[ad_1] <br><div id="articlebody"><div class="separator" style="clear: both;"><a target="_blank" href="https://thehackernews.com/new-images/img/b/R29vZ2xl/AVvXsEglc_p8CP_eyxz3DqgEQ0RCLJ--v5NbVapIc1gock5FmJpeJifUF4mNGQtbECB5AkB_eAuUL64Ow_OF78jn10e41eCt4QxUn7IUUS4sRwQcU532z1UsAeiCjn9YsvmxKPvrB838nn-fubLVrhOJHCwVBPlko_bX-7r_k6-d9jZWRd_elFVQHIL0bilK/s728-e100/aptos-blockchain-network.jpg" style="display: block; text-align: center; clear: left; float: left;" rel="noopener"><img alt="" border="0" data-original-height="380" data-original-width="728" src="https://thehackernews.com/new-images/img/b/R29vZ2xl/AVvXsEglc_p8CP_eyxz3DqgEQ0RCLJ--v5NbVapIc1gock5FmJpeJifUF4mNGQtbECB5AkB_eAuUL64Ow_OF78jn10e41eCt4QxUn7IUUS4sRwQcU532z1UsAeiCjn9YsvmxKPvrB838nn-fubLVrhOJHCwVBPlko_bX-7r_k6-d9jZWRd_elFVQHIL0bilK/s728-e100/aptos-blockchain-network.jpg"/></a></div> <p>Researchers have disclosed particulars a few now-patched vital flaw within the Transfer digital machine that powers the Aptos blockchain community.</p> <p>The vulnerability "could cause Aptos nodes to crash and trigger denial of service," Singapore-based Numen Cyber Labs <a target="_blank" href="https://medium.com/numen-cyber-labs/analysis-of-the-first-critical-0-day-vulnerability-of-aptos-move-vm-8c1fd6c2b98e" rel="noopener">said</a> in a technical write-up printed earlier this month.</p> <p>Aptos is a <a target="_blank" href="https://aptoslabs.medium.com/aptos-autumn-is-here-92a8d904eb49" rel="noopener">new entrant</a> to the blockchain area, which <a target="_blank" href="https://www.coindesk.com/business/2022/10/19/aptos-token-opens-for-trading-after-blockchains-rocky-debut/" rel="noopener">launched</a> its <a target="_blank" href="https://academy.binance.com/en/glossary/mainnet" rel="noopener">mainnet</a> on October 17, 2022. It has its roots within the Diem stablecoin fee system proposed by Meta (née Fb), which additionally launched a short-lived digital pockets known as <a target="_blank" href="https://about.fb.com/news/2020/05/welcome-to-novi/" rel="noopener">Novi</a>.</p> <div class="ad_two clear"><center class="cf"><a target="_blank" href="https://go.thn.li/strike-d" rel="nofollow noopener sponsored" title="DevOps backupy"><img decoding="async" alt="CyberSecurity" class="lazyload" loading="lazy" src="https://thehackernews.com/new-images/img/b/R29vZ2xl/AVvXsEgvfqow2z1XORevUpzKGWWXZ2DP4dMaNi-7cycpa3J_bSZKv0tO6MP40HLl7lvVJDIswOmb6I-YoNMLJym4v9oLZQczujsMqcttB3M_Cvm6E-zLs0XrpwaTZ_SGFjckDfi3CPfijZaii8Z88_btcKeHKKfxm7cDyF3kaVvsirGpb2JWVH0Ot3xGiC2sZg/s1600/strike-728.png" width="300" height="250"/></a></center></div> <p>The community is constructed utilizing a platform-agnostic programming language generally known as <a target="_blank" href="https://github.com/move-language/move" rel="noopener">Move</a>, a Rust-based system that is <a target="_blank" href="https://developers.diem.com/docs/technical-papers/move-paper/" rel="noopener">designed</a> to implement and execute <a target="_blank" href="https://thehackernews.com/2022/01/sailfish-system-to-find-state.html" rel="noopener">smart contracts</a> in a safe <a target="_blank" href="https://ethereum.org/en/developers/docs/evm/" rel="noopener">runtime environment</a>, also called the Transfer Digital Machine (aka <a target="_blank" href="https://aptos.dev/guides/move-guides/move-on-aptos/" rel="noopener">MoveVM</a>).