Ethereum

Aptos

<p>Security vulnerabilities in the validator infrastructure of InfStones, an established infrastructure provider, have been disclosed by Tel Aviv-headquartered cybersecurity firm dWallet Labs.</p><h2 id="header-0">Blockchain network validator vulnerability</h2><p>In a detailed Medium <a href="https://0d.dwalletlabs.com/the-billion-dollar-exploit-collecting-validators-private-keys-via-web2-attacks-4a385a5bb70d?gi&#61;8ca42204fa70" rel="noopener noreferrer nofollow">blog post</a> published on Tuesday, dWallet Labs shed light on a series of vulnerabilities that, when exploited, could potentially allow attackers to gain full control, execute code and extract private keys from numerous validators on major blockchain networks. Cryptocurrencies such as ETH, BNB, SUI, APT and others were identified as at risk, with potential direct losses estimated to exceed $1 billion.</p><p>The vulnerabilities discovered by dWallet Labs opened the door for attackers to compromise the private keys of validators across multiple blockchain networks, putting over one billion dollars of staked assets at risk. In response to the findings, InfStones, a Web3 infrastructure platform, also released a <a href="https://infstones.com/blog/technical/From-Vulnerability-to-Vigilance-Insights-on-a-Recent-Bug-and-Continued-Safeguards-655909797a6f42004d3df049?utm_source&#61;email_inquiry&amp;utm_medium&#61;email&amp;utm_campaign&#61;cointelegraph_inquiry" rel="noopener noreferrer nofollow">statement</a> on Tuesday acknowledging the potential threat. However, its representative, Darko Radunovic, <a href="https://cointelegraph.com/news/validator-vulnerability-1-billion-bug-infstones" rel="noopener noreferrer nofollow">disputed</a> the figures provided by dWallet Labs in a statement sent to Cointelegraph. Radunovic stated that the vulnerabilities identified in the production environment account for below 0.1% of their active nodes launched to date, emphasizing that the impact would be limited to a small fraction of their operational nodes.</p><p>According to InfStones, “237 instances were in scope, of which 212 instances were deployed for our development and testing purposes, and 25 freshly deployed instances in the production environment.”</p><h2 id="header-1">Mitigating steps taken</h2><p>The company detailed the immediate actions taken to mitigate the vulnerabilities, including shutting down the affected ports, as well as rotating all credentials and keys within their platform. An internal review conducted by InfStones revealed no additional adverse effects. Notwithstanding that, the company took the additional step of hiring an external security firm to audit its systems and policies.</p><p>Meanwhile, dWallet Labs Founder and CEO Omer Sadika shared his thoughts on the X platform as to how he believes such events should be handled. Sadika <a href="https://x.com/omersadika/status/1726963408270987288?s&#61;20" rel="noopener noreferrer nofollow">wrote</a>:</p><p>”The worst way to handle a cybersecurity vulnerability is not taking responsibility and lying. We were super open and transparent with the goal of eliminating the risk to web3. My take: it’s not about whether you are fully secure or not, because no one is, it’s about how you handle it and maintain the trust with your partners and customers.”</p><p>The collaboration between dWallet Labs and InfStones sheds light on the ongoing challenges faced by the cryptocurrency industry in maintaining the security and integrity of blockchain networks. While vulnerabilities were identified and addressed, the incident underscores the importance of proactive security measures to safeguard the assets and data within the rapidly evolving landscape of digital assets.</p>

Crypto vulnerability uncovered with $1B in digital asset exposure

Table of Contents

CoinNess Global

Other articles published on Nov 22, 2023

Binance Announced Future Listing of These Altcoins with 50x Leverage!

Crypto price-tracking website CoinGecko acquires NFT analytics firm Zash

CrowdStrike Launches on Amazon Business, Bringing AI-Native Cybersecurity to Small & Medium Busin...

Ripple CTO Reacts to OpenAI and Sam Altman Saga With Relevant Joke and Major Note

Why UX in DeFi is Vital for the Next 100 million Users

Zhao’s resignation and guilty plea: a new era for Binance and crypto?

Join our free newsletter for daily crypto updates!