SlowMist’s Chief Information Security Officer, 23pds, recently issued a warning—there’s a new exploit method for the remote code execution vulnerability exposed in the React and Next.js frameworks.

The newly discovered attack chain has significantly lowered the exploitation threshold for this vulnerability, causing the success rate to skyrocket. The reason this issue has blown up is that a large number of DeFi protocols on the market are using React for front-end development.

Simply put: the attack surface is huge.

If your team is running a DeFi platform, or if your assets are locked in a protocol, you should pay extra attention right now. The technical team should patch what needs to be patched and execute emergency responses as needed. After all, hackers won’t hesitate to exploit vulnerabilities of this magnitude.