Ronin released another package, and the founder said it may be subject to MEV attacks
The founder of the successful chain game Axie Infinity and its blockchain Ronin broke news that due to a white hat notification vulnerability, the Ronin cross-chain bridge stopped running because it may be subject to MEV attacks. Ronin was hacked by North Korean hackers for US$600 million, resulting in no one paying attention to it. Axie Infinity, which has already declined, is even more lonely. Now that there is another security breach, it may be more difficult to make a comeback.
(After the Axie Infinity side chain Ronin experienced a hacking incident, the official cross-chain bridge has resumed deposits and withdrawals)
https://twitter.com/Psycheout86/status/1820771028420739140 The security team analyzes the reasons
Security team SlowMist stated that because the weight in the Ronin contract was changed to an unexpected value, funds could be transferred without the need for multi-signature consent.
https://twitter.com/slowmist_team/status/1820783952145355247
The developer Bing commented that the total weight of the signature is 0, and you can pass it by just taking other people's signatures, and no one even notices it for seven days.
https://twitter.com/DegenBing/status/1820781352595394610
This article The sad song of the most successful chain game: Ronin has loopholes in cross-chain, Axie Infinity may not be able to make a comeback. First appeared on Chain News ABMedia.
