Ronin

Security

The $10 million Ronin bridge exploit on&nbsp;Aug. 6 was caused by a faulty upgrade deployment script, according to a report from blockchain security firm Verichains.&nbsp;
The upgrade reduced the voting threshold for validators to zero, essentially allowing any user to withdraw from the bridge “without signature,” Verichains stated.&nbsp;
The attacker&nbsp;<a href="https://x.com/Verichains/status/1820810424159437261" target="_blank" rel="noopener noreferrer nofollow">attempted</a>&nbsp;to exploit this flaw to drain the bridge, but they were front-run by an MEV bot which actually carried out the attack, probably without intending to.&nbsp;The bot’s owner later returned most of the funds to the Ronin team.
Verichains’ analysis lays bare the risks that users take when they interact with upgradeable smart contracts. The protocol could have lost the full amount had the attacker paid more in gas and, therefore, avoided the frontrunner.
Ronin is a blockchain network dedicated to hosting Web3 games. It is most well-known for being the home of Axie Infinity, a play-to-earn monster breeding game that claimed to have over 2 million players during its peak in 2022. Ronin game players use the bridge to transfer funds between Ethereum and Ronin.
According to Verichain’s report, the bridge relies on the variable mimimumVoteWeight to prevent users from withdrawing funds that don’t belong to them. Each transaction must be authorized by a minimum number of validators set by this variable. When minimumVoteWeight is computed, it uses another variable, totalWeight, as an input.
<figure data-ct-non-breakable="true"><img src="https://s3.cointelegraph.com/uploads/2024-08/b5e2ec7b-7eaf-49e8-bc45-1e318985ff65.png" alt="Ronin bridge hack caused by error in upgrade deployment script — Verichains" title="">
 <figcaption style="text-align: center;">TotalWeight in a previous version of Ronin. Source: Verichains
 </figcaption>
</figure>
In earlier versions of the bridge, totalWeight existed on a separate contract, called “MainchainBridgeManager.” When the developers created the new upgrade, they wanted to move this variable to the bridge’s own internal storage, instead of leaving it in the other contract. This meant that they needed to initialize the variable at the moment of deployment, setting TotalWeight to the value it had been in the previous version.
Unfortunately, this is where the upgrade went horribly wrong. According to Verichain, the Ronin developers wrote several different “initialize” functions that were supposed to be called at the moment of deployment. Each of these functions had a different version number. The third version contained the crucial totalWeight initialization. But when the developers wrote the deployment script, they called only version 4, leaving totalWeight at its default zero value.
<figure data-ct-non-breakable="true"><img src="https://s3.cointelegraph.com/uploads/2024-08/7bf78088-9f5e-4706-bf3c-744b5ef4913c.png" alt="Ronin bridge hack caused by error in upgrade deployment script — Verichains" title="">
 <figcaption style="text-align: center;">Source: <a href="https://x.com/Verichains/status/1820810930588123321" target="_blank" rel="noopener noreferrer nofollow">Verichain</a>
 </figcaption>
</figure>
After this upgrade, users no longer needed to submit signatures to validators to prove their right to withdraw. They could withdraw “without signature,” since “it met the minimumVoteWeight condition (which was 0 due to uninitialized).”
In an Aug. 7 post to X, Composable Security smart contract auditor Damian Rusinek gave further detail on what allowed the attack to occur. Per Rusinek, the attacker&nbsp;<a href="https://x.com/drdr_zz/status/1820933105017913833" target="_blank" rel="noopener noreferrer nofollow">provided</a>&nbsp;a signature from an address ending in B849f. However, this address “[was] not on the bridge operators list.” It did not need to be on the bridge operators list because “the minimum votes of the operators was 0.” Therefore, “only ONE signature was required and it could [be] ANY valid signature.”
Although they did not go into as much detail as either Verichains or Rusinek, Ronin confirmed in an Aug. 6 X post that the exploit was caused when the upgrade “introduced an issue leading the bridge to misinterpret the required bridge operators vote threshold to withdraw funds.”
Blockchain data <a href="https://etherscan.io/tx/0xbce5b8548db486c561948e8a177c8ccaa72810f972cee3909ea50af015a60ad8" target="_blank" rel="noopener noreferrer nofollow">shows</a> that this attack transaction was frontrun by an MEV bot named “Frontrunner Yoink,” who successfully drained over $10 million worth of cryptocurrency from the bridge. According to Rusinek, the bot most likely “simulated changing address and amount and using their own signature.” It then submitted the transaction once this simulation proved that the exploit would work.
Related: <a href="https://cointelegraph.com/news/ronin-network-exploit-9-8m-eth-white-hat-hacker" rel="noopener noreferrer nofollow">Ronin Network exploited for $9.8M in ETH, white hat hacker suspected</a>
Frontrunner Yoink’s owner <a href="https://cointelegraph.com/news/ronin-white-hat-attacker-returns-10-million-eth-apparent-accidental-front-run" rel="noopener noreferrer nofollow">returned most of the funds</a> on the same day, and the Ronin team announced that they would be allowed to keep $500,000 worth as a bug bounty.
Ronin users suffered a close call with the Aug. 6 exploit. Luckily, the attack was front-run by an MEV bot whose owner was an honest white hat operator. However, the fact that the attack came so close to succeeding exposes the risky nature of upgradeable cross-chain bridges.
Some networks claim this problem will be eliminated when Ethereum layer 2s <a href="https://cointelegraph.com/news/decentralization-layer-2-rollup-ethereum" rel="noopener noreferrer nofollow">reach “stage 2” and all upgrades are delayed</a> for at least seven days after initiation. However, critics claim that the process of reaching this stage is taking too long and may never be completed.
<a href="https://cointelegraph.com/magazine/ivest-hacked-sinkclose-affects-amd-devices-usdt-phishing/" rel="noopener noreferrer nofollow">Magazine: Weird ‘null address’ iVest hack, millions of PCs still vulnerable to ‘Sinkclose’ malware: Crypto-Sec</a>

Ronin bridge hack caused by error in upgrade deployment script — Verichains

Cointelegraph

Other articles published on Aug 16, 2024

Institutional Investors Drive Bitcoin ETF Growth in Q2 2024

Crypto Payments for Salaries Now Approved in Dubai

Bitcoin Rate Cuts on the Horizon As Bitfinex Sees Bullish Outlook

Ethereum Sees Surge in On-Chain Activity as Institutional Investment Soars

Revolut teams up with Ledger to make crypto purchases easier and more secure

Bitcoin Spot ETF Filings with the SEC Have a Pleasing Progress: Coinbase Analysts Weigh In

Join our free newsletter for daily crypto updates!