Ethical hackers find flaw that risked $70B in crypto infrastructure

A blockchain security researcher using a $3,000 server simulated an attack path that could have put as much as $70 billion in crypto infrastructure at risk, highlighting persistent vulnerabilities in smart contract execution environments.

The flaw was discovered in Aptos, a layer-1 blockchain built on the Move smart contract language, which also underpins Sui and originated from Facebook's shelved Diem project. In late February, researchers at Hexens reported a critical vulnerability in the Aptos Move virtual machine, the execution environment that processes smart contracts. The bug, described as a "stale-cache" issue leading to type confusion, could have allowed an attacker to manipulate cached data and execute unauthorized operations. The vulnerability was responsibly disclosed to the Aptos development team, and a fix has been implemented.

For cryptocurrency traders, this incident underscores the importance of security audits in blockchain networks. While no funds were lost, the potential scale of the exploit — up to $70 billion in crypto assets — serves as a reminder that even well-funded projects can harbor critical flaws. Live crypto prices and charts on NowPrice show how the market has remained stable following the disclosure, but the event reinforces the need for ongoing vigilance. The 4-year halving cycle and ETF flow dynamics often dominate headlines, but infrastructure security remains a foundational risk factor that can impact asset valuations and network trust.

Looking ahead, the crypto community will watch for further details on the vulnerability and any additional patches. The incident may prompt other layer-1 projects to review their own virtual machine implementations. As blockchain technology matures, the frequency and severity of such disclosures will be a key metric for institutional adoption and retail investor confidence.