BTC $84,621.27 +0.02%
ETH $2,680.84 -0.73%
BNB $768.82 -0.13%
XRP $1.49 +0.09%
SOL $119.26 +0.47%
TRX $0.3346 +0.13%
DOGE $0.0932 -0.13%
ADA $0.2472 +0.92%
BCH $314.01 +3.02%
LINK $13.90 -2.16%
HYPE $89.40 +1.97%
AAVE $180.55 +1.79%
SUI $1.18 +1.59%
XLM $0.2162 -0.66%
ZEC $1,319.71 -0.11%
AAPL $333.25 +0.77%
AMZN $251.59 +1.08%
GOOGL $343.04 +1.07%
MSFT $517.61 +0.52%
META $727.02 +0.01%
NVDA $234.54 +1.37%
TSLA $371.02 +4.47%
SNDK $1,720.00 -3.00%
INTC $118.89 -1.08%
SPCX $158.91 +6.77%
MU $1,067.18 -1.81%
AMD $634.84 +2.69%
BTC $84,621.27 +0.02%
ETH $2,680.84 -0.73%
BNB $768.82 -0.13%
XRP $1.49 +0.09%
SOL $119.26 +0.47%
TRX $0.3346 +0.13%
DOGE $0.0932 -0.13%
ADA $0.2472 +0.92%
BCH $314.01 +3.02%
LINK $13.90 -2.16%
HYPE $89.40 +1.97%
AAVE $180.55 +1.79%
SUI $1.18 +1.59%
XLM $0.2162 -0.66%
ZEC $1,319.71 -0.11%
AAPL $333.25 +0.77%
AMZN $251.59 +1.08%
GOOGL $343.04 +1.07%
MSFT $517.61 +0.52%
META $727.02 +0.01%
NVDA $234.54 +1.37%
TSLA $371.02 +4.47%
SNDK $1,720.00 -3.00%
INTC $118.89 -1.08%
SPCX $158.91 +6.77%
MU $1,067.18 -1.81%
AMD $634.84 +2.69%

Cosmos Hub 流動性質押模塊嚴重安全問題原因披露,其中包括朝鮮特工參與大部分代碼編寫

2024-10-16 11:34:24

ChainCatcher 消息,Cosmos 生態軟體開發公司 All in Bits 表示發現了 Cosmos Hub 的流動性質押模塊(LSM)存在嚴重安全問題的原因,包括大多數 LSM 代碼由朝鮮特工編寫;LSM 不是一個獨立的模塊,而是對現有質押、分配、罰沒模塊的一組修改,可能會影響所有質押的 ATOM;允許罰沒規避的漏洞仍然存在;19 個月代碼更改未經審計的;Zaki Manian 和 Iqlusion 的重大誤述;ICF、Stride Labs 以及非正式系統缺乏透明度。

All in Bits 建議立即修復 LSM 的主要質押漏洞;即時、全面的 LSM 審計;全面披露朝鮮特工參與的調查時間表;ICF 相關方黑名單;針對 ICF 資助項目的新審計和監督協議。

app_icon
ChainCatcher 與創新者共建Web3世界