</p> <div class="separator" style="clear: both;"><a target="_blank" href="https://thehackernews.com/new-images/img/b/R29vZ2xl/AVvXsEioKCdN1lOU1kZfDhz92uyQL1NGVLnIWESslBHCSseE5iJcuDN2PZeK0M6RQSAIPHwuFdZHv84eIj08tm2_ldQJHaPoKJ-0sPmy4vkK2MxAr7S7O8xmtAv4TxXOIuC2cZuRvC4It5FPkx1SZbqnvTjLbaXuFKcTzeOZ0oAUzFKyd0fhVTwRjsVeOXaG/s728-e100/malware.jpg" style="display: block; text-align: center; clear: left; float: left;" rel="noopener"><img alt="" border="0" data-original-height="241" data-original-width="728" src="https://thehackernews.com/new-images/img/b/R29vZ2xl/AVvXsEioKCdN1lOU1kZfDhz92uyQL1NGVLnIWESslBHCSseE5iJcuDN2PZeK0M6RQSAIPHwuFdZHv84eIj08tm2_ldQJHaPoKJ-0sPmy4vkK2MxAr7S7O8xmtAv4TxXOIuC2cZuRvC4It5FPkx1SZbqnvTjLbaXuFKcTzeOZ0oAUzFKyd0fhVTwRjsVeOXaG/s728-e100/malware.jpg"/></a></div> <p>The <a target="_blank" href="https://github.com/move-language/move/commit/566ace5a9ec01e0e685f4bfba79072fe635a6cb2" rel="noopener">vulnerability</a> recognized by Numen Cyber Labs is rooted within the Transfer language's verification module ("<a target="_blank" href="https://github.com/move-language/move/blob/main/language/move-bytecode-verifier/src/stack_usage_verifier.rs" rel="noopener">stack_usage_verifier.rs</a>"), a element that validates the <a target="_blank" href="https://en.wikipedia.org/wiki/Bytecode" rel="noopener">bytecode instructions</a> previous to its execution in MoveVM.</p> <div class="ad_two clear"><center class="cf"><a target="_blank" href="https://go.thn.li/crowd-mid-d" rel="nofollow noopener sponsored" title="CyberSecurity"><img decoding="async" alt="CyberSecurity" class="lazyload" loading="lazy" src="https://thehackernews.com/new-images/img/b/R29vZ2xl/AVvXsEglTybVbyQ3y6xCIxW9BIpqhgWBf_IhNgCo44HrgwUeYVi_GwvasznH93LLdkqJLwdp4DUkFkILg6m3WDgkue7MFxmbzFxmTBe7-pukEjyvUZ3j9yGyBcL2yUAZVFSQkjSric7YYfU8WgwHwYsS2-3wZ1zLQDAqgkoEpk5kZsbUuyh0UlV8nq7PplYEgQ/s1600/banners-crowdsec-728.png" width="728" height="90"/></a></center></div> <p>Particularly, it pertains to an <a target="_blank" href="https://cwe.mitre.org/data/definitions/190.html" rel="noopener">integer overflow vulnerability</a> within the <a target="_blank" href="https://en.wikipedia.org/wiki/Stack-oriented_programming" rel="noopener">stack-based</a> Web3 programming language that would end in undefined conduct and subsequently crashes.</p> <div class="separator" style="clear: both;"><a target="_blank" href="https://thehackernews.com/new-images/img/b/R29vZ2xl/AVvXsEhCZ_FUUnu4gJBU-zghMMdhuf_TTFWEGvMdoyeRT6jQCXCBCri32xKuj2FHbmj4ndvY2ixToSvJ9h0DvVG5Z6O7TxWS3pT9wNxgTet_1DZYkaDD4UXX5pGIjtcF3nfd9CxILJVo0BgTd1MhvpJqzQJO9srUNG7kQeKVjvdsfwSoa-wiXKVWaIvcSxdB/s728-e100/patch.jpg" style="display: block; text-align: center; clear: left; float: left;" rel="noopener"><img alt="" border="0" data-original-height="257" data-original-width="728" src="https://thehackernews.com/new-images/img/b/R29vZ2xl/AVvXsEhCZ_FUUnu4gJBU-zghMMdhuf_TTFWEGvMdoyeRT6jQCXCBCri32xKuj2FHbmj4ndvY2ixToSvJ9h0DvVG5Z6O7TxWS3pT9wNxgTet_1DZYkaDD4UXX5pGIjtcF3nfd9CxILJVo0BgTd1MhvpJqzQJO9srUNG7kQeKVjvdsfwSoa-wiXKVWaIvcSxdB/s728-e100/patch.jpg"/></a></div> <p>"Since this vulnerability happens within the Transfer execution module, for nodes on the chain, if the bytecode code is executed, it would trigger a [Denial-of-Service] assault," the cybersecurity agency defined.