Worldcoin

Read

<div class="cryptonews"> 
 <p class="is-style-lead">In late May, CertiK, a blockchain audit firm, discovered a serious security flaw in Worldcoin’s code that would have <a rel="noopener noreferrer nofollow" title="allowed" href="https://thebittimes.com/tag/allowed.html">allowed</a> an unapproved user to gain access and become an Orb <a rel="noopener noreferrer nofollow" title="operator" href="https://thebittimes.com/tag/operator.html">operator</a>, bypassing the strict verification process.</p> 
 <p>With this flaw, CertiK adds, the intruder would have easily circumvented Worldcoin’s rigorous onboarding criteria for becoming an Orb <a rel="noopener noreferrer nofollow" title="operator" href="https://thebittimes.com/tag/operator.html">operator</a>.&nbsp;</p> 
 <figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter"> 
  <div class="wp-block-embed__wrapper"> 
   <blockquote class="twitter-tweet" data-width="550" data-dnt="true"> 
    <p lang="en" dir="ltr">1/ On May 29th, CertiK reported a security vulnerability to #WorldCoin’s security team that could potentially allow an attacker to become an Orb <a rel="noopener noreferrer nofollow" title="operator" href="https://thebittimes.com/tag/operator.html">operator</a> by bypassing the verification process.</p>— CertiK (@CertiK) August 3, 2023 
   </blockquote> 
  </div> 
 </figure> 
 <p>Becoming an&nbsp;Orb operator&nbsp;is stringent and involves ID verification, vetting interviews, and meeting specific company requirements. For instance, a verified Orb operator must operate a licensed local business and have a team to onboard people, those who scan their iris, to the Worldcoin ecosystem. Orb operators are compensated in stablecoins or fiat.</p> 
 <p>If the flaw had gone unnoticed, individuals who have not been properly identified or vetted may have been able to become Orb <a rel="noopener noreferrer nofollow" title="operator" href="https://thebittimes.com/tag/operator.html">operator</a>s and gather sensitive iris information from users.</p> 
 <p>CertiK said Worldcoin’s security team promptly acted, validating the vulnerability and implementing a fix to eliminate the threat.</p> 
 <p>On July 28, Worldcoin published a comprehensive security audit&nbsp;report.&nbsp;</p> 
 <p>The Worldcoin protocol underwent an audit by cybersecurity firms, Nethermind and Least Authority, which identified several weaknesses.</p> 
 <div class="cn-block-related-link"> 
  <svg class="cn-block-related-link__icon icon" aria-hidden="true"> <use xlink:href="#"></use> 
  </svg> <span class="cn-block-related-link__prefix"> You might also like: </span> Worldcoin data collection investigated by French privacy regulator 
 </div> 
 <p>They analyzed vulnerable areas, developed strategies to protect against harmful actions and attacks, and advised implementing defenses against malicious activities and exploitation.</p> 
 <p>The Nethermind audit, for instance, revealed 26 protocol issues, most of which were successfully addressed during the verification process. The remaining were acknowledged and dealt with. On the other hand, Least Authority picked out three problems and suggested six solutions.&nbsp;</p> 
 <p>Worldcoin has acted diligently, resolving or planning to address all identified issues per their commitment to maintaining a secure system.</p> 
 <p>This week, Kenya suspended all Worldcoin activities in the country. They want to check for risks to the public and how data might be used.&nbsp;</p> 
 <p>On the other hand, Worldcoin said they stopped services in Kenya to manage high demand but will work with local officials to explain their privacy measures.&nbsp;</p> 
 <p>Despite this, Ricardo Macieira from Tools for Humanity, the group behind Worldcoin,&nbsp;said&nbsp;they’ll continue expanding where they’re welcomed.&nbsp;</p> 
 <p>Germany, France, and the UK are investigating Worldcoin and determining whether they comply with their data rules.</p> 
 <div class="cn-block-related-link"> 
  <svg class="cn-block-related-link__icon icon" aria-hidden="true"> <use xlink:href="#"></use> 
  </svg> <span class="cn-block-related-link__prefix"> Read more: </span> Worldcoin to extend ID verification system to businesses and governments 
 </div> <span class="google-news-banner__label">Follow Us on Google News</span> 
</div>

Worldcoin flaw allowed anyone to become an orb operator

TheBitTimes

Other articles published on Aug 5, 2023

XinFin (XDC) Price Witnesses Bullish Momentum Amid FOMO

XRP Price Analysis: Taking A Closer Look into XRP Downfall Sparks a New Buying Spot!

AMTX Stock Price Skyrocketing Despite Negative Revenue

Ripple Joins Elite Trade Association ISDA

XRP's Rare Golden Cross Sparks Unprecedented Bull Market Speculations

Funko, Inc. Reported Less Revenue Than Estimated; Lost 42% Monthly

Join our free newsletter for daily crypto updates!