Security Reminder: Users Should Immediately Revoke Blur Contract Authorization to Prevent Potential Vulnerabilities and Upgrade Risks

BlockBeats News, October 13 – Yuga Labs' Vice President of Blockchain, Quit, issued a statement reminding users to immediately revoke their authorization to Blur contracts following Blur's announcement to deactivate its website frontend. He noted that while the current Blur contracts have been reviewed and no exploitable vulnerabilities were found, these contracts support upgrades, which could potentially introduce malicious logic in the future. Quit stated that NFTs worth tens of millions of dollars are still authorized to Blur contracts, and the security of these assets essentially depends on the operational security of the Blur team. He believes the team appears to be disbanding, and therefore recommends users revoke authorizations using tools like revoke.cash or similar platforms to mitigate potential contract vulnerabilities or risks from future upgrades. Quit also mentioned that last month, Magic Eden-related contracts were exploited due to vulnerabilities, involving millions of dollars. He assisted in recovering a significant portion of the funds. This incident highlights the risks of maintaining contract authorizations, especially as attackers gain access to more advanced vulnerability discovery tools. Yuga Labs CEO Figge also issued a statement reminding users that Blur contracts are upgradable and urging them to revoke authorizations to avoid future security issues. [Original Link]