📢 #Gate Square Writing Contest Phase 3# is officially kicks off!
🎮 This round focuses on: Yooldo Games (ESPORTS)
✍️ Share your unique insights and join promotional interactions. To be eligible for any reward, you must also participate in Gate’s Phase 286 Launchpool, CandyDrop, or Alpha activities!
💡 Content creation + airdrop participation = double points. You could be the grand prize winner!
💰Total prize pool: 4,464 $ESPORTS
🏆 First Prize (1 winner): 964 tokens
🥈 Second Prize (5 winners): 400 tokens each
🥉 Third Prize (10 winners): 150 tokens each
🚀 How to participate:
1️⃣ Publish an
LayerZero CEO disclosed the vulnerability in the AcrossToken contract and provided a solution
BlockBeats News, on October 22nd, Bryan Pellegrino, CEO of Cross-Chain Interaction Protocol LayerZero, wrote a letter to the Across Protocol team on social media, stating, 'I want to inform you that your Token contract has a critical issue. You mistakenly exposed a functionality that was originally intended to be an internal private function, which was implemented by Open Zeppelin in their ERC20 Token implementation to destroy Tokens and give them to the contract owner - this allows you to withdraw Tokens from any wallet at any time and arbitrarily set the balance of any account to 0. In addition, your Across Protocol and UMA Protocol contracts both have the ability to mint an unlimited amount of Tokens, but I have already informed you about these two issues and you seem to not care. To address this problem without the need for token reissuance: transfer ownership of the contract to a new Smart Contract to prevent minting exceeding the total supply and disallow destruction. Since this is a permanent vulnerability, the new contract must be immutable and should not include any functionality to transfer ownership. If you have an active bug bounty program, you can attribute this information to the LayerZero team.'