#EVM Hacking

[teznews]

EVM से फर्जी वोट डाले जाते है.. BSP देश में अब कोई भी उपचुनाव नहीं लड़ेगी- मायावती

बसपा प्रमुख मायावती ने कहा पहले देश में बैलेट पेपर के जरिए चुनाव जीतने के लिए सत्ता का दुरुपयोग करके फर्जी वोट डाले जाते थे और अब तो EVM के जरिए भी ये कार्य किया जा रहा है, जो लोकतंत्र के लिए बहुत दुख और चिंता की बात है। देश में लोकसभा और राज्यों में विधानसभा चुनावों के साथ-साथ खासकर उपचुनावों में तो अब ये कार्य काफी खुलकर किया जा रहा है। लखनऊ -उपचुनाव नहीं लड़ने के फैसले का ऐलान करते हुए मायावती…

[rightnewshindi]

पेजर फट सकता है तो ईवीएम हैक क्यों नहीं हो सकती, जानें चुनाव आयोग ने क्या दिया जवाब

पेजर फट सकता है तो ईवीएम हैक क्यों नहीं हो सकती, जानें चुनाव आयोग ने क्या दिया जवाब #News #NewsUpdate #newsfeed #newsbreakapp

Delhi News: चुनाव आयोग ने महाराष्ट्र और झारखंड में विधानसभा चुनावों का ऐलान कर दिया है। मुख्य चुनाव आयुक्त राजीव कुमार ने दोनों राज्यों में विधानसभा चुनाव के लिए तारीखों की घोषणा करते हुए एक बार फिर ईवीएम पर उठाए जाने वाले सवालों को खारिज किया। उन्होंने इस दौरान हाल में उठाए गए उस सवाल का भी जवाब दिया जिसमें कहा गया कि पेजर फट सकता है तो ईवीएम क्यों नहीं हैक हो सकता है। मुख्य चुनाव आयुक्त ने कहा…

[healthtips9990]

Unveiling the Shadow: EVM Hacks and the Integrity of Indian Elections

Unveiling the Shadow: EVM Hacks and the Integrity of Indian Elections India, the world’s largest democracy, takes pride in its electoral process, which is considered one of the most robust and transparent in the world. However, in recent years, concerns have been raised about the integrity of Indian elections, particularly regarding the security of Electronic Voting Machines (EVMs). EVMs are…

[banglakhobor]

'২৪-এর ভোটে 'EVM হ্যাক'! আশঙ্কা মমতার

কলকাতা: ২০২৪-এর ভোটে ইভিএম হ্যাকের আশঙ্কা তৃণমূল নেত্রীর। ‘ইভিএম হ্যাক করার নানা পরিকল্পনা হচ্ছে, ‘ইন্ডিয়া’র পরবর্তী বৈঠকে আলোচনা হবে।’ আশঙ্কা প্রকাশ করেও আগামী লোকসভা ভোটে জয়ের ব্যাপারে আশাবাদী মমতা বন্দ্যোপাধ্যায়। তাঁর দাবি, ‘বিজেপিকে হারিয়ে ভোটে জিতবে ‘ইন্ডিয়া’। তৃণমূল নেত্রী মমতা বন্দ্যোপাধ্যায় বলেন,’ওরা ইলেকট্রনিক মেশিন হ্যাক করার নানা চেষ্টা করছে। আমাদের কাছেও এসেছে। কিছু প্রমাণ এসেছে, কিছু…

[eugenephosgene]

Btw guys aaj evm hack nahi hua 👀

[koronkowy]

Summary

🌐 Introduction to Blockchain and Ethereum:

Dean Pierce introduces foundational blockchain concepts, discussing Bitcoin, Ethereum, and decentralized finance (DeFi).

Covers smart contracts, the Ethereum Virtual Machine (EVM), and the shift towards Web 3 technologies for globally distributed applications.

🛠️ Key Concepts in Blockchain Technology:

Web 3 and Decentralized Applications:

Defined as web applications where data and logic are stored on distributed ledgers, enabling functionalities like decentralized finance.

Demonstrated with examples like static websites utilizing Ethereum as a backend.

Ethereum Smart Contracts:

Described as “Turing-complete” scripts allowing programmable transactions and complex business logic.

