A hacker exploited a critical vulnerability in the Dogecoin network, causing 69% of its nodes to crash.
黑客利用狗狗币网络中的一个严重漏洞,导致其 69% 的节点崩溃。
On December 12th, Andreas Kohl, co-founder of Bitcoin sidechain Sequentia, claimed responsibility for crashing 69% of Dogecoin's network.
12 月 12 日,比特币侧链 Sequentia 联合创始人 Andreas Kohl 声称对狗狗币网络 69% 的崩溃负责。
Kohl revealed that he used an old laptop in El Salvador to carry out the exploit.
科尔透露,他在萨尔瓦多使用一台旧笔记本电脑来实施该漏洞。
Before the attack, data from Blockchair showed Dogecoin had 647 active nodes.
在攻击发生之前,Blockchair 的数据显示狗狗币有 647 个活跃节点。
Following the breach, the network was reduced to 315 active nodes.
漏洞发生后,网络活跃节点减少至 315 个。
Kohl explained that the exploit leveraged a vulnerability discovered by researcher Tobias Ruck.
Kohl 解释说,该漏洞利用了研究员 Tobias Ruck 发现的漏洞。
DogeReaper: A Fatal Flaw
DogeReaper:致命缺陷
On December 4th, an X account called "Department Of DOGE Efficiency" publicly disclosed a vulnerability in the Dogecoin network that could have crashed it entirely.
12 月 4 日,一个名为“DOGE Efficiency 部门”的 X 账户公开披露了狗狗币网络中的一个漏洞,该漏洞可能导致其完全崩溃。
The vulnerability, dubbed "DogeReaper," enables anyone to remotely crash Dogecoin nodes.
该漏洞被称为“DogeReaper”,任何人都可以远程破坏狗狗币节点。
The account likened the flaw to the "Death Note" concept from Japanese manga and anime, where writing someone's name in a notebook leads to their death by heart attack. Similarly, DogeReaper allows attackers to target a node's address, causing it to fail due to a segmentation fault.
该帐户将该缺陷比作日本漫画和动画中的“死亡笔记”概念,即在笔记本上写下某人的名字会导致该人因心脏病而死亡。同样,DogeReaper 允许攻击者瞄准节点地址,导致节点因分段错误而失败。
In computing, a segmentation fault occurs when a program tries to access restricted memory, prompting the operating system to halt the program for safety.
在计算中,当程序尝试访问受限内存时,就会发生分段错误,从而促使操作系统出于安全考虑而停止程序。
The account warned that because Dogecoin node addresses are public, "anyone could crash the entire Dogecoin network in an instant" using this vulnerability.
该帐户警告说,由于狗狗币节点地址是公开的,因此“任何人都可以利用此漏洞立即使整个狗狗币网络崩溃”。
"If a malicious actor had discovered this bug instead of us, they could have stopped the Dogecoin network for at least a few days, with no transactions or blocks," the account stated.
该帐户表示:“如果恶意行为者而不是我们发现了这个错误,他们可能会阻止狗狗币网络至少几天,没有交易或区块。”
Despite the significant potential for damage, the account reported that Coinbase classified the vulnerability as low severity and rewarded Tobias Ruck with $200 for the discovery.
尽管造成损害的可能性很大,但该帐户报告称,Coinbase 将该漏洞归类为低严重性,并奖励 Tobias Ruck 200 美元以奖励其发现。