市值: $3.3026T 0.250%
成交额(24h): $88.7887B 4.230%
  • 市值: $3.3026T 0.250%
  • 成交额(24h): $88.7887B 4.230%
  • 恐惧与贪婪指数:
  • 市值: $3.3026T 0.250%
加密货币
话题
百科
资讯
加密话题
视频
热门新闻
加密货币
话题
百科
资讯
加密话题
视频
bitcoin
bitcoin

$105660.503371 USD

0.08%

ethereum
ethereum

$2495.659205 USD

-0.75%

tether
tether

$1.000503 USD

-0.01%

xrp
xrp

$2.246230 USD

3.27%

bnb
bnb

$650.510663 USD

0.05%

solana
solana

$151.975391 USD

1.31%

usd-coin
usd-coin

$0.999922 USD

-0.01%

dogecoin
dogecoin

$0.182596 USD

-0.78%

tron
tron

$0.283540 USD

-1.07%

cardano
cardano

$0.665910 USD

0.95%

hyperliquid
hyperliquid

$35.388743 USD

1.47%

sui
sui

$3.218472 USD

-0.93%

chainlink
chainlink

$13.729857 USD

-0.67%

avalanche
avalanche

$20.700353 USD

1.21%

unus-sed-leo
unus-sed-leo

$9.242919 USD

0.14%

加密货币新闻

Solana Patches Critical Token Bug Before Major Exploit

2025/05/05 17:02

Solana Patches Critical Token Bug Before Major Exploit

Solana, the rapidly developing blockchain, encountered and swiftly patched a critical bug in its Token-2022 system. If left unaddressed, this vulnerability could have been used by hackers to forge tokens endlessly and steal funds from any account.

The Solana Foundation confirmed that the bug was reported on April 16, and within 48 hours, it was completely fixed. Core developers Anza, Jito, and Firedancer spearheaded the response, while security firms OtterSec, Neodyme, and Asymmetric Research also contributed.

Crucially, this issue never reached the public domain. Solana opted to handle it quickly and quietly to prevent any potential panic or misuse of the vulnerability.

The bug resided in the “confidential transfers” feature, designed to conceal transaction details using zero-knowledge proofs, specifically the ZK ElGamal system. A missing mathematical element in the cryptographic hash allowed attackers to forge proofs that appeared valid to the system.

These false proofs could have been used to mint unlimited tokens or steal funds from any account without detection.

Solana’s rapid response and the cooperation of several security firms ensured that the bug was patched before it could be exploited. No instances of token forging or account theft have been reported.

Following this incident, SOL developers will continue to audit Token-2022 to identify and mitigate any future threats. The Foundation also highlighted the importance of teamwork in handling such events effectively.

This incident underscores the fact that even advanced cryptographic techniques are susceptible to flaws when implemented carelessly. Constant vigilance and a collaborative approach are crucial in securing blockchain networks from malicious actors.

免责声明:info@kdj.com

所提供的信息并非交易建议。根据本文提供的信息进行的任何投资,kdj.com不承担任何责任。加密货币具有高波动性,强烈建议您深入研究后,谨慎投资!

如您认为本网站上使用的内容侵犯了您的版权,请立即联系我们(info@kdj.com),我们将及时删除。

2025年06月09日 发表的其他文章