Highlighted the irreversibility of contracts once deployed, unless specific deletion functions are pre-coded.

Non-Fungible Tokens (NFTs):

Explained the rise of NFTs, such as CryptoKitties, as unique digital assets with metadata, enabling new ownership paradigms.

DeFi Tools and Protocols:

Discussed tools like Uniswap (decentralized exchange) and MakerDAO (stablecoin protocol), illustrating their impact on global finance.

🚨 Security Challenges and Exploits:

Reentrancy Bugs:

Illustrated with examples like the DAO hack, where attackers exploited callback functions to repeatedly withdraw funds.

Oracle Manipulation:

Highlighted vulnerabilities in price oracles that adversaries could exploit to manipulate DeFi protocols.

Zero-Knowledge Proofs:

Explored recent developments in privacy-enhancing technologies, such as Tornado Cash, and the challenges of implementing them securely.

🎯 Future Implications and Ethical Considerations:

Advocates for responsible innovation and robust testing to avoid vulnerabilities in smart contracts.

Emphasizes the potential of blockchain technology to transform traditional financial systems while cautioning against misuse.

[alya-smith]

Meme Coins on Ethereum vs BSC: Which Blockchain Is Better?

Meme coins have rapidly become a trending phenomenon in the crypto space, capturing the imagination of investors and communities worldwide. While Ethereum and Binance Smart Chain (BSC) remain two of the most popular blockchains for launching meme coins, both come with their distinct advantages and limitations. This blog compares Ethereum and BSC to help you determine which blockchain is better suited for meme coin development.

1. Introduction to Meme Coins

Cryptocurrencies that draw inspiration from online jokes, memes, or cultural trends are known as meme coins. Shiba Inu and Dogecoin are two of the most well-known situations. Despite their humorous origins, many meme coins have evolved into legitimate financial assets, offering high returns (and risks) to investors.

Two of the most popular blockchains for meme coin development are Ethereum and Binance Smart Chain (BSC). While Ethereum pioneered smart contracts and decentralized applications, BSC has gained popularity as a cheaper and faster alternative. Let’s explore both platforms.

2. Ethereum: The Pioneer Blockchain

Ethereum is often considered the gold standard for blockchain projects and decentralized finance (DeFi). It has been the launchpad for some of the most successful meme coins, such as Shiba Inu (SHIB).

Key Advantages of Ethereum for Meme Coins

Security and Reliability: Ethereum is the most battle-tested blockchain with a strong network of validators, ensuring high security.

Large Developer Community: Ethereum boasts an extensive developer ecosystem and tools like Solidity and ERC-20 standards, making it ideal for meme coin creation.

Liquidity: Ethereum-based meme coins often attract more liquidity and trading activity due to Ethereum's large user base.

Drawbacks of Ethereum

High Gas Fees: Ethereum's biggest limitation is its transaction cost. Gas fees can spike dramatically during network congestion, making micro-transactions costly.

Slower Transactions: Ethereum's block times are slower compared to BSC, leading to delays in transactions during peak usage.

3. Binance Smart Chain (BSC): The Quick and Inexpensive Substitute

Binance Smart Chain is a more economical and faster platform more suitable when compared to Ethereum. One of the reasons why meme coins such as BabyDoge and SafeMoon have been thriving are because of BSC.

Key Advantages of BSC for Meme Coins

Low Transaction Fees: Compared to Ethereum, BSC charges notably lower transaction fees, thus creating value for users and developers.

Faster Transactions: While it performs this in a more efficient manner by having block times of ~3 seconds compared to BSC.

Growing Popularity: BSC continues to grow its user and developer community because it is easily accessible and fully embedded in the Binance exchange.

Developer-Friendly: BSC has compatibility with Ethereum Virtual Machine (EVM), this means that developers can simply move Ethereum based projects to BSC.

Drawbacks of BSC

Centralization Concerns: Critics usually point out that BSC is less decentralized because governance and validator activities are centralized on Binance.

Security Risks: BSC has undergone a series of hacks and exploits attributing to the fast and less rival validator processes of the blockchain.

4. Ethereum vs BSC: A Quick Comparison

5. Factors to Consider When Choosing a Blockchain for Meme Coins

When deciding between Ethereum and BSC for your meme coin, consider the following:

Development Costs: In case your budget is constrained, then BSC offers you the most efficiency.

