Solana eliminated the “rounding” error worth $2.6 billion – Bits Media

NEODYME cybersecurity reported to exploit SOLANA blockchain, who created the opportunity to abduct user tokens blocked in defi protocols.

Neodyme
wrote on Twitter about that, that I discovered and corrected the error in the contract for the provision tokens in the Library of SOLANA programs (SPL). According to experts, exploit, discharge, threatened several Defi protocols with the total volume of blocked assets (TVL) for the amount $2.6 billion. Vulnerability caused a rounding error, As a result, more tokens were blocked, What was included in users in the contract.

Neodyme believes, that exploit could only be used with organized cyber attack, directed directly at vulnerability. The audit group managed to create and reproduce the script, which they used to eliminate the error. According to experts, Using an exploit, Attackers could not in a hurry to withdraw tokens from Defi platforms, And this would be perceived as a slow exhaustion in some pools. Neodyme noted the importance of using an open source code to attract auditors to correct such errors.

"We believe, that open source code is the most safe, This is one of the effective ways to identify vulnerability ".

NEODYME cybersecurity company shared an error with companies, who use the code from the library. Among them were protocols on Solana, which do not have the code in the public domain and cannot be directly checked. Neodyme experts contacted teams, standing behind these protocols, and reported vulnerability.

Last week, the Dydx decentralized exchange warned users about the vulnerability of the smart contract, which was discovered by the "White hacker". In November, the validators of the inter -grid protocol Synapse Bridge prevented theft of assets for $8 millions. Kiberataka was aimed at the Synapse Bridge bridge between Polygon and Avalanche networks. In August, the Sushiswap platform avoided hacking $365 Millions thanks to the "White Hacker".