Virtuals Protocol fixes a serious vulnerability and promises a bounty for researchers' discoveries

ChainCatcher news, according to Cointelegraph, the smart contract of the blockchain company Virtuals Protocol was accidentally found to have vulnerabilities by security researcher Jinu (pseudonym) during a review. Virtuals Protocol quickly released a fix and restarted its bug bounty program. On December 3, Jinu stumbled upon the issue while reviewing the contract and immediately reported it to Virtuals Protocol, only to learn that the company did not have an active bug bounty program, which meant his discovery did not qualify for a reward. According to Jinu, the Virtuals Protocol team also closed the Discord group specifically for reporting the vulnerability.

In a post on the X platform, Jinu stated, "This vulnerability could impact the Virtuals ecosystem; if exploited, it would prevent the generation of AgentTokens until the contract is fixed." After making this information public on the X platform, Virtuals Protocol contacted Jinu and promptly released a fix. Despite the timely release of the fix, Virtuals Protocol has not yet announced a bug bounty reward for Jinu. In the message to the researcher, the company thanked Jinu for reporting the issue and apologized for the previous communication breakdown.