ChainCatcher message, the TonBit team recently discovered and assisted in fixing two critical vulnerabilities in the TON virtual machine. One of the vulnerabilities could be exploited by malicious contracts to trigger an abnormal crash of the virtual machine, thereby affecting the stability of the network. The official Ton development team has adjusted the internal processing of the virtual machine in the latest Github Release to prevent such attacks from occurring.

ChainCatcher message, recently, MoveBit, a brand under Bitslab, successfully discovered and assisted in fixing a major denial of service (DoS) vulnerability in the Aptos network, rated as "high risk." This vulnerability, due to an imperfect memory pool transaction eviction mechanism, could lead to up to 90% of normal transactions being rejected by nodes. The Aptos team has fixed this vulnerability in the latest version and thanked MoveBit for its contribution in the official release notes.This move once again highlights MoveBit's technical strength in the blockchain security field and consolidates its leading position in the industry.MoveBit is a security team under BitsLab that focuses on the Move ecosystem, dedicated to establishing security standards and providing security audits to ensure the safety of the Move ecosystem.

ChainCatcher message, Terra tweeted that the Terra chain briefly halted at block height 11430400, during which no transactions will be processed. Terra will work with validators on Terra (phoenix-1) and subsequently apply an emergency patch to fix the suspected vulnerability.

ChainCatcher news, Jupiter officials stated on social media that the price display error issue that occurred on the platform has been fixed.Earlier news, Jupiter officials mentioned on social media that due to the Openbook crank issue, the current prices displayed by the dApp are incorrect. Swaps and all other operations are unaffected. The project team is addressing the issue by preventing quotes when the Openbook crank crashes, and a fix will be deployed soon.

ChainCatcher message, the MetaMask team stated that they have fixed a bug in the MetaMask mobile app v7.9.0. If users have not yet upgraded their mobile client, please upgrade to the latest version 7.10.0 immediately. This vulnerability could cause certain transactions for a small subset of users in the mobile app v7.9.0 to not execute as expected, potentially occurring across different chains.Additionally, MetaMask indicated that if users see submitted old transactions or transactions that are no longer visible in the transaction view on MetaMask Mobile; and if the transactions never appeared on Etherscan, they may be affected by this bug.

ChainCatcher news, Worldcoin announced the security audit report on its official blog. Starting from April 2023, the auditing firms Nethermind and Least Authority conducted two independent security audits of the protocol. Nethermind focused on auditing the smart contracts of the protocol, identifying a total of 26 issues. Of these, 92.6% (24 issues) have been fixed after the validation phase, one has been mitigated, and the remaining one has been confirmed. Least Authority focused on auditing the protocol's use of cryptography, identifying 3 issues and making six recommendations. All issues "have been resolved or are planned to be resolved."

ChainCatcher news, the Bitcoin wallet Xverse officially announced that we have fixed a bug that caused the wallet seed phrase to be stored unencrypted on the device. All users should update to the latest version after the release of the Chrome extension, which is currently awaiting approval from Google.In addition, Xverse stated that if it is confirmed that no seed phrases have left the user's local device, the risk posed by this bug will be minimal. However, if users are concerned about the risk, they can migrate their assets to a newly generated wallet. (Source link)