TonBit discloses TVM non-atomic migration vulnerability, which may cause dependency library contract anomalies.

WuSaidBlockchainW · 2025-05-09T09:43:21+00:00

TonBit, under BitsLab, discovered a non-atomic state migration vulnerability in the RUNVM instruction within the TON Virtual Machine (TVM) deep code. Attackers can exploit the moment when the child virtual machine exhausts gas to contaminate the libraries of the parent virtual machine and induce subsequent call failures, ultimately leading to abnormal behavior in contracts that depend on library integrity. TonBit has promptly submitted the technical details and mitigation solutions to the TON Foundation and assisted in completing the repair.

WuSaidBlockchainW

2025-05-09 09:43:21

TonBit under BitsLab has discovered a non-atomic state migration vulnerability in the RUNVM instruction within the TON Virtual Machine (TVM) deep code. Attackers can exploit the moment when the gas of the sub-virtual machine is exhausted to pollute the libraries of the parent virtual machine, leading to subsequent call failures and ultimately causing abnormal behavior in contracts that depend on library integrity. TonBit has promptly submitted the technical details and mitigation plan to the TON Foundation and assisted in completing the fix.

TON-0.85%

GAS-1.27%

View Original

This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.