发现41项问题，256 Foundation审计比特币矿机固件并揭示第三方风险

Odaily Planet Daily News: Bitcoin News posted on the X platform that the 256 Foundation has launched the 256 Red Team security project, conducting audits of ASIC miner firmware through reverse engineering, real-time traffic capture, and share-level reconciliation. The team stated that it has submitted 41 issue reports covering original Bitmain firmware as well as third-party firmware such as LuxOS, VNISH, and Braiins OS. Issues identified include unauthenticated factory APIs, paths granting root access, default credentials, built-in vendor SSH keys, and update programs that fail to verify installed content. After decompiling the Bitmain miner daemon and inspecting live connections, researchers stated that no evidence of hashrate withholding, remote kill switches, or covert beacons was found in the original Bitmain firmware; the associated risks are primarily concentrated in third-party "optimized" firmware. The researchers have submitted 3 responsible disclosures to VNISH, Luxor, and Braiins, granting each party a 30-day response window before public disclosure. MicroBT, Canaan, Auradine, Bitdeer, and ePIC will undergo subsequent audits.