Flaws in software used to run Ethereum paved the way for attackers to steal funds, but the network's update last year unknowingly closed the door to hackers. However, a cryptocurrency based on the old version of Ethereum is still vulnerable newscientist.com/article/237358…

It's been a pleasure to carry out a coordinated disclosure with you. Kudos to the ETC Cooperative team for their professionalism.

Our latest blog post unravels the intricate layers of this recent Go Ethereum flaw. From the seed recovery to the implications on security. Dive in, and remember - no code is safe from a weak PRNG! #Ethereum #SNaPAttack #Security
📰 coinspect.medium.com/snap-attack-cr…

Massimiliano Taverna Massimiliano Taverna and Kenneth G. Paterson kennyog have uncovered flaws in Ethereum networks (only Pow, pre Merge) that could trick a node into syncing with a malicious chain, enabling an attacker to craft an arbitrary Ethereum state for economic gain.

The duo…

.Massimiliano Taverna and I have been taking a deep dive on synchronisation in Ethereum PoW. TL;DR: it's broken. Thread follows; full details at: appliedcrypto.ethz.ch/content/dam/et… (1/14)