Security Needs: Ethereum is safer, it will be the right choice while the question of security is an issue.

Transaction Speed: Hence, for a better user experience and improved transaction velocity, BSC wins.

Community and Liquidity: While ethereum has a larger and more seasoned community, BSC is growing almost at the same pace.

Scalability: Each of the chains has its drawbacks, but Ethereum is slowly addressing the issue through the Ethereum 2.0 project.

6. Future Trends: Ethereum 2.0 vs BSC Evolution

With Ethereum transitioning to Ethereum 2.0 and BSC continuously improving its ecosystem, the competition between these blockchains will only intensify:

Ethereum 2.0 is expected to lower gas fees and improve the network as a whole through stake consensus known as Proof of Stake (PoS).

That’s why BSC focuses on diversifying service offerings, adding new features that will be more appealing to developers than Ethereum, and eliminating such vital concerns as excessive centralization.

They will probably persist: the second ecosystem will have its benefits that meme coin developers and users will appreciate.

7. Conclusion: Which Blockchain Is Better for Meme Coins?

The choice between Ethereum and BSC depends on your priorities:

Select Ethereum if you care about security, you need high liquidity and a wide developers community.

However if you prefer high speed, lower commissions and overall cost-friendly environment for meme coins choose BSC.

Each of these blockchains is home to the meme coin space, and many great projects have been developed within each of them. With the advancement of technology in the blockchain industry, the memes will certainly have more chances or room to reach out regardless of the blockchains.

Final Thought

Ethereum or BSC, it will be important to understand which of the two has the benefits that your meme coin needs to thrive in the crowded crypto space.

[ericvanderburg]

Former Indian IT MoS Rajeev Chandrashekhar gets into debate with Elon Musk on EVM hacking

http://i.securitythinkingcap.com/T8PWsq

[petnews2day]

Latest News, Live Updates Today June 16, 2024: Japanese climber dies, another missing during Pakistan mountain expedition

New Post has been published on https://petn.ws/pJtpT

Latest News, Live Updates Today June 16, 2024: Japanese climber dies, another missing during Pakistan mountain expedition

Follow all the updates here: June 16, 2024 8:26 PM IST India News Live Updates: ‘Chat bhi meri, pat bhi meri’: Jyotiraditya Scindia attacks Rahul Gandhi over EVM hack claims Union Minister Jyotiraditya Scindia said that Congress and Rahul Gandhi attack claim EVM fraud only when their party loses the polls. Read the full story […]

See full article at https://petn.ws/pJtpT #OtherNews

[marytum]

Ethereum L2 Solution Eclipse Completes $50 Million Funding Round

Another player has entered the crowded Ethereum Layer 2 (L2) arena.

On March 11, 2024, Ethereum L2 solution Eclipse, which utilizes the Solana Virtual Machine (SVM), announced the completion of a $50 million Series A funding round, led by Placeholder and Hack VC, bringing its total funding to $65 million.

What innovative features and highlights does it bring to the Ethereum L2 landscape? Let's summarize.

Eclipse: Standing on the Shoulders of Giants Eclipse combines the best parts of modular stacks:

Settlement: Ethereum — Eclipse settles on Ethereum (i.e., the built-in verification bridge will be located on Ethereum) and uses ETH as its gas token.

Execution: Solana Virtual Machine (SVM) — Eclipse runs a high-performance SVM as its execution environment.

Data availability: Celestia — Eclipse publishes its data to Celestia for scalable data availability (DA).

Proof: RISC Zero — Eclipse utilizes RISC Zero for ZK fraud proofs (without intermediate state serialization).

Ethereum Settlement Eclipse's mainnet's verification bridge on Ethereum will be directly built into Eclipse. Eclipse nodes will use this bridge to determine the "canonical chain." The bridge enforces correct sequencing for Eclipse. Eclipse nodes must also run Ethereum full nodes. The bridge validates all Eclipse transactions, preventing invalid state submissions. Additionally, it can survive and resist censorship even in certain failure scenarios, such as if the sequencer fails or starts censoring on L2, users can force-in their transactions via the bridge.

Eclipse recognizes the importance of Ethereum-native assets, so Eclipse will use ETH as the gas token. Eclipse's mainnet has no plans to have its own token.

