Skip to content
BranchesTags

Folders and files

NameName
Last commit message
Last commit date

Latest commit

History

12 Commits
.gitignore
.gitignore
NDSS23_BlockScope.pdf
NDSS23_BlockScope.pdf
README.md
README.md

Repository files navigation

Blockchain Vulnerabilities Reported by VPRLab

BlockScope's source code is available at https://github.com/VPRLab/BlockScope.

BlockScope: Detecting and Investigating Propagated Vulnerabilities in Forked Blockchain Projects

https://github.com/VPRLab/BlkVulnReport/blob/main/NDSS23_BlockScope.pdf

NDSS paper link: https://www.ndss-symposium.org/ndss-paper/blockscope-detecting-and-investigating-propagated-vulnerabilities-in-forked-blockchain-projects/

The following is the bib information:

@INPROCEEDINGS{BLKSCP23,
AUTHOR = {Xiao Yi and Yuzhou Fang and Daoyuan Wu and Lingxiao Jiang},
TITLE = {{BlockScope}: Detecting and Investigating Propagated Vulnerabilities in Forked Blockchain Projects},
BOOKTITLE = {Proc. ISOC NDSS},
YEAR = {2023},
}

A Summary of Vulnerabilities Found in the BlockScope NDSS'23 Paper.

We used this anonymous link, https://tinyurl.com/block-scope, when we submitted the paper.

