Cosmos may hold critical vulnerabilities, carries code injections by North Korean hackers

CoinMarketCap10-16

Cosmos (ATOM) may still hold critical vulnerabilities after inheriting code from undercover North Korean hackers posing as developers. Researchers discovered the Cosmos liquid staking module may need ...

Source Link

Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.

Comments

We need your insight to fill this gap

Leave a comment

{"i18n":{"language":"en_US"},"isChannel":false,"data":{"share":"https://ttm.financial/m/news/2475148930?lang=en_US&edition=fundamental","thumbnail":"https://academy-public.coinmarketcap.com/srd-optimized-uploads/303101ff56444122be299ff629ac41fa.webp","is_english":true,"pubTime":"2024-10-16 16:34","share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","id":"2475148930","market":"us","top_or_hot":-1,"title":"Cosmos may hold critical vulnerabilities, carries code injections by North Korean hackers","media":"CoinMarketCap","content":"<div>\n<p>Cosmos (ATOM) may still hold critical vulnerabilities after inheriting code from undercover North Korean hackers posing as developers. Researchers discovered the Cosmos liquid staking module may need ...</p>\n\n<a href=\"https://coinmarketcap.com/community/articles/670f7aadc5229a1368a8d21b/\">Source Link</a>\n\n</div>\n","source":"coinmarketcap_highlight","html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Cosmos may hold critical vulnerabilities, carries code injections by North Korean hackers</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nCosmos may hold critical vulnerabilities, carries code injections by North Korean hackers\n</h2>\n\n<h4 class=\"meta\">\n\n\n2024-10-16 16:34 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://coinmarketcap.com/community/articles/670f7aadc5229a1368a8d21b/><strong>CoinMarketCap</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>Cosmos (ATOM) may still hold critical vulnerabilities after inheriting code from undercover North Korean hackers posing as developers. Researchers discovered the Cosmos liquid staking module may need ...</p>\n\n<a href=\"https://coinmarketcap.com/community/articles/670f7aadc5229a1368a8d21b/\">Source Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","isBrief":false,"type":0,"news_type":1,"symbol":"LUNA","symbol_name":"Luna Innovations Incorporated","start_time":0,"source_url":"https://coinmarketcap.com/community/articles/670f7aadc5229a1368a8d21b/","article_id":"2475148930","we_media_id":null,"thumbnails":["https://academy-public.coinmarketcap.com/srd-optimized-uploads/303101ff56444122be299ff629ac41fa.webp"],"rights":null,"url":"https://stock-news.laohu8.com/highlight/detail?id=2475148930","pubTimestamp":1729067692,"sourceInfo":{"source_id":"coinmarketcap_highlight","name":"CoinMarketCap"},"weMediaInfo":null,"summary":"Cosmos  may still hold critical vulnerabilities after inheriting code from undercover North Korean hackers posing as developers. Researchers discovered the Cosmos liquid staking module may need an overhaul, or risk exposing user funds to exploits.The LSM building started back in 2021, headed by Zaki Manian and the Iqlusion project. Iqlusion has also received funding from the Interchain Foundation  for its activities in developing Cosmos Hub modules.Cosmos community members also presented evidence that the LSM was still relying on the potentially malicious code. Even the rewrite contained significant sections taken from the contributions of the hackers posing as developers. The ATOM liquid staking module allows for malicious actions while avoiding slashing. A hacker could create value within the ecosystem, without facing a penalty on their ATOM stake.Only in October 2024 did Zaki Manian admit of the knowledge of North Korean hackers. Currently, the Cosmos Hub liquid staking continues to","collect":0,"end_time":0,"defaultTopTitle":"coinmarketcap.com","property":[],"viewcount":null,"language":"en","relate_stocks":{"LUNA":"Luna Innovations Incorporated","ICF":"不动产指数ETF-iShares","ATOM":"Atomera Inc","BK4147":"半导体设备","BK4157":"电子设备和仪器"},"translate_title":"Cosmos可能存在关键漏洞，携带朝鲜黑客注入的代码","themeId":null,"isJumpTheme":false,"ttsUrl":null,"symbols_score_info":{"ATOM":1,"ICF":1,"LUNA":1},"content_text":"Cosmos (ATOM) may still hold critical vulnerabilities after inheriting code from undercover North Korean hackers posing as developers. Researchers discovered the Cosmos liquid staking module may need an overhaul, or risk exposing user funds to exploits. \nCosmos (ATOM) may have inherited malicious code after hiring undercover North Korean hackers. The vulnerabilities may still exist in the liquid staking module, potentially exposing funds to exploits. \nThe LSM building started back in 2021, headed by Zaki Manian and the Iqlusion project. Iqlusion has also received funding from the Interchain Foundation (ICF) for its activities in developing Cosmos Hub modules.