Eclipse Chooses Solana VM A virtual machine is software that can run programs. Specifically, a virtual machine executes blockchain smart contracts. Why did Eclipse choose to use Solana VM?

Performance: Ethereum and other EVM blockchains operate with only one program running at any given point, known as "single-threaded." Solana VM is a highly parallel runtime, capable of running multiple programs simultaneously if there are multiple cores, significantly improving throughput.

Security: Certain languages (such as Rust) can more easily prevent many errors that Solidity cannot prevent. For example, Ethereum smart contracts are susceptible to so-called reentrancy attacks.

Community: Popular blockchains like Ethereum and Solana have fostered vibrant developer communities around EVM and SVM, respectively. This means better tools and developer support compared to newer virtual machines like Move VM or Fuel VM.

Ease of use: Languages like Solidity are easier to write code in, and not all bytecode supports compilation from Solidity.

In summary, Eclipse's mainnet chooses to run on Solana Virtual Machine (SVM). However, it can also support programs built for Ethereum Virtual Machine (EVM) using Neon EVM. In the future, Eclipse plans to add other bytecode formats based on dApp requirements. Existing tools for EVM (such as Truffle or Remix) or SVM (such as Solana CLI or Seahorse Lang) can be used.

Eclipse Utilizes Celestia for DA

The current bandwidth of Ethereum does not support the target throughput and fees of the Eclipse mainnet. Even after EIP-4844 (also known as "Proto-danksharding"), which provides approximately 0.375 MB of blob space per block (with a limit of about 0.75 MB per block), the situation remains unchanged. For basic compressed ERC-20 transfers (approximately 154 bytes per transaction), this translates to about 213 transactions per second (TPS) for all rollups. For compressed swaps (approximately 400 bytes per transaction), this equals about 82 TPS for all rollups.

In contrast, Celestia is set to launch 2 MB blocks later this year. Once enough Data Availability Sampling (DAS) light nodes come online and the network stabilizes, Blobspace is expected to increase to 8 MB shortly after launch. DAS light nodes serve two crucial functions: enabling users to self-verify Eclipse block data availability and contributing to the secure scaling of the entire network. Celestia's DAS light nodes have supported encrypted economic security attributes and highly scalable DA throughput since day one, making it the clear choice for today's Eclipse mainnet. Eclipse also intends to monitor Ethereum's progress in DA scaling post-EIP-4844 and will evaluate the possibility of migrating to Ethereum DA if it benefits users.

Fraud proofs use RISC Zero. While the Eclipse mainnet deploys optimistic rollup, it is concurrently developing zero-knowledge rollup. For optimistic rollup, the sequencer orders transactions and publishes the generated state root with bounties to the Ethereum layer 1. Validators can re-execute transactions, and if there are disagreements, validators can challenge the state root through settlement. If validators are correct, rewards are granted. Eclipse utilizes RISC Zero to create ZK fraud proofs without the need for intermediate state serialization.

[nigeriabitcoincommunity]

Berachain Testnet: A Guide To A Zero-cost Airdrop

Today, we bring you the most hyped-up airdrop guide: the Berachain Testnet! Berachain is a high-performance, EVM-compatible blockchain built on Proof-of-Liquidity consensus on the Cosmos SDK. Impressively, the project has raised over $42 million in funding from VCs such as Polychain Capital, Hack VC, and many others. In this post, you will be guided step by step on how to navigate the…

[trading-clear-view]

Modefi coin airdrop guide

Modefi’s main objective is developing Oracle blockchain solutions that empower true decentralization of data on-chain for integration via Smart Contracts. Modefi’s suite of Oracle solutions will provide higher level transparency, precise data, and a fully trustless ecosystem.

Oracle manipulation has been one of the biggest culprits when it comes to contracts and DeFi hacks. Protocols are exposing their users to potentially massive risks when relying on centralized or single data point oracles within their eco-systems.

Modefi’s Oracle Solution Suite will allow DeFi protocols to reduce the potential of putting their users’ hard earned capital at risk due to unforeseen circumstances.

Mode is an Ethereum layer-2 blockchain designed for hyper-growth. Mode is built using Optimism’s OP Stack which enables rapid application development and deployment of EVM-compatible applications. The goal of Mode is to empower developers and users to grow an ecosystem of world-class applications and be directly rewarded for their contribution to the ecosystem through referral and contract-secured revenue.

