Share this article
Vulnerability Fixed in Facebook Contract Language for Libra Cryptocurrency
The vulnerability in the Move IR compiler allows malicious actors to introduce executable code to their smart contracts," OpenZeppelin’s CEO Demian Brener told CoinDesk.
Updated Sep 13, 2021, 11:25 a.m. Published Sep 10, 2019, 6:00 p.m.
Make us preferred on Google
A vulnerability in Libra's open-source code that would have enabled malicious actors to manipulate smart contracts has been uncovered and patched by a third-party audit firm specializing in cryptocurrency.
Specifically, developers working for startup OpenZeppelin found vulnerabilities in Move, the scripting language developed by Facebook for the open-source Libra cryptocurrency project, an effort backed by major companies including Facebook, Lyft, Uber and MasterCard. If allowed in executable code, the vulnerabilities disclosed to the Libra team could have been severe.
STORY CONTINUES BELOW
Don't miss another story.Subscribe to the Crypto Daybook Americas Newsletter today. See all newsletters
“The vulnerability in the Move IR compiler allows malicious actors to introduce executable code to their smart contracts disguised as inline comments,” OpenZeppelin’s CEO Demian Brener told CoinDesk.
He continued:
“The good news is that it was found and patched before the platform was live. Issues once thought of as benign can become more severe in the blockchain setting because auditability substitutes for trust.”
Founded in 2015, OpenZeppelin works with leading cryptocurrency, blockchain and internet enterprises including Coinbase, Brave browser and the Ethereum Foundation. The authors of Move work at Calibra, a subsidiary of Facebook focused on wallet development, and contributed the language to the non-profit Libra Association under a Creative Commons license.
Brener said the code was disclosed to Libra Aug. 6, with the Libra team evaluating and fixing the bug over the following month. As of Sept. 4, the patch was reviewed and confirmed to be fixed by OpenZeppelin.
Libra's stablecoin will have certain programmable features, such as the ability to make smart contracts. The full features of these smart contracts have yet to be disclosed.
Brener told CoinDesk the Libra team was highly responsive to the audits.
As larger protocols continue to develop in size and scope, Brener said audits are only growing in importance. Projects like Libra, with the potential for an international audience, require additional scrutiny, he said.
“We are seeing how huge and complex these systems are Libra is the first of many that are coming… and these systems go live and they manage millions of dollars by billions of people. It’s important to know what these complex systems are…people [need to be] aware of the potential.”
Earlier last month, Open Zeppelin concluded an audit on Compound, a decentralized finance protocol, which disclosed the ability to take out small, interest-free loans. Earlier today, it received an investment from Coinbase.
Demian Brener, founder, OpenZepplin, via CoinDesk archives
More For You
KuCoin captured a record share of centralised exchange volume in 2025, with more than $1.25tn traded as its volumes grew faster than the wider crypto market.
What to know:
- KuCoin recorded over $1.25 trillion in total trading volume in 2025, equivalent to an average of roughly $114 billion per month, marking its strongest year on record.
- This performance translated into an all-time high share of centralised exchange volume, as KuCoin’s activity expanded faster than aggregate CEX volumes, which slowed during periods of lower market volatility.
- Spot and derivatives volumes were evenly split, each exceeding $500 billion for the year, signalling broad-based usage rather than reliance on a single product line.
- Altcoins accounted for the majority of trading activity, reinforcing KuCoin’s role as a primary liquidity venue beyond BTC and ETH at a time when majors saw more muted turnover.
- Even as overall crypto volumes softened mid-year, KuCoin maintained elevated baseline activity, indicating structurally higher user engagement rather than short-lived volume spikes.
More For You
Gold tops $5,000 as bitcoin stalls near $87,000 in widening macro-crypto split: Asia Morning Briefing
Bitcoin’s onchain data points to supply overhang and weak participation, while gold’s breakout is priced by markets as a durable macro regime shift.
What to know:
- Gold’s surge above $5,000 an ounce is increasingly seen as a durable regime shift, with investors treating the metal as a persistent hedge against geopolitical risk, central bank demand and a weaker dollar.
- Bitcoin is stuck near $87,000 in a low-conviction market, as on-chain data show older holders selling into rallies, newer buyers absorbing losses and a heavy supply overhang capping moves toward $100,000.
- Derivatives and prediction markets point to continued consolidation in bitcoin and sustained strength in gold, with thin futures volumes, subdued leverage and weak demand for higher-beta crypto assets like ether reinforcing the cautious tone.
Top Stories
