Tom qab nrhiav tau ntau qhov tsis txaus ntseeg, cov tuam txhab blockchain ruaj ntseg Verichains tau pom zoo cov tuam txhab ua haujlwm Tendermint's IAVL pov thawj pov thawj los tiv thaiv lawv cov cuab tam thiab txo cov kev pheej hmoo ntawm kev siv nyiaj.
Ib qho tseem ceeb Empty Merkle Tree vulnerability nyob rau hauv IAVL pov thawj ntawm Tendermint Core, ib tug paub zoo BFT pom zoo lub cav, tau tshaj tawm los ntawm Verichains raws li ib feem ntawm nws lub luag hauj lwm Vulnerability Disclosure qhov kev pab cuam nyob rau hauv ib tug pej xeem tawm tswv yim lub npe. VSA-2022-100. Lub Cosmos Hub thiab lwm yam Tendermint-based blockchains yog siv los ntawm Tendermint Core kev pom zoo lub cav.
Ib qho kev tawm tswv yim thib ob los ntawm Verichains tau luam tawm raws li VSA-2022-101. Tseem ceeb IAVL Spoofing Attack los ntawm ntau qhov tsis zoo: Los ntawm Nil mus rau Spoof.
Tom qab BNB Chain choj nres, Verichains tau tshawb pom qhov kev tshawb pom no thaum ua haujlwm thaum Lub Kaum Hli xyoo tas los. Cov kws paub txog kev nyab xeeb tau hais tias cov nyiaj tau los tseem ceeb yuav raug poob vim qhov tshwm sim ntawm IAVL Spoofing Attack loj heev, uas tau tshawb pom los ntawm ntau qhov tsis txaus ntseeg pom hauv BNB Chain thiab Tendermint.
Vim muaj kev sib raug zoo ua haujlwm, BNB Chain tau ceeb toom txog cov txiaj ntsig no thaum Lub Kaum Hli thiab kho qhov teeb meem tam sim ntawd.
Tus neeg saib xyuas Tendermint/Cosmos tau txais kev qhia tsis pub lwm tus paub tib lub sijhawm, thiab lawv tau lees paub qhov tsis zoo. Txawm li cas los xij, raws li kev siv IBC thiab Cosmos-SDK twb tau hloov los ntawm IAVL Merkle pov thawj pov thawj rau ICS-23, kev kho tsis tau tsim muaj rau lub tsev qiv ntawv Tendermint. Ntau qhov haujlwm tam sim no muaj kev phom sij, suav nrog Cosmos, Binance Smart Chain, OKX, thiab Kava.
Tom qab 120 hnub, Verichains tau ceeb toom rau pej xeem raws li nws Txoj Cai Tswjfwm Saib Xyuas Kev Tiv Thaiv Tsis Zoo. Vim yog kab laum qhov tseem ceeb, kev siv choj ntau dua thiab ua rau cov nyiaj poob qis yuav, hauv qee qhov xwm txheej, raug nqi ntau lab lossis ntau txhiab daus las.
Web3 cov haujlwm uas tseem siv Tendermint's IAVL pov thawj pov thawj tau ceeb toom los ntawm Verichains txhawm rau txhim kho lawv txoj kev nyab xeeb.
Tsis tu ncua, pab pawg Verichains tshaj tawm kev ruaj ntseg tsis zoo thiab qhov tsis zoo uas pom los ntawm kev tshawb nrhiav thiab kev sim ntawm lub koom haum lub vev xaib.
Tau qhov twg los: https://thenewscrypto.com/verichains-calls-for-action-after-revealing-blockchain-security-vulnerabilities/