SourceDescriptionProjectFix StatusClone TypePatch CommitVulnType
CVE-2022-29177Possible Dos AttackBinanceAccepted3870b4505Forked
CVE-2022-29177Possible Dos AttackOptimismPending1870b4505Forked
CVE-2021-41173Unexpected CrashCeloACK13a6fe69fForked
CVE-2021-3401GUI URI InjectionDigiBytePending2a2714a5cFetched
CVE-2021-3401GUI URI InjectionDashFixed1a2714a5cForked
CVE-2021-3401GUI URI InjectionRavencoinFixed3a2714a5cForked
CVE-2021-3401GUI URI InjectionBitcoin GoldPending1a2714a5cForked
CVE-2021-3401GUI URI InjectionDogecoinFixed3a2714a5cFetched
CVE-2020-26265Cause chain split (node refuses to accept new)OptimismPending187c0ba92Fetched
CVE-2020-26264Dos AttackOptimismPending1bddd103aFetched
CVE-2020-26240Faulty PoW CalculationsOptimismPending1d990df90Fetched
CVE-2019-15947Wallet Data LeakDigiBytePending3d8318318Fetched
CVE-2019-15947Wallet Data LeakLitecoinPending3d8318318Fetched
CVE-2019-15947Wallet Data LeakDashAccepted1d8318318Fetched
CVE-2019-15947Wallet Data LeakRavencoinFixed1d8318318Forked
CVE-2019-15947Wallet Data LeakBitcoin GoldPending1d8318318Forked
CVE-2019-15947Wallet Data LeakDogecoinFixed1d8318318Fetched
CVE-2018-17145Potential DDoS AttackRavencoinFixed1beef7ec4Forked
Bitcoin PR#17906Fix a Race Condition during Qt TestDigiBytePending18313fa8eForked
Bitcoin PR#17906Fix a Race Condition during Qt TestLitecoinACK18313fa8eFetched
Bitcoin PR#17906Fix a Race Condition during Qt TestDashAccepted18313fa8eForked
Bitcoin PR#17906Fix a Race Condition during Qt TestRavencoinFixed38313fa8eForked
Bitcoin PR#17906Fix a Race Condition during Qt TestHorizenPending38313fa8eForked
Bitcoin PR#17906Fix a Race Condition during Qt TestBitcoin GoldFixed18313fa8eForked
Bitcoin PR#17906Fix a Race Condition during Qt TestDogecoinFixed38313fa8eFetched
Bitcoin PR#17906Fix a Race Condition during Qt TestBitcoin SVACK38313fa8eFetched
Bitcoin PR#17906Fix a Race Condition during Qt TestZcashACK38313fa8eForked
Bitcoin PR#16152Prevent Potential DoS AttackBitcoin CashPending15efcb772Forked
Bitcoin PR#16152Prevent Potential DoS AttackDashPending15efcb772Fetched
Bitcoin PR#16152Prevent Potential DoS AttackDigiBytePending15efcb772Fetched
Bitcoin PR#16152Prevent Potential DoS AttackLitecoinFixed15efcb772Fetched
Bitcoin PR#16152Prevent Potential DoS AttackRavencoinReject15efcb772Forked
Bitcoin PR#16152Prevent Potential DoS AttackBitcoin GoldPending15efcb772Fetched
Bitcoin PR#16152Prevent Potential DoS AttackDogecoinAccepted15efcb772Fetched
Bitcoin PR#16152Prevent Potential DoS AttackZcashReject15efcb772Fetched
Bitcoin PR#16152Prevent Potential DoS AttackBitcoin SVACK15efcb772Forked
Bitcoin PR#15337Fix Segfault in RPCDigiBytePending130d0f7beMixed
Bitcoin PR#15337Fix Segfault in RPCBitcoin GoldFixed130d0f7beMixed
Bitcoin PR#15325Private Keys could be ImportedDigiBytePending3e6c58d3bMixed
Bitcoin PR#15325Private Keys could be ImportedBitcoin GoldFixed3e6c58d3bMixed
Bitcoin PR#15323Fix Potential Race ConditionDigiBytePending1effe81f7Fetched
Bitcoin PR#15323Fix Potential Race ConditionLitecoinACK1effe81f7Fetched
Bitcoin PR#15323Fix Potential Race ConditionDashACK3effe81f7Forked
Bitcoin PR#15323Fix Potential Race ConditionRavencoinPending3effe81f7Fetched
Bitcoin PR#15323Fix Potential Race ConditionBitcoin GoldFixed1effe81f7Forked
Bitcoin PR#15305Crash if Disconnecting FailDashAccepted14433ed0fMixed
Bitcoin PR#15305Crash if Disconnecting FailDigiBytePending14433ed0fMixed
Bitcoin PR#15305Crash if Disconnecting FailLitecoinACK14433ed0fMixed
Bitcoin PR#15305Crash if Disconnecting FailRavencoinFixed34433ed0fMixed
Bitcoin PR#15305Crash if Disconnecting FailBitcoin GoldFixed14433ed0fMixed
Bitcoin PR#15305Crash if Disconnecting FailHorizenPending34433ed0fMixed