Mode is airdropping 550,000,000 MODE to early airdrop participants.

Sign up for the airdrop, connect your wallet and bridge tokens Mode to collect points. Also refer your friends to earn more points. Points will be converted to MODE at token launch.

[gazna]

Best Decentralized Applications (dApps) in 2024

Decentralized applications are becoming increasingly popular and are gradually becoming the preferred option for users due to their advanced features and security. These applications offer more advanced functionality compared to non-decentralized applications. Unlike traditional apps controlled by single entities, dApps run on distributed networks like blockchains, giving users more control over their data and assets. They are not beholden to the whims of a single company or subject to censorship or shutdowns. Also, the code governing dApps is often open-source and publicly verifiable, promoting transparency and trust. Users can see how the app works and verify its fairness and security.

One of the major advantages of dApps over others is that dApps can introduce new ownership models through tokens or NFTs, allowing users to own and monetize their contributions and interactions within the ecosystem. This feature attracts more users to select the dApps and developers to create more feature-rich dApps. Finding the best dApps is more complex and time-consuming, this blog will help you to sort out the best decentralized applications in 2024 so you can ensure the best dApps you need.

What is a dApp? A dApp or decentralized application is an application that runs on a peer-to-peer network, such as a blockchain, rather than on a single computer or server. This means dApps Offer more security and privacy which means Data is stored and processed across the network, making it more resistant to hacks and data breaches. Users often have more control over their data than with traditional apps. No company or government can shut down a dApp or censor its content because dApps give full control to the users and developers respectively.

Decentralization and Censorship Resistance Many dApps have open-source code, allowing anyone to inspect how they work and verify their fairness. This contrasts with traditional apps where users must trust the developer. However, selecting the right reliable network is important. For example, The CosVM network has a notable advantage in this only because its unique combination of EVM compatibility and Cosmos SDK sets it apart in the world of dApps. Developers can leverage the familiarity of the EVM with its vast ecosystem of tools and resources, while also enjoying the scalability and interoperability benefits of the Cosmos network. This hybrid approach creates a powerful platform for building dApps that can function across multiple chains, catering to a wider user base and fostering greater collaboration within the blockchain space.

Transparency in dApps like Cosvm is a major advantage for users who are increasingly wary of centralized platforms. Not only can they verify the fairness of the code, but they can also benefit from the enhanced security and efficiency that blockchain technology offers. Imagine making cross-chain transactions without relying on intermediaries, or using dApps on different blockchains with seamless interoperability. This opens up a vast potential for new applications and innovative solutions, allowing users to take greater control over their digital assets and data.

Security and Privacy Decentralized applications, commonly known as dApps, have gained popularity over the last few years due to their enhanced security and privacy features. Unlike traditional applications that store data on a single server, dApps operates on a decentralized network, which means that data is distributed across several nodes, making it less vulnerable to hacks and data breaches.

The security of dApps is further enhanced by using blockchain technology, which often employs advanced cryptography to secure data and transactions. In essence, blockchain technology creates a transparent and tamper-proof record of all transactions that take place on the network, thereby preventing any unauthorized access or tampering of data.

Another significant advantage of dApps is that users can interact with them while maintaining their anonymity. Unlike centralized applications that require users to provide personal information such as name, email, and phone number, dApps do not require any personal information. This feature enhances privacy and protects users from data breaches and identity theft. The network previously mentioned fulfills all of the specified criteria that were outlined earlier in the conversation.

Conclusion By the analysis of the top dApps of 2024, it can be ensured that the dApps are the future of apps. But there are also some challenges that the dApps want to overcome like the Technical Complexity while using and interacting with dApps, which can be more complex than traditional apps, requiring some understanding of blockchain technology and cryptocurrency wallets, The legal and regulatory landscape surrounding dApps is still evolving, creating uncertainty for developers and users and also Some dApps struggle with scalability and transaction speeds, while security vulnerabilities can present risks for users.

By ensuring both transparency and advanced functionality, projects like Cosvm represent a step forward in building trust and fostering wider adoption of blockchain technology. With its open-source code, interoperable dApps, and user-centric approach, Cosvm empowers developers and paves the way for a more secure, efficient, and inclusive future for decentralized applications.

