TechFlow reports, according to an announcement by security firm Zellic on May 16, the Sui blockchain network recently patched a vulnerability that could have put "billions of dollars" at risk. The vulnerability was located in a dependency of the bytecode verifier, which ensures that human-readable Move language is correctly transcribed into machine code during deployment for writing smart contracts on Sui. If unpatched, this flaw could have allowed attackers to bypass multiple security checks, potentially leading to significant financial losses.
Mysten Labs, the developer behind Sui, fixed the vulnerability on March 30 upon being notified by the Zellic team. This vulnerability may also have existed in other Move-based networks, including Aptos and Starcoin.
According to the Zellic team, the Aptos version of the vulnerability was resolved via a patch on April 10.
