More than $300m of cryptocurrency has been lost after a series of bugs in a popular digital wallet service led one curious developer to accidentally take control of and then lock up the funds, according to reports.
Unlike most cryptocurrency hacks, however, the money wasnt deliberately taken: it was effectively destroyed by accident. The lost money was in the form of Ether, the tradable currency that fuels the Ethereum distributed app platform, and was kept in digital multi-signature wallets built by a developer called Parity. These wallets require more than one user to enter their key before funds can be transferred.
On Tuesday Parity revealed that, while fixing a bug that let hackers steal $32m out of few multi-signature wallets, it had inadvertently left a second flaw in its systems that allowed one user to become the sole owner of every single multi-signature wallet.
A cryptocurrency is a form of digital asset, created through a canny combination of encryption and peer-to-peer networking.
Bitcoin, the first and biggest cryptocurrency, is part of a decentralised payment network. If you own a bitcoin, you control a secret digital key which you can use to prove to anyone on the network that a certain amount of bitcoin is yours.
If you spend that bitcoin, you tell the entire network that you’ve transferred ownership of it, and use the same key to prove that you’re telling the truth. Over time, the history of all those transactions becomes a lasting record of who owns what: that record is called the blockchain.
After bitcoin’s creation in 2009, a number of other cryptocurrencies sought to replicate its success but taking its free, public code and tweaking it for different purposes.
Some, such as Filecoin, have a very defined goal. It aims to produce a sort of decentralised file storage system: as well as simply telling the network that you have some Filecoins, you can tell the network to store some encrypted data and pay Filecoins to whoever stores it on their computer.
Others are more nebulous. Ethereum, using the Ether token, is now the second biggest cryptocurrency after bitcoin and essentially a cryptocurrency for making cryptocurrencies. Users can write “smart contracts”, which are effectively programs that can be run on the computer of any user of the network if they’re paid enough Ether.
Of course, to many, the purpose is secondary. The only really important thing is that the value of an Ether token increased 2,500% over 2017, meaning some are hoping to jump on the bandwagon and get rich. Bubble or boom? That’s the $28bn question.
The user, devops199, triggered the flaw apparently by accident. When they realised what they had done, they attempted to undo the damage by deleting the code which had transferred ownership of the funds. Rather than returning the money, however, that simply locked all the funds in those multisignature wallets permanently, with no way to access them.
This means that currently no funds can be moved out of the multi-sig wallets, Parity says in a security advisory.
Effectively, a user accidentally stole hundreds of wallets simultaneously, and then set them on fire in a panic while trying to give them back.
We are analysing the situation and will release an update with further details shortly, Parity told users.
Some are pushing for a hard fork of Ethereum, which would undo the damage by effectively asking 51% of the currencys users to agree to pretend that it had never happened in the first place. That would require a change to the code that controls ethereum, and then that change to be adopted by the majority of the user base. The risk is that some of the community refuses to accept the change, resulting in a split into two parallel groups.
Such an act isnt unheard of: another hack, two years ago, of an Ethereum app called the DAO resulted in $150m being stolen. The hard fork was successful then, but the money stolen represented a much larger portion of the entire Ethereum market than the $300m lost to Parity.
The lost $300m follows the discovery of bug in July that led to the theft of $32m in ether from just three multisignature wallets. A marathon coding and hacking effort was required to secure another $208m against theft. Patching that bug led to the flaw in Paritys system that devops199 triggered by accident.
Parity says that it is unable to confirm the actual amount lost, but that the $300m figure is purely speculative. The company also disputes that the currency is lost, arguing that frozen is more accurate. But if it is frozen, it appears that no-one has the ability to unfreeze the funds.
The Parity vulnerability was the result of an incorrectly coded smart contract used by the Parity wallet to store tokens on the Ethereum network, said Dominic Williams, founder of blockchain firm DFINITY. The vulnerability made it possible for anyone to freeze the tokens held by that smart contract, making them immovable. At this time, the only method we are aware of to unfreeze tokens held by the vulnerable smart contract would be to create a new hard fork Ethereum client that deploys a fix. This would require every full node on the Ethereum network to upgrade by the date of the hard fork to stay in sync, including all miners, wallets, exchanges, etc.
Ethereum has rapidly become the second most important cryptocurrency, after Bitcoin, with its price increasing more than 2,500% over the past year. One token of Ether is now worth a little over $285, up from $8 in January.
