Parity: ETH Freeze “Could Have Been Avoided”
Posted: Thu Nov 16, 2017 8:41 am
Nearly 600 users of the Parity Hardware Wallet lost access to their ETH tokens when an unknown hacker exploited a vulnerability in the company’s code on November 6th. In a recently released Post Mortem detailing the exploitation and the subsequent steps that Parity has taken, the company acknowledged that the team knew about the vulnerability well before the exploitation occurred.
According to the Post Mortem, a Github contributor suggested the change that would have prevented this freeze from happening. Preceding the incident, the initWallet code (the code in question) was considered to be a mere “convenience enhancement.” While the Parity team ... (read more)