Critical vulnerability in multityg Parity wallet, hackers withdrew $ 31 million in ethereum (updated)
Due to the vulnerability in the code of the smart contract multisig Parity wallet (1.5 and later), the hacker was able to withdraw ethereum coins in the equivalent of $ 31 million.
An explanation of the attack mechanism in a nutshell: the initWallet () function in the code, which allows to determine the owner of the wallet, turned out to be public, and any person could call it. After redefining the owner, all that remained was to transfer the money. A more complete explanation .
Hacker's wallet : etherscan.io/address/0xb3764761e297d6f121e79c32a65829cd1ddb4d32
(transfer of funds to other addresses has already begun)
')
A group of white hats was able to bring the ether to $ 76 million (and another $ 80 million in various tokens) from vulnerable wallets to protect funds
etherscan.io/address/0x1dba1131000664b884a1ba238464159892252d3a
Were stolen money from the wallets of the following ICO:
Almost 40% of the total investment portfolio of the satoshi.fund cryptocurrency fund is withdrawn into the white hats wallet - more than $ 7 million.
Multisig (multi-signature) wallet in theory was supposed to provide additional protection due to the requirement of several people to sign a transaction with the funds.
Parity blog vulnerability alert
Swarm City official statement confirming a loss of 44,055 ETH.
The DAO 2.0. Only hard fork ether to save money at this time is not expected. Vitalik Buterin's tweet in response to the question why the hard fork of the ethereum chain was made in the case of The DAO, and here it will not be:
UPD. A text transaction was sent from the white hat wallet
I am the author of https: //www.reddit.com/r/ethereum/comments/6obofq/a_mo .....
which explains how the refund will take place. In short, you just have to wait, the smart contract will be “renewed” and the money will be returned to its address. Transfer fee will be taken from the donations of The DAO Rescue
UPD2. "White Hats" returned 100% of the saved funds to the owners.
An explanation of the attack mechanism in a nutshell: the initWallet () function in the code, which allows to determine the owner of the wallet, turned out to be public, and any person could call it. After redefining the owner, all that remained was to transfer the money. A more complete explanation .
Hacker's wallet : etherscan.io/address/0xb3764761e297d6f121e79c32a65829cd1ddb4d32
(transfer of funds to other addresses has already begun)
')
A group of white hats was able to bring the ether to $ 76 million (and another $ 80 million in various tokens) from vulnerable wallets to protect funds
etherscan.io/address/0x1dba1131000664b884a1ba238464159892252d3a
Were stolen money from the wallets of the following ICO:
- Edgeless casino
- Swarm city
- æternity blockchain
Almost 40% of the total investment portfolio of the satoshi.fund cryptocurrency fund is withdrawn into the white hats wallet - more than $ 7 million.
Multisig (multi-signature) wallet in theory was supposed to provide additional protection due to the requirement of several people to sign a transaction with the funds.
Parity blog vulnerability alert
Swarm City official statement confirming a loss of 44,055 ETH.
invested in aeternity
lol
and they lost like 18million
f # $ @ morons ...
Get your money back;)
The DAO 2.0. Only hard fork ether to save money at this time is not expected. Vitalik Buterin's tweet in response to the question why the hard fork of the ethereum chain was made in the case of The DAO, and here it will not be:
- Less mature ecosystem at the time
- Then at stake was more% of the total ETN
- (most important) Hacker can simply transfer funds, so hard fork is impossible
UPD. A text transaction was sent from the white hat wallet
I am the author of https: //www.reddit.com/r/ethereum/comments/6obofq/a_mo .....
which explains how the refund will take place. In short, you just have to wait, the smart contract will be “renewed” and the money will be returned to its address. Transfer fee will be taken from the donations of The DAO Rescue
UPD2. "White Hats" returned 100% of the saved funds to the owners.
Source: https://habr.com/ru/post/333754/
All Articles