Github Circlefin Noble Cctp We privately disclosed a vulnerability to circle via their bug bounty program. the vulnerability could have been exploited by circumventing the cctp message sender verification process to mint fake usdc tokens on noble. The vulnerability was limited to circle's noble cctp, which supports the usdc cross chain transfer protocol (cctp) on cosmos. as discussed below, the vulnerability could have been exploited by circumventing the cctp message sender verification process to potentially mint fake usdc tokens on noble.
Circle S Cctp Noble Mint Bug According to the web3 security firm, a malicious actor could have potentially sidestepped the cross chain transfer protocol’s message sender verification process to mint fake usdc tokens on the noble bridge. Crucially, the sibling check was missing on noble. this means that an attacker could call cctp with a burnmessage call from their contract and have it handled by the noble module properly for usdc token minting. Luckily, nobody with bad intentions found the bug. no tokens got minted out of thin air, and no noble bridge users lost their funds. circle took immediate measures to patch the vulnerability, fixing the verification process to check minting messages…. Thankfully, due to this coordinated disclosure, no user funds were impacted and we were able to work closely with the circle and noble teams to safely patch the issue.
Circle S Cctp Noble Mint Bug Luckily, nobody with bad intentions found the bug. no tokens got minted out of thin air, and no noble bridge users lost their funds. circle took immediate measures to patch the vulnerability, fixing the verification process to check minting messages…. Thankfully, due to this coordinated disclosure, no user funds were impacted and we were able to work closely with the circle and noble teams to safely patch the issue. Home » critical bug identified and remedied in circle’s noble cctp blockchain security firm asymmetric research privately disclosed the vulnerability to circle, which has since been addressed. geplaatst in circle, crypto hacks, cybersecurity, usdc. According to the web3 security firm, a malicious actor could have potentially sidestepped the cross chain transfer protocol’s message sender verification process to mint fake usdc tokens on the. On aug. 27, uneven analysis revealed it recognized a essential bug in circle’s noble cctp, a part of the usdc (usdc) cross chain switch protocol, on the cosmos community.
Critical Bug Identified And Remedied In Circle S Noble Cctp Home » critical bug identified and remedied in circle’s noble cctp blockchain security firm asymmetric research privately disclosed the vulnerability to circle, which has since been addressed. geplaatst in circle, crypto hacks, cybersecurity, usdc. According to the web3 security firm, a malicious actor could have potentially sidestepped the cross chain transfer protocol’s message sender verification process to mint fake usdc tokens on the. On aug. 27, uneven analysis revealed it recognized a essential bug in circle’s noble cctp, a part of the usdc (usdc) cross chain switch protocol, on the cosmos community.
Comments are closed.