According to PANews, BitsLab's security team, TonBit, recently identified a null pointer dereference vulnerability in the INMSGPARAM instruction of the TON Virtual Machine (TVM) version 2025.04. This flaw could allow attackers to crash the virtual machine by crafting specific message parameters. TonBit proactively reported the issue, leading to its resolution and acknowledgment by the official team before the launch of TVM11. The vulnerability originated from the as_tuple() function, which lacked null pointer validation. TonBit has emphasized its commitment to enhancing TVM security measures to ensure the stability of contract execution on the blockchain.

TON0.62%
VIRTUAL4.44%
This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
  • Reward
  • Comment
  • Repost
  • Share
Comment
0/400
No comments
Trade Crypto Anywhere Anytime
qrCode
Scan to download Gate app
Community
English
  • 简体中文
  • English
  • Tiếng Việt
  • 繁體中文
  • Español
  • Русский
  • Français (Afrique)
  • Português (Portugal)
  • Bahasa Indonesia
  • 日本語
  • بالعربية
  • Українська
  • Português (Brasil)