BTC

$61840.79

-2.04%

ETH

$3411.164

-1.70%

BNB

$574.972

-0.55%

XRP

$0.482

0.44%

News

LayerZero Critical Vulnerability Denied Amid Allegations Questioning Protocol Design

July 1, 2024 - Around 2 mins mins to read

Key Points:

  • A LayerZero critical vulnerability is being suspected by users, causing CEO Bryan Pellegrino to speak out.
  • Pellegrino highlights that the protocol’s design allows apps to override configurations.
  • LayerZero’s ZRO token airdrop faced disappointed from participants as the token’s value dropped by 15% since launch.
LayerZero Labs co-founder and CEO Bryan Pellegrino has recently dismissed claims of a LayerZero critical vulnerability as “entirely baseless.”
LayerZero Critical Vulnerability Denied Amid Allegations Questioning Protocol Design

LayerZero Critical Vulnerability Is a Protocol Design

Responding on the X platform, Pellegrino clarified that the referenced code dates back to 2022 and pertains to application configuration rather than the core protocol. He also said that the LayerZero critical vulnerability is suspected by users to be a protocol design.

Pellegrino emphasized that the payload size limit is part of the apps’ security configuration, allowing the app to override this limit. He explained, “If the app couldn’t override this config then LayerZero could block application messaging by configuring the ‘payload limit’ to 0, which would be against the entire design principle of the protocol.”

In his defense, Pellegrino urged skeptics to test the system themselves, stating, “Simply fork and test and as i’m sure you confirmed back then it’s not something that could be executed and if it was it would have been because an application specifically selected to set it that way. Any messaging protocol that enshrines this configuration can now censor any application. We believe in censorship-resistant technology rails.”

ZRO Token Launch Shows Disappointment

LayerZero Labs continues to assert the robustness and reliability of its technology, which facilitates cross-chain interoperability. The technology enables smart contracts across different blockchains to interact, bridging value across isolated decentralized networks.

Recently, LayerZero began distributing its native ZRO tokens via an airdrop. Major crypto exchanges, including Binance and Upbit, have announced their listings of ZRO. However, the excitement was tempered by participant frustration over the airdrop rewards, which many found disappointing. Currently, ZRO is trading at $3.46, a 15% decline since its launch.

DISCLAIMER: The information on this website is provided as general market commentary and does not constitute investment advice. We encourage you to do your own research before investing.

Airdrop

Bryan Pellegrino

LayerZero

LayerZero Critical Vulnerability

LayerZero Labs

ZRO

Avatar of Harold

Author

Harold

With a passion for untangling the complexities of the financial world, I've spent over four years in financial journalism, covering everything from traditional equities to the cutting edge of venture capital. "The financial markets are a fascinating puzzle," I often say, "and I love helping people make sense of them." That's what drives me to bring clear and insightful financial journalism to the readers of Coincu.
News

LayerZero Critical Vulnerability Denied Amid Allegations Questioning Protocol Design

Key Points:

  • A LayerZero critical vulnerability is being suspected by users, causing CEO Bryan Pellegrino to speak out.
  • Pellegrino highlights that the protocol’s design allows apps to override configurations.
  • LayerZero’s ZRO token airdrop faced disappointed from participants as the token’s value dropped by 15% since launch.
LayerZero Labs co-founder and CEO Bryan Pellegrino has recently dismissed claims of a LayerZero critical vulnerability as “entirely baseless.”
LayerZero Critical Vulnerability Denied Amid Allegations Questioning Protocol Design

LayerZero Critical Vulnerability Is a Protocol Design

Responding on the X platform, Pellegrino clarified that the referenced code dates back to 2022 and pertains to application configuration rather than the core protocol. He also said that the LayerZero critical vulnerability is suspected by users to be a protocol design.

Pellegrino emphasized that the payload size limit is part of the apps’ security configuration, allowing the app to override this limit. He explained, “If the app couldn’t override this config then LayerZero could block application messaging by configuring the ‘payload limit’ to 0, which would be against the entire design principle of the protocol.”

In his defense, Pellegrino urged skeptics to test the system themselves, stating, “Simply fork and test and as i’m sure you confirmed back then it’s not something that could be executed and if it was it would have been because an application specifically selected to set it that way. Any messaging protocol that enshrines this configuration can now censor any application. We believe in censorship-resistant technology rails.”

ZRO Token Launch Shows Disappointment

LayerZero Labs continues to assert the robustness and reliability of its technology, which facilitates cross-chain interoperability. The technology enables smart contracts across different blockchains to interact, bridging value across isolated decentralized networks.

Recently, LayerZero began distributing its native ZRO tokens via an airdrop. Major crypto exchanges, including Binance and Upbit, have announced their listings of ZRO. However, the excitement was tempered by participant frustration over the airdrop rewards, which many found disappointing. Currently, ZRO is trading at $3.46, a 15% decline since its launch.

DISCLAIMER: The information on this website is provided as general market commentary and does not constitute investment advice. We encourage you to do your own research before investing.
Visited 55 times, 9 visit(s) today