
Halborn specialists have discovered a critical vulnerability in the Dogecoin code. According to them, a similar problem has affected a number of networks.
1/ In March 2022, Halborn started to evaluate #dogecoin under a contract and found several vulnerabilities which were fixed by the Dogecoin team.
— Halborn (@HalbornSecurity) March 13, 2023
The experts noted that in the course of work under the contract since March 2022, they discovered several bugs in Dogecoin. All errors were promptly corrected by the developers.
However, for security reasons, Halborn specialists did not publish details.
They noted that similar vulnerabilities affected more than 280 networks with a total capitalization of $25 billion, including Litecoin and ZCash.
The Litecoin team has closed the vulnerability discovered by Halborn. Network members were advised to update the Litecoin Core client to version 0.21.2.2.
.@HalbornSecurity notified us of a security vulnerability discovered in many crypto clients, including Litecoin Core.
This was promptly fixed in Litecoin Core 0.21.2.2. Read more below…
If you haven’t yet upgraded to 0.21.2.2, we’d recommend upgrading upgrade ASAP! https://t.co/bFI7vZrfp4
— Loshan (@loshan1212) March 13, 2023
The most critical error was related to the “zero day” option. The exploit made it possible for an attacker to remotely execute code on a miner node or conduct DoS-attack.
4/ Another zero-day identified by Halborn was uniquely related to #dogecoinincluding an RPC vulnerability impacting individual miners.
Subsequently, variants of these 0-days were also discovered in similar blockchain networks potentially leading to DoS or RCE attacks.
— Halborn (@HalbornSecurity) March 13, 2023
“Efforts have been made to reach out to affected networks for responsible disclosure,” the experts noted.
Recall that the developers of the OpenSea NFT marketplace have eliminated a critical vulnerability discovered by Imperva specialists.
Found a mistake in the text? Select it and press CTRL+ENTER
CryptoNewsHerald Newsletters: Keep your finger on the pulse of the bitcoin industry!
Comments (No)