Categories: Ethereum

Vulnerability Fixed in Facebook Contract Language for Libra Cryptocurrency

Click here to view original web page at www.coindesk.com

A vulnerability in Libra’s open-source code that would have enabled malicious actors to manipulate smart contracts has been uncovered and patched by a third-party audit firm specializing in cryptocurrency.

Specifically, developers working for startup OpenZeppelin found vulnerabilities in Move, the scripting language developed by Facebook for the open-source Libra cryptocurrency project, an effort backed by major companies including Facebook, Lyft, Uber and MasterCard. If allowed in executable code, the vulnerabilities disclosed to the Libra team could have been severe.

“The vulnerability in the Move IR compiler allows malicious actors to introduce executable code to their smart contracts disguised as inline comments,” OpenZepplin’s CEO Demian Brener told CoinDesk.

He continued:

“The good news is that it was found and patched before the platform was live. Issues once thought of as benign can become more severe in the blockchain setting because auditability substitutes for trust.”

Founded in 2015, OpenZeppelin works with leading cryptocurrency, blockchain and internet enterprises including Coinbase, Brave browser and the Ethereum Foundation. The authors of Move work at Calibra, a subsidiary of Facebook focused on wallet development, and contributed the language to the non-profit Libra Association under a Creative Commons license.

Brener said the code was disclosed to Libra Aug. 6, with the Libra team evaluating and fixing the bug over the following month. As of Sept. 4, the patch was reviewed and confirmed to be fixed by OpenZeppelin.

Libra’s stablecoin will have certain programmable features, such as the ability to make smart contracts. The full features of these smart contracts have yet to be disclosed.

Brener told CoinDesk the Libra team was highly responsive to the audits.

As larger protocols continue to develop in size and scope, Brenner said audits are only growing in importance. Projects like Libra, with the potential for an international audience, require additional scrutiny, he said.

“We are seeing how huge and complex these systems are Libra is the first of many that are coming… and these systems go live and they manage millions of dollars by billions of people. It’s important to know what these complex systems are…people [need to be] aware of the potential.”

Earlier last month, Open Zeppelin concluded an audit on Compound, a decentralized finance protocol, which disclosed the ability to take out small, interest-free loans. Earlier today, it received an investment from Coinbase.

Demian Brenner, founder, Open Zepplin, via CoinDesk archives

Specifically, […]

cinerama

Illuminati, Mason, Anonymous I'll never tell. I can tell you this, global power is shifting and those who have the new intelligence are working to acquire this new force. You matter naught except to yourself, therefore prepare for the least expected and make your place in the new world order.

Disqus Comments Loading...
Share
Published by
cinerama

Recent Posts

Bitcoin Futures Contracts Headed Our Way in Early 2020

Futures exchange operator CME group has announced that it plans to begin offering bitcoin futures contracts starting in early 2020.… Read More

4 hours ago

History Suggests Bitcoin is Currently in Early Stages of Next Bull Run

After briefly incurring a significant influx of buying pressure, Bitcoin (BTC) has once again lost its momentum and is now… Read More

4 hours ago

Blackstone CEO Sees Blockchain’s Merit, But Is Not a Fan of Bitcoin

The traditional investment world has largely found itself split on whether or not Bitcoin and other cryptocurrencies constitute sounds investments,… Read More

4 hours ago

Crypto Tidbits: Bakkt Bitcoin Futures Inbound, NASA Hints at Blockchain Ambitions, Libra in Hot Water

Another week, another of Crypto Tidbits . While Bitcoin (BTC) effectively ended the week where it started in terms of… Read More

4 hours ago

Is Bitcoin Diamond growing in popularity?

Bitcoin Diamond (BCD) is a late-2017 implementation of the Bitcoin protocol that offers a larger supply, bigger block size, and… Read More

4 hours ago

3 Proven Methods To Earn Money Online With Bitcoin

It's possible to pay your bills with money earned from the cryptocurrency market. Everyone can generate additional income, or even… Read More

4 hours ago

This website uses cookies. We use these cookies to collect data about your interaction with our website for the purpose of continuously improving your experience with our site. For more information we encourage you to read our privacy policy.

Read More