Security Researcher Discloses CometBFT 0-day Vulnerability; Direct Asset Theft Not Possible

ATOM0,93%

Gate News message, April 21 — Security researcher Doyeon Park disclosed a critical 0-day vulnerability (CVSS 7.1) in CometBFT, the consensus layer of Cosmos, according to a post on X. The flaw could cause network nodes to stall during block synchronization, disrupting system operations, but cannot directly result in asset theft.

Park stated he attempted to follow coordinated vulnerability disclosure (CVD) procedures; however, due to the project’s lack of cooperation and “irresponsible decisions,” he chose to publicly release vulnerability details. Park emphasized that any resulting security risks will be the responsibility of the affected projects.

Disclaimer: The information on this page may come from third parties and does not represent the views or opinions of Gate. The content displayed on this page is for reference only and does not constitute any financial, investment, or legal advice. Gate does not guarantee the accuracy or completeness of the information and shall not be liable for any losses arising from the use of this information. Virtual asset investments carry high risks and are subject to significant price volatility. You may lose all of your invested principal. Please fully understand the relevant risks and make prudent decisions based on your own financial situation and risk tolerance. For details, please refer to Disclaimer.

Related Articles

Scammers Impersonating Iranian Officials Demand Bitcoin and USDT from Ships in Strait of Hormuz

Gate News message, April 21 — Scammers posing as Iranian officials are demanding Bitcoin (BTC) and Tether (USDT) as transit fees from ships in the Strait of Hormuz, according to a warning from MARISKS, a Greece-based maritime risk management firm. The scheme falsely promises "safe transit

GateNews38m ago

Crypto Hack Draining $300M May Slow Wall Street's Blockchain Ambitions

Gate News message, April 21 — A weekend hack that drained nearly $300 million from a small crypto project and triggered a $10 billion run on the largest decentralized lending platform may slow Wall Street's growing interest in blockchain technology, according to a report from Jefferies LLC released

GateNews48m ago

Fake Police Impersonators Force French Couple to Transfer Nearly $1M in Bitcoin

Criminals posing as police in France coerced a couple to transfer nearly $1M in Bitcoin, using fear and authority in a 'wrench attack' that exploits people, not wallets. Abstract: Attackers used impersonation and psychological coercion to force a Bitcoin transfer, illustrating a wrench attack that targets human vulnerability rather than technical wallet exploits.

GateNews4h ago

Armed Robbery Attempt on French Crypto Professional Thwarted; Suspect Arrested

Gate News message, April 21 — A 40-year-old crypto industry professional in Saint-Jean-de-Védas, near Montpellier, France, thwarted an armed robbery attempt at his home. The suspect, disguised as a delivery person, entered the residence and demanded the victim hand over cryptocurrency wallet

GateNews5h ago

KelpDAO $290M Exploit Attributed to North Korea's Lazarus Group

LayerZero attributed a $290 million exploit of KelpDAO's cross-chain rsETH configuration to North Korea's Lazarus Group on April 18, describing the attacker as a "highly-sophisticated state actor." According to LayerZero, the incident was limited to KelpDAO's rsETH setup and did not spread to other

CryptoFrontier5h ago
Comment
0/400
No comments