Simone Monica
Summary: Trail of Bits researchers identified and reported a vulnerability in the Lotus and Venus clients of the Filecoin network that let an attacker remotely crash a node and trigger a denial of service, caused by incorrect validation of an index that produced an index out-of-range panic. A separate post covers the August 18, 2021 disclosure by samczsun of a critical vulnerability in SushiSwap's MISO smart contracts that put roughly 350 million USD (109 thousand ETH) at risk, similar to an attack on the Opyn codebase in August 2020.
What you should know: A single unvalidated index was enough to let an attacker remotely crash Filecoin nodes, and the MISO flaw put roughly 350 million USD at risk - both cases where a small code-level defect carried network-scale or nine-figure consequences.
Read the original at Trail of Bits Blog ↗
- Topics
- Endpoint & Network Security
- Related
- Adapting to AI penetration testing orchestrators: The Modern Security Model Cyber Risks · Nov 13, 2026Introducing Spend Management: Spending limits and alerts for Cloudflare Cyber Risks · Nov 13, 2026Choosing Que Paxa, an unusual consensus algorithm Cyber Risks · Nov 11, 2026