ParaSwap has begun returning cryptocurrency assets to users who revoked access permissions to the AugustusV6 smart contract following the discovery of a critical bug last week.
Cryptocurrency return after vulnerability fix
This decentralized financial services aggregator recently dealt with a serious security issue in its newly introduced Augustus version 6 smart contract, after which the refund process commenced. According to a statement released on March 24, the majority of assets have been returned thanks to the efforts of white hat hackers who assisted with the recovery, and all permissions to AugustusV6 have been revoked.

ParaSwap noted that 213 addresses have yet to revoke permissions to this faulty contract.
Asset security and protection
ParaSwap informed about the vulnerability in its new contract, and quick intervention by cybersecurity experts prevented major losses. A subsequent statement mentioned that a detailed report has been filed to relevant institutions, initiating an investigation into the situation.
The company is working with analytics and security firms Chainalysis and TRM Labs to identify attackers and track stolen assets.
Active communication and call for return
The ParaSwap team is actively communicating with hackers and urging them to return stolen assets, with a threat of legal action if there is no response by March 27.
Although losses were deemed minimal, with a stolen amount of only $24,000, the vulnerability disclosure underscored swift reaction and preventive measures by the platform.
Prevention and improvements post-disclosure
Following the vulnerability discovery on March 20, shortly after the launch of the new contract on March 18 aimed at optimizing token swaps and reducing transaction fees, ParaSwap immediately responded by suspending its API and securing assets with the help of white hat hackers.
#ParaSwap #bug #crypto  
 
Notice:
,,The information and views presented in this article are intended solely for educational purposes and should not be taken as investment advice in any situation. The content of these pages should not be regarded as financial, investment, or any other form of advice. We caution that investing in cryptocurrencies can be risky and may lead to financial losses.“

OpenAI, the company behind the massively popular ChatGPT AI chatbot, has launched a bug bounty program in an attempt to ensure its systems are "safe and secure."

To that end, it has partnered with the crowdsourced security platform Bugcrowd for independent researchers to report vulnerabilities discovered in its product in exchange for rewards ranging from "$200 for low-severity findings to up to $20,000 for exceptional discoveries."

It's worth noting that the program does not cover model safety or hallucination issues, wherein the chatbot is prompted to generate malicious code or other faulty outputs. The company noted that "addressing these issues often involves substantial research and a broader approach."

Other prohibited categories are denial-of-service (DoS) attacks, brute-forcing OpenAI APIs, and demonstrations that aim to destroy data or gain unauthorized access to sensitive information beyond what's necessary to highlight the problem.

"Please note that authorized testing does not exempt you from all of OpenAI's terms of service," the company cautioned. "Abusing the service may result in rate limiting, blocking, or banning."

What's in scope, however, are defects in OpenAI APIs, ChatGPT (including plugins), third-party integrations, public exposure of OpenAI API keys, and any of the domains operated by the company.

The development comes in response to OpenAI patching account takeover and data exposure flaws in the platform, prompting Italian data protection regulators to take a closer look at the platform.

#chatgpt #chatgpt4 #ai #artificialintelligence #varhegyigergo #bug #error #prizes

In a recent incident, a software bug within a billion-dollar bank inadvertently allowed customers to withdraw funds that did not belong to them. The flaw permitted individuals to transfer approximately $1,000 to digital banking applications like Revolut, even when their accounts lacked sufficient funds. This unforeseen exploit became viral on social media platforms after its discovery, prompting customers to test its validity.

The Exploited Bug

The bug within the banking system allowed customers of the Bank of Ireland to initiate transfers of around $1,000 to digital banking apps. The transfer could be completed even if the customer's account had an insufficient balance. Following the transfer, these customers were able to withdraw the funds from ATMs associated with the bank.

Swift Social Media Spreading

Upon the discovery of this banking glitch, news of the exploit quickly spread across various social media platforms. People rushed to test the loophole for themselves, leading to widespread experimentation and engagement with the flaw.

Unexpected Success Stories

An anonymous bank customer shared her experience with Vice, revealing that she initially heard about the bug through text messages. To her surprise, the exploit actually worked flawlessly. She decided to try it for fun but ended up withdrawing funds successfully. Despite the intention to return the money, she found herself using it for personal expenses due to her delayed salary payment.

Apology and Response from the Bank

Bank of Ireland issued an apology for the software bug, acknowledging the inconvenience caused to its customers. The bank assured that all unauthorized withdrawals would be recorded as debits on the respective customer accounts, rectifying the situation.

Scope of Impact

The bank clarified that the number of transactions carried out on the night when the bug was discovered constituted an insignificant portion of the bank's typical transaction volumes during a regular day. This suggests that while the exploit gained attention on social media, its impact on the bank's overall financial operations was relatively limited.

In Summary

The inadvertent software bug at the billion-dollar Bank of Ireland allowed customers to withdraw funds without proper authorization. The incident gained traction through social media, showcasing the speed at which news and exploits can spread in the digital age. The bank responded with an apology and rectified the unauthorized withdrawals, underlining the importance of robust software testing and security measures in the financial sector. #bank #bug #funds #banking #BankOfIreland