Tron developers corrected the vulnerability of access to assets on $500 million – Bits Media

Cybersecurity specialists of the 0d team reported, that a critical vulnerability was discovered in the system of multi -signing multi -signatures system. Assets for half a billion dollars were threatened, but vulnerability was promptly closed.

The 0d team works as part of the company dWallet Labs. 0d specialists say, that the vulnerability in Tron allowed the owner of the signature to get unlimited access to the wallet protected by multi -signed and all the assets stored there.

The 0d team in February announced vulnerability to Tron developers through the Hackerone project, And the problem was fixed in a few days.

The representative of Tron confirmed, that the developers received the Hackerone project report and “corrected the problem as quickly as possible, Applying the necessary patches, So vulnerability could not and cannot be used ". The amount of remuneration, Cybersecurity paid to specialists, Not reported.

As the co -founder of Odsy Network Omer Sadik said (Omer), The error was quite trivial and it was very simple to fix it:

“When checking the multi -signatures on the TRON network, it was checked, that this signature is already calculated, And it was supposed: Two different signatures for one transaction could not be created by the same person. To eliminate the vulnerability, it was necessary to verify not a signature with a list of signatures, And the address of the signator with the list of addresses ".

IN 2019 year Tron developers corrected vulnerability, which allowed to collapse the entire network from one single computer.