News
Wabisabi Deanonymization Vulnerability "Disclosed"
Published
4 months agoon
By
admin

GingerWallet, the fork of WasabiWallet maintained by former zkSNACKs employees after the shut down of the Wasabi coinjoin coordinator, has received a vulnerability report from developer drkgry. This vulnerability would allow the total deanonymization of users inputs and outputs in a coinjoin round, giving a malicious coordinator the ability to completely undo any privacy gains from coinjoining by performing an active attack.
Wasabi 2.0 was a complete re-design of how Wasabi coordinated coinjoins, moving from the Zerolink framework utilizing fixed denomination mix amounts, to the Wabisabi protocol allowing dynamic multi-denomination amounts. This process involved switching from homogenous blinded tokens to register outputs to claim your coins back, to a dynamic credentials system called Keyed Verification Anonymous Credentials (KVACs). This would allow users to register blinded amounts that prevented theft of other users’ coins without revealing to the server plain-text amounts that could be correlated and prevent linking ownership of separate inputs.
When users begin participating in a round, they poll the coordinator server for information regarding the round. This returns a value in the RoundCreated parameters, called maxAmountCredentialValue. This is the highest value credential the server will issue. Each credential issuance is identifiable based on the value set here.
To save bandwidth, multiple proposed methods for clients to cross-verify this information were never implemented. This allows a malicious coordinator to give each user when they begin registering their inputs a unique maxAmountCredentialValue. In subsequent messages to the coordinator, including output registration, the coordinator could identify which user it was communicating with based on this value.
By “tagging” each user with a unique identifier in this way, a malicious coordinator can see which outputs are owned by which users, negating all privacy benefits they could have gained from coinjoining.
To my knowledge drkgry discovered this independently and disclosed it in good faith, but the members of the team who were present at zkSNACKs during the design phase of Wabisabi were absolutely aware of this issue.
“The second purpose of the round hash is to protect the clients from tagging attacks by the server, the credential issuer parameters must be identical for all credentials and other round metadata should be the same for all clients (e.g. to ensure that the server isn’t trying to influence clients to create some detectable bias in registrations).”
It was brought up in 2021 by Yuval Kogman, also known as nothingmuch, in 2021. Yuval was the developer to design what would become the Wabisabi protocol, and one of the designers in actually specifying the full protocol with István András Seres.
One final note is the tagging vulnerability is not actually addressed without this suggestion from Yuval as well as full ownership proofs bound to actual UTXOs as proposed in his original pull request discussing tagging attacks. All of the data being sent to clients isn’t bound to a specific round ID, so a malicious coordinator is still capable of pulling a similar attack by giving users unique round IDs and simply copying the necessary data and re-assigning each unique round ID per-user before sending any messages.
This is not the only outstanding vulnerability present in the current implementation of Wasabi 2.0 created by the rest of the team cutting corners during the implementation phase.
Source link
You may like
Whale Who Netted $108,000,000 Profit on TRUMP Books Loss on the Memecoin After President’s Truth Social Post
Hardware Wallets: Bitcoin’s Biggest Adoption Barrier
SEC Officially Drops Cases Against Kraken, ConsenSys, and Cumberland DRW
Dogecoin could rally in double digits on three conditions
Sei Foundation Explores Buying 23andMe to Put Genetic Data on Blockchain
Coinbase CLO Applauds US SEC Chair Nominee Paul Atkins Ahead of Senate Confirmation
Altcoins
Whale Who Netted $108,000,000 Profit on TRUMP Books Loss on the Memecoin After President’s Truth Social Post
Published
45 minutes agoon
March 28, 2025By
admin
A whale who previously won big on the Official Trump (TRUMP) memecoin booked a loss on the controversial asset over the weekend, according to the crypto tracker Lookonchain.
Lookonchain notes on the social media platform X that the whale spent $5 million worth of Circle’s stablecoin, USDC, to buy TRUMP right after President Donald Trump posted “I LOVE $TRUMP” on his social media platform Truth Social.
The whale then sold the TRUMP stash an hour later, booking a $207,000 loss.
However, the loss pales in comparison to gains the whale made earlier this year when it spent 1.09 million USDC to buy 5.97 million TRUMP and booked a $108 million profit, according to Lookonchain.
The president launched the Official Trump memecoin in mid-January, days before he took office. The asset has generated controversy in and out of crypto circles, raising questions of corruption in an already heavily questioned administration.
Even Ethereum (ETH) founder Vitalik Buterin said in January that political coins represented “vehicles for unlimited political bribery.”
In a February letter to the U.S. Department of Justice (DOJ) and the Office of Government Ethics, officials at the nonprofit consumer advocacy organization Public Citizen argued TRUMP could be a violation of federal law regulating gifts to government officials.
Follow us on X, Facebook and Telegram
Don’t Miss a Beat – Subscribe to get email alerts delivered directly to your inbox
Check Price Action
Surf The Daily Hodl Mix
 

