Crypto M - Crypto News
2.54K subscribers
15.9K photos
190 links
Your #1 destination for the latest and most unbiased market news on Bitcoin, Ethereum, NFT, Fintech, Web3, DeFi, and Blockchain.
Download Telegram
🚀 Tangem Addresses Security Vulnerability in Mobile App

According to Cointelegraph, cryptocurrency wallet provider Tangem has resolved a significant security flaw in its mobile application that exposed certain users' private keys via email. This action followed repeated alerts from Reddit users who highlighted the risk to investors' funds due to the exposure of private keys to email accounts and Tangem employees.

The issue gained attention on December 29 when a Reddit discussion accused Tangem of misappropriating private keys through emails. A Reddit user, u/areklanga, criticized Tangem for not responding adequately when the problem was initially reported. The user claimed that private keys were stored in user email histories, Tangem's email records, and possibly in Tangem's ticket tracking system, making them accessible to Tangem employees. They also noted that an earlier Reddit post about the glitch was inexplicably removed.

On December 30, Tangem acknowledged the problem, attributing it to a bug in the mobile app's log processing, which has since been "fully resolved." The company explained that the issue occurred when creating a wallet with a seed phrase, where the private key was mistakenly logged in the application's logs. These logs could be accessed during interactions with Tangem's support team. Tangem confirmed that all logs and attachments sent to its support team have been permanently deleted to ensure no residual data remains.

Tangem stated that the bug affected a small group of users, specifically those who generated a seed phrase and immediately submitted a support request through the app. The company is proactively reaching out to these users for caution and support. Despite the update on December 30 to prevent further leaks, members of the crypto community criticized Tangem's subdued response. As of December 31, Tangem had not made any official announcements on its social media channels, including Twitter, Discord, or Telegram. However, all Tangem users are advised to update their mobile applications promptly to prevent seed phrase leaks.


#Tangem #Cryptocurrency #SecurityVulnerability #MobileApp #PrivateKeys #UserSafety #Reddit #BugFix #CryptoCommunity #SeedPhrase #DataProtection #AppUpdate
🚀 Sui Mainnet Upgrades to Version 1.57.2 with Key Enhancements

According to Foresight News, the Sui mainnet has been upgraded to version 1.57.2, alongside a protocol upgrade to version 96. Key updates include the activation of Mysticeti v2 (Mysticeti fastpath) on the mainnet. Additionally, nodes, including both validator and full nodes, now incorporate CheckpointArtifacts digest in their summaries, which is currently being tested on the development network.

The gRPC has integrated GetCoinInfo into the new CoinRegistry system object. Similarly, JSON-RPC has incorporated currency metadata and total supply API into the CoinRegistry system object. Furthermore, support for Coin Registry has been added to the Query.coinMetadata API in GraphQL.

A bug has been fixed where queries would fail if a variable used to fill a nullable parameter was not provided, despite this being an acceptable behavior. Another issue resolved involves the CLI command-line tool, where the upgrade command would terminate prematurely if the CLI binary's protocol version was lower than the network version.


#Sui #mainnet #upgrade #Mysticeti #protocol #checkpoint #gRPC #CoinRegistry #JSONRPC #API #GraphQL #bugfix #CLI #validator #fullnodes #network
🚀 AI Firm Identifies and Fixes Critical Bug in Ethereum Client Nethermind

Octane Security, an AI-based cryptocurrency security firm, has discovered a significant bug in the Ethereum client Nethermind. According to NS3.AI, this vulnerability had the potential to disrupt Ethereum's block production and network availability. The issue has since been resolved, highlighting the effectiveness of AI-driven research in enhancing blockchain security.

#AI #cryptocurrency #Ethereum #blockchain #Nethermind #security #bugfix #blockproduction #NS3AI #AIdrivenresearch #ETH
1
🚀 Ripple Releases Critical Update to Fix XRP Ledger Node Crash Issue

Ripple has announced the release of rippled version 3.1.2, addressing a critical issue that could cause public-facing XRP Ledger nodes to crash. According to NS3.AI, the XRP Ledger Foundation has advised operators to promptly update their systems and trust Ripple's newly rotated GPG key to avoid potential automatic upgrade failures. The identified bug can lead to an internal abort in certain edge cases, resulting in the termination of the server process.

#Ripple #XRP #XRPLedger #CryptoUpdate #NodeCrash #Blockchain #Cryptocurrency #BugFix #TechNews