1. BITBILIHome
  2. Article

Libbitcoin Explorer’s Version 3.x faces severe security breach, users’ funds endangered

• 172 views

TL;DR Breakdown

  • SlowMist warns of a critical vulnerability in Libbitcoin Explorer 3.x, jeopardizing crypto wallets.
  • The vulnerability is traced to flawed pseudo-random number generator implementation.
  • Users who used Libbitcoin Explorer 3.x for wallet seed generation are at risk of private key exposure.

Description

Blockchain security firm SlowMist has issued a cautionary blog post alerting users to a critical vulnerability within version 3.x of the widely-utilized Libbitcoin Explorer. This vulnerability has raised concerns about the security of various cryptocurrency wallets and reportedly resulted in an approximate loss of $900,000, as reported by Milk Sad. Interestingly, this blog post draws … Read more

Blockchain security firm SlowMist has issued a cautionary blog post alerting users to a critical vulnerability within version 3.x of the widely-utilized Libbitcoin Explorer. This vulnerability has raised concerns about the security of various cryptocurrency wallets and reportedly resulted in an approximate loss of $900,000, as reported by Milk Sad. Interestingly, this blog post draws intriguing parallels to past susceptibilities uncovered in Trust Wallet.

The core of the issue, according to SlowMist, lies within Libbitcoin Explorer’s implementation of a pseudo-random number generator (PRNG). By employing the Mersenne twister technique and 32 bits of the system’s time as a seed, PRNGs become susceptible to potential breaches that could compromise users’ private keys.

Individuals who employed Libbitcoin’s explorer 3.x to generate their cryptocurrency wallet’s seed may find their private keys in jeopardy. Various digital currencies, including Ethereum, Bitcoin, Solana, Dogecoin, Litecoin, Zcash, and Bitcoin Cash, are currently exposed to this vulnerability.

Interestingly, some have pointed out that the security flaw in Libbitcoin Explorer was seemingly identified on the project’s GitHub page around six years ago. However, apparent efforts have yet to be made to rectify the issue.

This development raises significant questions regarding the security of popular blockchain tools and the apparent delays in addressing potentially devastating vulnerabilities. Consequently, users and stakeholders are left to ponder the effectiveness of security measures employed by such widely-used platforms.

Moreover, this incident underscores the importance of comprehensive security audits within the blockchain and cryptocurrency sphere. Besides the immediate financial implications, the broader concern pertains to the potential compromise of user data and the trustworthiness of key industry players.

The disclosure of this significant vulnerability in Libbitcoin Explorer’s version 3.x is a potent reminder that even established platforms are not immune to security challenges. The incident propels the industry to reevaluate its approach to code review, security patching, and prompt response to identified issues.

Disclaimer. The information provided is not trading advice. Cryptopolitan.com holds no liability for any investments made based on the information provided on this page. We strongly recommend independent research and/or consultation with a qualified professional before making any investment decision.

文章来源于互联网:Libbitcoin Explorer’s Version 3.x faces severe security breach, users’ funds endangered

Disclaimers:

1. You are solely responsible for your investment decisions and this info is not liable for any losses you may incur.

2. The copyright of this article belongs to the writer, it represents the writer's opinions only, not represents the site's ones. Not financial advice.

Previous 2023年8月11日 23:53
Next 2023年8月12日 00:48

Related articles

  • Tornado Cash suffers governance hijack

    TL;DR Breakdown Tornado Cash encountered a slight setback after its governance was hijacked by an attack. The platform is seeking measures to salvage the situation. In a concerning development, Tornado Cash, a decentralized crypto mixer, has encountered a significant setback as an attacker managed to seize full control of the platform’s governance through a malicious proposal. The incident unfolded on May 20 at 3:25 ET when the attacker granted themselves 1.2 million votes, effectively taking over Tornado Cash’s governance system. This exploit occurred despite the proposal receiving over 700,000 legitimate votes, allowing the attacker to manipulate the platform at will. The attacker designed a malicious program to attack Tornado Cash The details of the attack were shared by @samczsun, a member of Paradigm, a research-driven technology investment firm. According to @samczsun, the attacker cunningly designed the malicious proposal to resemble a previously successful one, exploiting the trust and familiarity of the community. However, this time, the proposal included an additional function. Once the proposal gained sufficient votes, the attacker swiftly executed the emergency stop function, modifying the proposal logic to…

    Article 2023年5月22日

  • Is Vitalik Buterin making deals with SEC?

