{"id":290753,"date":"2024-04-27T00:06:51","date_gmt":"2024-04-26T18:36:51","guid":{"rendered":"https:\/\/dripp.zone\/news\/?p=290753"},"modified":"2024-04-27T00:06:51","modified_gmt":"2024-04-26T18:36:51","slug":"two-vulnerabilities-caught-in-optimism-testnet-crypto-news","status":"publish","type":"post","link":"https:\/\/dripp.zone\/news\/two-vulnerabilities-caught-in-optimism-testnet-crypto-news\/","title":{"rendered":"Two Vulnerabilities Caught in Optimism Testnet – Crypto News"},"content":{"rendered":"

<\/p>\n

Offchain Labs found bugs in Optimism’s proposed dispute system.<\/p>\n

\n

Developers caught two vulnerabilities in the testnet of Optimism, the second-largest Ethereum Layer 2 by assets.<\/p>\n

Members of Offchain Labs, the company building Ethereum Layer 2 Arbitrum, today<\/a> said they found the bugs in Optimism\u2019s fraud proofs during a testnet implementation.<\/p>\n

\u201cWe found several critical attacks that compromise the safety and liveness of Optimism’s proposed dispute system,\u201d wrote<\/a> Raul Jordan, distributed systems engineer for Offchain Labs. \u201cThe attacks make it easy for an evil party to get a fraudulent claim accepted on chain, or defeat the honest party.\u201d<\/p>\n

The Optimism team said<\/a> on X after Offchain Labs disclosed their findings, that they are \u201chappy to report\u201d that no critical vulnerabilities that would be able to bypass the safety mechanisms were reported during an audit with blockchain security firm Sherlock.<\/p>\n

Optimism did not immediately reply to a request for comment from The Defiant.<\/p>\n

In one of the attack vectors, the attacker can wait until the last second, make a move, and win a dispute, Jordan explained on X today. The last attack is resource exhaustion, making it very difficult for the honest parties to successfully defend, although it was already publicly known.<\/p>\n

Optimism\u2019s native OP token dropped 4.8% on the news today. OP has had a dismal month, shedding nearly 40% of its price, changing hands currently for $2.32, while Ethereum lost 10% in the same period.<\/p>\n

The network shows a $2.4 billion market capitalization and $879 million in total value locked (TVL) according to DefiLlama.<\/p>\n

OP Price – CoinGecko<\/figcaption><\/figure>\n

Still, Optimism has been teeming with activity in recent months. On April 18, the team offered $22 million in grants<\/a> to Superchain efforts, a Optimism-based tech stack; the day after, Worldcoin launched<\/a> an Optimism-powered Layer-2 blockchain; the network airdropped $40 million<\/a> to artists and creators on Feb. 22, and on Feb. 13 it set in motion a security council as part of a move towards progressive decentralization<\/a>.<\/p>\n

Two Vulnerabilities<\/h2>\n

A blog post<\/a> by the Offchain Labs team explains that they disclosed the two \u201cserious vulnerabilities\u201d to the OP Labs team, who asked for the information to remain out of the public\u2019s eye until properly addressed.<\/p>\n

According to Ed Felten, co-founder of Offchain Labs, the vulnerabilities allowed a malicious party to force the OP Stack fraud proof mechanism to accept a fraudulent chain history, or to prevent the OP Stack fraud proof mechanism from accepting a correct chain history.<\/p>\n

The problems stemmed from flaws in how the OP fraud proof design handles timers.<\/p>\n

Felten, who wrote the blog post, added that fraud proof protocols and their timing aspects are very difficult to design; the latter considered one of the most subtle aspects of the design process.<\/p>\n

\u201cWe coordinated closely with the OP Labs team on this disclosure,\u201d posted<\/a> the Offchain Labs X account on April 26. \u201cWe\u2019re all on team Ethereum, and happy to lend resources to make Ethereum safer for everyone.\u201d<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

Offchain Labs found bugs in Optimism’s proposed dispute system. Developers caught two vulnerabilities in the testnet of Optimism, the second-largest Ethereum Layer 2 by assets. Members of Offchain Labs, the company building Ethereum Layer 2 Arbitrum, today said they found the bugs in Optimism\u2019s fraud proofs during a testnet implementation. \u201cWe found several critical attacks […]<\/p>\n","protected":false},"author":2,"featured_media":290755,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[274,273,272,244,266,271,268,270,269,267],"class_list":["post-290753","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-de-fi","tag-crypto-finance","tag-decentralized-finance","tag-liquidity","tag-metamask","tag-pancake","tag-slippage","tag-sushiswap","tag-tronlink","tag-trust-wallet","tag-uniswap"],"_links":{"self":[{"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/posts\/290753","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/comments?post=290753"}],"version-history":[{"count":3,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/posts\/290753\/revisions"}],"predecessor-version":[{"id":290764,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/posts\/290753\/revisions\/290764"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/media\/290755"}],"wp:attachment":[{"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/media?parent=290753"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/categories?post=290753"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/tags?post=290753"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}