Crypto Mining

Optimism quietly patches a critical testnet flaw after a tip-off from a rival.

Posted 1 minute ago In ~

layer 2 network optimism OP

-3.67%
discovered two critical vulnerabilities on its testnet and repaired them at least a few weeks later.

Offchain Labs, which first discovered the vulnerability, said on Friday that Optimism had updated its testnet on April 25. The security flaw, which has since been fixed, allowed malicious actors to manipulate records on the chain and launch other “sophisticated attacks,” the software company said.

On March 22, Offchain Labs alerted Optimism to two issues with its testnet. A malicious actor can force the OP Stack anti-fraud mechanism to accept fraudulent chain records, and an abuser can prevent it from accepting correct chain records.

“This is a difficult problem to solve,” Offchain Labs, a competitor of Optimism, said in a statement. Anti-fraud protocols and timing aspects are “very difficult” to design, he added.

According to Offchain Labs, Optimism later fixed the vulnerability by modifying its timer handling code. To be sure, layer 2 testnets, or test networks, exist to identify security flaws in the network before its official launch.


Disclaimer: The Block is an independent media outlet delivering news, research and data. As of November 2023, Foresight Ventures is a majority investor in The Block. Foresight Ventures invests in other companies in the cryptocurrency space. Cryptocurrency exchange Bitget is an anchor LP of Foresight Ventures. The Block continues to operate independently to provide objective, impactful and timely information about the cryptocurrency industry. Below are our current financial disclosures.

© 2023 The Block. All rights reserved. This article is provided for informational purposes only. It is not provided or intended to be used as legal, tax, investment, financial or other advice.

About the author

Elizabeth Napolitano is a data reporter covering business and technology news with a focus on cryptocurrency. Before she joined The Block, Elizabeth reported on BigTech, AI, crypto, and video games for CBS Moneywatch. As a CoinDesk reporter, she covered DeFi, NFTs, and US courts. She received a master’s degree in journalism from CUNY. X: Follow her at @LizKNapolitano.

Related Articles

Back to top button