chia-dev-tools (>=0.1.0 <=1.2.6), chia-internal-custody (>=0.1.0 <=0.2.10) +4 more potentially affected by CVE-2022-36447 via chia-blockchain (>=1.2.11 <=2.3.0)

chia-blockchain PYPI version =1.2.11, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.1.0, =0.2.1 Source cves: CVE-2022-36447 Source advisory: OSV:PYSEC-2022-43072...

Information disclosure

An inflation issue was discovered in Chia Network CAT1 Standard 1.0.0. Previously minted tokens minted on the Chia blockchain using the CAT1 standard can be inflated to an arbitrary extent by any holder of any amount of the token. The total amount of the token can be increased as high as the...

PYSEC-2022-43072

An inflation issue was discovered in Chia Network CAT1 Standard 1.0.0. Previously minted tokens minted on the Chia blockchain using the CAT1 standard can be inflated to an arbitrary extent by any holder of any amount of the token. The total amount of the token can be increased as high as the...

CVE-2022-36447

An inflation issue was discovered in Chia Network CAT1 Standard 1.0.0. Previously minted tokens minted on the Chia blockchain using the CAT1 standard can be inflated to an arbitrary extent by any holder of any amount of the token. The total amount of the token can be increased as high as the...

U.S. Offers $10 Million Reward for Information on North Korean Hackers

The U.S. State Department has announced rewards of up to $10 million for any information that could help disrupt North Korea's cryptocurrency theft, cyber-espionage, and other illicit state-backed activities. "If you have information on any individuals associated with the North Korean...

With $11.5M In Funding, Naoris Protocol Will Use Blockchain & Decentralization To Plug Web3 Security Gaps

By Owais Sultan By creating a decentralized network of trusted devices that are incentivized to continuously validate each other to ensure… This is a post from HackRead.com Read the original post: With $11.5M In Funding, Naoris Protocol Will Use Blockchain & Decentralization To Plug Web3 Security...

CVE-2022-34988

Inout Blockchain AltExchanger v1.2.1 was discovered to contain a cross-site scripting XSS vulnerability via the component /admin/js...

CVE-2022-34988

Inout Blockchain AltExchanger v1.2.1 was discovered to contain a cross-site scripting XSS vulnerability via the component /admin/js...

Cross site scripting

Inout Blockchain AltExchanger v1.2.1 was discovered to contain a cross-site scripting XSS vulnerability via the component /admin/js...

CVE-2022-34988

Inout Blockchain AltExchanger v1.2.1 was discovered to contain a cross-site scripting XSS vulnerability via the component /admin/js...

CVE-2022-34988

CVE-2022-34988 affects Inout Blockchain AltExchanger v1.2.1 and is an XSS vulnerability exposed through the /admin/js component. The NVD entry lists CVSSv3.1: 5.4 (Medium) with network attack vector, low attack complexity, privileges required: Low, and user interaction required; impact is limited...

Nesote Technologies Inout Blockchain AltExchanger 跨站脚本漏洞

Nesote Technologies Inout Blockchain AltExchanger is a premium and secure cryptocurrency exchange platform script by Nesote Technologies India. It helps you to start cryptocurrency exchange service online. Inout Blockchain AltExchanger v1.2.1 has a security vulnerability that can be exploited by ...

OpenZeppelin 输入验证错误漏洞

OpenZeppelin is a software application. A standard for secure blockchain applications. An input validation error vulnerability exists in OpenZeppelin Contracts versions 4.0.0 through 4.7.1, which stems from its susceptibility to being recovered by the ERC165 Checker instead of returning false...

Hackers Used Fake Job Offer to Hack and Steal $540 Million from Axie Infinity

The $540 million hack of Axie Infinity's Ronin Bridge in late March 2022 was the consequence of one of its former employees getting tricked by a fraudulent job offer on LinkedIn, it has emerged. According to a report from The Block published last week citing two people familiar with the matter, a...

North Korean Hackers Suspected to be Behind $100M Horizon Bridge Hack

The notorious North Korea-backed hacking collective Lazarus Group is suspected to be behind the recent $100 million altcoin theft from Harmony Horizon Bridge, citing similarities to the Ronin bridge attack in March 2022. The finding comes as Harmony confirmed that its Horizon Bridge, a platform...

Hackers Exploit Harmony’s Horizon Blockchain Bridge to Steal $100 Million

By Deeba Ahmed The main bridge of layer-1 blockchain between Binance Chain, Ethereum, and Bitcoin was exploited, but the BTC bridge… This is a post from HackRead.com Read the original post: Hackers Exploit Harmony’s Horizon Blockchain Bridge to Steal $100 Million...

On the Dangers of Cryptocurrencies and the Uselessness of Blockchain

Earlier this month, I and others wrote a letter to Congress, basically saying that cryptocurrencies are an complete and total disaster, and urging them to regulate the space. Nothing in that letter is out of the ordinary, and is in line with what I wrote about blockchain in 2019. In response,...

Malicious Package

Overview blockchain-explorer-sdk is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

newblockchain report: Missing access control in Proposal-Store.sol

Lines of code Vulnerability details Impact Anyone can add proposal. These proposals are used later to be executed by timelock in GovernorBravoDelegate. However, it is unclear whether the code works as intended: see the QA report "Upon queue executed true in GovernorBravoDelegate". Possible...

Malicious code in blockchain-com (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 423a0ba535c3f0be06ca7a468ee067e4200efd1441cb10051988d40808efd54c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...