\nIn August, two more developers joined the project – Jun Kai and Sarawut Sanit, later linked to North Korean hacking operations. Even after the code went through an audit, Kai and Sanit were the ones tasked with fixing the code. The two developers were last active until December 2022, and their affiliation was not discovered until the FBI contacted Zaki Manian with the information.\nVulnerabilities in the LSM module took years to disclose\nIt took years for the Cosmos community to receive the whole information on the codebase process. At some point, the known vulnerability for slashing evasion was supposedly repaired. However, the Cosmos co-founder Jae Kwon and the researchers from AllInBits claim some of the codebase has remained unchanged and may still pose a risk. \nAt the same time, Zaki Manian claimed that the codebase was re-written from scratch, but still does not tie up the loose end of why the code needed to be re-written in the first place. Manian stated that the first LSM was a concept, but the rewriting took a very short time before calling for a vote. \nCosmos community members also presented evidence that the LSM was still relying on the potentially malicious code. Even the rewrite contained significant sections taken from the contributions of the hackers posing as developers. The ATOM liquid staking module allows for malicious actions while avoiding slashing. A hacker could create value within the ecosystem, without facing a penalty on their ATOM stake. \nThe last commit for the LSM was from February 2022, overlapping with the time the hackers were still involved with the code. After September 11, 2023, this version of the code already had 19 months with no audits, but was integrated into the Cosmos hub. \nThe codebase was even voted in by a community proposal, without disclosing the vulnerabilities that were known at that point. The LSM was promoted through the Cosmos hub social media at a time when liquid staking projects were among the most popular crypto narratives. \nOnly in October 2024 did Zaki Manian admit of the knowledge of North Korean hackers. Currently, the Cosmos Hub liquid staking continues to function, with no reported hacks, but the issue remains and researchers are urging a minimum of another audit, if not an entirely new codebase. The need for additional disclosure of risks was also raised, as the issue was suspected long before the full details of the LSM module were systematized. \nCosmos remains safe for other chains and projects\nMost of the value locked on the Cosmos Hub is allocated to liquid staking projects Stride and Stafi. However, the value at risk is relatively low at around $876K. Cosmos Hub, while trying to be a key infrastructure for DeFi and Web3, has lagged behind other projects since the 2022 market crash. \nOutside the LSM, Cosmos remains a reliable carrier for all its ecosystem projects. So far, Cosmos hosts tokens valued at more than $20B, with some of the most prominent AI projects as top assets. The biggest damage to Cosmos was its involvement with Terra (LUNA), now remaining in the form of Terra Classic (LUNC). Other value locked belongs to the additional Cosmos chains, though they are not exposed to ATOM liquid staking. \nCosmos also hosts Celestia (TIA), as well as the recently hot Injective (INJ), among other networks and Web3 projects. The connected side chains are not directly affected based on the LSM vulnerabilities. \nFollowing the news, ATOM extended its slide from the past few weeks, down to $4.43. Staked ATOM is showing a significant price disparity, with Stride Staked Atom trading at $6.34.","kind":null,"is_publish_news":true,"is_publish_highlight":false,"is_publish_live":false,"is_publish_wemedia":null,"editions":null,"column":"","sentiment":"0","news_tag":"","news_rank":0,"symbols":[],"gpt_button":1},"commentList":[],"isCommentEnd":true,"newsSizeData":{"likeSize":0,"commentSize":0,"repostSize":0,"favoriteSize":0,"likeStatus":false,"favoriteStatus":false},"APP":{"userAgent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","isDev":false,"isTTM":true,"deviceId":"web-server-community-laohu8-v3","version":"4.29.1","shortVersion":"4.29.1","platform":"web","vendor":"web","appName":"ttm","isIOS":false,"isAndroid":false,"isTiger":false,"isTHS":false,"isWeiXin":false,"isWeiXinMini":false,"isWeiBo":false,"isQQ":false,"isBaiduSwan":false,"isBaiduBox":false,"isDingTalk":false,"isToutiao":false,"isOnePlus":false,"isHuaWei":false,"isXiaomi":false,"isXiaomiWebView":false,"isOppo":false,"isVivo":false,"isSamsung":false,"isMobile":false},"href":"/m/news/2475148930"}