Techub News Search

Search "Merkle" has a total of2related results

Vitalik: Merkle trees cannot generate valid proofs for different data at the same position.Techub News, @VitalikButerin tweeted an explanation of a cryptographic theorem, stating that the only way to generate proofs for two different pieces of data at the same position in the same Merkle tree is to break the underlying hash function. He said that reviewers do not need to verify the specific implementation of the Merkle branch or the theorem proof process. This theorem clarifies the security foundation of blockchain data structures, emphasizing the critical role of hash function collision resistance in ensuring data immutability. This technical principle is an important theoretical support for blockchains such as Ethereum to ensure the integrity of transaction history and state data.Techub News05/12, 12:20 AM

快讯观点05/12, 12:20 AM

Vitalik: Merkle trees cannot generate valid proofs for different data at the same position.

Techub News, @VitalikButerin tweeted an explanation of a cryptographic theorem, stating that the only way to generate proofs for two different pieces of data at the same position in the same Merkle tree is to break the underlying hash function. He said that reviewers do not need to verify the specific implementation of the Merkle branch or the theorem proof process. This theorem clarifies the security foundation of blockchain data structures, emphasizing the critical role of hash function collision resistance in ensuring data immutability. This technical principle is an important theoretical support for blockchains such as Ethereum to ensure the integrity of transaction history and state data.

Hyperbridge discloses details of the attack incident, vulnerability stems from flaw in Merkle proof verification logicTechub News reports that blockchain interoperability protocol Hyperbridge has issued an update regarding the previous DOT attack incident, confirming losses of approximately $237,000. The root cause of the vulnerability lies in the lack of necessary input validation in the VerifyProof() function of the HandlerV1 contract. Due to the absence of verification for leaf_index leafCount, attackers were able to forge Merkle proofs and obtain administrator privileges for the bridged DOT token contract on Ethereum. The attacker subsequently illegally minted 1 billion bridged DOT tokens (approximately 2800 times the legitimate circulating supply) and cashed out on DEXs. Hyperbridge stated that it is currently working with security partners to trace the flow of funds, and cross-chain functionality will remain suspended until the investigation is complete.Techub News04/14, 09:23 AM

快讯安全事件04/14, 09:23 AM

Hyperbridge discloses details of the attack incident, vulnerability stems from flaw in Merkle proof verification logic

Techub News reports that blockchain interoperability protocol Hyperbridge has issued an update regarding the previous DOT attack incident, confirming losses of approximately $237,000. The root cause of the vulnerability lies in the lack of necessary input validation in the VerifyProof() function of the HandlerV1 contract. Due to the absence of verification for leaf_index leafCount, attackers were able to forge Merkle proofs and obtain administrator privileges for the bridged DOT token contract on Ethereum. The attacker subsequently illegally minted 1 billion bridged DOT tokens (approximately 2800 times the legitimate circulating supply) and cashed out on DEXs. Hyperbridge stated that it is currently working with security partners to trace the flow of funds, and cross-chain functionality will remain suspended until the investigation is complete.

Current search results fully loaded

Vitalik: Merkle trees cannot generate valid proofs for different data at the same position.

Hyperbridge discloses details of the attack incident, vulnerability stems from flaw in Merkle proof verification logic

相关发布者

相关发布者