Researchers have disclosed details about a now-patched critical flaw in the Move virtual machine that powers the Aptos blockchain network.

The vulnerability “can cause Aptos nodes to crash and cause denial of service,” Singapore-based Numen Cyber Labs said in a technical write-up published earlier this month.

Aptos is a new entrant to the blockchain space, which launched its mainnet on October 17, 2022. It has its roots in the Diem stablecoin payment system proposed by Meta (née Facebook), which also introduced a short-lived digital wallet called Novi.

CyberSecurity

The network is built using a platform-agnostic programming language known as Move, a Rust-based system that’s designed to implement and execute smart contracts in a secure runtime environment, also known as the Move Virtual Machine (aka MoveVM).

The vulnerability identified by Numen Cyber Labs is rooted in the Move language’s verification module (“stack_usage_verifier.rs“), a component that validates the bytecode instructions prior to its execution in MoveVM.

CyberSecurity

Specifically, it relates to an integer overflow vulnerability in the stack-based Web3 programming language that could result in undefined behavior and therefore crashes.

“Since this vulnerability occurs in the Move execution module, for nodes on the chain, if the bytecode code is executed, it will cause a [Denial-of-Service] attack,” the cybersecurity firm explained.

“In severe cases, the Aptos network can be completely stopped, which will cause incalculable damage, and have a serious impact on the stability of the node.”

Technology

Products You May Like

Articles You May Like

‘Putin is a monster’: UK must help punish Russian war crimes, Ukraine’s first lady says
Here are the Best Books of 2022, According to Buzzfeed
Dolly Parton Says Her Rock Album Is Coming Next Year: “I’m Callin’ It ‘Rock Star,’ Just For Fun”
Los Angeles Daily Covid Cases Hit 4,352, Up 43% In Past Week & Highest Total In Nearly 4 Months
The Story Of George Jones Flipping A Table At Tammy Wynette’s House And Professing His Love For Her After Her Then-Husband Called Her A “Son Of A B*tch”

Leave a Reply

Your email address will not be published. Required fields are marked *