Ethereum blockchain security breach

Ethereum Blockchain is a decentralized open source public blockchain platform with smart contract capabilities from the Ethereum Foundation. A security vulnerability exists in the Ethereum blockchain, which stems from the fact that tradingOpen in ReptilianCoin RPTC contains incorrect access...

NoaBot: Latest Mirai-Based Botnet Targeting SSH Servers for Crypto Mining

A new Mirai-based botnet called NoaBot is being used by threat actors as part of a crypto mining campaign since the beginning of 2023. "The capabilities of the new botnet, NoaBot, include a wormable self-spreader and an SSH key backdoor to download and execute additional binaries or spread itself...

coin-brothers.com Cross Site Scripting vulnerability OBB-3817165

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Wrong validation check for caller of some functions

Lines of code Vulnerability details Impact When an attacker call some functions which lacks validation check for msg.sender, it causes unexpected interactions. Proof of Concept The AccountingEngine.solsettleDebt function and AccountingEngine.solsettleDebtfuntion is as follows. function...

Coin Flips Are Biased

Experimental result: Many people have flipped coins but few have stopped to ponder the statistical and physical intricacies of the process. In a preregistered study we collected 350,757 coin flips to test the counterintuitive prediction from a physics model of human coin tossing developed by Pers...

Hackers Target Apache Tomcat Servers for Mirai Botnet and Crypto Mining

Misconfigured and poorly secured Apache Tomcat servers are being targeted as part of a new campaign designed to deliver the Mirai botnet malware and cryptocurrency miners. The findings come courtesy of Aqua, which detected more than 800 attacks against its Tomcat server honeypots over a two-year...

WordPress Web3 Coin Gate Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)

Software Web3 Coin Gate Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 861b0c7c736e Credits Rafie Muhammad Patchstack Required...

An error could lead to coins not being returned to user

Lines of code Vulnerability details Impact The function swapCoins does check that SendCoins does receive them correctly here but not when sending them to the user here Proof of Concept If there is an error returning the swapped coins to the user, they will remain locked. There is no history of...

On OnRecvPacket, TradeInputForExactOutput is called with all the amount of the transferred coin as a maximum which is not safe.

Lines of code Vulnerability details Impact In OnRecvPacket IBC receive callback, coinswapKeeper.TradeInputForExactOutput is called to swap from transferredCoin to standardDenom i.e. canto. TradeInputForExactOutput func takes the input as max amount of the token to be paid. This is not safe for th...

Lack of deadline parameter when executing swaps

Lines of code Vulnerability details Impact Deadline is not checked. The transaction may stay unexecuted for a long time, resulting in unfavourable trade when the transaction is finally executed. Proof of Concept The function OnRecvPacket is used to help users outside of Canto onboard seamlessly...

Atomic Wallet Hit by $35M Theft in Recent Crypto Breach

By Habiba Rashid The stolen tokens include popular cryptocurrencies such as Bitcoin BTC, ether ETH, tether USDT, dogecoin DOGE, Litecoin LTC, BNB coin BNB, and polygon MATIC. This is a post from HackRead.com Read the original post: Atomic Wallet Hit by $35M Theft in Recent Crypto Breach...

Shiba Inu: The Meme Coin Fueling an Open-Source Ecosystem

By Owais Sultan The cryptocurrency niche has come a long way since Bitcoin’s inception and it is now far from the… This is a post from HackRead.com Read the original post: Shiba Inu: The Meme Coin Fueling an Open-Source Ecosystem...

canadiancoin.com Cross Site Scripting vulnerability OBB-3282512

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malicious code in mobile-coin-block-explorer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55fa1745bad5c1749dccb8fbb0dcfe3d2d1046ffe8df941579b0ad26de5713c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-606 Malicious code in mobile-coin-block-explorer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55fa1745bad5c1749dccb8fbb0dcfe3d2d1046ffe8df941579b0ad26de5713c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Trellix HAX 2023 Capture the Flag Results!

Trellix HAX 2023 Capture the Flag Results! By Mark Bereza · March 17, 2023 This story was also written by Jesse Chick. All good things must come to an end, and our annual CTF is unfortunately no exception. When this competition began, we asked each of you to try your hand at 12 new challenges –...

New Cryptojacking Operation Targeting Kubernetes Clusters for Dero Mining

Cybersecurity researchers have discovered the first-ever illicit cryptocurrency mining campaign used to mint Dero since the start of February 2023. "The novel Dero cryptojacking operation concentrates on locating Kubernetes clusters with anonymous access enabled on a Kubernetes API and listening ...

How to exchange Binance Coin (BNB) cryptocurrency

By Owais Sultan Binance Coin BNB is the worlds most sought-after cryptocurrency exchange token. It was launched on Binance in 2017… This is a post from HackRead.com Read the original post: How to exchange Binance Coin BNB cryptocurrency...

Watch Out Gamers: Hackers Exploiting MSI Afterburner to Deliver Coin Miner

By Habiba Rashid So far, researchers have identified approximately 50 phishing websites, all targeting MSI Afterburner to deliver malware. This is a post from HackRead.com Read the original post: Watch Out Gamers: Hackers Exploiting MSI Afterburner to Deliver Coin Miner...

Nitrokod Crypto Miner Hiding in Fake Microsoft and Google Translate Apps

By Waqas Nitrokod crypto miner mines Monero XMR coin on infected devices and so far it has targeted 111,000 unsuspecting users in 11 countries. This is a post from HackRead.com Read the original post: Nitrokod Crypto Miner Hiding in Fake Microsoft and Google Translate Apps...