So using the best dApps will ensure that users avoid most of these difficulties. However, it's important to acknowledge that "best" is subjective and depends on individual priorities and perspectives. There are other outstanding blockchain projects with unique strengths and areas of focus. Overall, these three blockchain projects are a combination of decentralization, accessibility, innovation, and community involvement that have significantly impacted the blockchain industry and solidified its position as one of the most influential and well-respected projects in the space.

[dicasdecripto]

Membros da comunidade de criptomoedas compartilharam seus sentimentos sobre a violação do Ledger Connect no dia seguinte ao hack.

Membros da comunidade Crypto publicaram sua resposta a uma vulnerabilidade do Ledger Connect Kit que afeta vários aplicativos descentralizados (DApps) no espaço Web3.

Em 14 de dezembro, um hacker usou o conector Ledger para atacar front-ends de vários DApps. A exploração comprometeu aplicativos conhecidos como SushiSwap, Phantom e Revoke.cash e roubou pelo menos US$ 484.000 em ativos digitais.

Ledger anunciou que resolveu o problema três horas após o ataque ter sido inicialmente relatado. O CEO da empresa, Pascal Gauthier, disse que este foi um incidente isolado e observou que estão trabalhando com as agências policiais relevantes para encontrar os hackers e levá-los à justiça.

Embora Ledger afirme que este é um incidente isolado, o conjunto de conhecimento zero da Consensys, Linea, alertou os usuários do Web3 que a vulnerabilidade poderia impactar todo o ecossistema da Máquina Virtual Ethereum (EVM).

Um dia após o incidente, os membros da comunidade acessaram o X (Twitter) para expressar seus sentimentos sobre o incidente do Ledger. Alguns estão aconselhando os seguidores a usar outras plataformas de carteira, enquanto outros estão pedindo que a Ledger abra o código-fonte de tudo.

15 de dezembro, Bitcoin BTC As ações caíram US$ 42.882. Os apoiadores de Brad Mills estão dizendo a seus seguidores X para usarem hardware Bitcoin puro construído por engenheiros Bitcoin focados em proteger o BTC. Mills instou os membros da comunidade a nunca usarem carteiras de hardware Ledger ou Trezor para fazer com que seus amigos ingressem no BTC.

Em 2020, ocorreu outro vazamento de informações de usuários no Ledger

#btc #bitcoin #bnb #ethereum #bitcoincash #eth #criptomoedas #crypto #cryptocurrency #cripto #criptomonedas #token #coin #criptoativos #cryptonews #cryptomarket #cryptoinvestor #noticiascriptomonedas #criptomoedasbrasil #criptonoticias #cryptoworld #cryptomarket #cryptotrading #cryptocurrencies #cryptolife #cryptotrader #defi #nft #web3 #blockchain #blockchaintechnology

[werindialive]

Nath blames faulty EVMs for crushing defeat in Assembly elections in Madhya Pradesh

Congress Party state president Kamal Nath has questioned the accuracy of the Electronic Voting Machines (EVMs) used in the November 17th polls. The allegations came days after Congress faced a crushing defeat in the state.

Recently, Nath chaired a review meeting of Congress candidates to find reasons for their poor performance in the recent assembly elections. He also claimed that more than 100 EVMs were found to be 99% charged at the time of counting. “How can the machines be charged 99% if they have been used for voting for 10 hours?” he asked.

He further alleged that these are the EVMs with most of the votes recorded for BJP, the party that won the elections in Madhya Pradesh. BJP secured 163 out of 230 assembly seats whereas Congress secured 66 seats and stood at the second number.

Nath stated that there were several instances where the party members did not get more than 50 votes from their own villages. “How is this possible? EVMs were tampered with to help the BJP,” he claimed.

Earlier, Senior Congress leader Digvijaya Singh also made claims about the accuracy of EVMs. “We pressed the (EVM) button and did not know where the vote had gone. Now when VVPAT comes, it is shown for 7 seconds. The basic thing is that the machine in which the chip is installed can be hacked,” he alleged.

As of now, there were no comments on the issue from the state’s chief electoral officer Anupam Rajan.

