Fantastic work by the
@osec_io team, and a big thank you for their collaboration on this.
This was a critical finding, disclosed responsibly and handled with real professionalism from day one.
We validated it, fixed it quickly, gave OtterSec the opportunity to review the fix from their side and shipped the release as soon as we could.
Give the article a read. It is very in-depth, thorough and a good example of why serious security work AND practices matter when building financial infrastructure.
Their finding also accelerated the security work we were doing on the Dusk protocol, which led to Aegis and the upcoming Boreas hard fork.