White Hat Hackers Save TRON From $500M Vulnerability

Do repost and rate:

White hat hackers protected the TRON blockchain from a potential vulnerability that could have impacted $500 million in a multi-sig.

In the realm of Web3, bad actors are constantly seeking to exploit vulnerabilities and steal funds. But white hat hackers stepped in as the heroes by actively identifying and reporting vulnerabilities to the respective teams, effectively thwarting any potential exploits.

White Hat Hackers Received Bounty From TRON

According to dWallet Labs’ cybersecurity team, TRON’s multi-sig had a critical vulnerability that put $500 million at risk.

After discovering the vulnerability, the team reported it to TRON on Feb. 19 Finally, TRON was able to fix the vulnerability and offered the white hat hackers a bounty in reward.

How Does Multi-Sig Work?

In layman’s terms, a multi-sig account requires consent in the form of blockchain signatures from multiple wallets. Generally, there are two elements: weight and threshold.

Weight is the power of a particular . And the threshold is the minimum weight required for a transaction to carry forward. 

If the threshold is three, then three different wallets with a weight of one can authorize the transaction. Or, a with the weight of one and another with the weight of two can authorize the transaction together.

What Was the Problem?

The vulnerability allowed a “double-vote” from any signer, irrespective of their weight. Due to double-voting, malicious signers can achieve the threshold and bypass the security of Tron’s multi-sig.

dWallet Labs explains:

“An attacker can perform transactions in every multisig wallet for which he has permission (with any weight), regardless of the threshold.”

Crypto and decentralized finance () are becoming frequent targets for hacks. But such actions from cybersecurity experts help make the crypto infrastructure more secure.

As a matter of fact, White hat hackers over $20 billion in 2022 by proactively reporting the vulnerabilities in crypto projects.

Got something to say about Tron’s vulnerability or anything else? Write to us or join the discussion on our Telegram channel. You can also catch us on FacebookTwitter

Regulation and Society adoption

Ждем новостей

Нет новых страниц

Следующая новость