1130 matches found
CVE-2022-23507
The CVE concerns Tendermint’s light-client verification prior to version 0.28.0, where the light client does not verify that the trusted and untrusted chain IDs match during header verification. This can allow a header from an untrusted chain that passes other checks (e.g., overlapping validator ...
CVE-2022-23507 Light client verification not taking into account chain ID
Tendermint is a high-performance blockchain consensus engine for Byzantine fault tolerant applications. Versions prior to 0.28.0 contain a potential attack via Improper Verification of Cryptographic Signature, affecting anyone using the tendermint-light-client and related packages to perform ligh...
CVE-2022-23507 Light client verification not taking into account chain ID
Tendermint is a high-performance blockchain consensus engine for Byzantine fault tolerant applications. Versions prior to 0.28.0 contain a potential attack via Improper Verification of Cryptographic Signature, affecting anyone using the tendermint-light-client and related packages to perform ligh...
Security Bulletin: IBM MQ Blockchain bridge dependencies are vulnerable to issues in SnakeYAML (CVE-2022-38749, CVE-2022-38750, CVE-2022-38751 & CVE-2022-38752)
Summary A denial of service issue was identified within SnakeYAML that is used by Fabric Gateway. Fabric Gateway is used by the IBM MQ blockchain bridge component of IBM MQ to provide connection capability between IBM MQ queue managers and Hyperledger Fabric. Vulnerability Details...
Deciphering Value in Generative Art: Art Basel Miami Beach to Feature Tezos Blockchain NFTs
By Owais Sultan This year, visitors to the gallery will be able to mint and claim a featured generative art NFT in real time. This is a post from HackRead.com Read the original post: Deciphering Value in Generative Art: Art Basel Miami Beach to Feature Tezos Blockchain NFTs...
Making a case for crypto knowledge – why the general population has to be educated on cryptocurrency
By Waqas Cryptocurrency and blockchain education is critical for anyone looking to grow their personal wealth and achieve financial freedom. This is a post from HackRead.com Read the original post: Making a case for crypto knowledge – why the general population has to be educated on cryptocurrenc...
Susceptible to reorg attack
Lines of code Vulnerability details Impact When reorg happens, it is possible that the cancelled order by the taker be executed by the maker. Proof of Concept Suppose userA is seller and userB is buyer, seller is maker, and buyer is taker. After some time, userB the buyer cancels the order by...
The Hunt for the FTX Thieves Has Begun
Mysterious crooks took hundreds of millions of dollars from FTX just as it collapsed. Crypto-tracing blockchain analysis may provide an answer...
Blockchain Power Binance Football Fever 2022 to Offer Fans $1 Million in Reward
By Deeba Ahmed FIFA World Cup is about to happen, and football fever has already taken the world hostage. Binance isn’t… This is a post from HackRead.com Read the original post: Blockchain Power Binance Football Fever 2022 to Offer Fans $1 Million in Reward...
UBUNTU-CVE-2022-44797
btcd before 0.23.2, as used in Lightning Labs lnd before 0.15.2-beta and other Bitcoin-related products, mishandles witness size checking...
IBAX go-ibax SQL注入漏洞
IBAX go-ibax is a blockchain system platform from IBAX Corporation. IBAX go-ibax suffers from an SQL injection vulnerability that originates in an unknown function in file /api/v2/open/tablesInfo, where manipulation of parameter callbacks results in SQL injection...
Critical Flaw Reported in Move Virtual Machine Powering the Aptos Blockchain Network
Researchers have disclosed details about a now-patched critical flaw in the Move virtual machine that powers the Aptos blockchain network. The vulnerability "can cause Aptos nodes to crash and cause denial of service," Singapore-based Numen Cyber Labs said in a technical write-up published earlie...
Ankr Launches Chainscanner Blockchain Explorer Tool
By Waqas The Chainscanner is available for free on the Ankr website, allowing users to search for transaction data, addresses, smart contracts, and much more. This is a post from HackRead.com Read the original post: Ankr Launches Chainscanner Blockchain Explorer Tool...
Upgraded Q -> M from 964 [1666360503408]
Judge has assessed an item in Issue 964 as Medium risk. The relevant finding follows: Non-critical: EIP712 signatures on GolomTrader could be replayed in case of blockchain forks The chainId is burnt into EIP712DOMAINTYPEHASH rather than checked each time. This means that signatures could be...
Upgraded Q -> M from 42 [1666367610163]
Judge has assessed an item in Issue 42 as Medium risk. The relevant finding follows: Permit signature replay across forks Details: GolomTrader.sol defines chainId at contract deployment without reconstructing it for every signature. However, as stated in the security considerations section of...
Potential inter-blockchain communication (IBC) protocol compromise via "Dragonberry" vulnerability in cheqd
Impact This vulnerability affects IBC transfers due to a security vulnerability dubbed "Dragonberry" upstream in Cosmos SDK. The vulnerability could allow malicious attackers to compromise chain-to-chain IBC transfers. There is no vulnerability in the DID/resource modules for cheqd-node. Patches...
Ankr Becomes First RPC Provider to the Aptos Blockchain
By Waqas Ankr has added another accomplishment to its already diverse profile by becoming one of the first RPC providers… This is a post from HackRead.com Read the original post: Ankr Becomes First RPC Provider to the Aptos Blockchain...
Binance-Linked Network Hacked, Over $570 Million in Losses Recorded
By Deeba Ahmed A Binance-linked blockchain is the latest victim of a cyberattack. Reportedly the world’s largest crypto exchange, Binance, has… This is a post from HackRead.com Read the original post: Binance-Linked Network Hacked, Over $570 Million in Losses Recorded...
World’s Leading Blockchain DeFiChain Announces Adding Four New dTokens
By Waqas Bitcoin network’s most prosperous blockchain DeFiChain is a decentralized proof-of-stake platform created as a hard fork to enable… This is a post from HackRead.com Read the original post: World’s Leading Blockchain DeFiChain Announces Adding Four New dTokens...