In recent months, the buzz around a potential bitcoin exchange-traded fund (ETF) has surged, echoing in its climbing price. But the enthusiasm isn’t universal. Some fear a spot bitcoin ETF could make BTC vulnerable, much like the gold and silver markets. The approval might open doors to manipulative practices reminiscent of those alleged in precious […]
Protocols Must Deploy “Asymmetric Countermeasures” to Counter Code Vulnerability Exploiting Hackers — Spherex CEO
While both attackers and smart contract auditors are motivated to find vulnerabilities in code, according to Eyal Meron, the co-founder and CEO of Spherex, the former “is always more incentivized as the protocol’s total value locked (TVL) grows.” To overcome this challenge, Meron told Bitcoin.com News that decentralized protocols will need to put in place […]
Kadence Blocks 3.1.11 Patches Critical Vulnerability
The Kadence Blocks plugin, which is used on more than 300,000 WordPress sites, has patched a critical vulnerability in its Advanced Form Block file upload capability. Version 3.1.11, released on August 8, 2023, patches the security issue with the form uploads. The plugin’s development team is getting out ahead of the situation …
Certik Uncovers Security Vulnerability in Worldcoin’s Verification Process
On May 29, 2023, Certik, a blockchain and smart contract auditing firm, reported a critical security vulnerability within Worldcoin’s verification process. This flaw could have allowed attackers to bypass strict identification measures and operate an Orb, a device used to collect users’ iris information. The revelation comes amidst existing complaints regarding Worldcoin’s data collection practices […]
All-In-One Security Plugin Patches Sensitive Data Exposure Vulnerability in Version 5.2.0
All-In-One Security (AIOS), a plugin active on more than a million WordPress sites, was found to be logging plaintext passwords from login attempts in the database and has patched the security issue in version 5.2.0. In a post titled “Cleartext passwords written to aiowps_audit_log” published to the plugin’s support forum two weeks …