Everscale is at the forefront of blockchain development.
25 Apr 2023, 17:08
🚀 Everscale is at the forefront of blockchain development. We work daily to improve the protocol and find vulnerabilities, and part of that process involves offering white hat hackers generous rewards in exchange for helping to improve the security of the entire ecosystem. Our innovations open up new horizons but the path through the unknown is often tricky.
Unfortunately, today a malicious smart contract was deployed with the goal of exploiting the guaranteed nature of internal message delivery. The contract was designed to send itself numerous internal messages for each incoming internal message. As a result of this attempt, there has been a significant increase in waiting times and collation timeouts ⏳
However, the problem is currently being fixed and the community should know that, in order to protect the network from these attempted exploits in the future, limits on single-account message queues will be introduced as well as a flexible gas policy for that kind of message.
Our development team is in the process of conducting a detailed analysis of the incident in order to prevent similar problems in the future. By nature, working with IT systems involves discovering bugs and vulnerabilities. The real question is how you respond. On that note, we would like to extend our gratitude to all the people that helped in detecting this vulnerability and allowing us to take the steps necessary to remedy the situation. Your contributions to the network will be rewarded 💻