Home > NEWS > More than 280 blockchains at risk of ‘zero-day’ exploits, warns security firm

More than 280 blockchains at risk of ‘zero-day’ exploits, warns security firm

Dogecoin, Zcash and Litecoin have already patched the “critical” vulnerability, but hundreds of others may not have, risking billions’ worth of crypto.

More than 280 blockchain networks are at risk of a "zero-day" attack, which could put the use of login passwords worth at least $25 billion at risk, according to cyber security company Halborne.

In an online article on March 13, Halborne warned of the so-called "Rab13" vulnerability, adding that it had worked with a number of blockchains, such as Dogecoin,Litecoin and Zash, to develop fixes.

Halborne indicated that it signed up to conduct a security review of Dogecoin's code base in March 2022 and saw "a number of important aggregate exploitable vulnerabilities".

It later made it clear that the loophole "seriously affected more than 280 other networks" and could lead to an outflow of digital currencies worth billions of dollars.

Erharburn outlined three vulnerabilities, in which the "most important" allows attackers to push deliberate consensus information to individual connection points, causing each node to shut down.

Over time, it added, this information could expose blockchains to 51 per cent attacks, with attackers manipulating most of the network's mining hash rates or betting on dynamic passwords to build new versions of blockchains or take them offline.

Many of the zero-day vulnerabilities it discovers will allow potential attackers to break blockchain connection points based on push remote procedure call (RPC) requirements-remote procedure call (RPC) requirements that allow one program process to communicate with another program process to request service item protocol content.

It adds that the probability of exploiting vulnerabilities related to RPC is low because it requires efficient credentials to attack.

"not all vulnerabilities on the network can be exploited because of the differences in the code base between networks, but there may be at least one vulnerability on each network that can be exploited," Harborn warned. "

The company believes that because of the severity of the loophole, it is not easy to release more key technologies at this stage, adding that it has made a "sincere diligence" to contact all affected parties to disclose hidden vulnerabilities and provide vulnerability remediation.

According to Halborne, Dogecoin, Zash, and Litecoin have installed patch packs for the vulnerabilities found, but there are still hundreds of vulnerabilities that could be exposed.

by Jesse Coghlan
© 2023 WJB All Rights Reserved. This article is provided for informational purposes only. It is not offered or intended to be used as legal, tax, investment, financial, or other advice.

Why can Bitcoin make money? Is Bitcoin's fixed investment profitable?

For some newcomers to the currency circle, they are not familiar with the investment in the currency circle, and their understanding of the special currency is not very deep. Therefore, they may be at a loss in the choice of investment methods. Many inves

VIDEO

NEWS

Tue, 18 Apr 2023

More