Back Kucoin

Aptos Blockchain Exposed to Critical Vulnerability, $70 Billion in Assets at Systemic Risk

Kucoin • July 5, 2026

According to CoinDesk, researchers at blockchain security firm Hexens discovered a "stale cache" type confusion vulnerability in the Move virtual machine of the Aptos blockchain. Attackers could launch an attack with nearly 90% success rate in a simulated environment at a server cost of only $3,000, without requiring validator privileges or insider knowledge. During simulated tests, the researchers executed approximately 20 attacks, succeeding in 17 to 18 instances, and verified the potential to gain control over management permissions of cross-chain protocols such as LayerZero, Wormhole, and USDC CCTP. Hexens assessed that this vulnerability directly threatens DeFi protocols, stablecoins, and liquid staking applications on Aptos, exposing assets worth several billion dollars. If exploited through cross-chain bridges, stablecoin minting, or centralized exchanges, the systemic risk exposure could reach up to $70 billion. After receiving the vulnerability report on February 25, the Aptos team patched and deployed the fix to mainnet within hours; no user funds have been compromised.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Aptos Fixes Critical Vulnerability with $70 Billion Risk Exposure Aptos Labs patched a critical vulnerability in its Move virtual machine that could have exposed up to $70 billion in crypto assets. Discovered by Hexens in February 2026, the flaw allowed attackers to manipulate core blockchain data with a low-cost setup of approximately $3,000. The vulnerability, termed a 'stale-cache bug,' was reported through Aptos's bug bounty program and was fixed within hours of disclosure. Simulated attacks achieved a success rate of nearly 90%, raising concerns about the potential for exploitation. No user funds were lost during this incident, and Aptos emphasized the low exploitability of the vulnerability in real-world conditions. The incident highlights the importance of rapid response in blockchain security, especially for high-value networks. The theoretical risk exposure includes critical infrastructure such as stablecoins and cross-chain bridges. 21 sources 61

Extracted Entities

Aptos Blockchain Exposed to Critical Vulnerability, $70 Billion in Assets at Systemic Risk

The full story

Extracted Entities

CWE Weaknesses (1)

Platforms (2)

Vulnerabilities (1)