MANTRA Chain stays offline after exploit as Aug. 21 restart hinges on patch test

MANTRA Chain remained halted on Aug. 21 after the crew mentioned an attacker exploited a vulnerability in an upstream dependency. Transactions, transfers, and staking are unavailable whereas the mainnet is paused.

MANTRA recognized the susceptible software program solely as an upstream dependency. In its official incident report, the crew mentioned it was tracing fund actions, working with trade companions, and persevering with to evaluate the entire scope.

The incident record shows MANTRA first froze endpoints and transactions whereas reviewing the basis trigger and influence. It later attributed the precautionary halt to an attacker exploiting the upstream dependency, then introduced the patched launch and testnet testing, with the mainnet remaining offline all through these updates.

The challenge’s newest replace mentioned person funds have been unaffected by the halt itself and {that a} full community state snapshot was taken earlier than the restart course of started. That assurance is restricted to the community pause, which prevents transactions from being processed. The asset influence of the attacker’s exercise stays unconfirmed.

Patch testing controls the restart

MANTRA mentioned patched launch v8.4.0 addresses the underlying vulnerability and is present process testing and due diligence on the DuKong testnet. The challenge’s GitHub release confirms the model and features a mainnet improve handler.

Testing on DuKong is the gate earlier than rolling out the identical software program to mainnet. MANTRA mentioned it was prioritizing a cautious, verified rollout and instructed validators to maintain their mainnet nodes offline till it declares a coordinated restart.

The coordination requirement prevents particular person node operators from bringing mainnet service again independently. Validators have to attend for MANTRA’s restart announcement so the patched community can return by the broader validator set collectively.

The crew was concentrating on a restart later on Aug. 21, topic to testing finishing cleanly. Mainnet can return solely after the patch clears testing and the broader validator set is prepared for the coordinated improve.

For customers, the halt means odd onchain exercise can’t proceed. Assets can’t transfer on MANTRA Chain, staking operations are unavailable, and deposits and withdrawals for the token remained paused on affected venues, in keeping with earlier incident updates. MANTRA mentioned customers did not must take motion whereas the chain remained offline.

A restart announcement would resolve the immediate operational freeze, whereas MANTRA’s evaluation of fund actions and the incident’s full asset influence stays a separate concern to look at.

The publish MANTRA Chain stays offline after exploit as Aug. 21 restart hinges on patch test appeared first on CryptoSlate.