Security Alert: Users should immediately revoke Blur contract authorization to guard against potential vulnerabilities and upgrade risks.

BlockBeats news, October 13: Yuga Labs blockchain vice president Quit posted a reminder that after Blur announced it will discontinue its website frontend, users should immediately revoke authorization to Blur contracts. He stated that he has checked Blur's current contracts and found no exploitable vulnerabilities, but these contracts support upgrades and may still introduce malicious logic in the future.

Quit said that there are still NFTs with a total value in the tens of millions of dollars range that have open authorizations to Blur contracts, and the security of these assets actually depends on the Blur team's own operational security. He believes the team currently appears to be dissolving, so he recommends users revoke authorizations through revoke.cash or similar tools to guard against potential contract vulnerabilities or subsequent upgrade risks.

Quit also said that last month, Magic Eden-related contracts suffered an exploit involving millions of dollars, and he had assisted in recovering a considerable portion of those funds. This incident highlights the risk of continuously retaining contract authorizations, especially when attackers gain stronger vulnerability discovery tools.

Yuga Labs CEO Figge also posted a reminder that Blur contracts are upgradeable and users should revoke authorizations to avoid future security issues.