Security Firm dWallet Labs Uncovers Vulnerability with $1 Billion of Crypto At Risk

Last updated:
Author
Author
Brian Yue
About Author

Last updated:
Why Trust Cryptonews
Cryptonews has covered the cryptocurrency industry topics since 2017, aiming to provide informative insights to our readers. Our journalists and analysts have extensive experience in market analysis and blockchain technologies. We strive to maintain high editorial standards, focusing on factual accuracy and balanced reporting across all areas - from cryptocurrencies and blockchain projects to industry events, products, and technological developments. Our ongoing presence in the industry reflects our commitment to delivering relevant information in the evolving world of digital assets. Read more about Cryptonews
The security firm published a Medium blog post on Tuesday saying that it had discovered a potential vulnerability in validators hosted by infrastructure provider InfStones.
Source: Pixabay

Blockchain security firm dWallet Labs recently unveiled a vulnerability that it asserts has the potential to impact approximately $1 billion worth of crypto.

The security firm published a Medium blog post on Tuesday saying that it had discovered a potential vulnerability in validators hosted by infrastructure provider InfStones.

The post explored attacks on blockchain networks and collecting private keys with Web2 attacks, with dWallet Labs saying owners of cryptocurrencies such as Ether, BNB, SUI, and others could be affected.

“A chain of vulnerabilities we discovered and exploited during our research allowed us to gain full control, run code and extract private keys of hundreds of validators on multiple major networks, potentially leading to direct losses equivalent to over one billion dollars in cryptocurrencies such as ETH, BNB, SUI, APT and many others,” dWallet Labs said.

According to dWallet Labs, a hacker exploiting this vulnerability has the capability to obtain the private keys of validators across various blockchain networks.

“Over one billion dollars of staked assets were staked on all of these validators, and such an attacker would have been able to gain full control of all of them,” it added.

In a statement released on their company blog on November 17, InfStones acknowledged the potential threat highlighted by dWallet Labs, but contested the figures quoted by the blockchain security firm. InfStones said that the vulnerabilities only impacted a fraction of their active nodes, while also clarifying that the vulnerabilities had been resolved.

In its statement, the infrastructure provider said it had identified potential threats in 237 instances. Among these, 212 were nodes designated for testing purposes, while 25 instances affected newly launched nodes.

The company also detailed the immediate actions taken to address the vulnerabilities, including taking down the affected port and similar ones, as well as rotating all credentials and keys within the platform.

Additionally, InfStones conducted an internal review, revealing no additional threats. An external security firm was also hired to audit its systems and company policies.

Darko Radunovic, a representative from InfStones, told Cointelegraph that the potential vulnerability identified by dWallet Labs would only have a limited impact, affecting only a small fraction of the live nodes that InfStones has already launched.

“The instances identified in production constitute a fraction below 0.1% of the live nodes we have launched to date,” Radunovic said in a statement.

 

More Articles

Price Analysis
$TRUMP Pumping Over 20% This Week: Presidential Memecoin Back for Good?
Arslan Butt
Arslan Butt
2025-02-15 15:26:50
Price Analysis
Study Predicts Bitcoin Surge to $1M by Early 2027: Is That Possible?
Arslan Butt
Arslan Butt
2025-02-15 14:45:43
Crypto News in numbers
editors
Authors List + 66 More
2M+
Active Monthly Users Around the World
250+
Guides and Reviews Articles
8
Years on the Market
70
International Team Authors