外观
In March 2024, the Ethereum network underwent a significant upgrade with the implementation of EIP-4844, an essential part of the Dencun hardfork, aimed at bolstering Ethereum’s role as a data availability layer. This upgrade introduced "b…
Get ready to explore the exceptional projects and community events that received support in Q2! Learn more about them below:...
The Ecodev Coordinators team at EF announces the 11 recipients of the Data Collection grant round, with a total funding amount of 557,660 USD. After reviews, the winners were selected based on their innovative approaches to advancing data…
Disclosure of the details of an integer overflow bug which causes an assertion crash, a fix for which was released on September 14th, 2021 in Bitcoin Core version v22.0. This issue is considered High severity. Details CAddrMan has a 32-bit…
Disclosure of the impact of an infinite loop bug in the miniupnp dependency on Bitcoin Core, a fix for which was released on September 14th, 2021 in Bitcoin Core version v22.0. This issue is considered Low severity. Details Miniupnp, the U…
The ethereum.org Translatathon is back this August! This is your chance to contribute to the Ethereum ecosystem by translating Ethereum.org from English into your native language. Not only will you be helping to make Ethereum more accessib…
Bitcoin Core version 26.2 is now available for download . See the release notes for more information about the many bug fixes in this release. If you have any questions, please stop by the #bitcoin IRC chatroom ( IRC , web ) and we’ll do o…
Ethereum family, We have two major updates today, three smaller ones, and a bunch of reminders about Devcon SEA and how you can get involved ahead of getting together in Bangkok from November 12-15....
The Ethereum Protocol Security (EPS) Research Team is pleased to announce the launch of the first Ethereum protocol Attackathon, hosted by Immunefi. This four-week event aims to enhance the security of the Ethereum protocol through a large…
Bitcoin Core maintained an unlimited list of banned IP addresses and performed a quadratic operation on it. This could lead to an OOM crash and a CPU Dos. This issue is considered High severity. Details Bitcoin Core maintained a list of ba…
Disclosure of the details of an integer overflow bug which risked causing a network split, a fix for which was released on January 15th, 2021 in Bitcoin Core version 0.21.0. This issue is considered Medium severity. Technical details A net…
A node could be stalled for hours when processing the orphans of a specially crafted unconfirmed transaction. This issue is considered High severity. Details After accepting a transaction into its mempool, the node would go through its cac…
A node could be forced to allocate large buffers when receiving a message, which could be leveraged to remotely crash it by OOM. This issue is considered Medium severity. Details Without a tighter bound, received messages’ size was limited…
After Bitcoin Core 0.12.0 and before Bitcoin Core 0.15.0 a node could be spammed with minimum difficulty headers, which could possibly be leveraged to crash it by OOM. This issue is considered Medium severity. Details Before the introducti…
A node could be forced to allocate a significant amount of memory upon receiving a specially crafted INV message. This was particularly an issue for nodes with little available memory or a large number of connections. This issue is conside…
An attacker could prevent a node from seeing a specific unconfirmed transaction. This issue is considered Medium severity. Details Before this issue was fixed in PR 19988, the “g_already_asked_for” mechanism was used to schedule GETDATA re…
Bitcoin-Qt could crash upon opening a BIP72 URI. This issue is considered Medium severity. Details BIP72 extends the BIP21 URI scheme with an r parameter to fetch a payment request from. An attacker could simply point the URL contained in…
A malformed GETDATA message could trigger an infinite loop on the receiving node, using 100% of the CPU allocated to this thread and not making further progress on this connection. This issue is considered Low severity. Details Before Bitc…
A buffer overflow enabling a significant data leak was discovered in miniupnpc . Combined with the then recently-disclosed CVE-2015-6031 it enabled an RCE in miniupnpc which could have led to an RCE in Bitcoin Core. This was fixed in Bitco…
On 2024-06-23, 00:19 AM UTC, a phishing email was sent out to 35,794 email addresses by updates@blog.ethereum.org with the following content Users who clicked the link in the email were sent to a malicious website: This website had a crypt…
