Bitcoin dev finds potentially crippling security flaw in Bitcoin Cash


One other huge safety vulnerability in a significant cryptocurrency has been found, simply sitting there, ready to be exploited – and this time round it’s Bitcoin Money.

Its blockchain was open to being jammed with a poisonous block that may have brought about full consensus failure. The unhealthy block would have cut up the cryptocurrency in two, halting transactions and crippling its utility and value.

Cory Fields, who found the bug, mirrored on its influence. Fields is a Bitcoin Core developer for the Digital Forex Initiative on the MIT Media Lab. He detailed your complete course of, from discovery to nameless submission, in a weblog titled Responsible disclosure in the era of cryptocurrencies.

“Working by means of this bug, which definitely had the potential for disaster, has reaffirmed my perception that the specter of software program bugs is severely underestimated within the cryptocurrency world,” writes Fields. ”[This] is a real-world instance of how a lot work continues to be required to achieve the delicate stage of engineering that cryptocurrencies require, and as a wake-up name to firms who haven’t adequately ready for the sort of situation.”

Cryptocurrency engineer Eric Wall took to Twitter, lambasting the challenge for having missed such a obtrusive vulnerability. Though it has since been patched, it does name the potential actuality of a market dominated by Bitcoin Money BCH into query. In any case, it needs to be the real Bitcoin.



If something, 2018 is being outlined by its security vulnerabilities. Cryptocurrency is software program – positive, there’s going to be bugs. Certainly, it’s a reality of life – however disclosures, as soon as doubtlessly earth-shattering, at the moment are having much less influence. They’re a dime a dozen and we have now simply accepted that no blockchain actually works because it ought to.

EOS, specifically, has discovered its finest to draw hackers with honey, numerous honey. Their bug bounty has distributed $417,000 since Might – two-thirds of all HackerOne bounties claimed this yr.

So, till Elon Musk creates a blockchain programming AI that fixes up all of the code, we’re caught with a system constructed on belief. We do know that hackers are exploiting unhealthy code usually, however we belief that almost all would moderately repair a challenge than destroy it – nevertheless naive it might be.

Printed August 10, 2018 — 14:49 UTC

Leave a Reply