TonBit discloses TVM non-atomic migration vulnerability, which may cause dependency library contract anomalies.

TonBit under BitsLab has discovered a non-atomic state migration vulnerability in the RUNVM instruction within the TON Virtual Machine (TVM) deep code. Attackers can exploit the moment when the gas of the sub-virtual machine is exhausted to pollute the libraries of the parent virtual machine, leading to subsequent call failures and ultimately causing abnormal behavior in contracts that depend on library integrity. TonBit has promptly submitted the technical details and mitigation plan to the TON Foundation and assisted in completing the fix.

TON1.99%
GAS-3.62%
View Original
This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
  • Reward
  • Comment
  • Share
Comment
0/400
No comments
Trade Crypto Anywhere Anytime
qrCode
Scan to download Gate app
Community
English
  • 简体中文
  • English
  • Tiếng Việt
  • 繁體中文
  • Español
  • Русский
  • Français (Afrique)
  • Português (Portugal)
  • Bahasa Indonesia
  • 日本語
  • بالعربية
  • Українська
  • Português (Brasil)