-
CVE-2024-7884 – Fix memory leak in CallFuture (6th Sep 2024)
Preface: The world’s first web-speed, internet-scale public blockchain. At the virtual event launching Sodium on September 30, 2022, the DFINITY Foundation will launch the Network Nervous System, an open algorithmic governance system that controlling the Internet computer. The event will also showcase in-depth technical material on advanced cryptography, consensus protocols, and token economics. Background: Inter–canister…
-
Get closer look CVE-2024-39920: About “SnailLoad” issue (5-Jul-2024)
NVD Published Date: 07/03/2024 Preface: How is RTT measured in TCP? Measures the time from sending a packet to getting an acknowledgment packet from the target host. Background: A new technology standard called “RFC 9293” was released on August 18, 2022. Highlight: -Acknowledgment Number: 32 bits – If the ACK control bit is set, this…
-
CVE-2021-33403 – Lancer Token Ethereum ERC20 Token integer overflow (4-8-2021)
Preface: As of 4th Aug, 2021. There are 8106 unique holders of Lancer Token now on total amount 151 377 339,14 LNC. Background: One of the most significant Ethereum tokens is known as ERC-20. ERC-20 tokens are issued on the Ethereum network. As of October 2019, more than 200,000 ERC-20-compatible tokens exist on Ethereum’s main…
-
CVE-2021-3195 Improper Input Validation of Dumpwallet (19th Mar 2021)
Preface: In 2020, the public doubts that Bitcoin may die. The fact is, his performance is strong. Background: Dumpwallet capable to dump all wallet keys in a human-readable format to a server-side file. When you use dumpwallet, you should expect to see several thousand lines. If you have not imported any scripts, you should have…
-
Coinbase acquisition hits controversial!
Preface: Coinbase announced that it had acquired Neutrino, a blockchain intelligence startup on Feb 2019. This acquisition aim to analyzing data on public blockchains, Neutrino will help us prevent theft of funds from peoples’ accounts, investigate ransomware attacks, and identify bad actors. Market status: A tremendous worries by cryptocurrency users because the Neutrino (acquired company)…
-
Do we really need cryptocurrency or bitcoin?
Preface: A new survey out of China shows surging interest in the bitcoin and cryptocurrency, with many keen to invest in crypto in the future – said Forbes News. Synopsis: The behaviour of human relies on banknotes perhaps will be replaced by another style of method substitution soon. It is hard to say that bitcoin…
-
Ethereum carrier Solidity shield – Call abuse vulnerability (CVE-2018-14087)
An Integer Overflow is the condition that occurs when the result of an arithmetic operation, such as multiplication or addition, exceeds the maximum size of the integer type used to store it. Ethereum hits such vulnerability in frequent. The solidity programming language rescue Ethererum in the cryptocurrency world. But no prefect things in the world.…
-
Integer overflow weakness similar kill the Ethereum. But SafeMath to protect from overflows.
Integer overflow weakness similar kill the Ethereum – for more details, please see below (url): Jul 2018 – Integer overflow may killed Ethereum! But SafeMath to protect from overflows. c >= a causes integer overflow happen arithmetic: c=a+b-M (where M = 2**256 is the max unit256 plus one) If c >=a replace to get a…
-
Jul 2018 – Integer overflow may killed Ethereum!
Quote: Attacker passes int greater than max (positive) –> value wraps around to the min (negative!) Can cause unexpected program behavior, possible buffer overflow exploits The existing market cap of Ether (ETH) is more than Ripple and Litecoin, although it’s far behind Bitcoin (BTC). Ethereum contains potential market power. But integer overflow is the…
-
Vault 7 re-engineering by hacker. They are aim to steal the cryptocurrency.
As far as we know, Notepad++ has been updated to version 7.3.3. It aim to remediate a vulnerability on notepad. Such vulnerability exploit by law enforcement to do the survillance. The specifics annoucement released by WikiLweaks on 2017 so called Vault 7. Wanna Cry Ransomware technology re-emngineering of Microsoft SMB weakness and jepodizing the world.…