Security Researcher Discloses CometBFT 0-day Vulnerability; Direct Asset Theft Not Possible

ATOM0.22%

Gate News message, April 21 — Security researcher Doyeon Park disclosed a critical 0-day vulnerability (CVSS 7.1) in CometBFT, the consensus layer of Cosmos, according to a post on X. The flaw could cause network nodes to stall during block synchronization, disrupting system operations, but cannot directly result in asset theft.

Park stated he attempted to follow coordinated vulnerability disclosure (CVD) procedures; however, due to the project’s lack of cooperation and “irresponsible decisions,” he chose to publicly release vulnerability details. Park emphasized that any resulting security risks will be the responsibility of the affected projects.

Disclaimer: The information on this page may come from third parties and does not represent the views or opinions of Gate. The content displayed on this page is for reference only and does not constitute any financial, investment, or legal advice. Gate does not guarantee the accuracy or completeness of the information and shall not be liable for any losses arising from the use of this information. Virtual asset investments carry high risks and are subject to significant price volatility. You may lose all of your invested principal. Please fully understand the relevant risks and make prudent decisions based on your own financial situation and risk tolerance. For details, please refer to Disclaimer.

Related Articles

Fake Police Impersonators Force French Couple to Transfer Nearly $1M in Bitcoin

Criminals posing as police in France coerced a couple to transfer nearly $1M in Bitcoin, using fear and authority in a 'wrench attack' that exploits people, not wallets. Abstract: Attackers used impersonation and psychological coercion to force a Bitcoin transfer, illustrating a wrench attack that targets human vulnerability rather than technical wallet exploits.

GateNews2h ago

Armed Robbery Attempt on French Crypto Professional Thwarted; Suspect Arrested

Gate News message, April 21 — A 40-year-old crypto industry professional in Saint-Jean-de-Védas, near Montpellier, France, thwarted an armed robbery attempt at his home. The suspect, disguised as a delivery person, entered the residence and demanded the victim hand over cryptocurrency wallet

GateNews3h ago

KelpDAO $290M Exploit Attributed to North Korea's Lazarus Group

LayerZero attributed a $290 million exploit of KelpDAO's cross-chain rsETH configuration to North Korea's Lazarus Group on April 18, describing the attacker as a "highly-sophisticated state actor." According to LayerZero, the incident was limited to KelpDAO's rsETH setup and did not spread to other

CryptoFrontier3h ago

Fraudsters Posing as Iranian Authorities Demand Bitcoin, USDT Payments from Ships at Strait of Hormuz

Gate News message, April 21 — Scammers impersonating Iranian authorities have targeted shipping companies with vessels stranded west of the Strait of Hormuz, demanding Bitcoin and Tether (USDT) payments in exchange for safe passage, according to maritime risk firm Marisks. The fraudsters

GateNews4h ago

BIS Warns Dollar-Denominated Stablecoins Like USDT and USDC Pose Financial Stability Risk

Gate News message, April 21 — The Bank for International Payments (BIS) has reiterated concerns about stablecoins, with Managing Director Pablo Hernandez de Cos warning that dollar-denominated stablecoins such as USDT and USDC are fundamentally riskier than commonly perceived. Cos stated that

GateNews5h ago
Comment
0/400
No comments