Top

Crypto vulnerability uncovered with $1B in digital asset exposure

Policy & Regulation·November 22, 2023, 3:00 AM

Security vulnerabilities in the validator infrastructure of InfStones, an established infrastructure provider, have been disclosed by Tel Aviv-headquartered cybersecurity firm dWallet Labs.

Photo by Brett Jordan on Unsplash

 

Blockchain network validator vulnerability

In a detailed Medium blog post published on Tuesday, dWallet Labs shed light on a series of vulnerabilities that, when exploited, could potentially allow attackers to gain full control, execute code and extract private keys from numerous validators on major blockchain networks. Cryptocurrencies such as ETH, BNB, SUI, APT and others were identified as at risk, with potential direct losses estimated to exceed one billion dollars.

The vulnerabilities discovered by dWallet Labs opened the door for attackers to compromise the private keys of validators across multiple blockchain networks, putting over one billion dollars of staked assets at risk. In response to the findings, InfStones, a Web3 infrastructure platform, also released a statement on Tuesday acknowledging the potential threat. However, its representative, Darko Radunovic, disputed the figures provided by dWallet Labs in a statement sent to Cointelegraph. Radunovic stated that the vulnerabilities identified in the production environment account for below 0.1% of their active nodes launched to date, emphasizing that the impact would be limited to a small fraction of their operational nodes.

According to InfStones, “237 instances were in scope, of which 212 instances were deployed for our development and testing purposes, and 25 freshly deployed instances in the production environment.”

 

Mitigating steps taken

The company detailed the immediate actions taken to mitigate the vulnerabilities, including shutting down the affected ports, as well as rotating all credentials and keys within their platform. An internal review conducted by InfStones revealed no additional adverse effects. Notwithstanding that, the company took the additional step of hiring an external security firm to audit its systems and policies.

Meanwhile, dWallet Labs Founder and CEO Omer Sadika shared his thoughts on the X platform as to how he believes such events should be handled. Sadika wrote:

”The worst way to handle a cybersecurity vulnerability is not taking responsibility and lying. We were super open and transparent with the goal of eliminating the risk to web3. My take: it’s not about whether you are fully secure or not, because no one is, it’s about how you handle it and maintain the trust with your partners and customers.”

The collaboration between dWallet Labs and InfStones sheds light on the ongoing challenges faced by the cryptocurrency industry in maintaining the security and integrity of blockchain networks. While vulnerabilities were identified and addressed, the incident underscores the importance of proactive security measures to safeguard the assets and data within the rapidly evolving landscape of digital assets.

More to Read
View All
Web3 & Enterprise·

Dec 14, 2023

NiceHash targets Asian market through EasyMining platform launch

NiceHash targets Asian market through EasyMining platform launchNiceHash, a Slovenian bitcoin mining and hashpower marketplace, has launched its crypto mining platform in Asia, known as EasyMining.Cloud-based crypto miningEstablished in 2014 by two Slovenian university students, NiceHash stands as the largest cloud-based crypto-mining hashpower marketplace globally. Boasting over 250,000 daily active miners and a user base spanning 190 countries, the platform serves as a link between hashing power suppliers and consumers, operating within the framework of the sharing economy.NiceHash published a press release from Singapore on Tuesday to announce the Asian product launch. The company has already established collaborations in the region, with Singaporean mining equipment designer iPollo appearing as a featured partner on the firm’s website.Photo by Traxer on UnsplashProduct offeringAt the core of NiceHash’s offerings is the facilitation of crypto trading and global hashpower. It claims to provide an innovative and seamless connection between miners and hashpower providers. Whether it’s mining with CPU, GPU or ASIC equipment, platform users can engage in the process to earn cryptocurrencies or sell surplus computing power, presenting an opportunity for profit without the need for an extensive data center.NiceHash employs various security measures to ensure the validity and safety of transactions. These include SSL encryption, 2-factor authentication and email notifications, enhancing the security of accounts and payments. The cost of NiceHash mining is set at 0.001 BTC, offering a range of 34 mining algorithms and supporting various coins to cater to the interests of a broad user base.The firm offers a QuickMiner service, an automatic mining program that simplifies the mining process for subscribers. Through the use of this application, miners and hashpower renters can kick-start their operations immediately.Miners and providers have the ability to trade hashpower on the platform, with dynamic pricing adjusting every 10 seconds based on cryptocurrency values, hashpower availability and miner demand.For hashpower sellers, NiceHash offers the Profitability Calculator, a tool that enables users to calculate daily mining earnings by inputting their mining rig specifications and power costs. The platform supports CPU, GPU and ASIC mining, allowing miners to focus on the most profitable algorithm and token pairings.EasyMining, the latest addition to NiceHash’s repertoire and the product it is now offering in the Asian region, represents a significant step forward for the firm in simplifying cryptocurrency mining. The company claims that users can select their preferred cryptocurrency, letting the platform handle the mining process securely and effortlessly.Changing market conditionsCrypto platforms have had to be agile in 2023, as the underlying environment for crypto-centric offerings has been subject to rapid change in many jurisdictions. While NiceHash is making a concerted effort to etch out a market share within the Asian market through this product launch, it’s also had to withdraw its services from another market in recent months.On Sept. 27, the company informed its customers that it was withdrawing from the UK market. In a letter to users, it stated:”Due to the recent regulation changes in the United Kingdom we are no longer able to provide services to those residing in the United Kingdom.” . . . “We are working hard to be able to resume our services to UK residents as soon as possible.”The company withdrew all services from the UK market, including the exchange, mining, hashpower marketplace and wallets.

