With $11.5M In Funding, Naoris Protocol Will Use Blockchain & Decentralization To Plug Web3 Security Gaps

By Owais Sultan By creating a decentralized network of trusted devices that are incentivized to continuously validate each other to ensure… This is a post from HackRead.com Read the original post: With $11.5M In Funding, Naoris Protocol Will Use Blockchain & Decentralization To Plug Web3 Security...

CVE-2022-34988

Inout Blockchain AltExchanger v1.2.1 was discovered to contain a cross-site scripting XSS vulnerability via the component /admin/js...

CVE-2022-34988

Inout Blockchain AltExchanger v1.2.1 was discovered to contain a cross-site scripting XSS vulnerability via the component /admin/js...

Cross site scripting

Inout Blockchain AltExchanger v1.2.1 was discovered to contain a cross-site scripting XSS vulnerability via the component /admin/js...

CVE-2022-34988

Inout Blockchain AltExchanger v1.2.1 was discovered to contain a cross-site scripting XSS vulnerability via the component /admin/js...

CVE-2022-34988

CVE-2022-34988 affects Inout Blockchain AltExchanger v1.2.1 and is an XSS vulnerability exposed through the /admin/js component. The NVD entry lists CVSSv3.1: 5.4 (Medium) with network attack vector, low attack complexity, privileges required: Low, and user interaction required; impact is limited...

Nesote Technologies Inout Blockchain AltExchanger 跨站脚本漏洞

Nesote Technologies Inout Blockchain AltExchanger is a premium and secure cryptocurrency exchange platform script by Nesote Technologies India. It helps you to start cryptocurrency exchange service online. Inout Blockchain AltExchanger v1.2.1 has a security vulnerability that can be exploited by ...

OpenZeppelin 输入验证错误漏洞

OpenZeppelin is a software application. A standard for secure blockchain applications. An input validation error vulnerability exists in OpenZeppelin Contracts versions 4.0.0 through 4.7.1, which stems from its susceptibility to being recovered by the ERC165 Checker instead of returning false...

Hackers Used Fake Job Offer to Hack and Steal $540 Million from Axie Infinity

The $540 million hack of Axie Infinity's Ronin Bridge in late March 2022 was the consequence of one of its former employees getting tricked by a fraudulent job offer on LinkedIn, it has emerged. According to a report from The Block published last week citing two people familiar with the matter, a...

North Korean Hackers Suspected to be Behind $100M Horizon Bridge Hack

The notorious North Korea-backed hacking collective Lazarus Group is suspected to be behind the recent $100 million altcoin theft from Harmony Horizon Bridge, citing similarities to the Ronin bridge attack in March 2022. The finding comes as Harmony confirmed that its Horizon Bridge, a platform...

Hackers Exploit Harmony’s Horizon Blockchain Bridge to Steal $100 Million

By Deeba Ahmed The main bridge of layer-1 blockchain between Binance Chain, Ethereum, and Bitcoin was exploited, but the BTC bridge… This is a post from HackRead.com Read the original post: Hackers Exploit Harmony’s Horizon Blockchain Bridge to Steal $100 Million...

On the Dangers of Cryptocurrencies and the Uselessness of Blockchain

Earlier this month, I and others wrote a letter to Congress, basically saying that cryptocurrencies are an complete and total disaster, and urging them to regulate the space. Nothing in that letter is out of the ordinary, and is in line with what I wrote about blockchain in 2019. In response,...

Malicious Package

Overview blockchain-explorer-sdk is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

newblockchain report: Missing access control in Proposal-Store.sol

Lines of code Vulnerability details Impact Anyone can add proposal. These proposals are used later to be executed by timelock in GovernorBravoDelegate. However, it is unclear whether the code works as intended: see the QA report "Upon queue executed true in GovernorBravoDelegate". Possible...

Malicious code in blockchain-com (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 423a0ba535c3f0be06ca7a468ee067e4200efd1441cb10051988d40808efd54c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1612 Malicious code in blockchain-com (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 423a0ba535c3f0be06ca7a468ee067e4200efd1441cb10051988d40808efd54c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in blockchain-wallet-v4-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a89d991ea9a446ae4d3d5807de7e61326972d6c0bd7e0ab2b217118d78c06be5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1615 Malicious code in blockchain-wallet-v4-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a89d991ea9a446ae4d3d5807de7e61326972d6c0bd7e0ab2b217118d78c06be5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1616 Malicious code in blockchain.com-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ba6699d4e060ba36809fa10b5daf6bd10a325e97e0ff59d838703f2b3dbb474 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in blockchain-wallet-ios (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 115182d6218da72cd6f3f3460eadba87a00de07f6df9bca534a220605fd26c4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...