"The White Hacker" received $540 000 instead of $2 Milln for the detection of critical vulnerability in arbitrum – Bits Media

Developers of the scaling solution of the ARBITRUM Ethereum announced the rewarding program in the amount $2 Milln for the detection of critical vulnerabilities, However, they only pay $540 000.

Such a complaint on the social network Twitter was published by the White Hacker under the pseudonym Riptide. According to him, He discovered extremely serious vulnerability in Arbitrum Nitro code, which, Theoretically, could lead to loss $470 million. In his opinion, The message about such vulnerability should be evaluated at the maximum rate of remuneration in $2 million, However, the developers paid only 400 ETH ($540 000).

The hacker carefully analyzed the Arbitrum Nitro code and found the vulnerability in the sequences of incoming bridge messages when translating assets from Ethereum to Arbitrum. Vulnerability would allow the hacker to redirect the funds, Eterium coming from the network, On your own wallets.

"In my opinion, Everything is simple. If you declare a reward in $2 million, then be prepared to pay it with a real application. Otherwise, just write, that the maximum reward is 400 ETH and there will be no questions. Hackers monitor projects, who pay rewards, and who do not pay. In my opinion, Not too good idea to motivate the “White Hacker” become “black” ”, - Written by Riptide.

Note, that in June, the developers of the Aurora blockchain based on Near Protocol honestly paid the White Hacker in the amount $6 Milln for that, What helped prevent theft 70 000 ETH.