Recently Discovered Bitcoin Vulnerability Is Even Worse Than Previously Thought

Siamak Masnavi

On Monday (17 September 2018), a vulnerability (known as CVE-2018-17144) in Bitcoin Core (Bitcoin's reference implementation), which had existed since version 0.14.0 of Bitcoin Core (released on 8 March 2017), was reported to developers working on Bitcoin Core as well as some projects supporting other cryptocurrencies that use this code (such as "Bitcoin ABC" and "Bitcoin Unlimited", the two leading full node implementations of the Bitcoin Cash protocol). This vulnerability was reported anonymously as a "Denial of Service" (DoS) bug. 

As covered by CryptoGlobe, Bitcoin Core developers came up with a fix for this bug the next day (18 September 2018), and released it as part of Bitcoin Core versions 0.16.3 and 0.17.0rc4. They urged anyone running vulnerable versions of Bitcoin Core (i.e. 0.14.0 up to and including 0.16.2) to upgrade to version 0.16.3 as soon as possible.

However, shortly after fixing the vulnerability, the Bitcoin Core developers discovered that the bug in the code causing the DoS problem was even more serious than previously thought because it also created a second problem: the same vulnerability could be exploited to inflate the Bitcoin supply (i.e. create new bitcoins, beyond the 21 million limit placed by Satoshi, which would have the effect of devaluing existing bitcoins). 

This meant that the code fix for the DoS bug would also take care of the supply inflation bug. But, probably in order not to cause panic, and to encourage quick upgrades, the developers decided to only disclose the DoS bug.

On September 20th, after a post in a public forum revealed the full impact of the vulnerability, the Bitcoin Core Developers decide to come clean and publish a full disclosure report for CVE-2018-17144.

Over half of the Bitcoin hashrate has upgraded to patched nodes (running version 0.16.3). The developers say that although they are "unaware of any attempts to exploit this vulnerability", it is still critical that "affected users upgrade and apply the latest patches to ensure no possibility of large reorganizations, mining of invalid blocks, or acceptance of invalid transactions occurs."

Featured Image Credit: Photo via "Crypto360" via Flickr.com; licensed via "CC BY 2.0"

Justin Sun Congratulates CZ on Binance Coin (BNB) Price Setting a New All-Time High

On Saturday (April 20), Justin Sun, the Founder and CEO of TRON Foundation congratulated Changpeng Zhao (aka "CZ"), the CEO of Binance, and the rest of the Binance team on the Binance Coin (BNB) price breaking its previous all-time high (ATH), which had been set in January 2018.

This was the tweet Justin sent out at 08:54 UTC on April 20:

CZ replied with this tweet:

According to CryptoCompare, at 07:05 (UTC), the BNB price reached the new ATH of $25.42, as can be seen in the 24-hour price chart shown below:

BNB - 24 Hour CC Chart - 20 Apr 2019.png

As CryptoGlobe reported on April 18, there have been quite a few catalysts behind the impressive rise in the price of BNB over the past three months, a few of which are listed below:

  • High successful initial exchange offerings since January 28 (BitTorrent, Fetch.AI, Celer Network) via Binance Launchpad.
  • Ever-expanding list of use cases for Binance Coin.
  • Regular quarterly BNB token burns (the 7th one was reported by Binance on April 16).
  • Successful mainnet launch of Binance Chain (on April 18), with the swap from ERC20 BNB tokens (on Ethereum) to BEP2 BNB tokens (on Binance Chain) expected to begin on April 23 at 00:00 (UTC).

With regard to future BNB price catalysts, since Binance seems to be betting its future on Binance Chain, the main ones are probably:

  • a successful token swap process (i.e. from ERC20 BNB to BEP2 BNB);
  • existing projects, such as decentralized social media platform Mithril, announcing their migration to Binance Chain; and
  • new projects deciding to adopt Binance Chain.

Finally, if you are a BNB token holder and you are worried about how to prepare for the mainnet token swap, the best advice comes from Binance:

 

Featured Image Courtesy of Binance