Logic flaw vulnerability in Globalvillage ecosystem

Globalvillage ecosystem GVE is a virtual currency system based on blockchain technology.A security vulnerability exists in the 'approveAndCallcode' function in GVE's smart contract implementation, which stems from the program's failure to validate the callcode. The vulnerability can be exploited ...

Reimburse Token Number Error Vulnerability

Reimburse Token REIM is an ethereum-based digital currency.An integer overflow vulnerability exists in the 'mintToken' function of REIM's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

CVE-2020-12439

Grin before 3.1.0 allows attackers to adversely affect availability of data on a Mimblewimble blockchain...

CVE-2020-12439

Grin before 3.1.0 allows attackers to adversely affect availability of data on a Mimblewimble blockchain...

Design/Logic Flaw

Grin before 3.1.0 allows attackers to adversely affect availability of data on a Mimblewimble blockchain...

CVE-2020-12439

Grin before 3.1.0 allows attackers to adversely affect availability of data on a Mimblewimble blockchain...

CVE-2020-12439

CVE-2020-12439 affects Grin prior to 3.1.0. The issue allows attackers to adversely affect availability of data on a Mimblewimble blockchain. The Connected documents confirm the product (Grin), version bound (before 3.1.0), and the impact (availability disruption). There are no explicit remediati...

CVE-2020-12439

Grin before 3.1.0 allows attackers to adversely affect availability of data on a Mimblewimble blockchain...

PT-2020-13113

Name of the Vulnerable Software and Affected Versions Grin versions prior to 3.1.0 Description The issue allows attackers to adversely affect the availability of data on a Mimblewimble blockchain. Recommendations For versions prior to 3.1.0, update to version 3.1.0 or later to resolve the issue...

CVE-2020-12439: Improper Resource Shutdown or Release

Grin before 3.1.0 allows attackers to adversely affect availability of data on a Mimblewimble blockchain...

Denial of Service Vulnerability in Mishandling of Underlying Blockchain Network Requests

Go language io/ioutil package provides ReadAll function for reading and storing data, this function will continuously apply for new memory space in the process of reading data until the requested data is stored. After testing, it is found that there are quite a number of public chains developed b...

The effects of climate change on cybersecurity

Outside the coronavirus pandemic and its related healthcare and economic fallout, climate change and cybersecurity are seen by many as the two most urgent problems facing our planet now and in the near future. They are two distinct and separate problems, to be sure. There are some areas, however,...

RSAC 2020: Blockchain is 'Garbage In', Voting Needs Paper Ballots

SAN FRANCISCO – Cryptography is at the heart of security, especially here at this week’s RSAC 2020. And during the event’s annual Cryptographer’s Panel, industry leaders broke down their top crypto-concerns, including privacy regulations, election security and blockchain. Privacy is clearly a top...

Voatz Internet Voting App Is Insecure

This paper describes the flaws in the Voatz Internet voting app: "The Ballot is Busted Before the Blockchain: A Security Analysis of Voatz, the First Internet Voting Application Used in U.S. Federal Elections." Abstract: In the 2018 midterm elections, West Virginia became the first state in the...

Researchers: Hackers Can Seize Control of Ballots Cast Using the Voatz Voting App

Security researchers have found key flaws in a mobile voting app that some states plan to use in the 2020 election that can allow hackers to launch both client- and server-side attacks that can easily manipulate or even delete someone’s vote, as well as prevent a reliable audit from taking place...

CVE-2020-6638

Grin through 2.1.1 has Insufficient Validation...

CVE-2020-6638

Grin through 2.1.1 has Insufficient Validation...

Blockchain Developer Gets Busted After Talk in North Korea

Hacker and Ethereum developer Virgil Griffith was recently arrested by US authorities for speaking at a conference on blockchain technologies...

How Will Blockchain Technology Revolutionize Logistics?

By Waqas If you haven’t noticed, blockchain technology is taking the world by storm, catapulting technology into unchartered, new territory.... This is a post from HackRead.com Read the original post: How Will Blockchain Technology Revolutionize Logistics?...

McAfee ATR Analyzes Sodinokibi aka REvil Ransomware-as-a-Service – Follow The Money

ARCHIVED STORY McAfee ATR Analyzes Sodinokibi aka REvil Ransomware-as-a-Service – Follow The Money By John Fokker · October 14, 2019 Episode 3: Follow the Money This is the third installment of the McAfee Advanced Threat Research ATR analysis of Sodinokibi and its connections to GandCrab, the mos...