• About Us
  • Privacy Policy
  • Contact Us
  • Home
  • Bitcoin
  • Ethereum
  • Cryptocurrency
    • Altcoin
    • Litecoin
  • Blockchain
  • Regulation
  • Market
  • Prices
  • ICO
No Result
View All Result
Cryptounfold
No Result
View All Result
Home Blockchain

Wasabi Wallet Patches Flaw That Could Have Thwarted Bitcoin Privacy Feature

by admin
September 3, 2020
in Blockchain
0
0
SHARES
9
VIEWS
Share on FacebookShare on Twitter


Related Posts

First Mover Asia: Pine Wants to Test the Liquidity of the NFT Market; Cryptos Are Well-Red

Bitcoin, Major Cryptos Slide as Markets Digest Hawkish Powell Remarks

CFTC Chair Indicates Agency Will Increase Crypto Enforcement: Report

Coinbase Forms Crypto Think Tank, Names Hermine Wong as Director

Wasabi Wallet users need to upgrade to the latest version if they want to continue using the CoinJoin feature to keep their Bitcoin transaction histories private.

That’s because those running older iterations of the wallet can no longer use this feature to mix their coins with users who have the newest version.

The Wasabi Wallet team hard-forked the wallet Thursday to address a vulnerability discovered by a team member at Trezor, a leading maker of hardware wallets. A hard fork is a code change that makes older versions of a software incompatible with newer ones.

The flaw’s discovery is another example of the open-source community’s camaraderie and cooperation. Developers are constantly tinkering to improve their peers’ software, and many vulnerabilities have been responsibly disclosed during these processes to patch flaws before they can be exploited by bad actors. (Sometimes, however, the disclosures by rival teams are less-than-cordial, as evidenced by the long-running tensions between Wasabi and rival Samourai Wallet.)

According to a Wasabi Wallet blog post, Trezor hardware wallet developer Ondřej Vejpustek responsibly disclosed the potential denial-of-service (DoS) attack to the Wasabi team on May 10 (a DoS attack entails an attacker spamming a network or protocol with the hopes of stymying its operations, hence “denial of service”).

“Vejpustek has been very cooperative since the beginning and left us total freedom on how to manage the disclosure, both in terms of time and communication. This demonstrates the importance of proper communication between security researchers and dev teams. This is how a responsible disclosure should be,” Wasabi Wallet contributor and marketing strategist Riccardo Masutti told CoinDesk, adding that Vejpustek was paid a bitcoin bounty for his efforts.

This hypothetical DoS attack, which Wasabi Wallet assumes has never been carried out, would have interfered with the wallet’s implementation of CoinJoin, a privacy protocol that allows users to mix their bitcoin with others’ to obscure the coins’ transaction histories.

Wasabi Wallet’s CoinJoin implementation requires each participant to take out as much as they put in. If, for instance, 10 participants join a mix for 0.1 BTC, then each user must send exactly that amount (plus a miner fee) and must receive that exact amount for the mix to be successful and to retain CoinJoin’s privacy protections. Mixing coins makes it harder for blockchain snoops and nosy parkers to pin bitcoin transactions to known addresses and their owners’ identities.

The disclosed DoS vulnerability would have halted the mixing process. The attacker would register bitcoin for a mix without that bitcoin being signed (verified) by the mix’s coordinator, while at the same time submitting a real, verified transaction to the mix.

The result would be an incongruity between the total value of inputs made to the CoinJoin and the value of expected outputs. As a result, the coordinator would unwittingly “build a transaction that can’t be valid, since the sum of all inputs is less than the sum of all outputs,” according to Vejpustek’s analysis.

If the attack were pulled off, it would foil the CoinJoin, though it would not have given the attacker the ability to steal any coins nor could they deanonymize any peers in the mix.

Wasabi Wallet patched the fix with the hard fork deployed Thursday. This upgrade was applied to v.1.1.12 of the wallet, which was released on Aug. 5.



Source link

Tags: BitcoinFeatureFlawPatchesPrivacyThwartedWalletWasabi

Popular

Press Release

Knox Wire Uses Distributed Ledger Technology to Improve Real-Time Gross Settlement Service

by admin
March 26, 2022
0

Blockchain technology has infiltrated every industry in recent years, making them safer and more effective. Now, it has reached the...

Read more

Elimobile Launches the First Tokenized Telco, Partners with Elite Token to Create a Celebrity Powered Ecosystem

May 16, 2022

Lazy 8ight Yacht Club Announces Plans To Expand Its Digital Marine Exploration

May 12, 2022

Users of "Fitcoin", A Mobile Fitness App, Are Rewarded for Staying Fit

May 16, 2022

Crypto payment solution provider Fat Cat Killer is launching its token “Killer” on May 17, 2022

May 17, 2022

About

We publish a comprehensive news feed covering all news relevant to the crypto user, covering main industry news, politics and regulation as well as consumer-level “news you can use” (practical stuff), including handy DIY tips, links to useful tools, unbiased reviews and opinions revolving around cryptocurrency. Simple logic and real-world examples are preferred before technical jargon and personal rants.

Follow us

Categories

  • Altcoin
  • Bitcoin
  • Blockchain
  • Cryptocurrency
  • Ethereum
  • Litecoin
  • Market
  • Press Release
  • Regulation
  • Uncategorized

Recent Posts

  • First Mover Asia: Pine Wants to Test the Liquidity of the NFT Market; Cryptos Are Well-Red
  • US Appeals Court Orders SEC to Bring Enforcement Actions to Jury Trials
  • REVOLAND Partners with SEAGM & Gamer Exchange to Build the Next Generation of Blockchain Games
  • Bitcoin, Major Cryptos Slide as Markets Digest Hawkish Powell Remarks
  • About Us
  • Privacy Policy
  • Contact Us

© 2020 cryptounfold.org

No Result
View All Result
  • Home
  • Bitcoin
  • Ethereum
  • Cryptocurrency
    • Altcoin
    • Litecoin
  • Blockchain
  • Regulation
  • Market
  • Prices
  • ICO

© 2020 cryptounfold.org

  • MMS Cash TokenMMS Cash Token(MCASH)$1.000.00%
  • bitcoinBitcoin(BTC)$49,095.002.28%
  • ethereumEthereum(ETH)$3,384.05-0.62%
  • HEXHEX(HEX)$0.1290085.45%
  • cardanoCardano(ADA)$2.18-2.77%
  • tetherTether(USDT)$1.00-0.27%
  • binancecoinBinance Coin(BNB)$425.46-0.83%
  • SolanaSolana(SOL)$166.52-1.81%
  • rippleXRP(XRP)$1.04-1.73%
  • usd-coinUSD Coin(USDC)$1.000.74%