Aurora pays $6M bug bounty to ethical security hacker through Immunefi

2022/06/08 01:29

On Tuesday, Ethereum (ETH) bridging and scaling solution Aurora announced it had paid out a $6 million bounty to ethical security hacker pwning.eth, who discovered a critical vulnerability in the Aurora Engine. The exploit allegedly placed over $200 million worth of capital at risk. The sum was paid in collaboration with Immunefi, a leading platform for Web 3.0 bug bounties, with $145+ million bounties available and $45+ million bounties paid out.

On April 26, Immunefi received a report from pwning.eth about a critical flaw in the Aurora Engine that would have enabled the infinite minting of ETH in the Aurora Ethereum Virtual Machine as to drain and siphon the corresponding nested ETH (nETH) pool on NEAR. At the time of discovery, the pool contained more than 70,000 ETH worth at least $200 million.

Mitchell Amador, founder and CEO at Immunefi, said: "Hats off to Aurora and pwning.eth for the flawless overall processing of the report. The bug was quickly patched, with no user funds lost." Aurora had launched a bug bounty program with Immunefi just one week before discovering the security vulnerability. Meanwhile, Frank Braun, head of security at Aurora Labs, commented: "We look at the bug bounty program as the last step in a layered defense approach and will use this bug as a learning opportunity to improve earlier steps, like internal reviews and external audits.

Though arguably innovative, cross-chain communication protocols have been a prime target of hackers as of late. In February, one of the largest decentralized finance hacks occurred when the Wormhole token bridge was drained of over $321 million in digital assets after hackers exploited an infinite minting glitch between its wrapped ETH and ETH pool.

Black Hat Hacker

Gain a broader understanding of the crypto industry through informative reports, and engage in in-depth discussions with other like-minded authors and readers. You are welcome to join us in our growing Coinlive community:https://t.me/CoinliveSG

Add Comment

LoginLeave your comments

0 Comments

Earliest

Load more comments

More news about starknet foundry

Dec 04
Foundry Restructures With Significant Workforce Reductions
Bullish
Bearish
May 31
Radix Expands Its Ecosystem Fund, Launches Foundry Program
Bullish
Bearish
Apr 03
Starknet: Starknet Goerli testnet will be shut down
Bullish
Bearish
Jul 27
Starknet Foundry 0.2.0 is live
Bullish
Bearish
Jul 19
Starknet will soon launch the Starknet application chain
Bullish
Bearish
Jul 19
StarkWare Introduces Starknet Foundry, an Extreme Toolkit for Developing Starknet Contracts
Bullish
Bearish
Jun 06
zkSync Era already supports Paradigm-created modular toolkit Foundry
Bullish1
Bearish
Jan 17
StarkNet will be releasing a StarkNet wallet update in the coming weeks
Bullish
Bearish
Nov 10
StarkWare Establishes StarkNet Foundation to Promote StarkNet Ecological Development
Bullish
Bearish
Aug 23
Moonbeam Now Supports Ethereum Development Kit Foundry
Bullish
Bearish

Aurora pays $6M bug bounty to ethical security hacker through Immunefi

More news about starknet foundry

More news about starknet foundry

Starknet CEO: TPS will be increased 4 times and fees will be reduced 5 times within 3 months

Starknet Roadmap Overview

AW Frontier: The Ultimate Guide to Starknet Full Chain Games

Are there any opportunities worth taking besides Starknet 2024?

Argent Winds Down zkSync Support for Starknet Horizon

Starknet 空投计划解析

Top 10 Starknet Projects in 2023

Visa Proposes Using StarkNet for Automatic Recurring Payments

Ethereum Layer 2 Wars: StarkNet Launches STRK Token, zkSync Raises $200M

Otherside fell below the foundry price, while some top NFT floor prices plummeted