CVE-2022-40769

CVE-2022-40769 profanity 1.60까지의 버전은 가능한 RNG 초기화가 40억 개에 불과합니다. 따라서 공격자는 이더리움 배니티 주소에서 개인 키를 복구하고 암호화폐를 훔칠 수 있으며, 이는 2022년 6월에 실제로 악용되었습니다. 인증| 복잡성| 벡터 ---|---|--- 해당 없음| 해당 없음| 해당 없음 기밀성| 무결성| 가용성 ---|---|--- 해당 없음| 해당 없음| 해당 없음 CVSS Score: 해당 없음 참고 자료...

profanity-verifier

profanity-verifier Provable check for CVE-2022-40769 : does an EOA's private key lie in the key space reachable by the Profanity vanity-address generator? If yes, the key is recoverable and the account and anything it controls is drainable by anyone. No heuristics. The result is a boolean backed ...

On the Consideration of Vanity Address Generation Via Identity-Based Signatures

An address is indicated as an identifier of the user on the blockchain, and is defined by a hash value of the ECDSA verification key. A vanity address is an address that embeds custom characters such as a name. To generate a vanity address, a classical try-and-error method is employed, and thus t...

Crypto Market Maker Wintermute Hacked, $160 Million Stolen

By Deeba Ahmed According to Certik blockchain cybersecurity firm, a vulnerable private key generated by the Profanity vanity address generator is responsible for this attack. This is a post from HackRead.com Read the original post: Crypto Market Maker Wintermute Hacked, $160 Million Stolen...