Halborn identifies vulnerabilities in >280 blockchains including Dogecoin, Zcash

Halborn identifies vulnerabilities in >280 blockchains including Dogecoin, Zcash

March 14, 2023

By Suzuki Shillsalot

According to Halborn’s report, over 280 blockchains are plagued by major vulnerabilities

More than $25 billion in digital assets at risk due to these vulnerabilities, it added

Over 280 blockchains are plagued by major vulnerabilities known as “Rab13s,” according to a report released yesterday by the blockchain security firm Halborn.

According to Halborn, it was hired to inspect Dogecoin’s code in March 2022, with the project soon patching any vulnerabilities it discovered.

Following a more thorough investigation, Halborn discovered that the same vulnerabilities affected over 280 other networks, including Litecoin and Zcash, putting more than $25 billion in digital assets at risk.

The main vulnerability, according to Halborn, allowed attackers to take unpatched blockchain nodes offline by sending consensus messages to those nodes via peer-to-peer (p2p) communications. An attacker could execute a 51% attack against the relevant blockchain network more feasibly by taking down nodes. The attacker could then perpetrate a double spend attack or cause other network damage.

A secondary vulnerability would allow a hacker to halt nodes through an RPC. A third vulnerability that Halborn discovered encouraged hackers to execute code via RPC. Both of these attack methods necessitate valid credentials and are thus, comparatively difficult to carry out.