Bhartiya Janta Party however had responded saying that it was Congress making vague accusations to cover up for their defeat.

“To save themselves from any action, Kamal Nath and Digvijaya Singh are now accusing EVMs for the loss. They should accept that they failed to get a public mandate because of their anti-national thoughts and lies,”

For more political news India in Hindi, subscribe to our newsletter.

[cointahmin]

Altcoin dünyasında yeniden bir hack haberiyle karşınızdayız. Curve Finance üzerinde Vyper kullanan birkaç stable havuz 30 Temmuz’da hacklendi. Vyper’ın 0.2.15, 0.2.16 ve 0.3.0 sürümleri kusurlu reentrancy kilitlerine karşı savunmasızdır.Altcoin için tahlil sonuçları ne diyor?Güvenlik firması Ancilia tarafından etkilenen mukaveleler üzerinde yapılan bir tahlil var. Buna nazaran, 136 mukavelede reentrant muhafazalı Vyper 0.2.15, 98 kontratta Vyper 0.2.16 ve 226 mukavelede Vyper 0.3.0 kullanıldı.https://twitter.com/CurveFinance/status/1685693202722848768 İlk incelemeye nazaran, Vyper derleyicisinin kimi sürümleri, bir mukaveleyi kilitleyerek birden fazla fonksiyonun tıpkı anda yürütülmesini engelleyen reentrancy müdafaasını gerçek formda uygulamamaktadır. Reentrancy taarruzları potansiyel olarak bir kontrattaki tüm fonları tüketiyor. Reentrancy saldırısı, blockchain teknolojisi ve bilhassa Ethereum platformu üzerinde çalışan smart contractlerde meydana gelebilecek bir güvenlik açığıdır.Vyper nedir?Vyper, altcoin Ethereum Sanal Makinesini (EVM) hedefleyen mukavele odaklı, Pyhton odaklı bir programlama lisanıdır. Vyper’ın Python’a benzerliği, bu lisanı Python geliştiricilerinin Web3’e atlamaları için başlangıç noktalarından biri haline getirmektedir.  Saldırıda bir dizi merkezi olmayan finans projesi hedefteydi. Merkezi olmayan borsa Ellipsis açıklama yaptı. Buna nazaran BNB’li az sayıda stable havuzun eski bir Vyper derleyicisi kullanılarak hacklendiğini bildirdi.Altcoin Alchemix’in alETH-ETH havuzundan 13,6 milyon dolar çıktı. Ayrıyeten JPEGd’nin pETH-ETH havuzundan 11,4 milyon dolar ve Metronome’un sETH-ETH havuzundan 1,6 milyon dolar çıktı. Altcoin Curving Finance CEO’su Michael Egorov daha sonra bir Telegram kanalında açıklama yaptı. Buna nazaran 22 milyon doların üzerinde bedele sahip 32 milyon altcoin CRV takas havuzundan boşaltıldığını doğruladı.https://twitter.com/tonyke_bot/status/1685688149090213889 Kurtarma operasyonuBu istismar DeFi ekosisteminde paniğe yol açtı. Ayrıyeten havuzlar ortasında bir süreç dalgasına ve beyaz şapkalıların kurtarma operasyonuna neden oldu. Curve Finance’in hizmet tokeni altcoin Curve DAO’nun (CRV) haberlere reaksiyon olarak %5’in üzerinde düşmesi gündem oldu. cointahmin.com olarak daha evvel de belirttiğimiz üzere, CRV’nin likiditesi son aylarda kıymetli ölçüde düştü. Başka taraftan bu da onu şiddetli fiyat dalgalanmalarına karşı savunmasız hale getirdi. Curve Finance’e nazaran, crvUSD mukaveleleri ve onunla birlikte rastgele bir havuz akından etkilenmedi.Curve Finance, altcoin Ethereum içinde stablecoin’lerin merkezi olmayan değişimini (DEX) sağlayan bir DeFi protokolüdür. Buna nazaran protokol, kendi ekosistemi içinde bir dizi olayın amacı olmuştur. Yalnızca birkaç gün evvel, omnipool platformu Conic Finance, 3,26 milyon dolarlık altcoin ETH için hacklendi. Buna nazaran çalınan ölçünün neredeyse tamamı tek bir süreçle yeni bir Ethereum adresine gönderildi.