CertiK, a blockchain security firm, has discovered a significant security vulnerability in the Worldcoin protocol that allowed malicious attackers to bypass strict verification criteria and become Orb operators without meeting necessary requirements. This raises concerns about Worldcoin's overall security and highlights the need for robust protection measures.

CertiK promptly reported the vulnerability to Worldcoin's security team, who quickly implemented a fix to mitigate the threat. The Worldcoin project has been facing scrutiny from regulators and critics alike, particularly regarding privacy and data protection concerns.