Babylon Code Vulnerability Risks Block Production Slowdown

A newly discovered software flaw in the Bitcoin staking protocol Babylon, specifically within its BLS vote extension block signature scheme, could allow malicious validators to disrupt consensus and potentially slow down block production during critical epoch boundaries. The bug permits malicious validators to intentionally omit the block hash field when sending their vote extension, causing consensus-critical code paths to dereference a nil pointer, resulting in a runtime panic and intermittent validator crashes. While the vulnerability has not been reported as actively exploited, developers warn it must be resolved. Babylon is a key project aiming to introduce Bitcoin-native staking and expand Bitcoin DeFi (BTCFi), recently securing $15 million in funding from a16z Crypto to support its development.

(Source：Cointelegraph)