</p> <p>"In extreme instances, the Aptos community may be utterly stopped, which can trigger incalculable injury, and have a critical impression on the soundness of the node."</p> <br/>
</div><script> //<![CDATA[ head.ready("jqueryfile",function(){$("a[href^='#link_share']").each(function(){var e=$(this).attr("data-sm"),t="";"facebook"==e&&(t="https://www.facebook.com/sharer.php?u="+share_url),"twitter"==e&&(t="https://twitter.com/intent/tweet?url="+share_url+"&text="+share_title+"&via=TheHackersNews"),"linkedin"==e&&(t="https://www.linkedin.com/shareArticle?mini=true&url="+share_url),"reddit"==e&&(t="https://www.reddit.com/submit?url="+share_url),"hackernews"==e&&(t="https://news.ycombinator.com/submitlink?u="+share_url+"&t="+share_title),"email"==e&&(t="mailto:?&subject=News Article—"+share_title+"&body=Check out this article from The Hacker News. n n n"+share_title+" — "+share_url),"whatsapp"==e&&(t="https://api.whatsapp.com/send?text="+share_title+" — "+share_url),"facebook-m"==e&&(t="fb-messenger://share/?link="+share_url+"&app_id=280117418781535"),"telegram"==e&&(t="https://telegram.me/share/url?url="+share_url+"&text="+share_title),$(this).attr("href",t)}),$(".show-comments").on("click",function(){var e=document.createElement("script");e.src="https://connect.facebook.net/en_US/sdk.js#xfbml=1&appId=280117418781535&version=v2.12",document.body.appendChild(e),$(".sharebelow-comment").hide(),$(".comments").show()});var e=$(".articlebody").offset().top,t=!1;$(window).scroll(function(){$(window).scrollTop()>e&&!t&&(jQuery.ajax({url:"https://thehackernews.com/feeds/posts/default?alt=json&max-results=4",type:"get",cache:!1,dataType:"jsonp",success:function(e){for(var t="",s="",r=0;r<e.feed.entry.length;r++){for(var a,l=0;l<e.feed.entry[r].link.length;l++)if("alternate"==e.feed.entry[r].link[l].rel){t=e.feed.entry[r].link[l].href;break}100<(a=(a="content"in e.feed.entry[r]?e.feed.entry[r].content.$t:"summary"in e.feed.entry[r]?e.feed.entry[r].summary.$t:"").replace(/<S[^>]*>/g,"")).length&&(a=a.substring(0,90));var n=(n=e.feed.entry[r].title.$t).substring(0,50),o=(o=e.feed.entry[r].media$thumbnail.url.replace(//s72-c-e100/,"/s260-e100"));s+='<article class="latest cf"><a target="_blank" class="latest-link" href="'+t.replace("https://","https://")+'"><div><img decoding="async" src="'+o+'" alt="'+n+'"/></div><div><div class="latest-h3">'+n+'...</div></div><div class="latest-desc">'+a+"...</div></a></article>"}s+="",document.getElementById("result").innerHTML=s}}),t=!0)})}); //]]> </script><script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> <br>[ad_2] <br><a href="https://news.google.com/__i/rss/rd/articles/CBMiTWh0dHBzOi8vdGhlaGFja2VybmV3cy5jb20vMjAyMi8xMC9jcml0aWNhbC1mbGF3LXJlcG9ydGVkLWluLW1vdmUtdmlydHVhbC5odG1s0gEA?oc=5">Source link </a>