Zellic discloses a vulnerability in Astar that could lead to the theft of funds, which has now been fixed

Web3 auditing company Zellic issued a statement saying that in November this year, Zellic security researchers discovered a vulnerability in Astar that malicious actors could use to steal approximately $400,000 worth of tokens. This vulnerability allows any attacker to steal large amounts of funds from certain types of smart contracts deployed on the Astar EVM. Security researcher Faith, together with researcher vakzz, determined the amount of funds at risk of being stolen and subsequently submitted a report to the Astar Network bug bounty program on Immunefi. The vulnerability has since been fixed, and Zellic received $50,000 worth of ASTR tokens as a bounty.