Thirdweb Addresses Critical Vulnerability in Smart Contracts
Thirdweb, a Web3 development framework provider, is taking action to mitigate a vulnerability that has been discovered in its smart contracts suite. Within the past 48 hours, over 8,000 contracts have already been addressed, with further efforts underway to extend these measures.
The organization has not disclosed the specific nature of the vulnerability or the steps being taken to address it. However, Thirdweb has announced that the vulnerability affects its pre-built smart contracts used for deploying applications across various Ethereum Virtual Machine (EVM) chains.
While only two smart contracts have been exploited thus far, the vulnerability was initially identified on November 20. Thirdweb promptly began developing a mitigation tool and informed partners like Opensea, an NFT market, about the issue. The organization has also reached out to the maintainers and third parties utilizing the undisclosed Web3 open-source library to share its findings and mitigation strategies.
To bolster security, Thirdweb plans to increase its investment in security measures by doubling the payments for its bug bounty program and implementing more rigorous auditing processes.
Rising Hacks and Exploits in 2023
Certik, a blockchain security company, reports that more than $1 billion has been stolen from smart contracts as of early September. The frequency and cost of attacks have escalated, with September alone witnessing losses of $332 million to hacks, scams, and exploits.
Hot Take: Thirdweb Takes Swift Action on Smart Contract Vulnerability
Thirdweb’s proactive response to the discovered vulnerability in its smart contracts demonstrates the organization’s commitment to security. By promptly mitigating the issue and keeping partners and relevant parties informed, Thirdweb shows a dedication to protecting its users and maintaining the integrity of the Web3 ecosystem. The increased investment in security measures, such as doubling the bug bounty program, further enhances the company’s preparedness and resilience against potential threats. As cybersecurity concerns continue to rise in the crypto space, Thirdweb’s actions serve as a valuable example for the industry to prioritize proactive measures and collaboration to safeguard users’ assets and data.
By
By
By
By