create account

Parity Multisig Issue: A user exploited an issue and thus removed the library code, as it seems unaware of the consequences. by avadhoot

View this thread on: hive.blogpeakd.comecency.com
· @avadhoot ·
$0.03
Parity Multisig Issue: A user exploited an issue and thus removed the library code, as it seems unaware of the consequences.
As noted [here](https://paritytech.io/blog/security-alert.html), parity multisig wallets deployed after 20th July are affected through a vulnerability in the Parity Wallet library contract.

It was possible to turn the Parity Wallet library contract into a regular multi-sig wallet and become an owner of it by calling the initWallet function. It would seem that issue was triggered accidentally 6th Nov 2017 02:33:47 PM +UTC and subsequently a user suicided the library-turned-into-wallet, wiping out the library code which in turn rendered all multi-sig contracts unusable since their logic (any state-modifying function) was inside the library.

This froze funds in all Parity multi-sig wallets deployed after 20 July. The funds in these multisig wallets can not be moved.

This is second time in very short period of time that parity multisig wallets are severely affected. 

The situation is currently being analysed by Parity team & I'll update the post as soon as there is any update.

This calls for a discussion:
1. Is ledger nano S a better wallet than Parity multisig wallets?
2. Does this call for a hard fork?
👍  , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , ,
properties (23)
authoravadhoot
permlinkparity-multisig-issue-a-user-exploited-an-issue-and-thus-removed-the-library-code-as-it-seems-unaware-of-the-consequences
categoryethereum
json_metadata{"tags":["ethereum"],"links":["https://paritytech.io/blog/security-alert.html"],"app":"steemit/0.1","format":"markdown"}
created2017-11-07 13:54:51
last_update2017-11-07 13:54:51
depth0
children1
last_payout2017-11-14 13:54:51
cashout_time1969-12-31 23:59:59
total_payout_value0.028 HBD
curator_payout_value0.000 HBD
pending_payout_value0.000 HBD
promoted0.000 HBD
body_length1,122
author_reputation2,591,582,117
root_title"Parity Multisig Issue: A user exploited an issue and thus removed the library code, as it seems unaware of the consequences."
beneficiaries[]
max_accepted_payout1,000,000.000 HBD
percent_hbd10,000
post_id19,695,894
net_rshares14,369,768,210
author_curate_reward""
vote details (35)
@steemitboard ·
Congratulations @avadhoot! You received a personal award!

<table><tr><td>https://steemitimages.com/70x70/http://steemitboard.com/@avadhoot/birthday2.png</td><td>Happy Birthday! - You are on the Steem blockchain for 2 years!</td></tr></table>

<sub>_You can view [your badges on your Steem Board](https://steemitboard.com/@avadhoot) and compare to others on the [Steem Ranking](http://steemitboard.com/ranking/index.php?name=avadhoot)_</sub>


###### [Vote for @Steemitboard as a witness](https://v2.steemconnect.com/sign/account-witness-vote?witness=steemitboard&approve=1) to get one more award and increased upvotes!
properties (22)
authorsteemitboard
permlinksteemitboard-notify-avadhoot-20190520t154532000z
categoryethereum
json_metadata{"image":["https://steemitboard.com/img/notify.png"]}
created2019-05-20 15:45:33
last_update2019-05-20 15:45:33
depth1
children0
last_payout2019-05-27 15:45:33
cashout_time1969-12-31 23:59:59
total_payout_value0.000 HBD
curator_payout_value0.000 HBD
pending_payout_value0.000 HBD
promoted0.000 HBD
body_length619
author_reputation38,975,615,169,260
root_title"Parity Multisig Issue: A user exploited an issue and thus removed the library code, as it seems unaware of the consequences."
beneficiaries[]
max_accepted_payout1,000,000.000 HBD
percent_hbd10,000
post_id85,191,962
net_rshares0