The developers of the popular solution for the scaling of the Optimism Ethereum have discovered a critical vulnerability and corrected the error before, How hackers could use her.
The company's blog reports, that vulnerability was discovered by the developer Jay Freeman (Jay Freeman) In the fork of the Geth client, which was used to operate Optimism. Freeman published a separate article about the problem. Vulnerability was discovered 2 February and a few hours later the developers were able to fix it. Freeman was paid a reward in the amount $2 Milln for detecting a problem.
“Code error allowed the hacker to release ETH on the Optimism network using a constant call of SelfDestrect's OPCOD to a contract with a positive balance in ETH. The error correction was tested and widespread to the main Optimism network and the Kovan test network in just a few hours. We would like to thank Infura, Quicknode and Alchemy for a quick reaction. We also warned the developers of several Optimism forks, in which this problem can also be observed, as well as operators of the inter -grid bridges. These projects applied the correction ", - The developers write.
Recall, that the full launch of the Optimism solution took place in mid -December last year. Before that, the project was under testing. As of 10 february, The Optimism solution blocked assets in the amount of about $530 million.
