on the Aptos Network

user avatar

by Eve Adams

2 years ago

CertiK, a blockchain security platform, reported discovering a vulnerability in the Wormhole system on the Aptos network that could potentially have led to financial losses amounting to $5 million. The flaw was detected and rectified in a timely manner after notifying the Wormhole team, preventing possible exploitation by malicious actors.

According to CertiK, the issue arose due to incorrect implementation of the public(friend) and entry modifiers in the MOVE programming language. The public(friend) modifier restricted function calls to other functions within the same module or specified external accounts, while the entry modifier allowed the function to be called from any external account.

This configuration enabled attackers to create fictitious transactions that would move tokens between accounts without actually transferring funds. This could allow the Ethereum bridge to issue or unlock tokens without the backing of real deposits on the Aptos side. Ultimately, malicious actors could have caused damage up to $5 million had the vulnerability not been identified and addressed promptly.

CertiK provided a detailed report on the vulnerability in video format, enhancing awareness and attention to security issues within the blockchain community.

Tier I

Sector: #18291

Sealed Hiding Place Room

Resource Cache

Resource Cache

Tier I

Requires 25% Tier Progress to Claim
Meme Cache

Meme Cache

Tier I

Requires 50% Tier Progress to Claim
Equipment Cache

Equipment Cache

Tier I

Requires 75% Tier Progress to Claim

After collecting, hiding places will be stored in your inventory and can be opened with Keys.

Other news

Arca Desktop App Now Open to Public for AI Session Monetization

The Arca desktop app has launched to the public, allowing users to monetize their AI session data.

user avatarJacob Williams

Exodus Reports Third-Quarter Revenue Growth Amid Net Loss

Exodus reported a 7% revenue increase in Q3, reaching $325 million, but faced a net loss of $83 million, highlighting rising operational costs.

user avatarZainab Kamara

eToro Reports Decline in Third-Quarter Net Income Amid Growing Funded Accounts

eToro reports a significant decline in third-quarter net income to approximately $15 million, down from $57 million last year, despite an 18% growth in funded accounts.

user avatarSon Min-ho

Bitdeer Achieves Record Revenue but Faces Major Losses

Bitdeer reported record revenue of $320.7 million for Q3 2023, an 89% increase year-over-year, but faced a net loss of $125.5 million.

user avatarAyman Ben Youssef

Bitcoin May Benefit from Greater Regulatory Clarity

Bitcoin may benefit from a more predictable US regulatory environment as the SEC shows interest in blockchain-based financial infrastructure.

user avatarKofi Adjeman

SEC Reports Significant Decline in Enforcement Actions

The US Securities and Exchange Commission (SEC) has reported a significant decline in enforcement actions, marking the lowest level since 1991, under the Trump administration.

user avatarTando Nkube

Important disclaimer: The information presented on the Dapp.Expert portal is intended solely for informational purposes and does not constitute an investment recommendation or a guide to action in the field of cryptocurrencies. The Dapp.Expert team is not responsible for any potential losses or missed profits associated with the use of materials published on the site. Before making investment decisions in cryptocurrencies, we recommend consulting a qualified financial advisor.