Hexens says patched Aptos Move VM bug could have put $70B at risk in $3K server test
Coindesk •
Revision history
2 recorded changes
Want your article here?
Promote with Leviathan NewsHexens disclosed a stale-cache bug in Aptos' Move VM that it says could let an attacker confuse onchain resource types and seize protocol authority across stablecoins, bridges, and DeFi. Aptos patched it after a Feb. 25 report and says no funds were affected, but Hexens' mainnet-like simulation succeeded 17 or 18 times out of about 20 on a $3,000 setup. Hexens put broader first-order exposure near $70B, while Grego AI estimated roughly $250M of Aptos-native TVL was directly at risk.
TLDR by @Benthic
Explore the topic
More on Aptos
Aptos Labs says BlackRock, Franklin Templeton, and Apollo tokenized funds are live on Aptos
𝕏/@AptosLabs ·
Aptos Labs launches Confidential APT on mainnet with encrypted balances via Petra mobile
𝕏/@AptosLabs ·
Decibel opens 24/7 fully onchain markets on Aptos after Aptos Labs incubation
𝕏/@AptosLabs ·
Aptos, HashKey MENA and Daya pilot B2B stablecoin corridor between MENA and Africa
𝕏/@Aptos ·
Aptos stacks Vertalo, tZERO, Archax, and Bitnomial into regulated RWA infrastructure
𝕏/@Aptos ·
Researchers uncover how hackers used over 34 fake npm, PyPI and Rust packages in “TrapDoor” attack targeting Solana, Sui and Aptos developers to steal wallets and cloud credentials
Coindesk ·
Aptos Labs says BlackRock, Franklin Templeton, and Apollo tokenized funds are live on Aptos
𝕏/@AptosLabs ·
Aptos Labs launches Confidential APT on mainnet with encrypted balances via Petra mobile
𝕏/@AptosLabs ·
Decibel opens 24/7 fully onchain markets on Aptos after Aptos Labs incubation
𝕏/@AptosLabs ·
Aptos, HashKey MENA and Daya pilot B2B stablecoin corridor between MENA and Africa
𝕏/@Aptos ·
Aptos stacks Vertalo, tZERO, Archax, and Bitnomial into regulated RWA infrastructure
𝕏/@Aptos ·
Researchers uncover how hackers used over 34 fake npm, PyPI and Rust packages in “TrapDoor” attack targeting Solana, Sui and Aptos developers to steal wallets and cloud credentials
Coindesk ·