Blockchain

Virtuals Protocol Fixes Bug, Pledges Bounty For Researcher’s Discovery

An unexpected bug found in an audited smart contract led Virtuals Protocol, a blockchain firm focused on artificial intelligence agents, to issue a timely fix and relaunch its bug bounty program. On Dec. 3, 2024, pseudonymous security researcher Jinu contacted Virtuals Protocol after discovering a bug in one of its audited contracts. Still, upon reporting the issue, Jinu learned that the company did not have an active bug bounty program, meaning the discovery did not qualify for a reward.

According to Jinu, the Virtuals Protocol team also closed the Discord group created solely to report the vulnerability. In an X thread, Jinu said: “The vulnerability is simple and can impact the virtuals ecosystem (but virtuals probably doesn’t care about security”. Jinu explained to Cointelegraph that the vulnerability was related to a lack of validation when creating AgentTokens based on the internal bond threshold. “If exploited, this vulnerability would have prevented AgentTokens from being generated until the contract was fixed,” Jinu said.
After the information was made public on X, Virtuals Protocol contacted Jinu and issued an immediate fix. Despite the timely fix, Virtuals Protocol is yet to announce a bug bounty reward for Jinu. In a message to the researcher, the company thanked Jinu for reporting the issue and apologized for earlier miscommunication.
“Hey jinu we have verified the vulnerability and applied a patch below. Thank you for bringing this up to us and we apologise for the miscommunication between support and yourself. Let us internally review the severity of the issue and we will issue you a bug bounty shortly,” the company representatives told the security researcher.
When asked about the bounty expectations, Jinu said they are unaware of the general rewards for bug discoveries. Jinu told Cointelegraph that they got interested in Virtuals Protocols after a friend invested in a token created on Virtuals. “I spent about 30 minutes looking at the code to see if it was well done,” Jinu said before they came across the bug.
Terron Gold

Share
Published by
Terron Gold
Tags: AIAI Agentsbug bountysmart contract audittoken launchVirtuals Protocol
2 years ago

Recent Posts

Elon Musk’s xAI Sues Minnesota Over First U.S. AI Nudification Law

Elon Musk's artificial intelligence company xAI has filed a federal lawsuit challenging Minnesota's landmark law banning AI-powered "nudification" technology, arguing…

6 days ago

Bitcoin Nears $65,000 as Treasury Yields Outperform Carry Trade in Rare Market Signal

Bitcoin climbed toward $65,000 as an unusual shift in traditional financial markets created one of the rarest conditions…

7 days ago

Hyperscale Data Sells 100 Bitcoin to Fund Michigan AI Campus as GPUS Stock Surges

Hyperscale Data has sold 100 Bitcoin to accelerate development of its planned artificial intelligence campus in Michigan, sending shares…

7 days ago

PIPEDOG Explodes 140x on Robinhood Chain as Memecoin Frenzy Intensifies

A newly launched memecoin called PIPEDOG ($PIPEDOG) became the latest breakout token on Robinhood Chain, surging more than 140x within…

1 week ago

BNY Brings $8.6 Trillion Fund Business On-Chain in Major Wall Street Blockchain Expansion

BNY, the world's largest custodian bank, is bringing one of its core financial businesses onto…

1 week ago

Senators Strengthen Crypto Ethics Rules in CLARITY Act After Trump Negotiations

A bipartisan group of U.S. senators has reportedly reached a new compromise on the ethics provisions of…

1 week ago