Connect with us

News

Wabisabi Deanonymization Vulnerability "Disclosed"

Published

on



GingerWallet, the fork of WasabiWallet maintained by former zkSNACKs employees after the shut down of the Wasabi coinjoin coordinator, has received a vulnerability report from developer drkgry. This vulnerability would allow the total deanonymization of users inputs and outputs in a coinjoin round, giving a malicious coordinator the ability to completely undo any privacy gains from coinjoining by performing an active attack.

Wasabi 2.0 was a complete re-design of how Wasabi coordinated coinjoins, moving from the Zerolink framework utilizing fixed denomination mix amounts, to the Wabisabi protocol allowing dynamic multi-denomination amounts. This process involved switching from homogenous blinded tokens to register outputs to claim your coins back, to a dynamic credentials system called Keyed Verification Anonymous Credentials (KVACs). This would allow users to register blinded amounts that prevented theft of other users’ coins without revealing to the server plain-text amounts that could be correlated and prevent linking ownership of separate inputs.

When users begin participating in a round, they poll the coordinator server for information regarding the round. This returns a value in the RoundCreated parameters, called maxAmountCredentialValue. This is the highest value credential the server will issue. Each credential issuance is identifiable based on the value set here.

To save bandwidth, multiple proposed methods for clients to cross-verify this information were never implemented. This allows a malicious coordinator to give each user when they begin registering their inputs a unique maxAmountCredentialValue. In subsequent messages to the coordinator, including output registration, the coordinator could identify which user it was communicating with based on this value.

By “tagging” each user with a unique identifier in this way, a malicious coordinator can see which outputs are owned by which users, negating all privacy benefits they could have gained from coinjoining.

To my knowledge drkgry discovered this independently and disclosed it in good faith, but the members of the team who were present at zkSNACKs during the design phase of Wabisabi were absolutely aware of this issue.

“The second purpose of the round hash is to protect the clients from tagging attacks by the server, the credential issuer parameters must be identical for all credentials and other round metadata should be the same for all clients (e.g. to ensure that the server isn’t trying to influence clients to create some detectable bias in registrations).”

It was brought up in 2021 by Yuval Kogman, also known as nothingmuch, in 2021. Yuval was the developer to design what would become the Wabisabi protocol, and one of the designers in actually specifying the full protocol with ‪István András Seres‬.

One final note is the tagging vulnerability is not actually addressed without this suggestion from Yuval as well as full ownership proofs bound to actual UTXOs as proposed in his original pull request discussing tagging attacks. All of the data being sent to clients isn’t bound to a specific round ID, so a malicious coordinator is still capable of pulling a similar attack by giving users unique round IDs and simply copying the necessary data and re-assigning each unique round ID per-user before sending any messages. 

This is not the only outstanding vulnerability present in the current implementation of Wasabi 2.0 created by the rest of the team cutting corners during the implementation phase. 



Source link

Altcoins

Whale Who Netted $108,000,000 Profit on TRUMP Books Loss on the Memecoin After President’s Truth Social Post

Published

on


A whale who previously won big on the Official Trump (TRUMP) memecoin booked a loss on the controversial asset over the weekend, according to the crypto tracker Lookonchain.

Lookonchain notes on the social media platform X that the whale spent $5 million worth of Circle’s stablecoin, USDC, to buy TRUMP right after President Donald Trump posted “I LOVE $TRUMP” on his social media platform Truth Social.

The whale then sold the TRUMP stash an hour later, booking a $207,000 loss.

However, the loss pales in comparison to gains the whale made earlier this year when it spent 1.09 million USDC to buy 5.97 million TRUMP and booked a $108 million profit, according to Lookonchain.

The president launched the Official Trump memecoin in mid-January, days before he took office. The asset has generated controversy in and out of crypto circles, raising questions of corruption in an already heavily questioned administration.

Even Ethereum (ETH) founder Vitalik Buterin said in January that political coins represented “vehicles for unlimited political bribery.”

In a February letter to the U.S. Department of Justice (DOJ) and the Office of Government Ethics, officials at the nonprofit consumer advocacy organization Public Citizen argued TRUMP could be a violation of federal law regulating gifts to government officials.

Follow us on X, Facebook and Telegram

Don’t Miss a Beat – Subscribe to get email alerts delivered directly to your inbox

Check Price Action

Surf The Daily Hodl Mix

&nbsp

Disclaimer: Opinions expressed at The Daily Hodl are not investment advice. Investors should do their due diligence before making any high-risk investments in Bitcoin, cryptocurrency or digital assets. Please be advised that your transfers and trades are at your own risk, and any losses you may incur are your responsibility. The Daily Hodl does not recommend the buying or selling of any cryptocurrencies or digital assets, nor is The Daily Hodl an investment advisor. Please note that The Daily Hodl participates in affiliate marketing.

Generated Image: Midjourney



Source link

Continue Reading

Altcoins

$5,000,000,000,000 Asset Manager Fidelity To Launch a USD-Pegged Stablecoin: Report

Published

on


The asset management titan Fidelity Investments reportedly plans to roll out its own dollar-backed stablecoin.

Citing two people familiar with the matter, the Financial Times reports that the Boston-based firm with $5 trillion in assets under management (AUM) is now in the advanced stages of testing the crypto asset.

Fidelity’s digital assets arm will manage the stablecoin, which is designed to function as cash in cryptocurrency markets.

The report says the company is launching the stablecoin as part of its expansion into the nascent market for tokenized versions of US Treasury bonds. Last week, the asset manager also submitted a filing to the U.S. Securities and Exchange Commission (SEC) to register a blockchain-based version of the Fidelity Treasury Digital Fund.

