ChainCatcher news, the Cosmos ecosystem DEX Osmosis announced on platform X that the Osmosis chain has resumed block production after being down for about 2 hours, and node operators should perform the v26.0.1 patch upgrade.ChainCatcher previously reported that DEX Osmosis stated on X that there was a chain interruption after the v26 upgrade. Core contributors are investigating the root cause. The chain will resume operation as soon as possible and provide regular updates.

ChainCatcher news, Solana Foundation Executive Director Dan Albert responded to concerns about the decentralization of the network. He stated that the ability to coordinate patches does not mean that the Solana network is centralized.On August 9, Solana validator nodes discovered a serious vulnerability and coordinated a fix behind the scenes to avoid a network crash. The distribution and coordination of the patches were conducted behind the scenes. Albert emphasized that this should not be confused with centralization. He pointed out that there are 1,500 block production nodes globally, operated by numerous individuals, and the patches are open source, maintaining the characteristics of network decentralization.

ChainCatcher message, Illuvium announced on social media that Illuvium Zero Patch 1.0.4 is now live.It is reported that this patch aligns the fuel supply of land more closely with current demand. Although this is a more significant update, it only applies to the backend system, so there is no need to download a new client. Simply restart the game.

ChainCatcher news, according to The Block, Solana developers, validators, and client teams have come together to address a serious security vulnerability.Solana validator Laine stated that the process began on August 7, when the Solana Foundation contacted well-known network operators through private channels. This contact was part of a secret patching strategy aimed at preventing the vulnerability from being exploited in any way. The patch was provided through Anza engineers' GitHub repository, allowing operators to independently verify and apply the changes. As of 14:00 UTC on Thursday, August 8, detailed instructions for implementing the patch had been distributed to stakeholders, ultimately ensuring 66.6% of the network's stake. The vulnerability was publicly disclosed only after 70% of the network had implemented the patch.

ChainCatcher message, Terra tweeted that the Terra chain briefly halted at block height 11430400, during which no transactions will be processed. Terra will work with validators on Terra (phoenix-1) and subsequently apply an emergency patch to fix the suspected vulnerability.

ChainCatcher message, Casper blockchain has released a security incident update, having discovered a security vulnerability on July 26. Currently, the number of affected accounts has been confirmed to be fewer than 15. The Casper team has developed a patch and is currently testing it. To prevent further losses, the validator community has decided to suspend consensus and block production.The Casper network remains online, and consensus and validation will resume after the patch is released and verified. The Casper Association will conduct a comprehensive investigation and work with relevant authorities to recover any unauthorized transfers of funds.

ChainCatcher message, CrowdStrike founder George Kurtz posted on the X platform that CrowdStrike is actively working with customers affected by the Windows host content update defect. Mac and Linux hosts are not affected, this incident is not a security incident or cyber attack, the issue has been identified, isolated, and a fix has been deployed. CrowdStrike advises customers to visit the support portal for the latest information and to communicate with CrowdStrike representatives through official channels. The company team has been fully mobilized to ensure the safety and stability of customers.

ChainCatcher news, Solana's new software development company Anza tweeted that it has made significant progress after collaborating with core contributors to analyze the root causes of Solana network congestion and evaluate multiple potential changes, with hopes to start releasing fixes next week. In addition, the Anza team tested a patch for the current network congestion yesterday. The officials stated that the core issues are related to the QUIC implementation and the behavior of the Agave validator client when handling a large number of requests. The team will roll out more improvements and changes over the coming months.

ChainCatcher news, CertiK tweeted that a significant vulnerability has been discovered in the smart contract platform CosmWasm within the Cosmos ecosystem, which could lead to a network-wide outage. They have promptly reported it and collaborated with the CosmWasm team to release an effective patch, and have notified potentially affected application chains to ensure preventive measures are taken to address the issue without impacting users.

ChainCatcher news, the ARC20 project Atomicals Protocol announced that it will create a patch to address the current instability and speed issues of the indexer. The patch has improved the speed of decentralized minting (DFT) by 20 times in testing. The improvements are awaiting confirmation and will be merged into the version within a day.

ChainCatcher message, Telcoin has released a security incident update on platform X: "The root cause has been identified; it is not an issue with the Telcoin wallet code itself, but rather a problem with the proxy implementation of the wallet on Polygon, primarily affecting wallets that have never initiated a transaction. A fix has been deployed to prevent further exploitation. We plan to restore all wallets to their previous balances (for all affected assets) before restarting the application services, which may take some time. No keys, backend systems, or user data have been compromised."Previously reported, the Telcoin wallet was attacked with an estimated loss of $1.2 million.

