Worldcoin

Read

In late May, CertiK, a blockchain audit firm, discovered a serious security flaw in Worldcoin’s code that would have allowed an unapproved user to gain access and become an Orb operator, bypassing the strict verification process. 
With this flaw, CertiK adds, the intruder would have easily circumvented Worldcoin’s rigorous onboarding criteria for becoming an Orb operator.&nbsp; 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter"> 
 <div class="wp-block-embed__wrapper"> 
 <blockquote class="twitter-tweet" data-width="550" data-dnt="true"> 
 1/ On May 29th, CertiK reported a security vulnerability to <a href="https://twitter.com/hashtag/WorldCoin?src=hash&amp;ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">#WorldCoin</a>’s security team that could potentially allow an attacker to become an Orb operator by bypassing the verification process.— CertiK (@CertiK) <a href="https://twitter.com/CertiK/status/1687129300179243010?ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">August 3, 2023</a> 
 </blockquote> 
 <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
 </div> 
</figure> 
Becoming an&nbsp;<a target="_blank" href="https://worldcoin.org/blog/worldcoin/what-is-worldcoin-operator" rel="noopener noreferrer nofollow">Orb operator</a>&nbsp;is stringent and involves ID verification, vetting interviews, and meeting specific company requirements. For instance, a verified Orb operator must operate a licensed local business and have a team to onboard people, those who scan their iris, to the Worldcoin ecosystem. Orb operators are compensated in stablecoins or fiat. 
If the flaw had gone unnoticed, individuals who have not been properly identified or vetted may have been able to become Orb operators and gather sensitive iris information from users. 
CertiK said Worldcoin’s security team promptly acted, validating the vulnerability and implementing a fix to eliminate the threat. 
On July 28, Worldcoin published a comprehensive security audit&nbsp;<a href="https://worldcoin.org/blog/worldcoin/worldcoin-protocol-security-audit-reports" target="_blank" rel="noopener noreferrer nofollow">report</a>.&nbsp; 
The Worldcoin protocol underwent an audit by cybersecurity firms, Nethermind and Least Authority, which identified several weaknesses. 
 You might also like: <a href="https://crypto.news/worldcoin-data-collection-investigated-by-french-privacy-regulator/" rel="noopener noreferrer nofollow"> Worldcoin data collection investigated by French privacy regulator </a> 
They analyzed vulnerable areas, developed strategies to protect against harmful actions and attacks, and advised implementing defenses against malicious activities and exploitation. 
The Nethermind audit, for instance, revealed 26 protocol issues, most of which were successfully addressed during the verification process. The remaining were acknowledged and dealt with. On the other hand, Least Authority picked out three problems and suggested six solutions.&nbsp; 
Worldcoin has acted diligently, resolving or planning to address all identified issues per their commitment to maintaining a secure system. 
This week, Kenya <a href="https://crypto.news/kenya-suspends-worldcoin-operations-over-security-and-data-concerns/" data-type="post" data-id="14182657" rel="noopener noreferrer nofollow">suspended</a> all Worldcoin activities in the country. They want to check for risks to the public and how data might be used.&nbsp; 
On the other hand, Worldcoin said they stopped services in Kenya to manage high demand but will work with local officials to explain their privacy measures.&nbsp; 
Despite this, Ricardo Macieira from Tools for Humanity, the group behind Worldcoin,&nbsp;<a target="_blank" href="https://www.reuters.com/technology/worldcoin-says-will-allow-companies-governments-use-its-id-system-2023-08-02/" rel="noopener noreferrer nofollow">said</a>&nbsp;they’ll continue expanding where they’re welcomed.&nbsp; 
Germany, France, and the UK are investigating Worldcoin and determining whether they comply with their data rules. 
 Read more: <a href="https://crypto.news/worldcoin-to-extend-id-verification-system-to-businesses-and-governments/" rel="noopener noreferrer nofollow"> Worldcoin to extend ID verification system to businesses and governments </a>

Worldcoin flaw allowed anyone to become an orb operator

crypto.news

Other articles published on Aug 5, 2023

Will Chevron Corp. (CVX Stock) Escape Above Trendline of $160?

Elon Musk Says X Will Never Launch A Crypto Token, Dogecoin Jumps

No X token After All: DOGE Back in the Game as Main Crypto on X Platform?

Trust AI and Melega Partner to Enhance AI-Driven Smart Contracts and Security

Nike Stock Price Prediction: Will Nike Turn Upside This Year?

NAB Share Price Prediction: Is NAB Share Running On Fumes?

Join our free newsletter for daily crypto updates!