Thursday 3 November 2022

Blockchain Security issue


Blockchain security refers to the security of a blockchain platform or cryptocurrency. It includes the security of the network, the security of the software and hardware, and the security of the user.

There are a few key security issues to consider when it comes to blockchain technology. First, since blockchain is a decentralized technology, there is no central authority to oversee the network or protect users from fraud or malicious activity. This means that users must be vigilant about the security of their own data and transactions. Second, blockchain transactions are permanent and immutable, meaning that once a transaction is recorded on the blockchain, it cannot be changed or reversed. This could pose a problem if a user accidentally sending funds to the wrong address or if a user is the victim of fraud. Finally, blockchain technology is still in its infancy, which means that it is subject to a number of potential vulnerabilities. As the technology develops, these vulnerabilities are likely to be addressed.

A recent study by researchers at the University of Cagliari in Italy found that nearly 30 percent of all Ethereum smart contracts are vulnerable to hacking.


The study, which was published in the journal PLOS ONE, analyzed over 1 million smart contracts on the Ethereum network and found that about 28 percent of them had at least one security vulnerability.


The most common type of vulnerability was a “reentrancy” attack, which allows an attacker to siphon off funds from a contract by repeatedly calling a function that sends money to the attacker’s address.


Other types of vulnerabilities included “cross-function vulnerabilities” and “integer overflow/underflow” attacks.


The study’s authors concluded that “while blockchain technology has the potential to revolutionize many industries, its adoption is hindered by the widespread presence of security vulnerabilities in smart contracts.”


They recommended that developers “adopt best practices for smart contract development,” such as using static analysis tools to find vulnerabilities.


The study’s findings echo those of other research groups that have found that a significant portion of Ethereum smart contracts are vulnerable to attack, in 2018.


Blockchain security is a major concern for businesses and individuals who use or invest in blockchain technology. The decentralized nature of blockchain means that there is no central authority to manage or protect the network, which makes it vulnerable to attacks.


There have been several high-profile security breaches of blockchain-based systems, including the 2016 attack on the DAO, which resulted in the loss of over $50 million worth of Ether, and the 2018 Coincheck hack, which saw $534 million worth of NEM tokens stolen.


These incidents have highlighted the need for businesses and individuals to take steps to secure their blockchain-based systems and assets. There are a number of different approaches that can be taken to achieve this, including the use of private or permissioned blockchain networks, the implementation of security controls and protocols, and the use of cryptographic technologies such as digital signatures and hashing.


The security of blockchain technology is based on the fact that it is distributed and therefore not controlled by any one entity. However, there have been a number of security issues with blockchain technology, including 51% attacks and forks.

Tuesday 8 March 2022

The Dirty Pipe Vulnerability

The Dirty Pipe Vulnerability  : Allows Write Access with Root Privileges, a logical bug in the memory subsystem ( affects all Linux machines running kernel version since 5.8 and later versions, Serious threat to both OS and Android users.


  • https://dirtypipe.cm4all.com
  • https://haxx.in/files/dirtypipez.c


It allows writing to arbitrary read-only files, similar to DirtyCoW



By : Mr.L1nxr00t