Langsung ke konten utama

Critical Vulnerability in Tron’s Multisig Mechanism Exposed $500M in Digital Assets: Report

According to a report published by the cybersecurity research team known as 0d, a division of Dwallet Labs, researchers discovered a critical vulnerability in the Tron network’s native multi-sig mechanism. The cybersecurity experts explained that the vulnerability could have impacted more than $500 million worth of digital assets held in Tron multi-sig accounts. 0d specified that Tron’s development team addressed the problem by creating a patch for the bug.

Cybersecurity Researchers Summarize Bug Found Tied to Tron’s Multisig Mechanism, Tron Devs Patch the Vulnerability

On May 30, 2023, the research team 0d from Dwallet Labs published a report that uncovers a vulnerability in Tron’s native multisig scheme. The vulnerability enables any signer of a multi-sig account to bypass the network’s security measures, irrespective of the designated threshold and number of signers. “This vulnerability impacts over $500M in digital assets that are held in Tron multi-sig accounts,” 0d reported on Tuesday.

The researchers further stated that Tron’s developers were notified about the bug on February 19, 2023, and the programmers created a patch to address the problem. 0d said that the majority of Tron’s validators have already implemented the patch to prevent any potential exploitation of the vulnerability. “We have received a bounty reward for a high severity vulnerability via the Tron bounty program,” the cybersecurity research team disclosed.

0d explained that the vulnerability originated from the verification process of multisig transactions within the Tron network. The network depends on the uniqueness of signatures for identical messages from an individual. However, because of the deterministic nature of the signature generation process outlined in RFC 6979, an untrustworthy signer can utilize various nonces (random numbers) to generate multiple valid signatures for the same message while employing the same private key.

The revelation of the Tron multi-sig mechanism bug coincides with the discovery of a privacy vulnerability in the Monero blockchain. The bug is said to have existed on the Monero network for three years and has since been addressed. While discussing the Tron multi-sig problem, 0d researcher Omer Sadika explained that with the deployment of the fix, $500 million is now “secured.”

What are your thoughts on the recent vulnerability discovered in Tron’s multi-sig mechanism? Share your insights and opinions in the comments section below.



source https://news.bitcoin.com/critical-vulnerability-in-trons-multisig-mechanism-exposed-500m-in-digital-assets-report/
Label:

Komentar

Posting Komentar

Postingan populer dari blog ini

Kucoin Hacked for $150 Million in Bitcoin; Bitfinex and Tether Freeze $33 Million of the Stolen Funds

Cryptocurrency exchange Kucoin may have been hacked for $150 million in bitcoin and multiple ERC20 tokens. The Singapore-based exchange confirmed the September 25 security breach, but did not disclose the amount stolen. “Bitcoin, ERC-20 and, other tokens in Kucoin’s hot wallets were transferred out of the exchange,” said Kucoin in an update on Saturday. Meanwhile, Bitfinex and Tether, issuers of the centralized stablecoin USDT , immediately froze a combined $33 million worth of USDT suspected to be part of the funds looted in the Kucoin hack – an action that has stirred questions around the influence of centralized platforms. Paolo Ardoino, chief technology officer of both entities, tweeted that Bitfinex froze $13 million USDT on EOS as part of the hack. Tether froze $20 million USDT “sitting on this ethereum address as a precautionary measure,” he said. In its update, Kucoin maintains that funds in its cold wallets (offline storage, which is less susceptible to hacks) ar...
Posting Komentar
Baca selengkapnya

Pi Coin dan Potensinya Kedepan Menurut Pakar Crypto Dunia

Apa Itu Pi Coin? Pi Coin adalah token yang beroperasi di atas Pi Network, sebuah proyek yang bertujuan membuat penambangan cryptocurrency dapat diakses oleh lebih banyak orang. Berbeda dengan Bitcoin, pengguna tidak perlu perangkat keras mahal—cukup dengan aplikasi smartphone. Dengan 35 juta pengguna yang disebut Pioneers, Pi Network berfokus pada membuat crypto lebih ramah pengguna dan ramah lingkungan. Peluncuran Open Network: Apa yang Akan Datang? Peluncuran Open Network pada 20 Februari 2025 menjadi titik penting bagi Pi Coin. Setelah tanggal ini, Pi Coin akan dapat terhubung dengan jaringan lain, membuka kemungkinan perdagangan di platform seperti WEEX, sebuah platform perdagangan futures crypto baru. Permintaan Pi Coin diperkirakan akan meningkat, yang berpotensi membuat harganya naik tajam. Tantangan Regulasi Namun, jalan Pi Coin tidak mulus. Proyek ini menghadapi tantangan regulasi yang cukup berat. Kepatuhan terhadap KYC (Know Your Customer) dan AML (Anti-Money Laundering) men...
Posting Komentar
Baca selengkapnya

Pi Network: Menambang Cryptocurrency Gratis dan Anti Monopoli

Pi Network - Mulai Menambang Gratis Pi Network: Menambang Cryptocurrency Gratis dan Anti Monopoli Pi Network adalah proyek cryptocurrency yang memungkinkan Anda menambang Pi Coin secara gratis dan tanpa perangkat keras canggih. Hanya dengan menggunakan ponsel Anda, Anda bisa bergabung dalam jaringan blockchain yang sedang berkembang ini. Potensi Pi Network: Dengan semakin banyaknya pengguna, Pi Coin bisa menjadi mata uang digital yang sangat berharga di masa depan. Menambang Anti Monopoli: Tidak seperti penambangan tradisional, Pi Network memungkinkan siapa saja untuk berpartisipasi tanpa memerlukan perangkat keras mahal. Cara Menambang: Cukup unduh aplikasi Pi Network, daftar, dan mulai menambang hanya dengan menekan tombol di aplikasi setiap hari. Mulai Menambang Pi Network Gratis
Posting Komentar
Baca selengkapnya