Disclaimer: Opinions expressed at The Daily Hodl are not investment advice. Investors should do their due diligence before making any high-risk investments in Bitcoin, cryptocurrency or digital assets. Please be advised that your transfers and trades are at your own risk, and any losses you may incur are your responsibility. The Daily Hodl does not recommend the buying or selling of any cryptocurrencies or digital assets, nor is The Daily Hodl an investment advisor. Please note that The Daily Hodl participates in affiliate marketing.
Generated Image: Midjourney
Source link
Altcoins
$5,000,000,000,000 Asset Manager Fidelity To Launch a USD-Pegged Stablecoin: Report
Published
9 hours agoon
March 27, 2025By
admin
The asset management titan Fidelity Investments reportedly plans to roll out its own dollar-backed stablecoin.
Citing two people familiar with the matter, the Financial Times reports that the Boston-based firm with $5 trillion in assets under management (AUM) is now in the advanced stages of testing the crypto asset.
Fidelity’s digital assets arm will manage the stablecoin, which is designed to function as cash in cryptocurrency markets.
The report says the company is launching the stablecoin as part of its expansion into the nascent market for tokenized versions of US Treasury bonds. Last week, the asset manager also submitted a filing to the U.S. Securities and Exchange Commission (SEC) to register a blockchain-based version of the Fidelity Treasury Digital Fund.
The development comes amid Donald Trump’s support for dollar-backed stablecoins. The president has pledged to promote stablecoin growth to strengthen the dominance of the US dollar and urged Congress to pass legislation establishing regulatory clarity for the assets.
Lawmakers are working to pass the Guiding and Establishing National Innovation for U.S. Stablecoins (GENIUS) Act, which restricts what types of investments the assets can use for collateral.
Senator Bill Hagerty (R-TN), who sponsored the bill, says that a regulatory framework for stablecoins can help boost demand for the US Treasury.
“This legislation is a critical first step in establishing a safe and pro-growth regulatory framework that will unleash innovation and advance the President’s mission to make America the world capital of crypto.”
Follow us on X, Facebook and Telegram
Don’t Miss a Beat – Subscribe to get email alerts delivered directly to your inbox
Check Price Action
Surf The Daily Hodl Mix
 

Disclaimer: Opinions expressed at The Daily Hodl are not investment advice. Investors should do their due diligence before making any high-risk investments in Bitcoin, cryptocurrency or digital assets. Please be advised that your transfers and trades are at your own risk, and any losses you may incur are your responsibility. The Daily Hodl does not recommend the buying or selling of any cryptocurrencies or digital assets, nor is The Daily Hodl an investment advisor. Please note that The Daily Hodl participates in affiliate marketing.
Generated Image: Midjourney
Source link
Bitcoin Policy
Proposed Bipartisan Legislation Recognizes Bitcoin As A Technology That Supports Democracy
Published
9 hours agoon
March 27, 2025By
admin
On Wednesday, the office of Rep. Gabe Amo issued a press release stating that Rep. Amo and Rep. Kim (R-CA) reintroduced a bipartisan resolution supporting the use of distributive ledger technologies (DLT), including blockchain, to “support democratic governance, human rights, freedom of information, transparency, and innovation around the world.”
The resolution (the full text of which was not linked to in the press release) urges federal agencies to explore and support DLT and expresses Congress’ commitment to advancing responsible innovation on this technological front.
Rep. Kim commented on the importance of this technology in the press release.
“U.S. leadership in emerging technologies like blockchain not only improves Americans’ lives but also helps us advance transparency in U.S. foreign assistance, human rights, and freedom across the globe,” said Rep. Kim.
“This legislation is vital, especially as we see the Chinese Communist Party exporting its surveillance technologies and authoritarianism abroad. I am proud to join Congressman Amo to lead this bipartisan resolution to ensure the United States shines as a beacon of hope, freedom, and innovation on the world stage,” she added.
The press release also cited how, in Screven County, Georgia, the Bitcoin blockchain was used to safeguard election election results and provide transparency to voters, linking to this article, which tells the story of the event.
Simple Proof, the company that helped Screven County officials commit its vote tallies to the immutable Bitcoin blockchain also recently helped Republicans in Williamson County, Tennessee do the same with the results of its Republican leadership vote.
Simple Proof put itself on the map when it helped to secure the results of the most recent presidential election in Guatemala, the story of which is told in the short documentary Immutable Democracy. Thanks to the vote tallies from the election being safeguarded on the Bitcoin blockchain, the integrity of the election was upheld, despite efforts made to tamper with physical votes once voting had concluded.
The work that the company has done both in the U.S. and abroad is a testament to a point Rep. Amo made in the press release.
“Innovative technology like blockchain helps promote transparency and strengthen democratic institutions around the world,” said the congressman.
While the press release provided evidence of the Bitcoin blockchain being used to preserve democratic values, it didn’t differentiate between Bitcoin and other blockchains, many of which, by design, are less secure.
Source link

