Paweł Płatek
Summary: Trail of Bits researchers Paweł Płatek and Denys Pakizh reported a bug in Provenance Blockchain, a public proof-of-stake chain built on Cosmos SDK, that lets any user grant themselves admin control over marker accounts without holding a single token. The same author index lists other Trail of Bits work, including notes on AWS Nitro Enclaves KMS integration, a Rust testing handbook chapter, and a CodeQL query that cut 2,500+ compiler warnings in OpenVPN2 to 20 high-priority cases.
Key Takeaway: A public proof-of-stake chain where any user can seize admin control of marker accounts without holding a single token puts the integrity of on-chain asset issuance in the hands of anyone who finds the same divergence.
Read the original at Trail of Bits Blog ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026