More than $300m of cryptocurrency has been lost after a series of bugs in a popular digital wallet service led one curious developer to accidentally take control of and then lock up the funds, according to reports.
Unlike most cryptocurrency hacks, however, the money wasnt deliberately taken: it was effectively destroyed by accident. The lost money was in the form of Ether, the tradable currency that fuels the Ethereum distributed app platform, and was kept in digital multi-signature wallets built by a developer called Parity. These wallets require more than one user to enter their key before funds can be transferred.
On Tuesday Parity revealed that, while fixing a bug that let hackers steal $32m out of few multi-signature wallets, it had inadvertently left a second flaw in its systems that allowed one user to become the sole owner of every single multi-signature wallet.
A cryptocurrency is a form of digital asset, created through a canny combination of encryption and peer-to-peer networking.
Bitcoin, the first and biggest cryptocurrency, is part of a decentralised payment network. If you own a bitcoin, you control a secret digital key which you can use to prove to anyone on the network that a certain amount of bitcoin is yours.
If you spend that bitcoin, you tell the entire network that you’ve transferred ownership of it, and use the same key to prove that you’re telling the truth. Over time, the history of all those transactions becomes a lasting record of who owns what: that record is called the blockchain.
After bitcoin’s creation in 2009, a number of other cryptocurrencies sought to replicate its success but taking its free, public code and tweaking it for different purposes.
Some, such as Filecoin, have a very defined goal. It aims to produce a sort of decentralised file storage system: as well as simply telling the network that you have some Filecoins, you can tell the network to store some encrypted data and pay Filecoins to whoever stores it on their computer.
Others are more nebulous. Ethereum, using the Ether token, is now the second biggest cryptocurrency after bitcoin and essentially a cryptocurrency for making cryptocurrencies. Users can write “smart contracts”, which are effectively programs that can be run on the computer of any user of the network if they’re paid enough Ether.
Of course, to many, the purpose is secondary. The only really important thing is that the value of an Ether token increased 2,500% over 2017, meaning some are hoping to jump on the bandwagon and get rich. Bubble or boom? That’s the $28bn question.
The user, devops199, triggered the flaw apparently by accident. When they realised what they had done, they attempted to undo the damage by deleting the code which had transferred ownership of the funds. Rather than returning the money, however, that simply locked all the funds in those multisignature wallets permanently, with no way to access them.
This means that currently no funds can be moved out of the multi-sig wallets, Parity says in a security advisory.
Effectively, a user accidentally stole hundreds of wallets simultaneously, and then set them on fire in a panic while trying to give them back.
We are analysing the situation and will release an update with further details shortly, Parity told users.
Some are pushing for a hard fork of Ethereum, which would undo the damage by effectively asking 51% of the currencys users to agree to pretend that it had never happened in the first place. That would require a change to the code that controls ethereum, and then that change to be adopted by the majority of the user base. The risk is that some of the community refuses to accept the change, resulting in a split into two parallel groups.
Such an act isnt unheard of: another hack, two years ago, of an Ethereum app called the DAO resulted in $150m being stolen. The hard fork was successful then, but the money stolen represented a much larger portion of the entire Ethereum market than the $300m lost to Parity.
The lost $300m follows the discovery of bug in July that led to the theft of $32m in ether from just three multisignature wallets. A marathon coding and hacking effort was required to secure another $208m against theft. Patching that bug led to the flaw in Paritys system that devops199 triggered by accident.
Parity says that it is unable to confirm the actual amount lost, but that the $300m figure is purely speculative. The company also disputes that the currency is lost, arguing that frozen is more accurate. But if it is frozen, it appears that no-one has the ability to unfreeze the funds.
