Skip to main content

Jump Crypto unveils critical vulnerability on Binance’s BNB Chain

The security flaw would allow the mint of an unlimited amount of arbitrary tokens. The issue was privately disclosed to the BNB team.

Web3 infrastructure firm Jump Crypto has discovered a vulnerability in the Binance BNB Beacon Chain, which would allow the mint of an unlimited amount of arbitrary tokens. The issue was privately disclosed to the BNB team, enabling a patch to be developed and deployed within 24 hours.

In a blog post from Feb. 10, Jump Crypto disclosed a detailed report about the vulnerability found two days earlier, which could "have led to a large loss of funds."

As per the report, the BNB Chain is composed of two blockchains - the EVM compatible Smart Chain (BSC), which is based on a fork of go-ethereum and the Beacon Chain, built on top of Tendermint and Cosmos SDK.

However, the Beacon Chain uses a BNB fork hosted on GitHub with several BNB-specific changes. "It deviates from the Cosmos SDK upstream in several ways, motivating us to take extra care in reviewing the differences," notes Jump Crypto, which recently started a broad research effort dedicated to discovering and patching vulnerabilities across projects via coordinated disclosure.

The vulnerability would allow an attacker to mint an almost unlimited amount of BNB tokens via a malicious transfer, meaning that destination accounts would receive a much larger number of BNB tokens than the sender initially provided. Jump Crypto noted:

"Bugs that allow infinite minting of native assets are some of the most critical vulnerabilities in web3. As such, this finding is proof that we all must stay vigilant and collaborate to elevate security assurances across all projects."

The BNB team fixed the issue by switching to overflow resistant arithmetic methods for the sdk.Coin type. The patch will result in a golang panic and a transaction failure if the Coin calculation overflows.

The BNB Chain is the native blockchain behind crypto exchange Binance. The company CEO, Changpeng Zhao, thanked Jump Crypto's team for reporting the bug on Twitter:

In October 2022, the BNB Chain was briefly suspended after a cross-Chain exploit compromised nearly $80 million worth of cryptocurrency. The genesis of the breach took place on the BSC Token Hub, eventually resulting in the creation of an “extra BNB,” shows an official post on Reddit. 

Comments

Post a Comment

Popular posts from this blog

Saudi Arabia Boosts Aramco Venture With Additional $4 Billion in Funds

Image
Saudi Arabia’s leading oil refinery company Aramco doubled its venture capital funds to a tilt reaching $4 billion on Wednesday. The Saudi Aramco Venture Capital now boasts of funds worth $7 billion and plans to diversify its investments. Early January this year, the Saudi Aramco Venture’s funds stood at $3 billion and the new additional injection of $4 billion takes it to a threshold of $7 billion. The allocation of new funds moved its investing strength from $3 billion to $7 billion in 2024. Also Read: Gold & Oil Prices Continue To Fall as US Dollar Grows Stronger “Through Aramco Ventures, we aim to support pioneers with big ambitions, and ultimately help bring their ideas to life,” read a statement from the leading oil giant. Saudi Arabia’s Aramco Venture Now Boasts $7 Billion in Funds in 2024 Source: (Bandar Aljaloud / Saudi Royal Palace via AP) The funding provides Saudi Aramco VC to explore diverse opportunities other than oil and g...
Read more

Is The Bitcoin Price Correction Over? Here’s The Support Level To Watch

Image
The Bitcoin price suffered significant bearish pressure over the past week, dragging down alongside it a large portion of the general crypto market. The premier cryptocurrency tumbled as low as $59,500 at some point in the week — its lowest in nearly two months. While investors will be hoping that the worst is over, it is difficult to determine whether BTC is ready to resume its bullish run. In any case, a prominent crypto intelligence firm has identified a price level critical to the future trajectory of the Bitcoin price. $56,000 The Ultimate Support Level For Bitcoin: CryptoQuant In a recent report, the blockchain analytics platform CryptoQuant put forward an interesting prognosis for the price of Bitcoin over the coming days. According to the firm, the $56,000 price level is an important level to the future performance of the premier cryptocurrency. ...
Read more

Crypto Analyst Predicts MATIC/BTC and SOL/BTC May Fade Into Lower Regions

Benjamin Cowen has identified a weakness between MATIC to Bitcoin and SOL to Bitcoin. MATICBTC traded within a specific range throughout Bitcoin’s bear market. With SOLBTC, people get sucked in on each pump, then the price fades into new lows. Benjamin Cowen, the founder of ITC Crypto, has identified a weakness between MATIC to Bitcoin and SOL to Bitcoin. The renowned analyst independently compared both altcoins’ recent history with Bitcoin, indicating potential weaknesses over the past two years. Using the MATICBTC weekly chart on TradingView, Cowen showed that MATICBTC traded within a specific range throughout Bitcoin’s bear market. He noted the crypto pair is fading toward the lower part of the range, with the current market situation, with MATIC showing more weakness. #MATIC / #BTC fading to the lower part of the range. Below 1700 sats, there is not much support for a while. pic.twitter.com/USxsE94Qdr — Benjamin Cowen (@intocryptoverse) June 28,...
Read more