• Latest
  • Trending
Fireblocks, UniPass Wallet tackle Ethereum ERC-4337 account abstraction vulnerability

Fireblocks, UniPass Wallet tackle Ethereum ERC-4337 account abstraction vulnerability

October 27, 2023
Altcoins Lead Post-Fed Crypto Rally as Risk Appetite Increases – Yahoo Finance

XRP, Shiba Inu, and More: Here are Top 6 Altcoins Priced Below $1 to Watch for Next Bull Run – The Crypto Basic

October 31, 2023
Altcoins Lead Post-Fed Crypto Rally as Risk Appetite Increases – Yahoo Finance

Zodia Custody expands in Hong Kong, receives VASP in Ireland … – Tekedia

October 31, 2023
Altcoins Lead Post-Fed Crypto Rally as Risk Appetite Increases – Yahoo Finance

Why Altcoins and Crypto Stocks Were Flying High Today – The Motley Fool

October 30, 2023
Altcoins Lead Post-Fed Crypto Rally as Risk Appetite Increases – Yahoo Finance

Embracing the crypto evolution: Institutional adaptation and the … – Arabian Business

October 30, 2023
Altcoins Lead Post-Fed Crypto Rally as Risk Appetite Increases – Yahoo Finance

Acala Spikes 5% on Binance's New Altcoin Pairs News — Can ACA … – CCN.com

October 30, 2023
Altcoins Lead Post-Fed Crypto Rally as Risk Appetite Increases – Yahoo Finance

Bitcoin Spark, BNB, and Toncoin: Price Outlook in Upcoming Bull Run – CryptoPotato

October 30, 2023
Altcoins Lead Post-Fed Crypto Rally as Risk Appetite Increases – Yahoo Finance

Crypto Price Today: Bitcoin holds $34,000; Ethereum slips below $1,800; most altcoins up – Business Today

October 30, 2023
Altcoins Lead Post-Fed Crypto Rally as Risk Appetite Increases – Yahoo Finance

The Next Bull Market Is Approaching: Sparking Opportunities For … – CryptoPotato

October 30, 2023
Altcoins Lead Post-Fed Crypto Rally as Risk Appetite Increases – Yahoo Finance

Crypto Analyst Benjamin Cowen Says Fed Pivot and Altcoin Rallies Won’t Happen Until This Occurs – The Daily Hodl

October 29, 2023
Altcoins Lead Post-Fed Crypto Rally as Risk Appetite Increases – Yahoo Finance

Litecoin Pronóstico del Precio: LTC insinúa una corrección del 15% si se cumplen estas condiciones clave – FXStreet

October 29, 2023
Altcoins Lead Post-Fed Crypto Rally as Risk Appetite Increases – Yahoo Finance

Brazil's USDT adoption soars in 2023, makes up 80% of all crypto transactions – Cointelegraph

October 29, 2023
Altcoins Lead Post-Fed Crypto Rally as Risk Appetite Increases – Yahoo Finance

Can Presales Like Scorpion Casino Token Match the Historic … – NewsWatch

October 29, 2023
Tuesday, July 1, 2025
EGROW ONLINE
  • Home
  • Cryptocurrency
  • Bitcoin
  • Ethereum
  • Blockchain
  • Altcoins
  • ADA
  • Litecoin
  • Dogecoin
  • ICO
  • Ripple
  • Market & Analysis
  • Videos
No Result
View All Result
EGROW ONLINE
No Result
View All Result

Fireblocks, UniPass Wallet tackle Ethereum ERC-4337 account abstraction vulnerability

by admin
October 27, 2023
in Ethereum
0



Cryptocurrency infrastructure firm Fireblocks has identified and assisted in tackling what it describes as the first account abstraction vulnerability within the Ethereum ecosystem.

An announcement on Oct. 26 unpacked the discovery of an ERC-4337 account abstraction vulnerability in the smart contract wallet UniPass. The two firms worked together to address the vulnerability, which was reportedly found in hundreds of mainnet wallets during a white hat hacking operation.

According to Fireblocks, the vulnerability would allow a potential attacker to carry out a full account takeover of the UniPass Wallet by manipulating Ethereum’s account abstraction process.

As per Ethereum’s developer documentation on ERC-4337, account abstraction allows for a shift in the way transactions and smart contracts are processed by the blockchain to provide flexibility and efficiency.

Related: Account abstraction will drive a billion users from Asia to Web3: Consensys exec

Conventional Ethereum transactions involve two types of accounts: externally owned accounts (EOAs) and contract accounts. EOAs are controlled by private keys and can initiate transactions, while contract accounts are controlled by the code of a smart contract. When an EOA sends a transaction to a contract account, it triggers the execution of the contract’s code.

