Virtuals Protocol fixes a serious vulnerability and promises to offer a bounty for the researcher's discovery

According to Cointelegraph, a vulnerability was accidentally discovered by security researcher Jinu (pseudonym) during a review of the smart contract of blockchain company Virtuals Protocol. Virtuals Protocol quickly released remedial measures and restarted its bug bounty program. On December 3rd, Jinu stumbled upon this issue while reviewing the contract and immediately reported it to Virtuals Protocol, only to find out that the company did not have an active bug bounty program, meaning his discovery did not meet reward criteria. According to Jinu, the Virtuals Protocol team also shut down a Discord group specifically for reporting this vulnerability.

In a post on platform X, Jinu said: "This vulnerability could impact the Virtuals ecosystem; if exploited, it would prevent AgentTokens from being generated until the contract is fixed." After publicly disclosing this information on platform X, Virtuals Protocol contacted Jinu and promptly issued remedial measures. Despite timely release of these measures, Virtuals Protocol has yet to announce any bug bounty rewards for Jinu. In their communication with the researcher, they thanked him for reporting this issue and apologized for previous communication difficulties.