Ronin Bridge Exploit of $10 Million Caused by Faulty Upgrade Script — Verichains

user avatar

by Giorgi Kostiuk

2 years ago

Made with AI

  1. Cause of the Vulnerability
  2. How the Attack Happened
  3. Consequences and Resolution


    4. The $10 million Ronin bridge exploit on August 6 was caused by a faulty upgrade deployment script, according to blockchain security firm Verichains.

    Cause of the Vulnerability

    The upgrade reduced the voting threshold for validators to zero, allowing any user to withdraw from the bridge without a signature. Verichains states that the error occurred due to the incorrect initialization of the totalWeight variable.

    How the Attack Happened

    The attacker attempted to exploit this flaw but was front-run by an MEV bot, which actually carried out the attack, probably unintentionally. The bot’s owner later returned most of the funds to the Ronin team.

    Consequences and Resolution

    Verichains’ analysis reveals the risks of interacting with upgradeable smart contracts. The network could have lost the full amount had the attacker paid more in gas and thus avoided the front-run.

    Due to the faulty upgrade script, Ronin bridge users were able to withdraw funds without validator signatures. This incident highlights the potential risks when dealing with upgradeable smart contracts.

Tier I

Sector: #18291

Sealed Cache Room

Resource Cache

Resource Cache

Tier I

Requires 25% Tier Progress to Claim
Meme Cache

Meme Cache

Tier I

Requires 50% Tier Progress to Claim
Equipment Cache

Equipment Cache

Tier I

Requires 75% Tier Progress to Claim

After collecting, caches will be stored in your inventory and can be opened with Keys.

Other news

Meta Platforms' Shares Surge Following AI Assistant Launch

chest

Meta Platforms' shares rose over 6% after the launch of its AI assistant, Muse, which helps users manage tasks and goals.

user avatarTomas Novak

Galaxy Announces $5 Million Funding for Bitcoin Quantum Security Research

chest

Galaxy announced up to $5 million in funding for Bitcoin quantum-security work, including developer grants, research, and an advisory council.

user avatarMaya Lundqvist

IonQ Launches Superion 256 Quantum Computer with Orders Open for 2027 Delivery

chest

IonQ has launched its Superion 256 quantum computer, opening orders for delivery in 2027.

user avatarKaterina Papadopoulou

Prediction Markets Show Shifts in Oil Price Expectations

chest

Prediction markets are reacting to oil price fluctuations, with traders speculating on whether crude will reach $120 or fall to $55 first.

user avatarAisha Farooq

Record Diesel Prices Hit Ahead of Midterm Elections

chest

Record diesel prices reached a high of 594 a gallon, raising concerns about consumer affordability ahead of the midterm elections.

user avatarLi Weicheng

Brent Crude Surpasses $100 Amid Geopolitical Tensions

chest

Brent crude oil prices rose above $100 for the first time in six weeks due to geopolitical tensions, including attacks on Saudi oil facilities and US military responses.

user avatarLeo van der Veen

Important disclaimer: The information presented on the Dapp.Expert portal is intended solely for informational purposes and does not constitute an investment recommendation or a guide to action in the field of cryptocurrencies. The Dapp.Expert team is not responsible for any potential losses or missed profits associated with the use of materials published on the site. Before making investment decisions in cryptocurrencies, we recommend consulting a qualified financial advisor.