Aptos discovered a critical stale-cache, type-confusion bug in its Move VM, which was patched within hours after being reported on February 25, 2026. No user funds were lost, and the exploitability on mainnet was very low. The bug posed a serious risk because it could bypass safety checks at the VM level, affecting contracts even with good code. Aptos followed responsible disclosure by fixing the issue first and publicly announcing it later. Investors and developers are advised to review their exposure, monitor follow-up patches, and maintain cautious risk management while trust in Aptos' security process is reassessed.
Aptos fixed a critical vulnerability in its Move virtual machine that could have exposed up to $70 billion in digital assets to systemic risk, as identified by security firm Hexens. The bug, discovered in February, could have caused major disruptions...
Aptos Labs fixed a critical stale-cache bug in its Move virtual machine that could have allowed attackers to manipulate core blockchain data, risking up to $70 billion in assets. Security researchers demonstrated a proof-of-concept exploit with a 90%...
Aptos has fixed a critical vulnerability in its Move virtual machine that could have been exploited for only a few hundred dollars, posing a serious security risk. The flaw was discovered by ethical hackers and patched before any funds were lost or t...
