Babylon exposes high-risk vulnerability in BLS mechanism, attackers can cause validators to crash

robot
Abstract generation in progress

【Crypto World】Babylon project reveals a significant technical issue. Recently, project contributors disclosed a high-risk vulnerability in the BLS voting extension processing mechanism, which could be exploited by malicious validators to disrupt network consensus.

What exactly happened? Attackers can intentionally delete the block hash field when broadcasting a block. As a result, other validators will crash at the network cycle boundary, causing the overall block production speed to decrease. It sounds a bit scary, but fortunately, no reports of such attacks have been made so far.

The affected versions are 4.2.0 and earlier, with a severity rated as high. If you are running these versions of Babylon nodes, now is the time to consider upgrading. While such vulnerabilities are manageable in the short term, there is no room for complacency when it comes to network security.

View Original
This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
  • Reward
  • 5
  • Repost
  • Share
Comment
0/400
MEVVictimAlliancevip
· 14h ago
Now what, another upgrade? Babylon has also started using this approach, truly impressive --- Removing hash fields can cause validators to crash. What a ridiculous logical flaw, no wonder it's rated high risk --- All versions before 4.2.0 need to upgrade. Those who don't will wait to be attacked... It's the same old story --- Fortunately, no one has actually done this yet, or it would be chaos right now --- BLS mechanism has issues again? It feels like every project these days has problems --- So, does this mean that someone with malicious intent can really crash the entire network? Thinking about it is terrifying
View OriginalReply0
CoffeeNFTsvip
· 14h ago
Another high-risk vulnerability, Babylon, are you testing our hearts? Damn, the pitfall of this BLS mechanism is really incredible. Deleting a hash field can cause validators to crash. Who designed this? Hurry up and upgrade, everyone. Don't wait to be hammered. If it really gets attacked, the network will crash and it's all over. Fix it sooner. The Babylon team responded quickly, but defending against so many vulnerabilities must be exhausting.
View OriginalReply0
WalletDoomsDayvip
· 14h ago
Here we go again? How far are we really from validator crashes and such things? Upgrade to 4.2.0 quickly, don’t wait until something happens and then regret it. This BLS mechanism really has one vulnerability after another; it seems we need to keep a close eye on it. Deleting hash fields can cause the network to collapse; this move is indeed a bit harsh. Why is it again high risk... As a small retail investor, I feel exhausted. I’ve already said that these mechanisms are not stable enough; it’s indeed not just worrying over nothing. Upgrade to the latest version quickly; security first is no joke.
View OriginalReply0
FlashLoanLarryvip
· 15h ago
It's the validators causing trouble again. This time they even dared to delete the hash field? Babylon is probably being targeted by a hacker group. --- Brothers, upgrade quickly. Versions before 4.2.0 are really not recommended anymore. Such high-risk vulnerabilities are no joke. --- Basically, there's a loophole in the consensus layer. Attackers can cause the entire network to stall with a single attack. That's the real nightmare for DeFi. --- Fortunately, no one has actually taken action yet. Otherwise, Babylon would be half down. I'm a bit scared. --- Deleting block hashes and other sneaky operations require a lot of hatred for a project to think of such tricks. Validators attacking each other is truly unavoidable. --- Getting anxious now. If bad actors exploit such high-risk vulnerabilities, the network could collapse in minutes. Let's patch it quickly, everyone. --- Luckily, it was discovered now. Otherwise, waiting until the mainnet really crashes would be too late. Babylon responded pretty well this time. --- It seems the BLS mechanism itself is a bit fragile. Just one hash field being compromised can break the system. It needs a thorough review.
View OriginalReply0
GweiWatchervip
· 15h ago
Oh no, it's another BLS problem. These guys are really playing with fire. Hurry up and upgrade, everyone, don't wait until you're overwhelmed and regret it. Versions before 4.2.0 need to get moving; this is no joke this time. Validator crashes are just unpleasant to hear about; we need to be cautious.
View OriginalReply0
Trade Crypto Anywhere Anytime
qrCode
Scan to download Gate App
Community
English
  • 简体中文
  • English
  • Tiếng Việt
  • 繁體中文
  • Español
  • Русский
  • Français (Afrique)
  • Português (Portugal)
  • Bahasa Indonesia
  • 日本語
  • بالعربية
  • Українська
  • Português (Brasil)