[新聞] Parity創建的多簽錢包嚴重漏洞遭駭

看板DigiCurrency (數位貨幣)作者ProtectChu56 (Eric P. Chu)時間7年前 (2017/07/20 14:23)推噓2(3推 1噓 4→)

留言8則, 5人參與討論串1/1

新聞來源連結： https://blog.parity.io/security-alert-high-2/ http://www.coindesk.com/30-million-ether-reported-stolen-parity-wallet-breach/ https://blog.zeppelin.solutions/on-the-parity-wallet-multisig-hack-405a8c12e8f7 新聞本文： Severity: Critical Product affected: Parity Wallet Affected implementations: Parity 1.5 or later Summary: A vulnerability in Parity Wallet's variant of the standard multi-sig contract has been found. Affected users: Any user with assets in a multi-sig wallet created in Parity Wallet prior to 19/07/17 23:14:56 CEST. Mitigation steps: Immediately move assets contained in the multi-sig wallet to a secure address. UPDATE (20/07/17, 00:26 CEST): Future multi-sig wallets created by versions of Parity are secure 評論：沒用過多簽錢包，以下有誤請指證。簡單來講，由Parity客戶端創造的多簽錢包，被發現嚴重漏洞可以轉移所有權根據新聞已有3個地址，15萬ETH遭駭。目前已有白帽團隊在抽取尚未被盜的漏洞合約當救火隊。因為多簽錢包原理是透過智能合約實現，而Parity這麼老牌的ETH客戶端創造的合約代碼卻被發現漏洞，可以說智能合約的安全性疑慮又再一次浮上水面。早上看新聞嚇了一大跳，我都用Parity管理ETH，雖然一般的account和智能合約無關，但信心也是會受影響呢。 ps.一堆人在嘲諷小神童沒被盜就不會hard fork XD ps.Aeternity項目被盜走82000個ETH，然後團隊說不影響開發。喂... -- ※ 發信站: 批踢踢實業坊(ptt.cc), 來自: 220.135.48.99 ※ 文章網址: https://www.ptt.cc/bbs/DigiCurrency/M.1500531793.A.363.html