Potential inter-blockchain communication (IBC) protocol compromise via "Dragonberry" vulnerability in cheqd

Impact This vulnerability affects IBC transfers due to a security vulnerability dubbed "Dragonberry" upstream in Cosmos SDK. The vulnerability could allow malicious attackers to compromise chain-to-chain IBC transfers. There is no vulnerability in the DID/resource modules for cheqd-node. Patches...

Ankr Becomes First RPC Provider to the Aptos Blockchain

By Waqas Ankr has added another accomplishment to its already diverse profile by becoming one of the first RPC providers… This is a post from HackRead.com Read the original post: Ankr Becomes First RPC Provider to the Aptos Blockchain...

Binance-Linked Network Hacked, Over $570 Million in Losses Recorded

By Deeba Ahmed A Binance-linked blockchain is the latest victim of a cyberattack. Reportedly the world’s largest crypto exchange, Binance, has… This is a post from HackRead.com Read the original post: Binance-Linked Network Hacked, Over $570 Million in Losses Recorded...

World’s Leading Blockchain DeFiChain Announces Adding Four New dTokens

By Waqas Bitcoin network’s most prosperous blockchain DeFiChain is a decentralized proof-of-stake platform created as a hard fork to enable… This is a post from HackRead.com Read the original post: World’s Leading Blockchain DeFiChain Announces Adding Four New dTokens...

The Fight to Cut Off the Crypto Fueling Russia's Ukraine Invasion

Blockchain investigators have uncovered at least $4 million—and counting—in cryptocurrency donations to Russia’s violent militia groups...

What is Blockchain Gaming and its Play-to-Earn Model?

By Waqas The games industry boomed in lockdown and market value will reach $320 billion, and it is only natural that some of this money would flow into blockchain gaming companies. This is a post from HackRead.com Read the original post: What is Blockchain Gaming and its Play-to-Earn Model?...

Security Bulletin: IBM MQ Blockchain bridge is vulnerable to an issue within fabric gateway (CVE-2022-24329)

Summary An issue was identified within the JetBrains Kotlin library that is used by Fabric Gateway. IBM MQ uses Fabric Gateway to provide blockchain bridge support. Vulnerability Details CVEID:CVE-2022-24329 DESCRIPTION: JetBrains Kotlin could provide weaker than expected security, caused by...

Crypto Market Maker Wintermute Hacked, $160 Million Stolen

By Deeba Ahmed According to Certik blockchain cybersecurity firm, a vulnerable private key generated by the Profanity vanity address generator is responsible for this attack. This is a post from HackRead.com Read the original post: Crypto Market Maker Wintermute Hacked, $160 Million Stolen...

The Benefits Of Blockchain In The Travel Industry

By Owais Sultan Blockchain technology advocates say it’s poised to disrupt numerous industries, ranging from finance to supply chain tracking and real estate. This is a post from HackRead.com Read the original post: The Benefits Of Blockchain In The Travel Industry...

FBI Seizes Stolen Cryptocurrencies

The Wall Street Journal is reporting that the FBI has recovered over $30 million in cryptocurrency stolen by North Korean hackers earlier this year. Its only a fraction of the $540 million stolen, but its something. The Axie Infinity recovery represents a shift in law enforcements ability to trac...

Responsible Disclosure for Cryptocurrency Security

Stewart Baker discusses why the industry-norm responsible disclosure for software vulnerabilities fails for cryptocurrency software. Why can’t the cryptocurrency industry solve the problem the way the software and hardware industries do, by patching and updating security as flaws are found? Two...

Hyperledger: DOS validator nodes of blockchain to block external connections

Attack was documented in the in the github repo: https://github.com/hyperledger/indy-node/security/advisories/GHSA-x996-7qh9-7ff7 Attack: The attacker sends 500 read requests to each node and opens a new one when holding 500 parallel connections. Every user is able to send read requests since it'...

Reserves are not updated correctly

Lines of code Vulnerability details Impact Reserves are not updated on calling transfer function when dst is contract itself. This will lead to incorrect calculation of reserve0CumulativeLast and reserve1CumulativeLast which impacts the outcome prices returned by contract Proof of Concept 1. User...

GO-2022-0963 Resource exhaustion in github.com/gagliardetto/binary

A memory allocation vulnerability can be exploited to allocate arbitrarily large slices, which can exhaust available memory or crash the program. When parsing data from untrusted sources of input e.g. the blockchain, the length of the slice to allocate is read directly from the data itself withou...

CVE-2022-36078

CVE-2022-36078 affects github.com/gagliardetto/binary. The memory-allocation vulnerability arises when decoding data into slices (e.g., via dec.Decode(&val)) where the slice length is read from input without proper bounds checks, enabling excessive memory allocation and potential DoS. The advisor...

FBI Warns Investors to Take Precautions with Decentralized Financial Platforms

The U.S. Federal Bureau of Investigation FBI on Monday warned of cyber criminals increasingly exploiting flaws in decentralized finance DeFi platforms to plunder cryptocurrency. "The FBI has observed cyber criminals exploiting vulnerabilities in the smart contracts governing DeFi platforms to ste...

Virtual Currency Platform ‘Tornado Cash’ Accused of Aiding APTs

The U.S. government has slapped sanctions on virtual currency mixer Tornado Cash for laundering more than $7 billion in crypto cash derived from cybercriminal activity. At least $455 million of that was moved for state-sponsored Lazarus Group in part to help fund North Korea’s missile program,...

Denial of Service (DoS)

Overview chia-blockchain is a Chia blockchain full node, farmer, timelord, and wallet. Affected versions of this package are vulnerable to Denial of Service DoS due to the token management process. An attacker can inflate the total amount of the token to an arbitrary extent by manipulating the...

chia-dev-tools (>=0.1.0 <=1.2.6), chia-internal-custody (>=0.1.0 <=0.2.10) +4 more potentially affected by CVE-2022-36447 via chia-blockchain (>=1.2.11 <=2.3.0)

chia-blockchain PYPI version =1.2.11, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.1.0, =0.2.1 Source cves: CVE-2022-36447 Source advisory: OSV:GHSA-PVJG-JWP3-MRJ5...

chia-dev-tools (>=0.1.0 <=1.0.8), chia-internal-custody (=0.1.0) +2 more potentially affected by CVE-2022-36447 via chia-blockchain (>=1.2.11 <=1.3.5)

chia-blockchain PYPI version =1.2.11, =0.1.0, =0.1.0, =0.1.0, =0.2.1 Source cves: CVE-2022-36447 Source advisory: SNYK:PYTHON-CHIABLOCKCHAIN-8400741...