Thirdweb, a Web3 software development kit (SDK) provider, confirmed the presence of a security vulnerability in a widely used open-source library, impacting numerous Web3 smart contracts, according to a Dec. 4 statement on social media platform X (formerly Twitter).
The firm stated that the vulnerability was initially identified on Nov. 20 and impacted a variety of smart contracts across the web3 ecosystem, including some of its pre-built smart contracts.
However, it clarified that the vulnerability has yet to be exploited and refrained from disclosing the open-source library to prevent potential exploitation. The firm wrote:
“Based on our investigation so far, this vulnerability has not been exploited in any thirdweb smart contracts. However, smart contract owners must take mitigation steps on certain pre-built smart contracts that were created on thirdweb prior to November 22nd, 2023 at 7pm PT.”
Affected smart contracts
Thirdweb identified 13 affected smart contracts, including AirdropERC20, ERC721, ERC1155, and others, impacted by the vulnerability.
Smart contract owners are advised to take proactive mitigation steps to prevent exploitation. Additionally, Thirdweb assured ongoing efforts with security partners to develop tools for easy identification and execution of necessary mitigation measures.
Depending on the contract’s nature, these steps might involve contract locking, snapshot creation, and migration to a new contract. Additionally, users of these contracts are encouraged to revoke approvals on all Thirdweb contracts.
Thirdweb is also increasing the bounty rewards for its platform to $50,000 and is implementing a more rigorous auditing process.
Meanwhile, 0xngmi, the pseudonymous developer of DeFillama, urged the community to revoke their approvals to thirdweb contracts because people might have interacted with them without knowing as they are white-labeled.
NFT projects respond
Several NFT projects, including OpenSea, have responded to concerns raised by the vulnerability.
OpenSea confirmed discussions with Thirdweb regarding security concerns in specific NFT collections. The NFT platform hinted at forthcoming support for affected collection owners and anticipated changes related to contract migration on their platform.
Some NFT collections like CoolCats and ApesRare have reassured their holders they are not affected by these vulnerabilities.
However, Thirdweb’s disclosure approach has received criticism within the community.
where can i buy generic clomid no prescription where can i buy generic clomiphene price where buy clomiphene without prescription how to buy clomid can i order generic clomiphene without rx can i get cheap clomid price where can i get clomiphene pill
This is the tolerant of post I find helpful.
The thoroughness in this break down is noteworthy.
azithromycin 250mg generic – buy ciplox pills for sale generic metronidazole
order semaglutide 14 mg online cheap – periactin order order cyproheptadine 4 mg sale
order motilium online cheap – sumycin online order flexeril 15mg pill
buy generic augmentin 1000mg – atbioinfo ampicillin brand
esomeprazole 40mg capsules – anexamate esomeprazole 20mg canada
coumadin 2mg without prescription – https://coumamide.com/ buy cozaar medication
cheap mobic 7.5mg – swelling mobic 15mg usa
deltasone 10mg generic – https://apreplson.com/ prednisone 5mg pills
erection pills online – site buy ed pills cheap
cheap amoxicillin online – comba moxi purchase amoxil without prescription
order forcan for sale – https://gpdifluca.com/# fluconazole buy online
buy escitalopram online – https://escitapro.com/# escitalopram 20mg drug
order cenforce pills – https://cenforcers.com/# cenforce 100mg pill
centurion laboratories tadalafil review – tadalafil tablets 40 mg tadalafil generic 20 mg ebay
how much tadalafil to take – cialis information mantra 10 tadalafil tablets
order ranitidine 150mg generic – this order zantac generic
where can i buy a viagra – https://strongvpls.com/ cheap viagra new zealand
More posts like this would force the blogosphere more useful. click
Greetings! Jolly useful suggestion within this article! It’s the scarcely changes which liking make the largest changes. Thanks a portion for sharing! https://buyfastonl.com/gabapentin.html
Thanks on sharing. It’s outstrip quality. https://ursxdol.com/provigil-gn-pill-cnt/
The thoroughness in this piece is noteworthy. https://prohnrg.com/product/cytotec-online/
More posts like this would make the blogosphere more useful. https://aranitidine.com/fr/viagra-professional-100-mg/