ChainCatcher news, cryptocurrency custody platform Fireblocks stated that it recently discovered an ERC-4337 account abstraction vulnerability in the smart contract wallet UniPass. This vulnerability allows attackers to fully take over the UniPass wallet by replacing the wallet's trusted EntryPoint to activate the account abstraction module. Once the account takeover is complete, the attacker can treat the wallet as their own and steal all the funds within it. The vulnerability has now been fixed in collaboration between both parties.

ChainCatcher message, the latest update of Aave V2 has rendered approximately $110 million of WETH, USDT, WBTC, and WMATIC on Aave V2 on Polygon unable to be withdrawn, borrowed, or repaid.Currently, Aave has submitted a patch to fix this issue, which will be deployed after the vote passes. The reason for the issue is that the Polygon implementation of Aave V2 used a slightly different function definition list for its interest rate strategy contract, resulting in a bug after the update.bgdlabs indicates that the current points to note include: only Aave v2 Polygon is affected, all other Aave v2 instances (including v2 Ethereum and Avalanche) are functioning normally, and Aave v3 is completely fine; all funds in the pool are absolutely safe; it is currently not recommended to pause the pool through Aave Guardian (the only available mechanism). (source link)

ChainCatcher news, Ethereum Beacon Chain community health advisor superphiz.eth posted on social media that Ethereum developers have deployed a fix for the Ethereum clients Teku and Prysm to prevent attestation flooding, addressing the recent finality issues affecting the Ethereum Beacon Chain and restoring network stability. The Ethereum Foundation stated in a blog post that the root cause of the finality issues is still under investigation, but "it appears to be caused by high load on certain consensus layer clients, which in turn was triggered by an anomaly."ChainCatcher previously reported that the Beacon Chain experienced a block production halt on Friday and early Saturday. (source link)

ChainCatcher message, Ethereum client Prysm released hotfix v4.0.3, which includes necessary optimizations to prevent beacon chain nodes from using excessive resources during network instability. If users' node usage is high, an upgrade is recommended. Additionally, Prysm will release the official single-point version earlier next week. (source link)

ChainCatcher news, Microsoft has released a patch to fix 38 security vulnerabilities, among which the vulnerability coded "CVE-2023-29336" allows attackers to gain system privileges; "CVE-2023-29325" is a remote code execution vulnerability that enables attackers to compromise victims' devices by sending specially crafted emails. (source link)

ChainCatcher news, the NFT lending protocol ParaSpace officially announced that the review and testing of the security patch have been completed to ensure the safety of user assets when the protocol is restarted on the mainnet. The withdrawal time lock contract is being improved and will undergo review and testing in the coming days. The ParaSpace team has decided to reopen the protocol in phases, prioritizing enhancements for repayments, supply, liquidation, loans, withdrawals, and time locks. The team expects all platform functions to be online by March 25. The repayment function of the first phase of the platform has already been launched, aiming to provide users with the opportunity to repay their debts while liquidation remains suspended.The ParaSpace team will begin manually claiming and compounding APE staking rewards in the APE pool for users until the protocol goes live. Only users holding APE in the APE pool will continue to earn automatic compounding rewards during the phased reopening. ParaSpace will later share details of the reward plan for users affected by the protocol suspension and phased rollout, operational changes, and future incentive plans for continued use of the platform. (Source link)

ChainCatcher message, in response to the attack incident this afternoon, the NFT lending protocol ParaSpace stated that it has identified the cause of the vulnerability exploitation that occurred early in the ParaSpace protocol with BlockSec. Currently, all user funds and assets on ParaSpace are safe and secure, and no NFTs have been harmed, with minimal economic losses to the protocol.The total loss of the protocol is approximately 50 - 150 ETH, which is due to slippage caused by the exchange between tokens during the exploitation process. ParaSpace will refund these funds back into the protocol to ensure no assets are lost.The team is currently patching the identified vulnerabilities and will pause the protocol during this period. ParaSpace will provide a timeline for when the protocol can be restored on the mainnet as soon as possible and will release a complete post-mortem analysis later today regarding the attack and protocol security enhancements (including a time lock for large withdrawals).Additionally, ParaSpace stated that team members will not DM users links to resolve the attack issue, reminding users to be vigilant against scams. (Source link)