Polkadot’s best three parachains, Acala, Moonbeam, and Astar, have been identified to have vulnerabilities, but have been promptly fixed.
A protection skilled has identified a computer software vulnerability that could threaten up to $200 million of assets on the 3 significant parachains of Polkadot, Acala, Moonbeam and Astar.
Specifically, the skilled pwning.eth identified a bug linked to the token wrapping mechanism of all 3 parachains from June 2022 and reported it to the Immunefi bug bounty platform, but it was only not long ago announced.
The vulnerability could be applied to challenge an infinite quantity of wrap tokens, which includes Wrapped Astar (WASR) on Astar, Wrapped Moonbeam (WGLMR) on Moonbeam, and Wrapped Moonriver (WMOVR) on Moonriver, the “sister” network with Moonbeam. It is estimated that the injury triggered by this error could attain 200 million bucks.
After the bug was reported, all three parachains Acala, Moonbeam and Astar worked collectively to apply the patch.
Thanks to the discovery of the bug, pwning.eth acquired a $one million reward thanks to Immunefi. This character is also no stranger to bug bounty rewards when in early 2022 he acquired up to six million bucks for detecting the bug in Aurora, the Near Protocol EVM bridge, so conserving 70,000 ETH.
Maybe you are interested: