Acurast Upgrades Security After Three Major Issues Disclosed

Acurast said on September 4 that it deployed security upgrades 26.3, 26.4 and 26.5 after a community researcher disclosed three major issues. The company said its network was not breached by external attackers, although a critical bug in its components caused excess rewards to be paid to some users.

Larger recipients agreed to burn surplus tokens, leaving roughly 71,000 ACU in excess rewards, worth about $5,500 at the time, according to Acurast. The Acurast Association said it will cover that amount from operational funds, while the reported vulnerabilities have now been fixed. Acurast also published post-mortems covering double claiming of staking rewards and replay of token-conversion messages.

Acurast said it deployed the fixes before publishing source code because releasing the changes first could have exposed the vulnerabilities to exploitation. The project is returning to its standard governance process, with source code published before future votes, and has made the updated code and changelog available on GitHub. The company framed the episode against what it described as a rise in AI-assisted security breaches across crypto.

… Continue reading the full article at the original source below.