Ethereum Layer 2 network Scroll completed an emergency mainnet upgrade on November 10, registering a patched proof verification contract for batch version 10. The update addresses a vulnerability reported via bug bounty on November 3 that could have allowed old valid proofs to be reused with new public inputs, potentially enabling finalization of arbitrary state roots and withdrawal roots.
Exploiting the flaw required either the permissioned prover role or forced batch mode, which activates only after seven days without finalization. Scroll confirmed the vulnerability was not exploited on mainnet, noting all 748 finalizations during the vulnerable period used normal proofs and forced mode was never activated. Verification contracts from earlier versions remain unaffected.
Scroll Patches Proof Verification Contract Vulnerability in Emergency Mainnet Upgrade
면책 조항: Phemex 뉴스에서 제공하는 콘텐츠는 정보 제공 목적으로만 제공됩니다. 제3자 기사에서 출처를 얻은 정보의 품질, 정확성 또는 완전성을 보장하지 않습니다.이 페이지의 콘텐츠는 재무 또는 투자 조언이 아닙니다.투자 결정을 내리기 전에 반드시 스스로 조사하고 자격을 갖춘 재무 전문가와 상담하시기 바랍니다.