The development comes amid Donald Trump’s support for dollar-backed stablecoins. The president has pledged to promote stablecoin growth to strengthen the dominance of the US dollar and urged Congress to pass legislation establishing regulatory clarity for the assets.

Lawmakers are working to pass the Guiding and Establishing National Innovation for U.S. Stablecoins (GENIUS) Act, which restricts what types of investments the assets can use for collateral.

Senator Bill Hagerty (R-TN), who sponsored the bill, says that a regulatory framework for stablecoins can help boost demand for the US Treasury.

“This legislation is a critical first step in establishing a safe and pro-growth regulatory framework that will unleash innovation and advance the President’s mission to make America the world capital of crypto.”

Follow us on X, Facebook and Telegram

Don’t Miss a Beat – Subscribe to get email alerts delivered directly to your inbox

Check Price Action

Surf The Daily Hodl Mix

&nbsp

Disclaimer: Opinions expressed at The Daily Hodl are not investment advice. Investors should do their due diligence before making any high-risk investments in Bitcoin, cryptocurrency or digital assets. Please be advised that your transfers and trades are at your own risk, and any losses you may incur are your responsibility. The Daily Hodl does not recommend the buying or selling of any cryptocurrencies or digital assets, nor is The Daily Hodl an investment advisor. Please note that The Daily Hodl participates in affiliate marketing.

Generated Image: Midjourney



Source link

Continue Reading

Bitcoin Policy

Proposed Bipartisan Legislation Recognizes Bitcoin As A Technology That Supports Democracy

Published

on


On Wednesday, the office of Rep. Gabe Amo issued a press release stating that Rep. Amo and Rep. Kim (R-CA) reintroduced a bipartisan resolution supporting the use of distributive ledger technologies (DLT), including blockchain, to “support democratic governance, human rights, freedom of information, transparency, and innovation around the world.”

The resolution (the full text of which was not linked to in the press release) urges federal agencies to explore and support DLT and expresses Congress’ commitment to advancing responsible innovation on this technological front.

Rep. Kim commented on the importance of this technology in the press release.

“U.S. leadership in emerging technologies like blockchain not only improves Americans’ lives but also helps us advance transparency in U.S. foreign assistance, human rights, and freedom across the globe,” said Rep. Kim.

“This legislation is vital, especially as we see the Chinese Communist Party exporting its surveillance technologies and authoritarianism abroad. I am proud to join Congressman Amo to lead this bipartisan resolution to ensure the United States shines as a beacon of hope, freedom, and innovation on the world stage,” she added.

The press release also cited how, in Screven County, Georgia, the Bitcoin blockchain was used to safeguard election election results and provide transparency to voters, linking to this article, which tells the story of the event.

Simple Proof, the company that helped Screven County officials commit its vote tallies to the immutable Bitcoin blockchain also recently helped Republicans in Williamson County, Tennessee do the same with the results of its Republican leadership vote.

Simple Proof put itself on the map when it helped to secure the results of the most recent presidential election in Guatemala, the story of which is told in the short documentary Immutable Democracy. Thanks to the vote tallies from the election being safeguarded on the Bitcoin blockchain, the integrity of the election was upheld, despite efforts made to tamper with physical votes once voting had concluded.

The work that the company has done both in the U.S. and abroad is a testament to a point Rep. Amo made in the press release.

“Innovative technology like blockchain helps promote transparency and strengthen democratic institutions around the world,” said the congressman.

While the press release provided evidence of the Bitcoin blockchain being used to preserve democratic values, it didn’t differentiate between Bitcoin and other blockchains, many of which, by design, are less secure.



Source link

Continue Reading
Advertisement [ethereumads]
Altcoins45 minutes ago

Whale Who Netted $108,000,000 Profit on TRUMP Books Loss on the Memecoin After President’s Truth Social Post

Featured46 minutes ago

Hardware Wallets: Bitcoin’s Biggest Adoption Barrier

Law and Order3 hours ago

SEC Officially Drops Cases Against Kraken, ConsenSys, and Cumberland DRW

Altcoin3 hours ago

Dogecoin could rally in double digits on three conditions

Finance5 hours ago

Sei Foundation Explores Buying 23andMe to Put Genetic Data on Blockchain

24/7 Cryptocurrency News5 hours ago

Coinbase CLO Applauds US SEC Chair Nominee Paul Atkins Ahead of Senate Confirmation

Bitcoin7 hours ago

Crypto Pundit Makes Case For Bitcoin Price At $260,000, But This Invalidation Level Threatens The Rally

Uncategorized7 hours ago

$16.5B in Bitcoin options expire on Friday — Will BTC price soar above $90K?

Altcoins9 hours ago

$5,000,000,000,000 Asset Manager Fidelity To Launch a USD-Pegged Stablecoin: Report

Bitcoin Policy9 hours ago

Proposed Bipartisan Legislation Recognizes Bitcoin As A Technology That Supports Democracy

Law and Order11 hours ago

Wyoming Stablecoin Is Just a State-Issued CBDC by Another Name: Rep. Tom Emmer

Bitcoin11 hours ago

Bitcoin faces 70% odds of another drop as April tariff fears shake markets, Nansen says

Opinion13 hours ago

Political Endorsements Are Driving Rug Pulls

Doge price13 hours ago

‘Trust the Cycle’ – Pro Says Dogecoin Price Could Suddenly Hit $1

Cryptocurrency Market News15 hours ago

Top Conglomerate Adds 580 $BTC Amid Unprecedented Crypto Popularity. Here’s Why BTC Bull Token Could 100x

Trending

    wpChatIcon