Account abstraction introduces the idea of a meta-transaction or more generalized abstracted accounts. Abstracted accounts are not tied to a specific private key and are able to initiate transactions and interact with smart contracts, just like an EOA.

As Fireblocks explains, when an ERC-4337-compliant account executes an action, it relies on the Entrypoint contract to ensure that only signed transactions get executed. These accounts typically trust an audited single EntryPoint contract to ensure that it receives permission from the account before executing a command:

“It’s important to note that a malicious or buggy entrypoint could, in theory, skip the call to “validateUserOp” and just call the execution function directly, as the only restriction it has is that it’s called from the trusted EntryPoint.”

According to Fireblocks, the vulnerability allowed an attacker to gain control of UniPass wallets by replacing the trusted EntryPoint of the wallet. Once the account takeover was complete, an attacker would be able to access the wallet and drain its funds.

Several hundred users who had the ERC-4337 module activated in their wallets were vulnerable to the attack, which could be performed by any actor on the blockchain. The wallets in question only held small amounts of funds, and the issue has been mitigated at an early stage.

Having ascertained that the vulnerability could be exploited, Fireblocks’ research team managed to carry out a white hat operation to patch the existing vulnerabilities. This involved actually exploiting the vulnerability:

“We shared this idea with the UniPass team, who took it upon themselves to implement and run the whitehat operation.”

Ethereum co-founder Vitalik Buterin previously outlined challenges in expediting the proliferation of account abstraction functionality, which includes the need for an Ethereum Improvement Proposal (EIP) to upgrade EOAs into smart contracts and ensure the protocol works on layer-2 solutions.

Magazine: Ethereum restaking: Blockchain innovation or dangerous house of cards?



Source link

YOU MAY ALSO LIKE

Ethereum L2s Surprisingly Set New ATH – U.Today

A case for Web3 social media, and is Friend.tech a security?

Tags: AbstractionaccountERC4337EthereumFireblockstackleUniPassvulnerabilityWallet
ShareTweetPin

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Search

No Result
View All Result

Recent News

Altcoins Lead Post-Fed Crypto Rally as Risk Appetite Increases – Yahoo Finance

XRP, Shiba Inu, and More: Here are Top 6 Altcoins Priced Below $1 to Watch for Next Bull Run – The Crypto Basic

October 31, 2023
Altcoins Lead Post-Fed Crypto Rally as Risk Appetite Increases – Yahoo Finance

Zodia Custody expands in Hong Kong, receives VASP in Ireland … – Tekedia

October 31, 2023
Altcoins Lead Post-Fed Crypto Rally as Risk Appetite Increases – Yahoo Finance

Why Altcoins and Crypto Stocks Were Flying High Today – The Motley Fool

October 30, 2023

Recent News

Altcoins Lead Post-Fed Crypto Rally as Risk Appetite Increases – Yahoo Finance

XRP, Shiba Inu, and More: Here are Top 6 Altcoins Priced Below $1 to Watch for Next Bull Run – The Crypto Basic

October 31, 2023
Altcoins Lead Post-Fed Crypto Rally as Risk Appetite Increases – Yahoo Finance

Zodia Custody expands in Hong Kong, receives VASP in Ireland … – Tekedia

October 31, 2023
Altcoins Lead Post-Fed Crypto Rally as Risk Appetite Increases – Yahoo Finance

Why Altcoins and Crypto Stocks Were Flying High Today – The Motley Fool

October 30, 2023

Categories

  • ADA
  • Altcoins
  • Bitcoin
  • Blockchain
  • Cryptocurrency
  • Dogecoin
  • Ethereum
  • ICO
  • Litecoin
  • Market & Analysis
  • Ripple
  • Videos

Follow Us

Find Via Tags

Ada Altcoin altcoins analysis Analyst Analytics Big Binance Bitcoin Blockchain BNB BTC Buy Cardano Coin Cointelegraph Crypto cryptocurrencies Cryptocurrency Digital DOGE Dogecoin ETH Ethereum finance Heres Insight Inu investors Litecoin LTC market Network news Prediction price Ripple SEC Shiba Solana Today Token Top week XRP
  • privacy And Policy
  • About Us

© 2020 Egrow Online

No Result
View All Result
  • Home
  • Cryptocurrency
  • Bitcoin
  • Ethereum
  • Blockchain
  • Altcoins
  • ADA
  • Litecoin
  • Dogecoin
  • ICO
  • Ripple
  • Market & Analysis
  • Videos

© 2020 Egrow Online