Acurast said on September 4 that it deployed security upgrades 26.3, 26.4 and 26.5 after a community researcher disclosed three major issues. The company said its network was not breached by external attackers, although a critical bug in its components caused excess rewards to be paid to some users.
Larger recipients agreed to burn surplus tokens, leaving roughly 71,000 ACU in excess rewards, worth about $5,500 at the time, according to Acurast. The Acurast Association said it will cover that amount from operational funds, while the reported vulnerabilities have now been fixed. Acurast also published post-mortems covering double claiming of staking rewards and replay of token-conversion messages.
Acurast said it deployed the fixes before publishing source code because releasing the changes first could have exposed the vulnerabilities to exploitation. The project is returning to its standard governance process, with source code published before future votes, and has made the updated code and changelog available on GitHub. The company framed the episode against what it described as a rise in AI-assisted security breaches across crypto.
Source: Acurast.
Disclaimer: Crypto Economy Flash News are based on verified public and official sources. Their purpose is to provide fast, factual updates about relevant events in the crypto and blockchain ecosystem.
This information does not constitute financial advice or investment recommendation. Readers are encouraged to verify all details through official project channels before making any related decisions.