Whale Who Netted $108,000,000 Profit on TRUMP Books Loss on the Memecoin After President’s Truth Social Post

Hardware Wallets: Bitcoin’s Biggest Adoption Barrier

SEC Officially Drops Cases Against Kraken, ConsenSys, and Cumberland DRW

Dogecoin could rally in double digits on three conditions

Sei Foundation Explores Buying 23andMe to Put Genetic Data on Blockchain

Coinbase CLO Applauds US SEC Chair Nominee Paul Atkins Ahead of Senate Confirmation

Crypto Pundit Makes Case For Bitcoin Price At $260,000, But This Invalidation Level Threatens The Rally

$16.5B in Bitcoin options expire on Friday — Will BTC price soar above $90K?

$5,000,000,000,000 Asset Manager Fidelity To Launch a USD-Pegged Stablecoin: Report

Proposed Bipartisan Legislation Recognizes Bitcoin As A Technology That Supports Democracy

Wyoming Stablecoin Is Just a State-Issued CBDC by Another Name: Rep. Tom Emmer

Bitcoin faces 70% odds of another drop as April tariff fears shake markets, Nansen says

Political Endorsements Are Driving Rug Pulls

‘Trust the Cycle’ – Pro Says Dogecoin Price Could Suddenly Hit $1

Top Conglomerate Adds 580 $BTC Amid Unprecedented Crypto Popularity. Here’s Why BTC Bull Token Could 100x

Arthur Hayes, Murad’s Prediction For Meme Coins, AI & DeFi Coins For 2025

Expert Sees Bitcoin Dipping To $50K While Bullish Signs Persist

Aptos Leverages Chainlink To Enhance Scalability and Data Access

Bitcoin Could Rally to $80,000 on the Eve of US Elections

Sonic Now ‘Golden Standard’ of Layer-2s After Scaling Transactions to 16,000+ per Second, Says Andre Cronje

Institutional Investors Go All In on Crypto as 57% Plan to Boost Allocations as Bull Run Heats Up, Sygnum Survey Reveals

Crypto’s Big Trump Gamble Is Risky

Ripple-SEC Case Ends, But These 3 Rivals Could Jump 500x

Has The Bitcoin Price Already Peaked?

A16z-backed Espresso announces mainnet launch of core product

Xmas Altcoin Rally Insights by BNM Agent I

Blockchain groups challenge new broker reporting rule

Trump’s Coin Is About As Revolutionary As OneCoin

The Future of Bitcoin: Scaling, Institutional Adoption, and Strategic Reserves with Rich Rines

Is $200,000 a Realistic Bitcoin Price Target for This Cycle?
Trending
- 24/7 Cryptocurrency News5 months ago
Arthur Hayes, Murad’s Prediction For Meme Coins, AI & DeFi Coins For 2025
- Bitcoin2 months ago
Expert Sees Bitcoin Dipping To $50K While Bullish Signs Persist
- 24/7 Cryptocurrency News3 months ago
Aptos Leverages Chainlink To Enhance Scalability and Data Access
- Bitcoin5 months ago
Bitcoin Could Rally to $80,000 on the Eve of US Elections
- Altcoins2 months ago
Sonic Now ‘Golden Standard’ of Layer-2s After Scaling Transactions to 16,000+ per Second, Says Andre Cronje
- Bitcoin4 months ago
Institutional Investors Go All In on Crypto as 57% Plan to Boost Allocations as Bull Run Heats Up, Sygnum Survey Reveals
- Opinion5 months ago
Crypto’s Big Trump Gamble Is Risky
- Price analysis5 months ago
Ripple-SEC Case Ends, But These 3 Rivals Could Jump 500x