The Solana Foundation discovered a zero-day vulnerability on April 16 that affects the “confidential transfer” feature in the Token-2022 standard. This vulnerability could allow attackers to achieve unlimited minting or steal user assets by forging zk-SNARKs. The foundation coordinated privately with validators to complete the fix within two days without disclosing the vulnerability to the public, and emphasized that no signs of fund loss or exploitation of the vulnerability have been found so far. (TheBlock)
This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
The Solana Foundation disclosed details of a zero-day vulnerability, which was urgently patched to prevent the risk of infinite minting.
The Solana Foundation discovered a zero-day vulnerability on April 16 that affects the “confidential transfer” feature in the Token-2022 standard. This vulnerability could allow attackers to achieve unlimited minting or steal user assets by forging zk-SNARKs. The foundation coordinated privately with validators to complete the fix within two days without disclosing the vulnerability to the public, and emphasized that no signs of fund loss or exploitation of the vulnerability have been found so far. (TheBlock)