Aptos

Silk Road

Security

<div class="sg-post-des">
 Validator service provider InfStones disagreed and told Cointelegraph that “nothing close to $1 billion in assets would be at risk,” even in the worst-case scenario.
</div>
<div class="cointelegraph">
 Blockchain security firm dWallet Labs recently disclosed a vulnerability that they claim could affect up to $1 billion worth of crypto, with assets such as Ether (ETH), Aptos (APT), BNB (BNB) and Sui (SUI) at risk.
 In a paper sent to Cointelegraph, dWallet Labs reported a potential <a rel="noopener noreferrer nofollow" title="vulnerability" href="https://thebittimes.com/tag/vulnerability.html">vulnerability</a> in <a rel="noopener noreferrer nofollow" title="validator" href="https://thebittimes.com/tag/validator.html">validator</a>s hosted by an infrastructure provider called InfStones. According to dWallet Labs, they started a research paper on attacking blockchain networks and collecting private keys with Web2 attacks. During this research, dWallet Labs said, they discovered vulnerabilities in InfStones <a rel="noopener noreferrer nofollow" title="validator" href="https://thebittimes.com/tag/validator.html">validator</a>s. They wrote:
 <blockquote>
 “A chain of vulnerabilities we discovered and exploited during our research allowed us to gain full control, run code and extract private keys of hundreds of validators on multiple major networks, potentially leading to direct losses equivalent to over one billion dollars in cryptocurrencies such as ETH, BNB, SUI, APT and many others.”&nbsp;
 </blockquote>
 According to dWallet Labs, an attacker who exploits the <a rel="noopener noreferrer nofollow" title="vulnerability" href="https://thebittimes.com/tag/vulnerability.html">vulnerability</a> can acquire the private keys of <a rel="noopener noreferrer nofollow" title="validator" href="https://thebittimes.com/tag/validator.html">validator</a>s across different blockchain networks. “Over one billion dollars of staked assets were staked on all of these <a rel="noopener noreferrer nofollow" title="validator" href="https://thebittimes.com/tag/validator.html">validator</a>s, and such an attacker would have been able to gain full control of all of them,” they added.&nbsp;
 Related: Exploits, hacks and scams stole almost $1B in 2023: Report
 On Nov. 21, InfStones responded to Cointelegraph’s request for comment, denying that the bug could affect $1 billion in assets. Darko Radunovic, a representative from InfStones, told Cointelegraph that the potential vulnerability could only affect a small fraction of the live nodes they’ve already launched.
 According to Radunovic, the potential <a rel="noopener noreferrer nofollow" title="vulnerability" href="https://thebittimes.com/tag/vulnerability.html">vulnerability</a> was discovered in 237 instances, including 212 cases designated for testing and 25 instances as freshly launched nodes in the production environment. “The instances identified in production constitute a fraction below 0.1% of the live nodes we have launched to date,” Radunovic said in a statement. The company also published a blog post saying the <a rel="noopener noreferrer nofollow" title="vulnerability" href="https://thebittimes.com/tag/vulnerability.html">vulnerability</a> was resolved.
 Radunovic also highlighted that in response to the vulnerability, they’ve done internal reviews and had an accredited security firm audit their systems and company policies. The company also launched a bug bounty program to encourage any third party to work with them directly on any bugs they may find.&nbsp;
 Magazine: $3.4B of Bitcoin in a popcorn tin: The Silk Road hacker’s story
 <template data-name="subscription_form" data-type="defi_newsletter"></template>
</div>
Source: <a rel="noopener noreferrer nofollow" target="_blank" href="https://thebittimes.com/security-firm-dwallet-labs-flags-validator-vulnerability-that-could-affect-1b-in-crypto-tbt71026.html">https://thebittimes.com/security-firm-dwallet-labs-flags-validator-vulnerability-that-could-affect-1b-in-crypto-tbt71026.html</a>

Security firm dWallet Labs flags validator vulnerability that could affect $1B in crypto

TheBitTimes

Other articles published on Nov 21, 2023

The crypto community reacts to CZ stepping down – He’s a LEGEND

Breaking: Binance CEO Resigns as Part of DOJ Settlement; Pleads Guilty

Nexo Unveils 3x Cashback for Debit and Credit Nexo Card for Festive Season

Blockchain Association Stands Firm in Support of Tornado Cash Users in Legal Battle

Cryptocurrency Statement from AK Party!

Carter Capital’s Global Summit to Pioneer Sustainable Tech & Impact Investments

Join our free newsletter for daily crypto updates!