| Title | $30 Million Below Parity: Ethereum Wallet Bug Fingered in Mass Heist | |
| Date | Thursday July 20 2017, @11:09AM | |
| Author | Fnord666 | |
| Topic | ||
| from the oops dept. | ||
Submitted via IRC for Bytram
A vulnerability in Parity's Ethereum wallet software has been exploited by thieves to rob victims on a massive scale.
A few hours ago, Parity told its users to move their ETH holdings from their in-browser wallets to more secure accounts immediately:
The warning came after three transactions appeared on Etherscan.io, in which accounts were drained of 150,000 coins worth just over US$30 million at the current price. It's understood a trivial programming blunder in Parity's code allowed crooks to hijack strangers' wallets at will.
Coindesk reports 377,000 more Ether were at risk of theft, but were drained into holding accounts by white hats. That gallant action was outlined by Kurt Knudsen on Parity's Gitter channel:
The White Hat Group were made aware of a vulnerability in a specific version of a commonly used multisig contract. This vulnerability was trivial to execute, so they took the necessary action to drain every vulnerable multisig they could find as quickly as possible. Thank you to the greater Ethereum Community that helped finding these vulnerable contracts. The White Hat account currently holding the rescued funds is [here].
| Links |
printed from SoylentNews, $30 Million Below Parity: Ethereum Wallet Bug Fingered in Mass Heist on 2024-10-12 15:09:08