- Buy Crypto
- Markets
Futures- Spot
- Copy Trade
- Earn
- More
Solana Fixes Confidential Token Vulnerability
By: bitcoin ethereum news|2025/05/05 16:45:01
0
Share
Solana Foundation fixes bug affecting Token-2022 and ZK ElGamal Proof that could have permitted unauthorized minting. Due to this bug, the attackers could have targeted the unhashed components by creating a fake identity that easily passes verification. The Solana Foundation has recently encountered a bug that allowed hackers to mint some tokens and even take those tokens from users’ accounts. However, the bug has been reportedly fixed now. The Foundation’s analysis reveals that the vulnerability was first found on April 16, and it could have permitted a hacker to proceed with an invalid proof affecting the privacy of the blockchain platform, permitting Token-22 confidential tokens. Also, it mentioned that no known exploit of the vulnerability has been reported, and since then, the validators of Solana have adopted the patched version. The bug primarily bothered two programs, Token-2022 and ZK ElGamal Proof. Token-2022 is responsible for managing the main app logic for token mints and accounts. On the other hand, ZK ElGamal Proof verified the accuracy of zero-knowledge proofs to show precise account balances. As per the foundation, some algebraic components were removed from the hash in the Fiat-Shamir Transformation’s transcript generation, which identifies the creation of public randomness using a cryptographic hash function. Due to this bug, the attackers could have targeted the unhashed components by creating a fake identity that easily passes verification to mint and steal Token-22 confidential tokens. To resolve this major issue, two patches were placed. The Centralization Scrutiny A lot of Solana validators, including Anza, Firedancer, and Jit,o adopted the patches after two days of encountering the issue. Other firms such as Asymmetric Research, Neodyme, and OtterSec also facilitated it. The Foundation also noted that no funds have been tampered with and it is safe till now. Regardless of this, the validators have raised centralization concerns within the crypto community. One of them was a Curve Finance contributor who was concerned about the close relationship of the Foundation with Solana validators. It mentioned that the main issue is that everything was done privately, and now the bad actors already know that these channels exist, and it is a centralized point of failure in a decentralized system. Highlighted Crypto News Today: Arizona Governor Blocks Bill to Hold Bitcoin in State Reserves Source: https://thenewscrypto.com/solana-fixes-confidential-token-vulnerability-sparks-centralization-debate/
You may also like
The little deer live by the water and grass
Mining companies have never been the most devout believers in Bitcoin. Under the pressures of halving compressing profits, financial reports showing revenue growth without profit increase, and coin prices falling below mining costs, the industry is collectively de-risking.
The world belongs to Chinese people who speak English
The world is vast, and only playing half of it is truly a loss.
Why Stop at 126K? Michael Saylor Breaks Down BTC Stagnation and Retail Absence Truth
Bitcoin is digital capital, and I will spend a thousand hours explaining it to you. Eventually, you will understand, but you will still have to endure a 45% crash.
Virtuals Protocol's inaugural Titan project: ROBO aims to give a wallet to a robot
This is a key step in Virtuals expanding the Agent Economy into the Embodied AI and Robotics field.
Stablecoin Latest Report: Actual Distribution and Circulation Much More Notable Than Supply
The Truth about Stablecoin Circulation Speed, Concentration, and Structure After Doubling the Supply
Paradigm's New Arithmetic: When Crypto Can't Hold 12.7 Billion, AI Becomes the Answer
It took Paradigm three years to emerge from the ruins of FTX.
Wintermute Founder: In the Lost Cryptocurrency Market, What Can We Still Do?
This is more like a manifesto, discussing "the very reason we are here."
$1.3 Billion Debt: BitDeer Faces Tough Battle
Wu Jihan is waiting for AI's money to catch up with the speed of debt.
Anthropic's IPO Gamble: At the Most Unlikely Moment, It Chose to Say No
In the AI Era, what is the most valuable thing?
Paradigm's Math Problem: $12.7 Billion, Too Big for a Single Crypto Fund
Emerging from the ruins of FTX, Paradigm took three years
Ethereum Unveils Scaling Roadmap, What's Different This Time?
Short-term improvements to execution efficiency through the Gas mechanism optimization and block validation parallelization, and long-term scalability through ZK-EVM and blobs data architecture.
Anthropic Ban Wave, OpenAI $100 Billion Funding Controversy: What Is the Overseas Crypto Community Talking About Today?
What Have Foreigners Been Most Interested in Over the Last 24 Hours?
Morning News | OpenAI receives $110 billion investment; Solana launches Solana Payments; M0, MoonPay, and PayPal jointly launch PYUSDx
Overview of Important Market Events on February 27
Bloomberg: A Romanian Presidential Election Intervened by Crypto Traders
The puzzle of the Romanian elections under digital manipulation.
Founders Fund, Pantera, and Franklin Templeton join Sentient's "Arena" to stress test enterprise-level AI agents
Sentient is gathering builders and supporters from around the world (including Founders Fund, Pantera, Franklin Templeton, alphaXiv, Fireworks, OpenRouter, etc.) to jointly address the reasoning capability gap in enterprise AI.
Why Retail Is Shifting From Crypto to Equities: Will They Return?
Retail traders are exiting the crypto market and gravitating towards equities. Bitcoin saw a notable reduction in spot…
Canton Crypto Network vs. XRP: Understanding DTCC’s Strategic Approach to Infrastructure and Liquidity
Key Takeaways Canton Network and XRP serve distinct roles in blockchain technology: Canton for asset tokenization and atomic…
Jack Dorsey’s Block to Cut 4,000 Jobs in AI-Driven Restructuring
Key Takeaways Block’s significant job cuts aim to streamline operations for AI-driven growth. The company’s stock surged over…
The little deer live by the water and grass
Mining companies have never been the most devout believers in Bitcoin. Under the pressures of halving compressing profits, financial reports showing revenue growth without profit increase, and coin prices falling below mining costs, the industry is collectively de-risking.
The world belongs to Chinese people who speak English
The world is vast, and only playing half of it is truly a loss.
Why Stop at 126K? Michael Saylor Breaks Down BTC Stagnation and Retail Absence Truth
Bitcoin is digital capital, and I will spend a thousand hours explaining it to you. Eventually, you will understand, but you will still have to endure a 45% crash.
Virtuals Protocol's inaugural Titan project: ROBO aims to give a wallet to a robot
This is a key step in Virtuals expanding the Agent Economy into the Embodied AI and Robotics field.
Stablecoin Latest Report: Actual Distribution and Circulation Much More Notable Than Supply
The Truth about Stablecoin Circulation Speed, Concentration, and Structure After Doubling the Supply
Paradigm's New Arithmetic: When Crypto Can't Hold 12.7 Billion, AI Becomes the Answer
It took Paradigm three years to emerge from the ruins of FTX.
App