CryptoNews: A zero-day vulnerability in Tron multisig accounts was discovered by a research team at dWallet Labs, which could have put at risk $500 million worth of assets.
A zero-day vulnerability inmultisig accounts was discovered by a research team at dWallet Labs, which could have put at risk $500 million worth of assets. The vulnerability allowed any signer to bypass the multisig security and approve transactions with a single signature, instead of requiring multiple signers as intended. dWallet Labs reported the issue to Tron in February and it was fixed within days.
Multisig accounts are designed to create joint accounts in crypto, where each signer holds their own keys and a certain threshold of signatures is needed to move funds. However, the dWallet Labs research team found that Tron's multisig verification process was flawed, as it checked the uniqueness of signatures instead of signers. This enabled signers to generate multiple valid signatures for the same message with the same private key, effectively "double voting" or signing twice.
dWallet Labs CEO Omer Sadika said that the solution was to verify the address instead of the number of signatures. According to the research team, no user assets were harmed by the vulnerability, as it was disclosed and fixed promptly. The vulnerability highlights the importance of security audits and testing for crypto projects, especially those involving large amounts of funds.I've been writing about Bitcoin since 2014.
United States Latest News, United States Headlines
Similar News:You can also read news stories similar to this one that we have collected from other news sources.
Tron vulnerability put $500 million at risk; now 'resolved'Tron had a critical vulnerability that put $500M at risk but it's now 'resolved,' according to the cybersecurity firm that found the bug.
Read more »
Security firm discovers $500M vulnerability in Tron multisig accountsResearchers found that Tron checks signatures rather than verifying the uniqueness of the signers. The oversight creates the possibility for signers to sign twice, leading to potential security issues.
Read more »
Critical Vulnerability in Tron's Multisig Mechanism Exposed $500M in Digital Assets: Report – Bitcoin NewsExperts explained that the vulnerability could have impacted more than $500 million worth of digital assets held in Tron multi-sig accounts.
Read more »
Stimulus check update: Direct payment worth $500 to be paid out to recipients in two daysRecipients of a guaranteed income program in Virginia only need to wait two more days before they receive their next payment worth $500.
Read more »
Stimulus check update: Applications for monthly payments worth $500 open in two daysA new guaranteed income program in Massachusetts that will give selected participants monthly payments of $500 will begin accepting applications in two days.
Read more »
The Tron (TRX) SWOT Analysis: A Look at the 2017-era Blockchain | HackerNoonTron (TRX), a layer one, EVM-compatible, 2017-era blockchain will get a SWOT. Composed of Strengths, Weaknesses, Opportunities, and Threats... - crypto cryptocurrency
Read more »