Decentralized oracle network Chainlink (LINK) paid a $300,000 bounty to white hat hackers Zach Obront and Or Cyngiser (Trust), who uncovered a critical bug that could have skewed its Verifiable Random Function (VRF).
The bug
VRF is a random number generator (RNG) that allows smart contracts to access random values without compromising security.
The product is used by several crypto projects, including Axie Infinity, PancakeSwap, and Aavegotchi, to protect their smart contract with tamper-proof randomness that cannot be manipulated and ensure verifiable outcomes using cryptographic proofs.
Last year, Trust and Obront submitted a report on how a malicious VRF subscription owner could have prevented users from getting this neutral randomness roll by blocking and rerolling randomness until they received a desired value.
According to the Chainlink team, this bug was categorized as a critical-impact smart contract vulnerability, adding that:
“While it could compromise Chainlink VRF’s intended use of providing transparently verifiable tamper-resistant onchain randomness, the exploitable scenario required a number of specific conditions to be met and would be detectable onchain. Most notably, the subscription owner—a role typically controlled by the team behind the dApp using VRF—must be malicious or compromised.”
Following the incident, Chainlink implemented a security feature to prevent malicious VRF owners from exploiting the issue.
Chainlink enjoying institutional interest
Chainlink’s Cross-Chain Interoperability Protocol (CCIP) technology has seen an increase in adoption from adoption from major traditional institutions.
The global financial messaging network Swift used the technology in a tokenization experiment that involved the transfer of tokens across multiple blockchains in August. South Korean gaming giant also used it to power an interoperable Web3 gaming ecosystem in October.
Also, Hong Kong authorities adopted it for value exchange in its Central Bank Digital Currency (CBDC) trials.
As a result, Chainlink’s native LINK token and Grayscale’s Chainlink Trust (GLNK), an institutional investment vehicle, have seen their value surge to new highs.
where to buy cheap clomiphene can i get generic clomiphene without rx cost cheap clomiphene online clomiphene order clomiphene price uk can i purchase cheap clomid online clomiphene brand name
I couldn’t resist commenting. Well written!
More posts like this would make the blogosphere more useful.
zithromax 500mg pill – order zithromax 250mg online flagyl 400mg without prescription
purchase semaglutide – buy periactin cheap order periactin 4mg generic
domperidone 10mg uk – buy motilium 10mg pills cyclobenzaprine 15mg without prescription
inderal oral – order inderal for sale order methotrexate online cheap
amoxicillin over the counter – amoxil where to buy ipratropium medication
buy esomeprazole online cheap – nexiumtous brand nexium 20mg
order coumadin 5mg without prescription – anticoagulant buy hyzaar pills
meloxicam 15mg cheap – swelling buy mobic
order generic deltasone – aprep lson prednisone online
buy ed pills gb – fastedtotake.com non prescription ed drugs
cheap amoxicillin for sale – combamoxi order amoxil pill
fluconazole 200mg price – flucoan diflucan canada
order cenforce 50mg sale – https://cenforcers.com/# buy generic cenforce
when is the best time to take cialis – ciltad generic cialis daily dose
buy generic zantac – https://aranitidine.com/ ranitidine 300mg pills
cialis manufacturer coupon lilly – https://strongtadafl.com/ cialis for daily use side effects
I’ll certainly return to read more. gnolvade.com
herbal viagra sale – 100mg white viagra s100 legal order viagra online
More delight pieces like this would create the интернет better. https://ursxdol.com/provigil-gn-pill-cnt/
With thanks. Loads of conception! https://buyfastonl.com/furosemide.html
More posts like this would add up to the online space more useful. lopressor tablet