March 15, 2019

White Hat hackers discover over 40 vulnerabilities in cryptocurrency projects.


According to a study conducted by The Next Web (TNW), over the past 30 days, White Hat hackers have sent a total of 43 vulnerability reports to 13 cryptocurrency companies.

The largest number of such messages was received by the Unikrn gaming blockchain platform, which reportedly contained 12 errors. It is followed by the cryptocurrency project of the Asian payment operator Omise - OmiseGo, which received six error messages. In third place - one of the potential competitors of Ethereum - EOS - with five reports of vulnerabilities.

Four errors were detected in the Tendermint modular platform. Tendermint is followed by Augur's decentralized market forecasting protocol and the Tezos smart contract platform - three errors each. Monero's cryptocurrency-oriented anonymity, the ICON project and MyEtherWallet, received two vulnerability reports each. Coinbase cryptocurrency exchange and Brave software using the blockchain technology Brave Software received one message each.

For their efforts, hackers received a total of $ 23,675, of which Tendermint contributed the largest amount - $ 8,500. EOS paid $ 5,500, and Unikrn - $ 1,375. According to TNW, the low amount of remuneration says that the errors were not critical. Earlier, the EOS project issued tens of thousands of dollars in rewards to White Hat hackers who discovered critical vulnerabilities on the platform.

Recall that this week a major manufacturer of hardware wallets Ledger announced vulnerabilities in the devices of its direct competitor Trezor. Subsequently, Trezor said that none of the vulnerabilities are critical for hardware wallets, as it cannot be used remotely - the described attacks require "physical access to the device, specialized equipment, time and technical knowledge."