Ethereum blockchain infrastructure developer Parity Technologies experienced a security compromise that required nodes to perform an urgent update, the corporate declared during a blog post on February. 3.
Parity, that is a popular technology stack for Ethereum users, said it had received notification of a loophole which might permit an attacker to close up nodes running its client.
“On Feb third, we received many reports that an attacker can send a specially-crafted RPC request to a public Parity Ethereum node (any version pre 2.2.9-stable and pre 2.3.2-beta) which node can crash,” officers summarized.
On social media, Parity confirmed it had issued a patch to repair the vulnerability within hours, with nodes running the affected versions nonetheless needed to update their software.
“While the vulnerability only directly affects Parity Ethereum nodes that serve JSONRPC as a public service (e.g., Infura, [MyEtherWallet], MyCrypto, etc), we suggest everybody to update their nodes immediately,” a tweet read.
In late 2017, one user of Parity’s Ethereum (ETH) wallet accidentally quarantined 513,774.16 ETH (around $54 million). In April 2018, an Ethereum Improvement Proposal (EIP) that might restore a disabled contract to unfreeze the funds was voted down.
In June 2018, another vulnerability discovery led to the same request to install node updates.
Last month, the organization received a grant from the nonprofit Ethereum Foundation worth $5 million to fund development on Casper, sharding and infrastructure.
To know more on Cryptocurrency and Blockchain events, follow us on Facebook, YouTube, Twitter, LinkedIn, Reddit, Telegram, BitcoinTalk, and we are also on Medium now