1/ Chinese Internet security giant 360 has found "a series of epic vulnerabilities" in the #EOS platform. Some of the bugs allow arbitrary code to be executed remotely on EOS nodes and even taking full control of the nodes.
Source (in Chinese): weibo.com/ttarticle/p/sh…
Source (in Chinese): weibo.com/ttarticle/p/sh…
2/ According to their Weibo (Chinese Twitter), 360 reported the bugs to the EOS team. "The person in charge of the EOS network said that the EOS network will not be officially launched until these issues are fixed."
3/ 360: attacker can deploy smart contracts w/ malicious code to EOS super node, which will execute the contract and trigger a security bug. Once the contract is included in a new block, all full nodes including backup nodes, exchges, wallet nodes, are all susceptible to attack.
4/ On their weibo, 360 then urges the teams and companies in this industry to pay more attention to the security of blockchain projects, as more vulnerabilities could also be found on other cryptocurrencies in future.
5/ English version (Google translation) of the report by 360 company on discovering EOS vulnerabilities, posted by /u/ezpzfan324:
reddit.com/r/CryptoCurren…
reddit.com/r/CryptoCurren…
