Cryptomustar
Monday, May 16, 2022
  • Home
  • Altcoin
  • Bitcoin
  • Ethereum
  • Litecoin
  • Cryptocurrency
  • Blockchain
  • Regulation
  • Market
  • Prices
  • ICO
No Result
View All Result
  • Home
  • Altcoin
  • Bitcoin
  • Ethereum
  • Litecoin
  • Cryptocurrency
  • Blockchain
  • Regulation
  • Market
  • Prices
  • ICO
No Result
View All Result
Cryptomustar
No Result
View All Result
Home Blockchain

Wasabi Wallet Patches Flaw That Could Have Thwarted Bitcoin Privacy Feature

by admin
September 3, 2020
in Blockchain
0
Wasabi Wallet Patches Flaw That Could Have Thwarted Bitcoin Privacy Feature
0
SHARES
9
VIEWS
Share on FacebookShare on Twitter


Wasabi Wallet users need to upgrade to the latest version if they want to continue using the CoinJoin feature to keep their Bitcoin transaction histories private.

That’s because those running older iterations of the wallet can no longer use this feature to mix their coins with users who have the newest version.

The Wasabi Wallet team hard-forked the wallet Thursday to address a vulnerability discovered by a team member at Trezor, a leading maker of hardware wallets. A hard fork is a code change that makes older versions of a software incompatible with newer ones.

The flaw’s discovery is another example of the open-source community’s camaraderie and cooperation. Developers are constantly tinkering to improve their peers’ software, and many vulnerabilities have been responsibly disclosed during these processes to patch flaws before they can be exploited by bad actors. (Sometimes, however, the disclosures by rival teams are less-than-cordial, as evidenced by the long-running tensions between Wasabi and rival Samourai Wallet.)

According to a Wasabi Wallet blog post, Trezor hardware wallet developer Ondřej Vejpustek responsibly disclosed the potential denial-of-service (DoS) attack to the Wasabi team on May 10 (a DoS attack entails an attacker spamming a network or protocol with the hopes of stymying its operations, hence “denial of service”).

“Vejpustek has been very cooperative since the beginning and left us total freedom on how to manage the disclosure, both in terms of time and communication. This demonstrates the importance of proper communication between security researchers and dev teams. This is how a responsible disclosure should be,” Wasabi Wallet contributor and marketing strategist Riccardo Masutti told CoinDesk, adding that Vejpustek was paid a bitcoin bounty for his efforts.

This hypothetical DoS attack, which Wasabi Wallet assumes has never been carried out, would have interfered with the wallet’s implementation of CoinJoin, a privacy protocol that allows users to mix their bitcoin with others’ to obscure the coins’ transaction histories.

Wasabi Wallet’s CoinJoin implementation requires each participant to take out as much as they put in. If, for instance, 10 participants join a mix for 0.1 BTC, then each user must send exactly that amount (plus a miner fee) and must receive that exact amount for the mix to be successful and to retain CoinJoin’s privacy protections. Mixing coins makes it harder for blockchain snoops and nosy parkers to pin bitcoin transactions to known addresses and their owners’ identities.

The disclosed DoS vulnerability would have halted the mixing process. The attacker would register bitcoin for a mix without that bitcoin being signed (verified) by the mix’s coordinator, while at the same time submitting a real, verified transaction to the mix.

The result would be an incongruity between the total value of inputs made to the CoinJoin and the value of expected outputs. As a result, the coordinator would unwittingly “build a transaction that can’t be valid, since the sum of all inputs is less than the sum of all outputs,” according to Vejpustek’s analysis.

If the attack were pulled off, it would foil the CoinJoin, though it would not have given the attacker the ability to steal any coins nor could they deanonymize any peers in the mix.

Wasabi Wallet patched the fix with the hard fork deployed Thursday. This upgrade was applied to v.1.1.12 of the wallet, which was released on Aug. 5.



Source link

RELATED POSTS

Digital Euro Could Come Out Within Four Years, ECB’s Panetta Says

Luna Foundation Guard Left With 313 Bitcoin After UST Crash

Tags: BitcoinFeatureFlawPatchesPrivacyThwartedWalletWasabi
ShareTweetShare

Related Posts

EU Commission Favors Ban on Large-Scale Stablecoins, Document Shows

Digital Euro Could Come Out Within Four Years, ECB’s Panetta Says

by admin
May 16, 2022
0

“The idea would be that, let’s say, four years from now, we will be ideally ready to issue the...

Luna Foundation Guard Acquires $1.5B in Bitcoin to Reinforce Stablecoin Reserves

Luna Foundation Guard Left With 313 Bitcoin After UST Crash

by admin
May 16, 2022
0

In one of the calamitous events in crypto memory, the $40 billion Terra ecosystem collapsed last week when the...

