Pinned
Alephium
9,090 posts
Alephium
@alephium
The Web3 you were promised. A high-performance Layer 1 PoW network enabling scalable, easy to use and aligned crypto applications. No tradeoffs.
Bridge Exploit Update Work on bridge remediation progresses. Over the past few days, the team has been focused on reviewing, testing, and hardening the updated bridge infrastructure. We are currently finalizing our internal review and preparing for an additional external
- Replying to @alephiumA full technical breakdown of how the burn was executed was published walking through the technical process behind how the attacker's wALPH was burned, including the guardian coordination process.
- Replying to @alephiumPowfi is getting a codebase upgrade introducing the B2B2C partner integration framework built on the ALPH Staking Layer, enabling integration partners to offer ALPH staking to their users and earn a commission through an on-chain referral system.
- Replying to @alephiumFollowing the burn, it was confirmed that the vulnerability has been fixed, that Alephium will supply the native ALPH to back the 500,000 unbacked wALPH sold prior to the burn, and that the most likely path forward is a relaunch of bridge operations.
- Replying to @alephiumThe on-chain transaction report was published, and the unauthorized wALPH held in the attacker's wallet was burned via an authorized recovery procedure executed by the bridge guardians and security partners.
- Replying to @alephiumA full bridge update was shared confirming that legitimate wALPH holders had been identified via snapshot and would have a recovery path to reclaim the corresponding native ALPH. The team also announced the start of coordination with law enforcement and legal counsel.
- Replying to @alephiumThe Alephium bridge exploit was identified. The bridge was shut down immediately, the exploit path was closed, and the team confirmed the cause: an offchain vulnerability in the bridge backend, not a smart contract exploit or guardian key compromise. Thanks to @blockaid_ and
- Replying to @alephiumSmart Contract Assets and Native Assets This remediation action also highlights an important architectural distinction between smart contract-managed assets and native protocol assets. The remediation action described above was possible because wALPH exists as a smart
- Replying to @alephiumOn Decentralization and immutability Governance actions and decentralization are often discussed as though they are incompatible concepts, when in reality, decentralization and immutability are distinct properties. A decentralized system can still change state when the relevant
