On October 13, Quit, Vice President of Blockchain at Yuga Labs, issued a reminder that users should immediately revoke their authorizations for the Blur contract following the announcement of the discontinuation of the website frontend. He stated that he has checked the current Blur contract and found no exploitable vulnerabilities, but these contracts support upgrades, which could potentially introduce malicious logic in the future. Quit noted that there are still NFTs with a total value in the tens of millions of dollars that have authorized access to the Blur contract, and the security of these assets actually depends on the operational security of the Blur team itself. He believes that the team currently appears to be disbanding, and thus recommends users revoke their authorizations using revoke.cash or similar tools to guard against potential contract vulnerabilities or risks from future upgrades. Quit also mentioned that last month, related contracts from Magic Eden were exploited, involving millions of dollars, and he had assisted in recovering a significant portion of those funds. This incident highlights the risks of maintaining contract authorizations, especially as attackers gain access to more powerful vulnerability discovery tools. Yuga Labs CEO Figge also issued a reminder that the Blur contract is upgradeable, urging users to revoke their authorizations to avoid future security issues.
All Comments