Aptos Fixes Critical Vulnerability with $70 Billion Risk Exposure

Aptos Labs patched a critical vulnerability in its Move virtual machine that could have exposed up to $70 billion in crypto assets. Discovered by Hexens in February 2026, the flaw allowed attackers to manipulate core blockchain data with a low-cost setup of approximately $3,000. The vulnerability, termed a 'stale-cache bug,' was reported through Aptos's bug bounty program and was fixed within hours of disclosure. Simulated attacks achieved a success rate of nearly 90%, raising concerns about the potential for exploitation. No user funds were lost during this incident, and Aptos emphasized the low exploitability of the vulnerability in real-world conditions. The incident highlights the importance of rapid response in blockchain security, especially for high-value networks. The theoretical risk exposure includes critical infrastructure such as stablecoins and cross-chain bridges.

Key Points: • Aptos fixed a critical vulnerability in its Move virtual machine with a potential $70 billion risk. • The flaw allowed attackers to manipulate blockchain data using a $3,000 server setup. • No user funds were lost, and the vulnerability was patched within hours of discovery.