Langsung ke konten utama

Critical Vulnerability in Tron’s Multisig Mechanism Exposed $500M in Digital Assets: Report

According to a report published by the cybersecurity research team known as 0d, a division of Dwallet Labs, researchers discovered a critical vulnerability in the Tron network’s native multi-sig mechanism. The cybersecurity experts explained that the vulnerability could have impacted more than $500 million worth of digital assets held in Tron multi-sig accounts. 0d specified that Tron’s development team addressed the problem by creating a patch for the bug.

Cybersecurity Researchers Summarize Bug Found Tied to Tron’s Multisig Mechanism, Tron Devs Patch the Vulnerability

On May 30, 2023, the research team 0d from Dwallet Labs published a report that uncovers a vulnerability in Tron’s native multisig scheme. The vulnerability enables any signer of a multi-sig account to bypass the network’s security measures, irrespective of the designated threshold and number of signers. “This vulnerability impacts over $500M in digital assets that are held in Tron multi-sig accounts,” 0d reported on Tuesday.

The researchers further stated that Tron’s developers were notified about the bug on February 19, 2023, and the programmers created a patch to address the problem. 0d said that the majority of Tron’s validators have already implemented the patch to prevent any potential exploitation of the vulnerability. “We have received a bounty reward for a high severity vulnerability via the Tron bounty program,” the cybersecurity research team disclosed.

0d explained that the vulnerability originated from the verification process of multisig transactions within the Tron network. The network depends on the uniqueness of signatures for identical messages from an individual. However, because of the deterministic nature of the signature generation process outlined in RFC 6979, an untrustworthy signer can utilize various nonces (random numbers) to generate multiple valid signatures for the same message while employing the same private key.

The revelation of the Tron multi-sig mechanism bug coincides with the discovery of a privacy vulnerability in the Monero blockchain. The bug is said to have existed on the Monero network for three years and has since been addressed. While discussing the Tron multi-sig problem, 0d researcher Omer Sadika explained that with the deployment of the fix, $500 million is now “secured.”

What are your thoughts on the recent vulnerability discovered in Tron’s multi-sig mechanism? Share your insights and opinions in the comments section below.



source https://news.bitcoin.com/critical-vulnerability-in-trons-multisig-mechanism-exposed-500m-in-digital-assets-report/
Label:

Komentar

Posting Komentar

Postingan populer dari blog ini

Kucoin Hacked for $150 Million in Bitcoin; Bitfinex and Tether Freeze $33 Million of the Stolen Funds

Cryptocurrency exchange Kucoin may have been hacked for $150 million in bitcoin and multiple ERC20 tokens. The Singapore-based exchange confirmed the September 25 security breach, but did not disclose the amount stolen. “Bitcoin, ERC-20 and, other tokens in Kucoin’s hot wallets were transferred out of the exchange,” said Kucoin in an update on Saturday. Meanwhile, Bitfinex and Tether, issuers of the centralized stablecoin USDT , immediately froze a combined $33 million worth of USDT suspected to be part of the funds looted in the Kucoin hack – an action that has stirred questions around the influence of centralized platforms. Paolo Ardoino, chief technology officer of both entities, tweeted that Bitfinex froze $13 million USDT on EOS as part of the hack. Tether froze $20 million USDT “sitting on this ethereum address as a precautionary measure,” he said. In its update, Kucoin maintains that funds in its cold wallets (offline storage, which is less susceptible to hacks) ar...
Posting Komentar
Baca selengkapnya

Binance Blasts CFTC for Trying to Be World’s Derivatives Police, Seeks to Dismiss Lawsuit

Binance has submitted a new motion to dismiss the lawsuit filed by the U.S. Commodity Futures Trading Commission (CFTC) against it. The leading cryptocurrency exchange urges the court to reject the agency’s attempt to expand its territorial reach beyond the United States. Binance Accuses CFTC of Using U.S. Lawsuit as a ‘Trojan Horse’ to Gain Global Regulatory Reach The world’s largest digital assets exchange, Binance, has again tried to convince a U.S. court to dismiss the lawsuit in which America’s derivatives markets regulator alleged earlier this year that the crypto company had violated U.S. trading and derivatives rules. The CFTC sued Binance and its CEO Changpeng Zhao (CZ) in March, claiming that at least since July 2019, the exchange had offered and executed commodity derivatives transactions on behalf of U.S. persons. Binance sought to dismiss the complaint in July which the Commission disputed in September. In its latest filing , the crypto giant argues that the regulat...
Posting Komentar
Baca selengkapnya

Pi Network: Menambang Cryptocurrency Gratis dan Anti Monopoli

Pi Network - Mulai Menambang Gratis Pi Network: Menambang Cryptocurrency Gratis dan Anti Monopoli Pi Network adalah proyek cryptocurrency yang memungkinkan Anda menambang Pi Coin secara gratis dan tanpa perangkat keras canggih. Hanya dengan menggunakan ponsel Anda, Anda bisa bergabung dalam jaringan blockchain yang sedang berkembang ini. Potensi Pi Network: Dengan semakin banyaknya pengguna, Pi Coin bisa menjadi mata uang digital yang sangat berharga di masa depan. Menambang Anti Monopoli: Tidak seperti penambangan tradisional, Pi Network memungkinkan siapa saja untuk berpartisipasi tanpa memerlukan perangkat keras mahal. Cara Menambang: Cukup unduh aplikasi Pi Network, daftar, dan mulai menambang hanya dengan menekan tombol di aplikasi setiap hari. Mulai Menambang Pi Network Gratis
Posting Komentar
Baca selengkapnya