Blockchaini turvafirma tuvastab haavatavuse, mis seab ohtu üle 280 plokiahela

Blockchaini turvafirma tuvastab haavatavuse, mis seab ohtu üle 280 plokiahela

Ajatempel: 14. märts 2023 8:39
Allikasõlm: 2014172

Over 280 blockchain networks have a “zero-day” vulnerability that puts over $25 billion worth of crypto funds at the mercy of hackers.

Vastavalt aru published by Halborn, a blockchain security firm, on March 13th, more than 280 blockchains can face a “zero-day” exploit.

The report revealed that Dogecoin, Litecoin, and Zcash had already patched the security loophole. However, other blockchains are still prone to this issue.

Kas teadsite?

Kas soovite krüpto abil saada targemaks ja jõukamaks?

Telli – avaldame igal nädalal uusi krüpto-selgitusvideoid!

Halborn stated that it was contracted to evaluate the Dogecoin codebase in March 2022 for any security vulnerabilities. Its analysis revealed several “critical and exploitable vulnerabilities.”

The company found that the same vulnerabilities were present in more than 280 blockchain networks, which put over $25 billion worth of crypto at risk. Halborn code-named the vulnerability Rab13s.

According to Halborn, hackers could craft consensus messages by taking out individual nodes. Peale selle, attackers could crawl nodes via a Getaddr message to attack all unpatched nodes.

The company said that, while some of the vulnerabilities were known from the Bitcoin codebase, one was unique to Dogecoin. The network had “RPC vulnerability impacting individual miners.”

Halborn explained that by exploiting the Rab13s vulnerabilities to shut down network nodes, malicious actors would increase the risk of severe issues, such as a 51% attack. 

They said they had reached out to the affected networks:

A good faith effort has been made to contact the affected networks for responsible disclosure. However, all affected networks are encouraged to contact Halborn on

At the end of its blog post, Halborn offered networks to upgrade all its UTXO-based nodes to the latest version. However, the blockchain security firm noted that due to the “severity of the issue, Halborn will not release the technical details or exploit details at this time.”

Gile K. – krüptoanalüütik

Gile K. – krüptoanalüütik, BitDegree

Ajatempel:

Veel alates Bit Degree