Risk Warning: Beware of illegal fundraising in the name of 'virtual currency' and 'blockchain'. — Five departments including the Banking and Insurance Regulatory Commission
Information
Discover
Search
Login
简中
繁中
English
日本語
한국어
ภาษาไทย
Tiếng Việt
BTC
ETH
HTX
SOL
BNB
View Market
A Web3 security researcher received a $150,000 bounty for discovering a serious vulnerability in the Cosmos documentation
2024-10-29 12:50:52
Odaily News A Web3 security researcher has received a $150,000 bounty for reading the Cosmos network documentation and discovering a serious vulnerability that could cause the Evmos blockchain and all decentralized applications (DApps) built on it to stop functioning. In a blog post published on October 28, security researcher “jayjonah.eth” explained the concept of “module accounts” encountered in the Cosmos documentation as follows: “If these addresses (module accounts) receive funds outside of the expected rules of the state machine, invariants may be broken and may cause the network to stop.” Crash testing the Evmos blockchain according to Cosmos documentation The security researcher attempted to send funds to the module accounts in a test environment to test the theory and reported: “At this point, no more blocks are generated and the blockchain has completely stopped. This will destroy the Evmos blockchain and all DApps built on it.” He revealed that the Evmos team had fixed the vulnerability before the information was made public. (Cointelegraph)