See the rest here:
‘$300m in cryptocurrency’ accidentally lost forever due to bug …
- Cryptocurrencies News & Prices | Markets Insider - February 22nd, 2018
- I started cryptocurrency mining at the end of 2017 and was ... - February 20th, 2018
- Cryptocurrency News - Bitcoin, Ethereum, NEO, ICO startups - February 8th, 2018
- 7 Best Cryptocurrency Exchanges to Buy/Sell Any ... - February 8th, 2018
- Electroneum. The Mobile Cryptocurrency. - February 8th, 2018
- Cryptocurrencies trading | your guide in the world of trading ... - February 5th, 2018
- Robinhood trading app introduces cryptocurrency - money.cnn.com - January 28th, 2018
- Robinhood adds zero-fee cryptocurrency trading and tracking ... - January 28th, 2018
- Cryptocurrency Price Prediction, Comparison, Analysis - January 22nd, 2018
- South Korea's major cryptocurrency exchanges ... - reuters.com - January 13th, 2018
- Bitcoin-crazy South Korea may face a ban on cryptocurrency ... - January 13th, 2018
- Cryptocurrency - IC Markets - January 13th, 2018
- Kodak launches cryptocurrency, stock pops 125% - Jan. 9, 2018 - January 10th, 2018
- The cryptocurrency bubble is strangling innovation | TechCrunch - January 9th, 2018
- Coinschedule - The best cryptocurrency ICOs (Initial Coin ... - January 8th, 2018
- CCN: Bitcoin, Ethereum, ICO, Blockchain & Cryptocurrency News - January 7th, 2018
- Cryptocurrency boom: Why everyone is talking about ripple - January 4th, 2018
- Cryptocurrency stocks holding gains despite bitcoin pullback ... - December 29th, 2017
- MobileCoin: A New Cryptocurrency From Signal Creator Moxie ... - December 16th, 2017
- Cryptocurrency Definition | Investopedia - December 6th, 2017
- Amazon might want in on cryptocurrency - mashable.com - November 8th, 2017
- What is Cryptocurrency - earnlite.com - October 26th, 2017
- Cryptojacking Lets Strangers Mine Cryptocurrency With Your ... - October 21st, 2017
- Introduction to Cryptocurrency - CryptoCurrency Facts - October 14th, 2017
- Cryptocurrency Flash Crash Is Said to Draw Scrutiny From CFTC ... - October 7th, 2017
- Cryptocurrency Alternatives to Bitcoin - due.com - October 7th, 2017
- Learn BitCoin and master the world of cryptocurrency - October 7th, 2017
- Almost Every Cryptocurrency Is Tanking Right Now | Time.com - September 7th, 2017
- Cryptocurrency boom stalls as regulators focus on ICOs ... - September 7th, 2017
- Why Marketers Need to Pay Attention to Cryptocurrency -- Now - Entrepreneur - September 7th, 2017
- Opinion: That Floyd Mayweather-backed cryptocurrency is another sign of a bursting bubble - MarketWatch - September 7th, 2017
- Putin-Backed Political Group Advances 'Green' Cryptocurrency Concept - CoinDesk - September 7th, 2017
- First He Beat Up His Girlfriend, Now He's Selling Cryptocurrency With Paris Hilton - Daily Beast - September 7th, 2017
- Cryptocurrencies have already recovered from last weekend's crash ... - TechCrunch - September 7th, 2017
- Venezuela Cracks Down On Cryptocurrency Mining - CryptoCoinsNews - September 4th, 2017
- Mobius Foresees Cryptocurrency Crackdown Sparking a Rush to Gold - Bloomberg - September 4th, 2017
- The Aggregate Cryptocurrency Market Cap Is Up 810% Year to Date - Motley Fool - September 4th, 2017
- How to make upwards of $1,000 a month by mining cryptocurrency - Mashable - September 2nd, 2017
- Chinese Officials Contemplate Suspending Cryptocurrency ICOs - The Merkle - September 2nd, 2017
- Cryptocurrency Investment Course 2017: Fund your ... - Udemy - September 2nd, 2017
- Six Banking Giants Just Decided to Partner to Create a New Cryptocurrency - Futurism - September 2nd, 2017
- 7 Cryptocurrency Predictions From the Experts - fortune.com - September 2nd, 2017
