TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

A Post Mortem of The Burning Bug

28 点作者 kushti超过 6 年前

2 条评论

merlincorey超过 6 年前
Quite a novel attack originally reported on Reddit.<p>Basically, it was possible to use a bug in the wallet software to send multiple outputs to the same stealth wallet, potentially allowing an attacker to cheaply burn a large amount of someone else&#x27;s tokens, on account of the wallet simplying ignoring the issue.<p>This has now been fixed. Great work from the Monero team.
评论 #18071541 未加载
olliej超过 6 年前
Can someone eli5? I couldn’t work out whether this is an attack on exchanges (modifying the client to reuse a key in a way that the exchange doesn’t check for) or something else.<p>The repeated use of “organization” made me initially think that this was an attack on a “foundation” (tor, eff, Mozilla, etc that kind of thing), but by the end I felt that it was meaning organization==exchange? If so I assume it would be an attack on exchanges prematurely believing a transaction succeeded? But seriously I’m curious what the actual correct interpretation is :)
评论 #18072503 未加载