SEC Requests Comments on Concerns About Grayscale's Spot Bitcoin ETF Proposal

Grayscale Investments Lists First ETF in Europe

by admin
May 16, 2022
0

The ETF will track the Bloomberg Grayscale Future of Finance Index, which was launched in January to track the...

Nigeria’s SEC Affirms All Digital Assets Are Securities in New Rulebook

Nigeria’s SEC Affirms All Digital Assets Are Securities in New Rulebook

by admin
May 16, 2022
0

Please note that our privacy policy, terms of use, cookies, and do not sell my personal information has been...

Singapore VC Blockchain Founders Raises $75M for New Fund

Singapore’s Regulators Will Be Eyeing Local Crypto Companies After Terra Collapse; Bitcoin Rebounds

by admin
May 15, 2022
0

Bitcoin was recently trading above $31,000, up nearly 6% over the past 24 hours and more than 16% from...

POPULAR NEWS

4 Cryptocurrency that Blow Bitcoin Out of the Water

4 Cryptocurrency that Blow Bitcoin Out of the Water

September 25, 2020
Memoriae – Next Generation of Decentralized Cloud Storage Based on Blockchain

Memoriae – Next Generation of Decentralized Cloud Storage Based on Blockchain

July 1, 2021
Apollo CBDC: The CBDC Platform that can Power Economies

Apollo CBDC: The CBDC Platform that can Power Economies

October 6, 2020
Stratus: The Most Feature Rich Social Media Network

Stratus: The Most Feature Rich Social Media Network

September 9, 2020
Binance Coin (BNB) erupts above $270 as the whole Smart Chain ecosystem soars

Binance Coin (BNB) erupts above $270 as the whole Smart Chain ecosystem soars

February 19, 2021

EDITOR'S PICK

US Charges 3 With ‘Crypto-Jacking’ Scheme

US Charges 3 With ‘Crypto-Jacking’ Scheme

September 16, 2020
SEC lays the smackdown on alleged $12 million crypto scam ‘Profit Connect’

SEC lays the smackdown on alleged $12 million crypto scam ‘Profit Connect’

July 21, 2021
Marathon Will Offer $500M In Debt To Purchase Bitcoin Mining Equipment

Bitcoin Spot Trading Volume Begins To Climb, But Far From Peak 2021 Surge

November 16, 2021
DeFi Tokens PERP, DYDX Lead Crypto Market Higher, Bitcoin Nears $44K — CoinDesk

DeFi Tokens PERP, DYDX Lead Crypto Market Higher, Bitcoin Nears $44K — CoinDesk

September 27, 2021

About

We publish a comprehensive news feed covering all news relevant to the crypto user, covering main industry news, politics and regulation as well as consumer-level “news you can use” (practical stuff), including handy DIY tips, links to useful tools, unbiased reviews and opinions revolving around cryptocurrency. Simple logic and real-world examples are preferred before technical jargon and personal rants.

Follow us

Categories

  • Altcoin
  • Bitcoin
  • Blockchain
  • Cryptocurrency
  • Ethereum
  • Litecoin
  • Market
  • Press Release
  • Regulation
  • Uncategorized

Recent Posts

  • Bitcoin closes 7th red weekly candle for first time ever
  • Digital Euro Could Come Out Within Four Years, ECB’s Panetta Says
  • Why AQUANEE is expected to become the ceiling of the GameFi sector
  • Luna Foundation Guard Left With 313 Bitcoin After UST Crash
  • About Us
  • Privacy Policy
  • Contact Us

© 2020 cryptomustar.com

No Result
View All Result
  • Home
  • Altcoin
  • Bitcoin
  • Ethereum
  • Litecoin
  • Cryptocurrency
  • Blockchain
  • Regulation
  • Market
  • Prices
  • ICO

© 2020 cryptomustar.com

  • YAM v2YAM v2(YAMV2)$4.70-1.41%
  • yfBetayfBeta(YFBETA)$4.27-0.10%
  • IDLEIDLE(IDLE)$1.44-12.39%
  • WPP TokenWPP Token(WPP)$0.006826-3.49%
  • DSLA ProtocolDSLA Protocol(DSLA)$0.003681-6.85%
  • lympoLympo(LYM)$0.004392-4.43%
  • Werewolf CoinWerewolf Coin(WWC)$0.098082-2.58%
  • PolkaBridgePolkaBridge(PBR)$0.439784-6.92%
  • Dev ProtocolDev Protocol(DEV)$1.76-16.14%
  • EvidenZEvidenZ(BCDT)$0.122949-3.85%