Bitget App
Trade smarter
Buy cryptoMarketsTradeFuturesCopyBotsEarn
LayerZero CEO Bryan Pellegrino Warns of Vulnerable Protocol! Here Are the Details

LayerZero CEO Bryan Pellegrino Warns of Vulnerable Protocol! Here Are the Details

BitcoinsistemiBitcoinsistemi2024/10/22 08:18
By:Utku Yanık

Bryan Pellegrino, CEO of LayerZero, has disclosed a critical vulnerability in the Across Protocol’s token contract.

Bryan Pellegrino, CEO of LayerZero, a cross-chain interoperability protocol, has disclosed a critical vulnerability in the Across Protocol’s token contract.

LayerZero CEO Reveals Critical Vulnerability in Across Protocol's Token Contract

Pellegrino disclosed the vulnerability via social media, warning that it could allow malicious actions including token destruction and balance manipulation across user wallets.

The issue arises from a function that was intended to be private but was inadvertently made public in the contract.

According to Pellegrino, the flawed functionality stems from OpenZeppelin’s ERC20 token implementation and allows the contract owner to destroy tokens or empty wallets, reducing the balance of any account to zero.

Unlimited Token Minting Flaw Discovered in Across and UMA Protocols

In addition to the aforementioned kill vulnerability, Pellegrino has also identified a separate flaw in both the Across and UMA Protocol contracts that could allow for unlimited token minting.

This could have devastating consequences for the protocols’ token economies, potentially leading to serious market manipulation or loss of trust.

Pellegrino expressed concern that despite the seriousness of the discovery, neither project responded after being notified.

To reduce risks without having to reprint tokens, Pellegrino suggested transferring ownership of the vulnerable token contract to a new smart contract.

This new contract will ensure security by eliminating overprinting and token destruction features. Pellegrino emphasized that the new contract should be immutable and ownership transfer limited to ensure long-term protection.

*This is not investment advice.

0

Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.

PoolX: Locked for new tokens.
APR up to 10%. Always on, always get airdrop.
Lock now!

You may also like

Trump’s Crypto Directive May Disrupt Bitcoin’s Quadrennial Cycle, Forecasts Massive Capital Influx – Bitwise

Potential Shake-Up in Bitcoin's Traditional Rhythms: Insight into How Trump's Crypto Order Might Redefine the Four-Year Cycle and Catalyze Surge in Capital Flow

Coineagle2025/02/01 04:55

Ethereum Traders Alert: Key Insights from February’s Expected MVRV Decline

Forecasting Ethereum's Unsteady February Ride: A Deep Dive into the Impacts of MVRV Downturn

Coineagle2025/02/01 04:55

Tether, The World’s Largest Stablecoin Company, Reveals How Much Total Profit It Made In 2024

Tether, the world's largest stablecoin issuer, shared how much profit it made in total last year.

Bitcoinsistemi2025/02/01 04:44

We Asked Chinese AI DeepSeek: Where Will Bitcoin (BTC), Ethereum (ETH), Dogecoin (DOGE) and XRP Prices Fall the Furthest in 2025?

DeepSeek, an artificial intelligence model released by Chinese developers, has predicted the prices of the largest cryptocurrencies.

Bitcoinsistemi2025/02/01 04:44