The Parity vulnerability was the result of an incorrectly coded smart contract used by the Parity wallet to store tokens on the Ethereum network, said Dominic Williams, founder of blockchain firm DFINITY. The vulnerability made it possible for anyone to freeze the tokens held by that smart contract, making them immovable. At this time, the only method we are aware of to unfreeze tokens held by the vulnerable smart contract would be to create a new hard fork Ethereum client that deploys a fix. This would require every full node on the Ethereum network to upgrade by the date of the hard fork to stay in sync, including all miners, wallets, exchanges, etc.
Ethereum has rapidly become the second most important cryptocurrency, after Bitcoin, with its price increasing more than 2,500% over the past year. One token of Ether is now worth a little over $285, up from $8 in January.
See the rest here:
‘$300m in cryptocurrency’ accidentally lost forever due to bug …
- Fidelity Said to Offer Cryptocurrency Trading Within a Few ... - May 10th, 2019
- Is This Cryptocurrency The Next Bitcoin? - forbes.com - April 28th, 2019
- Cryptocurrency Definition | Bankrate.com - April 26th, 2019
- Samsung is developing its own blockchain network, report claims - April 26th, 2019
- 2019s best cryptocurrency wallets | 70+ compared | finder.com - April 26th, 2019
- What is cryptocurrency? - Definition from WhatIs.com - April 25th, 2019
- A Beginner's Guide to Cryptocoin Mining: What You Need to ... - April 25th, 2019
- How Cryptocurrency Assets Are Becoming A New Battleground In ... - April 21st, 2019
- What is Cryptocurrency: Cryptocurrency Explained the Easy Way - April 13th, 2019
- How to trade cryptocurrency in the UK - finance.yahoo.com - April 8th, 2019
- Cryptocurrency Trading | TD Ameritrade - April 8th, 2019
- Cryptocurrency Prices, Charts, and Market Cap Data - UNHASHED - April 8th, 2019
- Blow To Bitcoin As World's Largest Cryptocurrency IPO Is Iced - April 2nd, 2019
- How and where do I report Cryptocurrency coin-to-coin ... - March 22nd, 2019
- Hundreds of Millions in Cryptocurrency Vanishes After ... - March 11th, 2019
- Fidelity's new cryptocurrency company is up and running ... - March 9th, 2019
- JPMorgan is creating its own cryptocurrency - CNN - March 6th, 2019
- Cryptocurrency Exchange Says It Can't Access $190 Million ... - February 5th, 2019
- What's the Best Cryptocurrency to Invest in Today? - January 9th, 2019
- Cryptocurrency Trading Easy tips to get started | AvaTrade - January 9th, 2019
- Thailand Issues 4 Cryptocurrency Licenses, Rejects 2 ... - January 9th, 2019
- NASDAQ, Fidelity Invest in New Cryptocurrency Exchange ... - January 9th, 2019
- Cryptocurrency News | Cryptocurrency News | Blockchain ... - January 9th, 2019
- Differences Between Cryptocurrency Coins and Tokens - January 9th, 2019
- Cryptocurrency Charts - January 8th, 2019
- What is cryptocurrency? - cointelegraph.com - January 4th, 2019
- Blockchain Will Survive A Cryptocurrency Apocalypse - January 1st, 2019
- Cryptocurrency - Simple English Wikipedia, the free encyclopedia - December 25th, 2018
- Is Cryptocurrency Dead for Good? | Investopedia - December 6th, 2018
- Cryptocurrency scammers dupe Singaporeans out of $78,000 in ... - December 6th, 2018
- Invest in Cryptocurrency With Spare Change - Black Enterprise - November 28th, 2018
- What is Mining Cryptocurrency? What you need to know... - November 26th, 2018
- Saudi Arabia Will Launch Its Own Cryptocurrency in 2019 ... - November 23rd, 2018