    TL;DR Breakdown The release of the Hinman Papers provokes lively commentary and adds an exciting twist to the Ripple vs. SEC battle, with one name raising eyebrows – Vitalik Buterin. The SEC’s Office of General Counsel (OGC) suggested deleting the draft’s language around ETH. Stuart Alderoty, Ripple’s Chief Legal Officer, has called for a probe to provide light on the factors that influenced Hinman’s decision-making. The long-awaited Hinman documents have been released, and Ethereum co-founder Vitalik Buterin has a significant role to play. According to reports, Vitalik Buterin was involved in the process that resulted in the infamous Hinman speech, which provided ETH alone with a special clarity of not being a “Security” and revealed the newest documents.  The recently released emails and speech drafts, which were made public following an 18-month investigation and repeated court orders, provide critical insights into the behind-the-scenes elements of Hinman’s declaration. Judge Torres assessed that the documents should be made public less than a month ago. Hinman documents unsealed – Here’s all there’s to know According to newly released documents including revisions to a…

    Article 2023年6月16日

  • Defi TVL plummets as Ethereum staking grow significantly

    TL;DR Breakdown The TVL on Defi has been confined to plummet significantly as Ethereum staking grows. Liquid staking continues to gain traction in the market. Description The cryptocurrency landscape has witnessed a series of setbacks involving centralized crypto exchanges and services in the past year. Surprisingly, these challenges have not deterred consistent outflows from decentralized finance (DeFi), as indicated by recent data. DeFiLlama, a prominent analytics platform for DeFi protocols, reports a notable decline in the total value locked (TVL) within … Read more The cryptocurrency landscape has witnessed a series of setbacks involving centralized crypto exchanges and services in the past year. Surprisingly, these challenges have not deterred consistent outflows from decentralized finance (DeFi), as indicated by recent data. DeFiLlama, a prominent analytics platform for DeFi protocols, reports a notable decline in the total value locked (TVL) within DeFi protocols across various blockchain networks. Defi TVL sheds $140 billion since 2021 high At its peak in November 2021, the industry boasted a TVL of approximately $178 billion. However, this figure has dwindled significantly, currently resting at less than $38…

    Article 2023年8月27日

  • Former SEC Chair Hints at Potential Approval of Spot Bitcoin ETFs 

    TL;DR Breakdown Former SEC Chair Jay Clayton suggests that spot Bitcoin ETFs may be approved if applicants can demonstrate similar efficacy to futures markets. The article discusses the changing perception of investor protection and surveillance in spot Bitcoin markets and the ongoing legal challenges faced by major crypto exchanges. Description In a significant development for the cryptocurrency market, former U.S. Securities and Exchange Commission (SEC) Chair, Jay Clayton, has expressed the possibility of approving spot Bitcoin exchange-traded funds (ETFs). Clayton, who was known for his skepticism towards cryptocurrencies during his tenure, has recently acknowledged a shift in his perception, indicating that improved market conditions may … Read more In a significant development for the cryptocurrency market, former U.S. Securities and Exchange Commission (SEC) Chair, Jay Clayton, has expressed the possibility of approving spot Bitcoin exchange-traded funds (ETFs). Clayton, who was known for his skepticism towards cryptocurrencies during his tenure, has recently acknowledged a shift in his perception, indicating that improved market conditions may warrant the approval of spot Bitcoin ETFs. This article delves into Clayton’s evolving perspective, exploring the need…

    Article 2023年7月12日

  • FDIC grapples with mortgage bonds from bank failures

    TL;DR Breakdown The US government faces a $13 billion mortgage bond challenge post-Silicon Valley and Signature Bank collapses. FDIC seeks BlackRock’s expertise to sell complex bonds tied to Ginnie Mae project loans. Bond coupons remain below market rates, and early refinancing penalties pose hurdles. Description In the aftermath of the unsettling collapses of Silicon Valley Bank and Signature Bank, the United States government grapples with the weight of nearly $13 billion in mortgage bonds that have proven exceptionally challenging to offload. Originally backed by long-term, low-rate loans primarily earmarked for affordable apartment construction projects, the Federal Deposit Insurance Corporation (FDIC) … Read more In the aftermath of the unsettling collapses of Silicon Valley Bank and Signature Bank, the United States government grapples with the weight of nearly $13 billion in mortgage bonds that have proven exceptionally challenging to offload. Originally backed by long-term, low-rate loans primarily earmarked for affordable apartment construction projects, the Federal Deposit Insurance Corporation (FDIC) absorbed these bonds as part of a substantial $114 billion portfolio when it stepped in to take over the beleaguered banks. Amidst…

    Article 2023年9月14日
TOP