🚨Security Alert for MultiversX There is currently a hacker exploiting old smart contracts around the ecosystem. Recent events around older smart contracts on xExchange, artCPA and JExchange should be a wake-up call for all of us. First, for our own holders: no $A1X pools have been affected by these incidents. We are actively monitoring the situation and will continue reviewing anything that could create risk for the wider ecosystem. No smart contract is magically safe forever just because it has been running for years and in the age of AI, that matters even more. The same technology that can help developers analyse code, simulate scenarios and spot weaknesses can also help bad actors search for vulnerabilities faster than ever. So we need to make sure the defenders are using these tools first. AI-assisted auditing, testing and continuous review of existing contracts could become just as important as auditing new ones before launch. Unfortunately, these incidents have had real consequences. People have lost funds, NFTs have been stolen, and projects have seen their token prices hit as a result. A special shoutout to @SVictorUniverse, who we can see are dealing with the stolen NFT situation quickly and doing what they can to protect holders. It is horrible to see anyone in the ecosystem affected. But there is also a lesson here: AI isn’t only something we need to protect ourselves from. It can become one of our strongest tools for finding the holes before somebody else does. The technology is moving quickly. Security needs to move with it.

A different kind of weekly update 🌍 On Sep 19, an attempt to exploit a VM-level issue caused invalid state changes, and network progression was paused to protect users. What happened: 🔍 An actor exploited a VM-level atomicity issue; a fix was prepared the same day 🧩 The root cause: an order-of-operations mistake in edge cases, contained fast thanks to the validators' rapid response Where things stand: 🛡 The incident is contained; the attacker's accounts have been identified and frozen with major exchanges, and law enforcement is engaged 🔧 Recovery will be a coordinated hard fork from a known-good checkpoint, rehearsed on Testnet and Devnet with validators first ⚙️ The code is ready and public, and testing is ongoing ⏸️ Until the all-clear: don't submit or rebroadcast transactions, and don't use EGLD/ESDT deposit and withdrawal routes on exchanges or bridges. Exchanges and bridges will reopen in stages after the restart. A full technical incident report will follow. Thank you to the validators, partners and everyone who stood with the network this week. Our regular recap returns once the network is back, with two weeks of building to catch up on.

Meet the Finance Computer. Powered by $EGLD.