A self-described white hat hacker has uncovered a “multi-million dollar vulnerability” in the bridge linking Ethereum and Arbitrum Nitro and received a 400 Ether (ETH) bounty for their find. Known as riptide on Twitter, the hacker described the exploit as the use of an initializing function to set their own bridge address, which would hijack all incoming ETH deposits from those trying to bridge funds from Ethereum to Arbitrum Nitro. Riptide explained the exploit in a Medium post on Sept. 20: “We could either selectively target large ETH deposits to remain undetected for a longer period of time, siphon up every single deposit that comes through the bridge, or wait and just front-run the next massive ETH deposit.” The hack could have potentially netted tens or even hundreds of millions worth...
Ethereum layer-2 scaling solution Arbitrum is set to undergo one of its most significant upgrades on Wednesday, set to increase transaction throughput, slash transaction fees and simplify cross-chain communication between Arbitrum and Ethereum. Referred to as the “Nitro” upgrade, Arbitrum reconfirmed the date of the upgrade in a Twitter post on Aug. 29, confirming that the upgrade will take effect on Aug. 31 at 10:30 AM Eastern Time, while noting a two to four hours of network downtime period is to be expected. Reminder — Arbitrum One is upgrading to Nitro on Wednesday 8/31. There will be 2-4 hours of planned network downtime, starting 10:30 AM ET / GMT-4. 2️⃣ days until Nitro! — Arbitrum (@arbitrum) August 29, 2022 Abritrum is an Ethereum layer-2 scaling solution that utiliz...