Twitter user discovered a large vulnerability in the BitBTC inter -member bridge – Bits Media

Bitbtc Bridge Bridge, used to move assets between Optimism and Bitant, It turned out to be vulnerable, However, the developers of the bridge did not immediately pay attention to the warnings.

This was announced on Twitter by one of the leading developers of the Arbitrum solution Lee Bowfield (Lee Bousfield). According to him words, Vulnerability allows you to release “fake” tokens in the BITBTC smart contract, and then exchange them for real.

“The BitBTC bridge for the Optimism network has a very simple vulnerability. But their team ignored me, Therefore, I will write here. The meaning is, that on the Optimism side you can take any token, and select the address at the first network level. At the same time, the bridge does not take into account, that this is a token L2 and simply creates a token L1. I.e, an attacker can create his own token on Optimism, match it with the real BITBTC level 1 token on BitBTC and withdraw funds", – Bousfield said.

Through 10 hours Bousfield wrote, that the BitAnt development team has fixed a vulnerability in the BitBTC bridge smart contract.

Optimism developer Kevin Fichter (Kevin Fichter) confirmed vulnerability, but emphasized, that it was discovered in the BitBTC bridge and only the BITBTC token was at risk. Other assets are safe. He also encouraged everyone to use the standard Optimism bridge to move assets.

Recall, that October has already become a record month for the volume of stolen funds from cryptocurrency projects, and the lion's share of assets was stolen from internetwork bridges.