175.0K @0xAA_Science Attended the Binance Junior Party in the evening; although everyone was giving each other tokens on-chain, offline they were all very nice, haha.
I also talked a lot with friends from the Binance Wallet team, looking forward to the upcoming features!
As a benefit of being among the first batch of “Binance Juniors”, I received a paper copy of “Binance Life” signed by the senior sister, thanks to @AncoBinance's invitation! https://t.co/2ocvGL7xHV
18
7
1.6K
18.3K @0x_Abdul All chains running CometBFT should look into this unpatched 0-day vulnerability instead of relying on Cosmos
Some non-Cosmos chains I know of that use CometBFT: BNB Chain, Polygon (POS), Sei, Thorchain, etc
This vulnerability can potentially lead to nodes getting DDoSed, or worse the chain halting if validators start going offline
221 @p6rkdoye0n I’m disclosing a 0-day vulnerability in the Cosmos consensus layer (CometBFT).
This is a CVSS 7.1 (High) severity issue that can cause nodes in the Cosmos ecosystem—which secures over $8B+ in assets—to stall during the block synchronization phase. However, direct asset theft is not possible using this vulnerability.
I made every effort to follow Coordinated Vulnerability Disclosure (CVD) for the safety of the ecosystem; however, due to the vendor’s lack of cooperation and irresponsible decisions, I have decided to proceed with disclosure.
This action is taken in accordance with the vendor’s final decision. All resulting security risks are solely the responsibility of the vendor, and I will therefore disclose both the vendor’s irresponsible handling and the detailed vulnerability information in this thread.
5
0
1.0K
43.6K @nicrypto Crypto Bridge hacks in the past 5 years:
- Poly Network, $611m
- Ronin, $624m
- Wormhole, $326m
- Nomad, $190m
- BNB Bridge, $586m
And yet, after this and 2 weeks after the Drift hack, the KelpDAO team were still happy using a SINGLE verifier system?
Clown show.
26
3
940
