BlockSec detects replay exploit with ETHPoW tokens
The Ethereum proof-of-work blockchain suffered a replay exploit with the attacker getting an extra 200 ETHW tokens after replaying a message from the proof-of-stake chain on ETHPoW, according to a cybersecurity firm that alerted the issue on Sunday. The ETHPoW blockchain developer team said that an attack exploited the contract vulnerability of the bridge, and not their blockchain itself.
"The exploiter (0x82fae) first transferred 200 WETH through the omni bridge of the Gnosis chain, and then replayed the same message on the PoW chain and got extra 200 ETHW," security company BlockSec said on Twitter. The attack happened because the bridge didn't correctly verify the chain ID of the cross-chain message, the company claimed. The developer team also said that it had been trying to get in contact with Omni Bridge since Saturday to inform them of the risks.
Source
https://t.me/DeFi_Ethereum