- Russia Could Pass Cryptocurrency Law This Year, Senior Lawmaker Says - CoinDesk - September 2nd, 2017
- AxionV: AI Cryptocurrency Fund Leading the Way in ICO Security - HuffPost - September 2nd, 2017
- PayThink Custom tokens are the future of cryptocurrency - PaymentsSource - September 1st, 2017
- Litecoin Prices Surge Above $70 as Crypto Market Tops $175 Billion - CoinDesk - September 1st, 2017
- Dharma wants to let anyone borrow a small amount of cryptocurrency - TechCrunch - September 1st, 2017
- PR: Archain Is Building an Uncensorable Internet Archive Inside a Cryptocurrency - Bitcoin News (press release) - August 31st, 2017
- Cryptocurrency Market Just Reached Total Value of $160 Billion - Futurism - August 31st, 2017
- Another banking trojan is trying to loot your cryptocurrency wallets - The Register - August 31st, 2017
- Cointal Revolutionizes P2P Cryptocurrency Trading - CryptoCoinsNews - August 31st, 2017
- $160 Billion: Cryptocurrency Market Sets New All-Time High ... - CoinDesk - August 30th, 2017
- Central Banks Can't Ignore the Cryptocurrency Boom - Bloomberg - August 30th, 2017
- Whoppercoin is a cryptocurrency you can eat or trade - The Verge - August 30th, 2017
- Learn about cryptocurrency mining with this interactive blockchain demo - TNW - August 30th, 2017
- Good Morning, Cryptocurrency! Vietnam To Create Legal Framework For Digital Assets - ETHNews - August 26th, 2017
- Cryptocurrency mining may void warranty on Inno3D GPUs - PC Gamer - August 26th, 2017
- Russian Deputy PM Says He Supports a State-Backed Cryptocurrency - CoinDesk - August 25th, 2017
- How to Learn About Cryptocurrency In The Bitcoin Era - Daily Beast - August 25th, 2017
- Bernanke to Give Keynote Speech at October Cryptocurrency Event - Bloomberg - August 25th, 2017
- Estonia wants to launch its own government-backed cryptocurrency called 'estcoin' - CNBC - August 25th, 2017
- Aimwise to Create Standards for Cryptocurrency Crowdsales - newsBTC - August 25th, 2017
- A Mysterious New Cryptocurrency Is Surging After Being ... - August 25th, 2017
- Cryptocurrency Cyber Crime Has Cost Victims Millions This Year - Bloomberg - August 25th, 2017
- This European country may hold an ICO and issue its own ... - TechCrunch - August 23rd, 2017
- Bitcoin Skeptic Mark Cuban to Invest in Cryptocurrency ... - August 23rd, 2017
- $150 Billion: Total Cryptocurrency Market Cap Hits New All-Time ... - CoinDesk - August 23rd, 2017
- Cryptocurrency Market cap Sets a New All-time High of Over $150bn - newsBTC - August 23rd, 2017
- South Africa's Central Bank: It's 'Too Risky' to Launch a Cryptocurrency - CoinDesk - August 23rd, 2017
- Mark Cuban backs new $20 million cryptocurrency venture fund - CNBC - August 22nd, 2017
- VR World Decentraland Raises $25.5 Million In Cryptocurrency - UploadVR - August 21st, 2017
- AMD Releases Beta Graphics Driver for Better Cryptocurrency Mining - Bitcoin Magazine - August 21st, 2017
- Philippines Central Bank Grants First Cryptocurrency Exchange Licenses - CoinDesk - August 21st, 2017
- Media A-Listers Back eSports Betting Firm As It Dives Into Cryptocurrencies - Deadline - August 20th, 2017
- 10 Reasons Why Central Banks Will Miss the Cryptocurrency Renaissance - CoinDesk - August 20th, 2017
- Australia Weighs Jail Time for Cryptocurrency Exchange Offenders - CoinDesk - August 20th, 2017
- Cryptocurrency wallet Exodus adds OmiseGo in latest update - CryptoNinjas - August 20th, 2017
- SEC Statements Spur ShapeShift to Review Cryptocurrency Listings - CoinDesk - August 20th, 2017
- Australian money cops gain powers to regulate cryptocurrency - The Register - August 18th, 2017
- Could Cryptocurrencies Replace Cash? - Investopedia - August 18th, 2017