Researchers reveal 9 Monero (XMR) vulnerabilities: One targets cryptocurrency exchanges


  • One of vulnerability opened a window for attackers to steal from cryptocurrency exchanges.
  • The vulnerability report surfaced at the time Monero version 0.14.1.0 l was released.

One of the leading privacy coins on the market Monero (XMR) revealed nine vulnerabilities. Among the vulnerabilities, there is one that puts users that risk of theft and could badly impact on crypto exchanges.

The report said that Monero illegal miners could before March, have come up with “specifically-crafted’ blocks that had the power to force their way into Monero wallets. This could allow them to deposit fake XMR of any amount into the wallets. This vulnerability opened a window for stealing from cryptocurrency exchanges.

At the time of discovery, the researchers were given 45 XMR as a reward for their efforts. In addition to that, five more denials of service (DoS) attack vectors were revealed. One among the five was flag as the ‘critical” one.

Furthermore, a CryptoNote-specific vulnerability was also discovered. This vulnerability could give attackers the capacity to bring down nodes on the crypto network via malicious data requests.

One of the researchers Andrey Sabelnikov spoke to The Next Web regarding the vulnerability such a vulnerability “could’ve seen attackers make a protocol request “that will call all of its blocks from another node, which could be hundreds of thousands of blocks.”

Sabelnikov explained:

“Preparing such a response can take a lot of resources. Eventually, the OS might kill it due to the huge memory consumptions, which is typical of Linux systems.”

The vulnerability report surfaces at the time Monero version 0.14.1.0 l was released. The report adds that eight of the vulnerabilities have already been fixed. However, one of the vulnerabilities has been kept out the public high but developers are working on it.

 

 


Information on these pages contains forward-looking statements that involve risks and uncertainties. Markets and instruments profiled on this page are for informational purposes only and should not in any way come across as a recommendation to buy or sell in these assets. You should do your own thorough research before making any investment decisions. FXStreet does not in any way guarantee that this information is free from mistakes, errors, or material misstatements. It also does not guarantee that this information is of a timely nature. Investing in Open Markets involves a great deal of risk, including the loss of all or a portion of your investment, as well as emotional distress. All risks, losses and costs associated with investing, including total loss of principal, are your responsibility. The views and opinions expressed in this article are those of the authors and do not necessarily reflect the official policy or position of FXStreet nor its advertisers. The author will not be held responsible for information that is found at the end of links posted on this page.

If not otherwise explicitly mentioned in the body of the article, at the time of writing, the author has no position in any stock mentioned in this article and no business relationship with any company mentioned. The author has not received compensation for writing this article, other than from FXStreet.

FXStreet and the author do not provide personalized recommendations. The author makes no representations as to the accuracy, completeness, or suitability of this information. FXStreet and the author will not be liable for any errors, omissions or any losses, injuries or damages arising from this information and its display or use. Errors and omissions excepted.

The author and FXStreet are not registered investment advisors and nothing in this article is intended to be investment advice.

Join Telegram

Recommended content


Recommended Content

Editors’ Picks

SEC doubles down on TRON's Justin Sun lawsuit dismissing claims over jurisdiction

SEC doubles down on TRON's Justin Sun lawsuit dismissing claims over jurisdiction

The SEC says it has jurisdiction to bring Justin Sun to court as he traveled extensively to the US. Sun asked to dismiss the suit, arguing that the SEC was targeting actions taken outside the US.

More TRON News

XRP fails to break past $0.50, posting 20% weekly losses

XRP fails to break past $0.50, posting 20% weekly losses

XRP trades range-bound below $0.50 for a sixth consecutive day, accumulating 20% losses in the last seven days. Ripple is expected to file its response to the SEC’s remedies-related opening brief by April 22. 

More Ripple News

ImmutableX extends recovery despite $69 million IMX token unlock

ImmutableX extends recovery despite $69 million IMX token unlock

ImmutableX unlocked 34.19 million IMX tokens worth over $69 million early on Friday. IMX circulating supply increased over 2% following the unlock. The Layer 2 blockchain token’s price added nearly 3% to its value on April 19. 

More Cryptocurrencies News

Bitcoin Weekly Forecast: BTC post-halving rally could be partially priced in Premium

Bitcoin Weekly Forecast: BTC post-halving rally could be partially priced in

Bitcoin price briefly slipped below the $60,000 level for the last three days, attracting buyers in this area as the fourth BTC halving is due in a few hours. Is the halving priced in for Bitcoin? Or will the pioneer crypto note more gains in the coming days? 

More Bitcoin News

Bitcoin: BTC post-halving rally could be partially priced in Premium

Bitcoin: BTC post-halving rally could be partially priced in

Bitcoin (BTC) price briefly slipped below the $60,000 level for the last three days, attracting buyers in this area as the fourth BTC halving is due in a few hours. Is the halving priced in for Bitcoin? Or will the pioneer crypto note more gains in the coming days? 

Read full analysis

BTC

ETH

XRP