Ronin Bridge Exploit of $10 Million Caused by Faulty Upgrade Script — Verichains

user avatar

by Giorgi Kostiuk

2 years ago

Made with AI

  1. Cause of the Vulnerability
  2. How the Attack Happened
  3. Consequences and Resolution


    4. The $10 million Ronin bridge exploit on August 6 was caused by a faulty upgrade deployment script, according to blockchain security firm Verichains.

    Cause of the Vulnerability

    The upgrade reduced the voting threshold for validators to zero, allowing any user to withdraw from the bridge without a signature. Verichains states that the error occurred due to the incorrect initialization of the totalWeight variable.

    How the Attack Happened

    The attacker attempted to exploit this flaw but was front-run by an MEV bot, which actually carried out the attack, probably unintentionally. The bot’s owner later returned most of the funds to the Ronin team.

    Consequences and Resolution

    Verichains’ analysis reveals the risks of interacting with upgradeable smart contracts. The network could have lost the full amount had the attacker paid more in gas and thus avoided the front-run.

    Due to the faulty upgrade script, Ronin bridge users were able to withdraw funds without validator signatures. This incident highlights the potential risks when dealing with upgradeable smart contracts.

Tier I

Sector: #18291

Sealed Hiding Place Room

Resource Cache

Resource Cache

Tier I

Requires 25% Tier Progress to Claim
Meme Cache

Meme Cache

Tier I

Requires 50% Tier Progress to Claim
Equipment Cache

Equipment Cache

Tier I

Requires 75% Tier Progress to Claim

After collecting, hiding places will be stored in your inventory and can be opened with Keys.

Other news

Arca Desktop App Now Open to Public for AI Session Monetization

The Arca desktop app has launched to the public, allowing users to monetize their AI session data.

user avatarJacob Williams

Exodus Reports Third-Quarter Revenue Growth Amid Net Loss

Exodus reported a 7% revenue increase in Q3, reaching $325 million, but faced a net loss of $83 million, highlighting rising operational costs.

user avatarZainab Kamara

eToro Reports Decline in Third-Quarter Net Income Amid Growing Funded Accounts

eToro reports a significant decline in third-quarter net income to approximately $15 million, down from $57 million last year, despite an 18% growth in funded accounts.

user avatarSon Min-ho

Bitdeer Achieves Record Revenue but Faces Major Losses

Bitdeer reported record revenue of $320.7 million for Q3 2023, an 89% increase year-over-year, but faced a net loss of $125.5 million.

user avatarAyman Ben Youssef

Bitcoin May Benefit from Greater Regulatory Clarity

Bitcoin may benefit from a more predictable US regulatory environment as the SEC shows interest in blockchain-based financial infrastructure.

user avatarKofi Adjeman

SEC Reports Significant Decline in Enforcement Actions

The US Securities and Exchange Commission (SEC) has reported a significant decline in enforcement actions, marking the lowest level since 1991, under the Trump administration.

user avatarTando Nkube

Important disclaimer: The information presented on the Dapp.Expert portal is intended solely for informational purposes and does not constitute an investment recommendation or a guide to action in the field of cryptocurrencies. The Dapp.Expert team is not responsible for any potential losses or missed profits associated with the use of materials published on the site. Before making investment decisions in cryptocurrencies, we recommend consulting a qualified financial advisor.