Aurora Pays $6M Bug Bounty To Ethical Security Hacker Through Immunefi

How Harmony's Horizon Bridge Was Hacked For $100M

Aurora, an Ethereum (ETH) bridge and scaling solution. Revealed on Tuesday that ethical security hacker pwning. ETH.

Had identified a significant vulnerability in the Aurora Engine and had received a $6 million prize.

iexclusivenews reports that over $200 million in the capital is said to have been put at risk as a result of the scam.

With $145 million bounties available and $45 million bounties paid out.

Meanwhile, iexclusivenews Nigeria reports that the sum was paid in partnership with Immunefi. A major platform for Web 3.0 bug bounties.

[the_ad id=”41670″]

This online news outlet understands that if the whitehat had chosen to exploit the vulnerability for personal benefit, rather than reporting it to developers. Over $200 million in user funds may have been in danger.

What You Should Know

iexclusivenews Nigeria reports that on April 26, Immunefi got a complaint from pwning.ETH. concerning a major weakness in the Aurora Engine.

That would have allowed the Aurora Ethereum Virtual Machine to mint limitless amounts of ETH. While draining and siphoning the matching nested ETH (nETH) pool on NEAR.

The pool had more than 70,000 ETH worth at least $200 million when it was discovered.

“Hats off to Aurora and pwning. eth for the flawless overall processing of the report,” said Mitchell Amador, founder, and CEO of Immune.

[the_ad id=”41664″]

“The bug was quickly patched, with no user funds lost.”

Aurora had launched a bug bounty program with Immunefi just one week before discovering the security vulnerability.

Meanwhile, Aurora Labs’ chief of security, Frank Braun, commented:

[the_ad id=”41670″]

“We look at the bug bounty program as the last step in a layered defense approach. And will use this bug as a learning opportunity to improve earlier steps. Like internal reviews and external audits.”

Cross-chain communication protocols, while certainly creative, have recently become a prime target for hackers.

In February, one of the greatest decentralized financial attacks happened. When hackers exploited an indefinite minting flaw.

Between the Wormhole token bridge and its wrapped ETH. And ETH pool. Draining the Wormhole token bridge of almost $321 million in digital assets.