Custodial Lightning Network Service Attack Discovered by LN ‘Newbie’ — Hacker Strikes 6 LN Custodians

On September 18, a Redditor posted to the r/bitcoin forum and explained how he discovered a way to “attack [the] lightning Network’s custodial services.” The Reddit account dubbed “Reckless Satoshi” wanted to figure out if a “discrepancy between real routing fees and service’s transaction fee can be exploited for a profit.” The researcher disclosed that … Read more

Polygon-Based Defi Stablecoin Safedollar Plunges to Zero — Team Is Investigating Exploit

The algorithmic decentralized finance (defi) stablecoin safedollar (SDO) has been attacked, according to statements published on its Telegram channel. The safedollar token did not remain stable following the attack, as the defi stablecoin’s price collapsed to zero. Safedollar Stablecoin Price Collapses A Polygon (MATIC) blockchain-based stablecoin called safedollar (SDO) has lost all of its value, … Read more

Over $1 Billion Ethereum-Based Tokens Vulnerable to ‘Fake Deposit Exploit’

A number of university researchers published a study that demystifies the “fake deposit vulnerability” in Ethereum-based smart contracts. The findings show that over 7,000 tokens worth more than $1 billion built on top of Ethereum are vulnerable to two types of attacks that exploit smart contracts. Researchers from the University of Queensland, Beijing University of … Read more

Latest Hack Sparks Concern Whatsapp Will Never Be Secure

Facebook’s popular messaging app with 1.5 billion users in over 180 countries has another major vulnerability. Hackers were able to covertly install spyware on iOS and Android smartphones using Whatsapp with just a phone call. “All of their security issues are conveniently suitable for surveillance, and look and work a lot like backdoors,” said Telegram’s … Read more

Ledger Reveals Physical Exploits Against Trezor Hardware Wallets

The battle of the hardware wallets is heating up. At this weekend’s MIT Bitcoin Expo in Boston, Charles Guillmet, Chief Security Officer of Ledger, presented a number of physical attacks that could be executed against Trezor hardware wallets. He also outlined an attack on their rival’s device that Ledger has refrained from making public because … Read more

Zcash Bug Demonstrates the Difficulty of Auditing Complex Cryptocurrencies

A recent counterfeiting bug in Zcash demonstrates that the added functionality of so-called second generation blockchains comes at a price. The vulnerability, which existed for years before being patched in October, could have been exploited to generate additional coins. As every major cryptocurrency since Bitcoin has demonstrated, added complexity corresponds with lower security. Also read: Australian … Read more

The Daily: Critical Bug Found in Beam Wallet, Wirex Adds Another Cryptocurrency

In Friday’s edition of The Daily, we cover the news about a vulnerability found in the Beam Wallet days after the launch of the Mimblewimble-based coin. Also, crypto card provider Wirex has added waves to its list of supported cryptocurrencies, and digital asset exchange Exmo has registered an increase in the number of Belarusian users … Read more

Bounties and Responsible Disclosure Bolstered Crypto Infrastructure This Year

Cryptocurrency transfers work because of the software developed by programmers like Satoshi Nakamoto and many other innovators along the way. As with all software, however, blockchain protocols are not perfect, and over the last decade black and white hat hackers have revealed many bugs. In 2018, developers earned over $878,000 in blockchain bug bounties by … Read more