As a seasoned analyst with years of experience in the blockchain industry, I find it both intriguing and somewhat disheartening to witness the unfolding events surrounding Virtuals Protocol. On one hand, it’s commendable that they responded swiftly to fix the identified bug reported by the white-hat hacker Jinu. However, the initial lack of an active bug bounty program, coupled with the closure of the Discord group created for such purposes, raises questions about their commitment to security and community engagement.
In my years in this field, I’ve seen countless instances where such oversights can lead to more significant issues down the line. It’s a lesson that every blockchain project should learn: prioritizing security and fostering a collaborative environment with the white-hat hacker community is not just beneficial, but essential for long-term success.
As for Jinu, I admire their diligence in scrutinizing the code of a project they had a casual interest in. It’s a testament to the vigilance and dedication of these individuals who often work tirelessly behind the scenes to keep our digital world secure.
Lastly, let me leave you with a bit of humor to lighten things up: I wonder if Virtuals Protocol will now launch a “No bug bounty” program, offering rewards for the absence of bugs instead! After all, who doesn’t love a good challenge?
Unexpected glitch found in a reviewed smart contract prompted the AI-focused blockchain company, Virtuals Protocol, to quickly implement a solution and reinitiate its reward program for identifying bugs (bug bounty program).
On December 3rd, an anonymous security researcher named Jinu reached out to Virtuals Protocol when they found a flaw in one of its reviewed contracts. Unfortunately, after reporting the issue, Jinu found out that the company didn’t have an ongoing bug bounty program, so their discovery didn’t meet the criteria for a reward.
White hat hacker reveals vulnerability
As per Jinu’s statement, the Virtuals Protocol team has shut down the Discord group specifically set up for reporting the security loophole. On a different note, in a conversation identified by ‘X’, Jinu mentioned this development.
“The vulnerability is simple and can impact the virtuals ecosystem (but virtuals probably doesn’t care about security).”
In simpler terms, Jinu told CryptoMoon that the issue with AgentTokens stemmed from a missing verification step during their creation, due to an internal limit not being properly checked. If taken advantage of, this flaw could have halted the production of AgentTokens until the contract was corrected.
Following the release of the information about X, Virtuals Protocol reached out to Jinu promptly, requiring an instant solution to be implemented.
Virtuals Protocol yet to decide on reward for bug discovery
Although the problem was promptly addressed, Virtuals Protocol hasn’t declared a bounty reward for Jinu as of now. The company expressed gratitude towards Jinu for bringing the matter to their attention and apologized for any confusion in their earlier communication.
As a crypto investor, I received an update from the team: “We’ve confirmed the issue and applied a fix. Thanks for bringing it to our attention, and I apologize for any confusion between support and yourself. We’re now assessing the gravity of the problem internally, and we’ll reward you with a bug bounty soon.
In response to your question regarding anticipated bounties, I must confess I’m not privy to the typical rewards for unearthing bugs. However, what sparked my curiosity about Virtuals Protocols was a friend’s investment in a token born from Virtuals.
Before finding the error, Jinu had taken around half an hour to examine the code carefully,” he mentioned.
CryptoMoon has reached out to Virtuals Protocol for comment.
Read More
- HBAR PREDICTION. HBAR cryptocurrency
- IMX PREDICTION. IMX cryptocurrency
- STEEM PREDICTION. STEEM cryptocurrency
- LDO PREDICTION. LDO cryptocurrency
- FLOKI PREDICTION. FLOKI cryptocurrency
- JTO PREDICTION. JTO cryptocurrency
- POL PREDICTION. POL cryptocurrency
- TRB PREDICTION. TRB cryptocurrency
- XDC PREDICTION. XDC cryptocurrency
- TNSR PREDICTION. TNSR cryptocurrency
2025-01-03 12:41