Friday, December 20, 2024
Home > Vulnerability

Lido DAO discovered a security vulnerability in Ethereum protocol 

Lido discovered a security vulnerability in Ethereum protocol, involving Node Operator InfStones. Liquid staking solution Lido has discovered a security vulnerability on its Ethereum protocol in the last 24 hours, specifically involving one of its Node Operators, InfStones. This issue, initially discovered a few months ago, was formally reported to InfStones

Read More

CertiK reports a critical security vulnerability in Solana’s Saga phone

Security platform CertiK has released a video demonstrating a critical vulnerability exploit on Solana’s flagship Saga phone.  Blockchain security platform CertiK claimed that the Solana Saga phone has a major vulnerability that could allow hackers to create a backdoor into its software and compromise the device. Certik posted a minute-long video

Read More

DeFi vulnerability leading to $6.7M exploit ‘not detected’ by auditors

Decentralized U.S. dollar stablecoin protocol Raft claims that despite multiple security audits, the firm still suffered a security exploit leading to the loss of $6.7 million last week.According to the project's Nov. 13 post-mortem report, a few days prior, a hacker borrowed 6,000 Coinbase-wrapped staked Ether (cbETH) on decentralized finance

Read More

Fireblocks, UniPass Wallet tackle Ethereum ERC-4337 account abstraction vulnerability

Cryptocurrency infrastructure firm Fireblocks has identified and assisted in tackling what it describes as the first account abstraction vulnerability within the Ethereum ecosystem.An announcement on Oct. 26 unpacked the discovery of an ERC-4337 account abstraction vulnerability in the smart contract wallet UniPass. The two firms worked together to address the

Read More

SocialFi app Stars Arena dispels ‘coordinated FUD’ after patching ‘noob’ vulnerability

The team behind the new friend.tech-inspired protocol Stars Arena has dismissed what it called “coordinated FUD” after patching an exploit that saw attackers escape with $2,000 from the Avalanche-based decentralized social media platform.In an Oct. 5 post on X (Twitter) the Stars Arena account said the exploit was fixed, adding

Read More

Quantstamp introduces tool to detect protocols’ flash loan attack vulnerability

Blockchain security provider Quantstamp has launched an automated service to detect flash loan attack vectors in smart contracts. The new service is being called Economic Exploit Analysis and is based on research done at the University of Toronto.  Economic Exploit Analysis will be available to protocols, whether they have been

Read More