Hacker Scoops Up $2 Million Bounty After Spotting Fatal Flaw In Ethereum Rollup

Best Owie

3 years ago

3 mins read

Reason to trust

Strict editorial policy that focuses on accuracy, relevance, and impartiality

Created by industry experts and meticulously reviewed

The highest standards in reporting and publishing

How Our News is Made

Strict editorial policy that focuses on accuracy, relevance, and impartiality

Ad discliamer

Morbi pretium leo et nisl aliquam mollis. Quisque arcu lorem, ultricies quis pellentesque nec, ullamcorper eu odio.

A hacker has made off with $2 million in bug bounty after finding an alarming vulnerability with the Ethereum network. This bug could have been very bad if it had been found by black hat hackers who could have exploited the digital asset for billions of dollars worth of ETH. Instead, a ‘grey hat’ hacker popularly known as Saurik informed the Ethereum team of the vulnerability, netting himself a sizable reward in return.

Finding The Vulnerability On Ethereum

Hacker Saurik had found the vulnerability on Optimism, an Ethereum layer 2 rollup solution. The hacker himself published a report as to how he found the vulnerability on the solution. Looking through nano payments protocols on the rollup, he had found a vulnerability that could allow an attacker to withdraw unbridled a ‘virtually unlimited’ amount of ETH from the solution.

It was similar to the attack method deployed on popular smart contracts blockchain Solana that resulted in the $353 million hacks on Wormhole. Optimism, like Wormhole, mint what are known as “Wrapped Ether.” Users deposit their Ether on the smart contract to basically serve as collateral and they are even these tokens that only exist on Optimism’s network. They then use nano payments protocol to make transactions faster and quicker.

ETH recovers above $3,100 | Source: ETHUSD on TradingView.com

Saurik who is famously known for developing the Jailbroken iOS had confirmed the vulnerability. However, instead of exploiting the vulnerability for his own personal gain, the self-styled grey hat hacker had reported it to the Optimism devs. In return, Saurik was rewarded with a $2 million bounty for his altruism, which has helped to make the network and layer 2 rollup safer for users.

Debunking Popular Rumors

After news of the vulnerability and subsequent bounty payment broke, there have been rumors circulating regarding what an attacker could have done with it if they chose to not report it to the devs. The most popular of these has been that the attacker would have been able to withdraw an unlimited amount of ETH from the network. While this has some merit to it, it is largely false.

Firstly, the vulnerability exists on a layer 2 rollup solution Optimism. While the protocol exists on the ethereum network, it is not the network itself. This means that the vulnerability was localized to the protocol alone. So while an attacker would have been able to exploit this to withdraw an ‘unlimited’ amount of ETH, they could only withdraw the available balance on the Optimism address.

Nevertheless, it is still no secret that the results would have been devastating for users of the layer 2 protocol if a black hat hacker had found the vulnerability. This event speaks volumes about the usefulness of bug bounties. While the rewards for these bounties may seem too large at first, one must think about what the alternative would be if there was no incentive for hackers to come forward with their findings. White hat hackers no doubt help to save millions, if not billions, of dollars every year.

Featured image from Gagadget, chart from TradingView.com

Best Owie

Best Owie is a seasoned managing editor with a wealth of experience currently serving as the Managing Editor at NewsBTC. Best is a highly skilled professional with a track record of producing engaging and informative content. With a keen eye for detail and a passion for accuracy, Best is committed to ensuring that each article published meets the highest standards of quality.

Best has over six years of experience in the crypto industry and has overseen the creation and publishing of thousands of articles over the years. Best is always abreast of everything that is going on in the crypto industry in order to create and curate the most relevant content for readers. This shines through in Best’s publications, which are always clear and concise, enabling easy reading and understanding for all.

Best is also an avid learner and advocate for new technology. This has seen Best dive into topics in areas such as decentralized finance (DeFi), non-fungible tokens (NFTs), Layer 2 blockchains, etc. In addition to this, Best is a vocal member of the crypto community across various social media platforms such as X and Reddit. Best’s work garners tens of thousands of readers monthly, who rely on the information in these publications to keep up-to-date with everything happening in the crypto community.

Best’s articles explore breaking news, intricate systems such as yield farming, liquidity pools, and other decentralized finance (DeFi) systems. This is because Best understands the importance of information to gaining financial freedom and believes that everyone should have access to this information.

Best also believes in leveraging the blockchain for philanthropy to create the most positive social impact. This involves work with charitable organizations focused on financial literacy and education. With each article, Best lends a voice to important issues such as a more financially inclusive future, transparent systems for growth and development, and technology that is not self-serving but one that serves all of humanity.

When not curating engaging content, Best can be found reading a book with a cup of hot chocolate, enjoying a Netflix series, or exploring the outdoors with Green - the world’s most quiet and well-behaved Husky. Best’s interests also span other industries such as art, finance, and security, attending seminars and conferences in not just the crypto industry but other industries as well.

As an animal lover, Best is also involved with charities for animals, local shelters, and rescues. Best is also involved in local events that promote inclusivity, such as being a prominent member of hiking clubs and a cycling club, as well as being a part of a very happy group of animal lovers.

Best is a true professional in every sense of the word, with an exceptional dedication to producing high-quality work. This shines through in Best's work on and off the clock. These include advocating for inclusive crypto education for all, the impact of financial illiteracy, and the benefits of adopting new technologies such as cryptocurrencies. Best’s prolific career in the media industry is a testament of how hard work and dedication pays.

Disclaimer: The information found on NewsBTC is for educational purposes only. It does not represent the opinions of NewsBTC on whether to buy, sell or hold any investments and naturally investing carries risks. You are advised to conduct your own research before making any investment decisions. Use information provided on this website entirely at your own risk.