Cardano

Solana

Arbitrum

Prime

The smart contract platform Near Protocol contained a weird vulnerability that could have allowed an attacker to crash every node on the network, effectively shutting it down.
According to a Sept. 26 report from blockchain security firm Zellic, which discovered it, the vulnerability was quietly eliminated through a patch in January, but some networks may still contain similar flaws.
In the report, Zellic <a data-ct-non-breakable="null" href="https://www.zellic.io/blog/near-protocol-bug/#conclusion" rel="null" target="null" text="null" title="null">referred </a>to the flaw as a “Web3 Ping of Death” due to its ability to bring down an entire network “in an instant.”
Researchers discovered it while investigating Near’s peer-to-peer networking protocol for validator nodes, which allows its validators to communicate effectively with each other. 
Nodes on the network communicate and authenticate each other via a “handshake” containing one of two types of signatures, Ed25519 and SECP256K1. While verifying the signature for Ed25519 worked fine, verifying SECP256K1 signatures resulted in a “panic” response that crashed the node.
<figure>
 <img alt="DDoS, Cybersecurity, Features" src="https://s3.cointelegraph.com/uploads/2024-10/01926e47-21fb-74be-9a23-5a64fe84804a" title="">
 <figcaption style="text-align: center;">
 A diagram of a peer-to-peer connection established between two peers. Source: Zellic
 </figcaption>
</figure>
Having discovered this flaw, the researchers were surprised that it had not either been caught previously in tests or else crashed the network already. 
The reason was more good luck than good management. It turns out that Near node software has “no code path that allows a Near node to generate SECP256K1 type keys.” In other words, the software allowed nodes to accept SECP256K signatures but didn’t allow them to produce such signatures. 
As a result, no node had ever accidentally crashed the network by creating SECP256K keys and attempting to connect to another node.
Even so, a malicious node could alter the software to allow SECP256K keys to be generated. Once they did, they would have the power to crash any Near node simply by attempting to connect to it. The result could take down the entire network, constituting a “Web3 Ping of Death.”
To prove that the vulnerability was real, the researchers first created a version of the Near software containing a malicious patch that allowed SECP256K keys to be generated. 
<figure>
 <img alt="Near patches critical bug that could crash every node on the network" src="https://s3.cointelegraph.com/uploads/2024-10/01926c4e-2ca7-739a-973f-94405e524fe7" title="">
 <figcaption style="text-align: center;">
 Error-throwing function vulnerability in Near. Source: Zellic
 </figcaption>
</figure>
They then launched two nodes on a private testnet version of Near. The first node ran the legitimate software provided by developers, while the second ran the malicious version. 
After the first node began producing blocks, the second node attempted to crash the first one by exploiting the two vulnerabilities. They found that the malicious node succeeded at crashing the legitimate one every time.
Related: <a data-ct-non-breakable="null" href="https://cointelegraph.com/news/solana-outage-triggers-ballistic-reaction-from-the-crypto-community" rel="null" target="null" text="null" title="https://cointelegraph.com/news/solana-outage-triggers-ballistic-reaction-from-the-crypto-community">Solana outage triggers ballistic reaction from the crypto community</a>
Zellic secretly disclosed the vulnerability to the Near team in December, using HackenProof’s bug bounty platform to facilitate the disclosure. In response, the team paid Zellic a $150,000 reward and patched the node software in January. 
The discovery of the vulnerability provided a happy ending to what otherwise could have been a story of crisis. 
Other blockchains have not been lucky enough to avoid flaws that resulted in crashes. In December, the Arbitrum network <a data-ct-non-breakable="null" href="https://cointelegraph.com/news/arbitrum-network-goes-offline-december-15" rel="null" target="null" text="null" title="null">went down for over 78 minutes</a>, preventing users from making any transactions. 
Developers later revealed that this downtime was caused by a surge of inscription minting, which the network was inadequately prepared to handle.
According to developers, in January, around 50% of Cardano nodes <a data-ct-non-breakable="null" href="https://cointelegraph.com/news/cardano-recovers-from-an-outage-on-50-relay-and-block-producing-nodes" rel="null" target="null" text="null" title="null">went down due to an “anomaly</a>.” The disruption caused block production to slow, giving rise to longer transaction confirmation times. However, it did not cause the entire network to go down. 
In February, the Solana network <a data-ct-non-breakable="null" href="https://cointelegraph.com/news/solana-network-outage-block-production-halted" rel="null" target="null" text="null" title="null">failed to produce a block for over 25 minutes</a>. This was the latest of several Solana crashes, which some users have heavily criticized.
Magazine: <a data-ct-non-breakable="null" href="https://cointelegraph.com/magazine/crypto-scam-investigator-south-korea-us-nk-hackers-asia-express/" rel="" target="_self" text="null" title="https://cointelegraph.com/magazine/crypto-scam-investigator-south-korea-us-nk-hackers-asia-express/">Suspicious arrest of crypto scam reporter, Japan’s pro-crypto PM: Asia Express</a>

Near patches critical bug that could crash every node on the network

Cointelegraph

Other articles published on Oct 8, 2024

Weekly Article Recap: 9/23-9/27

Binance kicks off $10M prize pool in epic “Traders League” showdown

Binance releases its 23rd proof of reserves snapshot dated October 1st

ZachXBT Helps Recover $275K in Bitcoin Stolen by Scammers

Qubetics Advances to Presale Phase 3 as Zignaly Breaks Financial Ground and Solana Drives Crypto ...

Blockchain Security Firm PeckShield Raises Red Flags Over Cardi B’s WAP Memecoin Promotion on X, ...

Join our free newsletter for daily crypto updates!