Perennial

mirror.xyz · Zach Obront · 4 hours ago · vulnerability
0 net
AI Summary

A high-severity vulnerability was discovered in Across V3 cross-chain bridge that allows malicious relayers to steal the full value of certain transactions from users by exploiting the optimistic relay mechanism before UMA's Optimistic Oracle validation.

Tags
cross-chain-bridge vulnerability-disclosure optimistic-oracle relayer-attack fund-theft high-severity defi-security
Entities
Across V3 UMA zachobront deadrose
About Activity Share Home Explore New post Dashboard Newsletter Search... Ctrl + K zachobront Sign in More from zachobront zachobront Feb 26 Across V3: Cross Chain Action Vulnerability Disclosure Across V3 is a cross chain optimistic bridge. Users deposit assets on an origin chain, and relayers compete to immediately fulfill the request on the destination chain. At a slower pace, the protocol uses UMA’s Optimistic Oracle to validate relays, and LP funds are used to refund the relayers. On January 28th, 2025, deadrose and I discovered a High Severity vulnerability in the protocol that would allow the full value of certain transactions to be stolen from users by malicious relayers. To u... View more 👁🔎🐞 Subscribe Subscribe to zachobront Subscribe <100 subscribers
← Back to stories