news
Web3 & Enterprise·

Oct 10, 2023

Shinhan Card’s Membership NFTs Offer Discounts at Emart24 Convenience Stores

Shinhan Card’s Membership NFTs Offer Discounts at Emart24 Convenience StoresShinhan Card, a major South Korean credit card company, announced on October 10 (local time) that it is launching membership non-fungible tokens (NFTs) in collaboration with convenience store chain Emart24 and Kakao’s blockchain subsidiary Ground X.Photo by Andrey Metelev on UnsplashNFT and loyalty pointsOwners of the membership NFTs can make purchases of KRW 5,000 ($3.71) or more at Emart24’s brick-and-mortar stores using the Shinhan Card mobile app, known as Shinhan pLay, to earn KRW 1,000 worth of My Shinhan Points. This benefit can be claimed up to three times a month.Moreover, upon purchasing the NFT, buyers will be gifted a KRW 2,000 off Emart24 coupon. Every month, they’ll be treated to a KRW 1,000 off coupon, a 10% off coupon on alcoholic beverages (with savings of up to KRW 3,000), and another 10% off coupon (with savings of up to KRW 1,500).NFT holders also get a KRW 2,000 discount coupon for the card company’s shopping platform, Allthat. Furthermore, every month, when they spend over KRW 10,000 in the food and nutrition category, they can use a 20% discount coupon, saving up to KRW 10,000 on their purchase.Valid for three monthsThese benefits will remain valid for three months starting from the date of issuance of the NFT. A total of 1,000 membership NFTs will be offered for sale at KRW 9,900 each on the Allthat platform until October 16.Purchased NFTs can be received via Ground X’s Klip Wallet, which is accessible through the Emart24 app and the Shinhan pLay app.This initiative stems from an NFT alliance established in July of last year, comprising Shinhan Card, Emart24, and Ground X. The alliance, known as GRID, has set its sights on promoting the widespread adoption of NFTs across diverse sectors, including finance, commerce, and entertainment. Commencing with this effort, Shinhan will engage in collaborative efforts with fellow GRID members to explore additional avenues for expanding its services through its pLay app.

news
Policy & Regulation·

Oct 25, 2023

China Makes History by Settling Cross-Border Oil Deal with Digital Yuan

China Makes History by Settling Cross-Border Oil Deal with Digital YuanThe digital yuan, China’s central bank digital currency (CBDC), also known as e-CNY, was used for the first time to settle a significant oil transaction.Chinese state-owned media outlet China Daily reported on Saturday that the Shanghai Petroleum and Natural Gas Exchange (SHPGX) revealed on October 20 that PetroChina International, a subsidiary of the China National Petroleum Corporation (CNPC), successfully acquired 1 million barrels of crude.Photo by engin akyurt on UnsplashAdvancing e-CNY use internationallyThis transaction is a response to the call by the Shanghai Municipal Party Committee and Municipal Government to incorporate the digital yuan into international trade, marking a noteworthy stride towards the broader adoption of the digital currency.The exact seller and price details for the deal were not disclosed. This historic crude oil transaction signals not only the increasing use of the digital yuan in global trade but also a noteworthy step in the movement towards de-dollarization. Reports from China Daily suggest that the use of the yuan in cross-border settlements experienced a remarkable 35% year-on-year increase in the first three quarters of 2023, reaching a total of $1.39 trillion.This milestone isn’t the first time the yuan has been utilized in the energy sector. In March, the yuan was first used in a liquefied natural gas (LNG) purchase on the SHPGX, as French TotalEnergies reached an agreement to sell LNG to the China National Offshore Oil Corporation (CNOOC). Recently, another LNG deal was executed between CNOOC and French Engie, although these transactions did not involve the digital yuan.In parallel developments, First Abu Dhabi Bank announced on October 19 that it had established an agreement on digital currency with the Bank of China during the third Belt and Road Forum for International Cooperation. China and the United Arab Emirates, including Abu Dhabi, are participants in the mBridge platform designed to facilitate cross-border transactions using CBDCs. The mBridge platform is expected to launch as a minimum viable product in the coming year.Furthering mass adoptionThe Chinese authorities are taking several distinct approaches in furthering mass adoption of the e-CNY. The Chinese subsidiaries of both Singapore’s DBS Bank and France’s BNP Paribas have recently partnered with the People’s Bank of China to enable their international clients operating in China to use the digital yuan.A long list of initiatives have been taken within mainland China by regional governing authorities to further the use of the CBDC. To further enable mass adoption at home, a new offline SIM card-based digital yuan wallet was developed and launched earlier this year.The successful use of the digital yuan in settling this oil deal represents a significant step forward in the internationalization of China’s currency and the growing influence of CBDCs on the global economic stage. As the world watches these developments unfold, the digital yuan continues to make strides towards becoming a crucial means of exchange in international trade and finance.

news
Loading