A security review found a bug in Indigo. The fix is already on-chain.
Indigo says TxPipe, which runs regular AI aided threat analyses of the protocol together with the Indigo Foundation, flagged a vulnerability that needed a priority patch. The INDY DAO approved the upgrade and it has since gone live on-chain. Per Indigo, user funds were never at risk between the alert and the fix.
It is the first time Indigo has shipped an upgrade in response to a security finding.
The bigger signal: continuous review beats a one time audit badge. Code that holds real dollars keeps changing, so the checking has to keep going too.
Should every Cardano DeFi protocol run reviews like this on a schedule?

X (formerly Twitter)
Indigo (@Indigo_protocol) on X
Indigo has just completed a patch upgrade fixing a vulnerability discovered by @txpipe_tools 🔮
Security on Indigo is an ongoing and mission-cri...

