ZenGo uncovers 'red pill attack' vulnerability in popular Web3 apps
The vulnerability has since been patched, although it affected a number of leading transaction simulation vendors. According to a blog post published by developers of crypto wallet ZenGo, the firm said it had uncovered security vulnerabilities in, transaction simulation solutions used by popular decentralized applications, or dApps. Dubbed the "red pill attack ," this vulnerability allowed malicious dApps to steal user assets based on opaque transaction approvals offered to and approved by users. The vulnerability derives its name from the iconic "red pill" scene from The Matrix movie series. "If malware is able to detect its actually being executed in a simulated environment or living in the matrix, it can behave in a benign manner, thus deceiving the anti-malware solution, and reveal its true malicious nature only when actually executed in a real environment." ZenGo claimed its research revealed that many leading vendors, including Coinbase Wallet,...