Aurora pays $6M bug bounty to ethical security hacker through Immunefi

2022/06/08 01:29

On Tuesday, Ethereum (ETH) bridging and scaling solution Aurora announced it had paid out a $6 million bounty to ethical security hacker pwning.eth, who discovered a critical vulnerability in the Aurora Engine. The exploit allegedly placed over $200 million worth of capital at risk. The sum was paid in collaboration with Immunefi, a leading platform for Web 3.0 bug bounties, with $145+ million bounties available and $45+ million bounties paid out.

On April 26, Immunefi received a report from pwning.eth about a critical flaw in the Aurora Engine that would have enabled the infinite minting of ETH in the Aurora Ethereum Virtual Machine as to drain and siphon the corresponding nested ETH (nETH) pool on NEAR. At the time of discovery, the pool contained more than 70,000 ETH worth at least $200 million.

Mitchell Amador, founder and CEO at Immunefi, said: "Hats off to Aurora and pwning.eth for the flawless overall processing of the report. The bug was quickly patched, with no user funds lost." Aurora had launched a bug bounty program with Immunefi just one week before discovering the security vulnerability. Meanwhile, Frank Braun, head of security at Aurora Labs, commented: "We look at the bug bounty program as the last step in a layered defense approach and will use this bug as a learning opportunity to improve earlier steps, like internal reviews and external audits.

Though arguably innovative, cross-chain communication protocols have been a prime target of hackers as of late. In February, one of the largest decentralized finance hacks occurred when the Wormhole token bridge was drained of over $321 million in digital assets after hackers exploited an infinite minting glitch between its wrapped ETH and ETH pool.

Black Hat Hacker

Gain a broader understanding of the crypto industry through informative reports, and engage in in-depth discussions with other like-minded authors and readers. You are welcome to join us in our growing Coinlive community:https://t.me/CoinliveHQ

Add Comment

LoginLeave your comments

0 Comments

Earliest

Load more comments

More news about starknet immunefi

Apr 03
Starknet: Starknet Goerli testnet will be shut down
Bullish
Bearish
Feb 01
Immunefi: Web3 lost $126 million due to hacker attacks in January
Bullish
Bearish1
Dec 05
Ava Labs moves bug bounty program to Immunefi
Bullish
Bearish
Sep 20
Web3 bug bounty platform Immunefi announces new product launch
Bullish
Bearish
Jul 19
Starknet will soon launch the Starknet application chain
Bullish
Bearish
Jul 19
StarkWare Introduces Starknet Foundry, an Extreme Toolkit for Developing Starknet Contracts
Bullish
Bearish
Apr 19
pStake launches bug bounty on Immunefi
Bullish1
Bearish
Jan 17
StarkNet will be releasing a StarkNet wallet update in the coming weeks
Bullish
Bearish
Dec 07
StarkNet identity and domain name service Starknet.id will be launched on the mainnet at 22:00 today
Bullish
Bearish
Nov 10
StarkWare Establishes StarkNet Foundation to Promote StarkNet Ecological Development
Bullish
Bearish

Aurora pays $6M bug bounty to ethical security hacker through Immunefi

More news about starknet immunefi

More news about starknet immunefi

Starknet Roadmap Overview

AW Frontier: The Ultimate Guide to Starknet Full Chain Games

Are there any opportunities worth taking besides Starknet 2024?

Argent Winds Down zkSync Support for Starknet Horizon

Starknet 空投计划解析

Immunefi spammed by ChatGPT-generated web3 bug bounty reports

Number of Crypto Hacks, Scams Jumps 192% Year-Over-Year, Reports Immunefi

Whitehat hackers focus on Ethereum, Solana and Avalanche: Immunefi

Top 10 Starknet Projects in 2023

Visa Proposes Using StarkNet for Automatic Recurring Payments