- Bitcoin and Other Cryptocurrency Prices Are Crashing Again ... - November 17th, 2018
- Homepage - Cryptocurrency Army - November 14th, 2018
- Cryptocurrency - Simple English Wikipedia, the free ... - November 14th, 2018
- How To Create Your Own Cryptocurrency - fastcompany.com - November 14th, 2018
- Cryptocurrency price plunge worse than bursting of dotcom ... - September 18th, 2018
- Iran, North Korea and Venezuela turning to cryptocurrency ... - September 12th, 2018
- SEC halts trading in two cryptocurrency products, citing ... - September 12th, 2018
- Cryptocurrency News, ICO Reviews & Blockchain Updates ... - September 9th, 2018
- Cryptocurrency "miners," utilities look for ways to get along ... - August 29th, 2018
- Cryptocurrency: Virtual money, real power, and the fight ... - August 28th, 2018
- Pornhub Now Accepts PumaPay Cryptocurrency - August 27th, 2018
- NK hackers target Mac users with trojan cryptocurrency app ... - August 27th, 2018
- Cryptocurrency: The unlucky investors who got in at the wrong ... - August 26th, 2018
- cryptocurrency coins Archives - The Industry Spread - August 26th, 2018
- cryptocurrency Archives - Page 6 of 6 - The Industry Spread - August 26th, 2018
- Cryptocurrency investment in SMSF - hallandwilcox.com.au - August 26th, 2018
- How To Choose The Best Cryptocurrency Wallet - Crypto News AU - August 26th, 2018
- Courses | Cryptocurrency Australia - August 26th, 2018
- What Every Investor Should Know Before Buying Cryptocurrency ... - August 26th, 2018
- The biggest cryptocurrency hack in the history of blockchain - August 26th, 2018
- After the Bitcoin Boom: Hard Lessons for Cryptocurrency ... - August 21st, 2018
- Cryptocurrency Rankings | CryptoSlate - August 14th, 2018
- Bitcoin price falls after SEC postpones key ETF decision - August 12th, 2018
- Brokers Cryptocurrency Deals Are Focus of SEC Review ... - August 7th, 2018
- 7 Cryptocurrency Predictions for the Rest of 2018 - August 7th, 2018
- Have a Cryptocurrency Company? Bermuda, Malta or Gibraltar ... - July 31st, 2018
- Bitcoin price live: Latest updates as cryptocurrency ... - July 22nd, 2018
- 2018 Bahamas Blockchain & Cryptocurrency Conference - July 16th, 2018
- Best Cryptocurrency Trading Platform 2018 | Top Crypto ... - July 13th, 2018
- Cryptocurrency: Advantages And Disadvantages Explained - July 12th, 2018
- ATB Coin - The fastest and most secure payment system - June 19th, 2018
- An Illustrated Glossary of Cryptocurrency Slang (Infographic) - June 19th, 2018
- Apollo All-in-One Cryptocurrency - June 3rd, 2018
- Cryptocurrency News, ICO Database, Coin Rankings and ... - May 25th, 2018
- CoinLib - Cryptocurrency prices now - May 21st, 2018
- Cryptocurrency Market Capitalizations | CoinMarketCap - May 4th, 2018
- CryptoCurrency Market , Coin Prices & Charts, Crypto ... - April 28th, 2018
- Nasdaq open to cryptocurrency exchange in future, says CEO - April 27th, 2018
- The 4 Top Cryptocurrency Mining Stocks -- The Motley Fool - April 27th, 2018
- One in five financial institutions consider cryptocurrency ... - April 27th, 2018
- New hacks siphon private cryptocurrency keys from ... - April 27th, 2018
- What Is Cryptocurrency? - dummies - April 21st, 2018
- Cryptocurrency Market Surges to $365 Billion, Start of a ... - April 21st, 2018
- BTCMANAGER | Bitcoin, Blockchain & Cryptocurrency News - April 16th, 2018
- How to keep your cryptocurrency safe - CNET - April 11th, 2018
- How do I report Cryptocurrency Mining income? - TurboTax ... - April 4th, 2018
- When do you report Cryptocurrency investments? - TurboTax ... - April 4th, 2018