អ្នកស្រាវជ្រាវនិយាយថា ពួកគេបានលាតត្រដាងភាពងាយរងគ្រោះនៅក្នុង Privacy Centric Altcoin Project Secret (SCRT)

Whitehat researchers are exposing a vulnerability in an anonymity-focused altcoin project that’s had a volatile month price-wise.

អ្នកស្រាវជ្រាវសន្តិសុខ និយាយ they found the master decryption key for the whole Secret (អេសស៊ីធី) បណ្តាញ

“We evaluated TEE-based blockchain Secret Network to see if it was susceptible to AepicLeak, and ended up finding the master decryption key for the whole network.”

Secret is a privacy-centric network with end-to-end encryption and smart contracts called “Secret Contracts.”

ពន្យល់ the whitehat researchers on their website,

“The Secret Network has been vulnerable to the xAPIC and MMIO vulnerabilities that were publicly disclosed on August 9th, 2022. These vulnerabilities could be used to extract the consensus seed, a master decryption key for the private transactions on the Secret Network. Exposure of the consensus seed would enable the complete retroactive disclosure of all Secret-4 private transactions since the chain began. We have helped Secret Network to deploy mitigations, especially the Registration Freeze on October 5th, 2022.”

បណ្តាញសំងាត់ បាននិយាយថា they have resolved the vulnerability.

“Once verified, access keys that nodes use to register on the network were invalidated, effectively limiting the exposure of the vulnerability. This action occurred on October 4th.

SCRT Labs then worked directly with Intel and the researchers to design and build a solution that would prevent any vulnerable machines from rejoining the network. Those nodes were forcefully ejected from the network and their secrets deleted. The only way for those nodes to rejoin the network was to patch all known vulnerabilities, including xAPIC. This solution was successfully deployed in the November 2nd network upgrade.”

Secret’s native token SCRT is trading at $0.82 at time of writing.

កុំនឹក Beat - ជាវប្រចាំ ដើម្បីទទួលបានការដាស់តឿនអ៊ីមែលតាមអ៊ីមែលដែលផ្ញើដោយផ្ទាល់ទៅប្រអប់ទទួលរបស់អ្នក

ពិនិត្យ សកម្មភាពតម្លៃ

តាមយើងនៅលើ Twitter, Facebook និង Telegram

surf ឌឹដហូមលាយប្រចាំថ្ងៃ

ពិនិត្យចំណងជើងព័ត៌មានថ្មីៗ
 

ការបដិសេធ: មតិដែលបានសម្តែងនៅឌឹដហូមដស៍មិនមែនជាដំបូន្មានវិនិយោគទេ។ វិនិយោគិនគួរតែប្រឹងប្រែងដោយយកចិត្តទុកដាក់មុនពេលធ្វើការវិនិយោគដែលមានហានិភ័យខ្ពស់នៅក្នុង Bitcoin, cryptocurrency ឬទ្រព្យសម្បត្តិឌីជីថល។ សូមណែនាំថាការផ្ទេរនិងការធ្វើពាណិជ្ជកម្មរបស់អ្នកគឺជាហានិភ័យផ្ទាល់របស់អ្នកហើយការបាត់បង់ណាមួយដែលអ្នកអាចទទួលរងគឺជាទំនួលខុសត្រូវរបស់អ្នក។ Daily Hodl មិនបានផ្តល់អនុសាសន៍ឱ្យទិញឬលក់រូបិយប័ណ្ណគ្រីបថលឬទ្រព្យសម្បត្តិឌីជីថលទេហើយក៏មិនមែនជាអ្នកផ្តល់ប្រឹក្សាផ្នែកវិនិយោគផងដែរ។ សូមកត់សម្គាល់ថាឌឹដេវហូដចូលរួមក្នុងទីផ្សារសម្ព័ន្ធ។

Featured Image: Shutterstock/Phoenix_Renders/karnoff