Researcher simulates vulnerability in Aptos Move virtual machine

2 min read

Researchers at Hexens reported a critical stale-cache bug in the Aptos Move virtual machine that caused a type-confusion vulnerability, and they used a $3,000 server to simulate an attack path they say could have put as much as $70 billion of crypto infrastructure at risk. The issue was reported through emergency security channels on Feb. 25 and patched by the Aptos development team; an Aptos spokesperson said a fix was developed, tested, and deployed to mainnet within hours and that no users or funds were impacted. The patch prevented any losses and the chain remains operational.

Aptos patched a critical Move VM bug before any funds were lost