Humanity (H) has released a new statement regarding today’s security breach, announcing that the attack did not stem from a smart contract vulnerability.
The project team stated that there were no security vulnerabilities in the bridge infrastructure, token contract, and Safe system, and explained that all transactions carried out by the attacker were done with valid private key authorization.
According to the statement, the attack resulted from the compromise of the private key due to the signing key used in the production environment being backed up on a general-purpose development device without adequate security measures. Humanity acknowledged that this was both a human error and a lack of operational security.
en.bitcoinsistemi.com