Bitcoin PR#15305Crash if Disconnecting FailDogecoinACK34433ed0fMixed
Bitcoin PR#15305Crash if Disconnecting FailZcashACK34433ed0fMixed
Bitcoin PR#15305Crash if Disconnecting FailBitcoin SVACK34433ed0fMixed
Bitcoin PR#15039Prevent leaking nLockTime fingerprintDigiBytePending3fa48baf2Forked
Bitcoin PR#15039Prevent leaking nLockTime fingerprintDashAccepted3fa48baf2Fetched
Bitcoin PR#15039Prevent leaking nLockTime fingerprintRavencoinACK3fa48baf2Forked
Bitcoin PR#15039Prevent leaking nLockTime fingerprintDogecoinFixed3fa48baf2Fetched
Bitcoin PR#15039Prevent leaking nLockTime fingerprintHorizenPending3fa48baf2Forked
Bitcoin PR#15039Prevent leaking nLockTime fingerprintBitcoin SVACK3fa48baf2Forked
Bitcoin PR#15039Prevent leaking nLockTime fingerprintZcashACK3fa48baf2Forked
Bitcoin PR#15039Prevent leaking nLockTime fingerprintBitcoin GoldFixed3fa48baf2Forked
Bitcoin PR#14993Fix Data RaceDigiBytePending16c10037fForked
Bitcoin PR#14993Fix Data RaceDashACK16c10037fForked
Bitcoin PR#14993Fix Data RaceRavencoinFixed36c10037fForked
Bitcoin PR#14993Fix Data RaceBitcoin GoldFixed16c10037fForked
Bitcoin PR#14993Fix Data RaceHorizenPending36c10037fForked
Bitcoin PR#14993Fix Data RaceDogecoinFixed36c10037fFetched
Bitcoin PR#14993Fix Data RaceZcashACK36c10037fForked
Bitcoin PR#14993Fix Data RaceBitcoin SVACK36c10037fForked
Bitcoin PR#14897Prevent Two Particular AttacksHorizenPending21cff3d6cForked
Bitcoin PR#14897Prevent Two Particular AttacksZcashPending21cff3d6cForked
Bitcoin PR#14897Prevent Two Particular AttacksDigiBytePending11cff3d6cForked
Bitcoin PR#14897Prevent Two Particular AttacksLitecoinFixed11cff3d6cForked
Bitcoin PR#14897Prevent Two Particular AttacksRavencoinAccepted11cff3d6cForked
Bitcoin PR#14897Prevent Two Particular AttacksDogecoinFixed31cff3d6cForked
Bitcoin PR#14897Prevent Two Particular AttacksBitcoin GoldACK11cff3d6cForked
Bitcoin PR#14728Fix Uninitialized ReadRavencoinFixed1b7b36deForked
Bitcoin PR#14728Fix Uninitialized ReadDogecoinFixed1b7b36deFetched
Bitcoin PR#13907Introduce Maximum size for LocatorsRavencoinFixed1e254ff5dMixed
Bitcoin PR#13907Introduce Maximum size for LocatorsHorizenPending2e254ff5dMixed
Bitcoin PR#13907Introduce Maximum size for LocatorsDogecoinFixed1e254ff5dMixed
Bitcoin PR#13907Introduce Maximum size for LocatorsBitcoin SVACK3e254ff5dMixed
Bitcoin PR#13907Introduce Maximum size for LocatorsZcashACK2e254ff5dMixed
Bitcoin PR#13808Shuffle Coins for Privacy ProtectionDashAccepted118f690ecMixed
Bitcoin PR#13808Shuffle Coins for Privacy ProtectionDogecoinACK318f690ecMixed
Bitcoin PR#13808Shuffle Coins for Privacy ProtectionRavencoinACK318f690ecMixed
Bitcoin PR#13808Shuffle Coins for Privacy ProtectionHorizenPending318f690ecMixed
Bitcoin PR#13808Shuffle Coins for Privacy ProtectionBitcoin SVACK318f690ecMixed
Bitcoin PR#13808Shuffle Coins for Privacy ProtectionZcashACK318f690ecMixed
Bitcoin PR#12699Shuffle Tx InputsDashACK32fb9c1e6Mixed
Bitcoin PR#12699Shuffle Tx InputsRavencoinACK32fb9c1e6Mixed
Bitcoin PR#12699Shuffle Tx InputsDogecoinAccepted32fb9c1e6Mixed
Bitcoin PR#12699Shuffle Tx InputsBitcoin SVReject32fb9c1e6Mixed
Bitcoin PR#12561Check Block CorruptionDogecoinFixed30e7c52dcMixed
Bitcoin PR#12561Check Block CorruptionRavencoinFixed10e7c52dcMixed
Bitcoin PR#12561Check Block CorruptionHorizenACK30e7c52dcMixed
Bitcoin PR#12561Check Block CorruptionBitcoin SVPending30e7c52dcMixed
Bitcoin PR#11568Disconnect Outbound PeersHorizenACK337886d5eMixed
Bitcoin PR#11568Disconnect Outbound PeersDogecoinAccepted137886d5eMixed
Bitcoin PR#11568Disconnect Outbound PeersZcashACK337886d5eMixed
Bitcoin PR#11568Disconnect Outbound PeersBitcoin SVReject337886d5eMixed
Bitcoin PR#11531Check Invalid BlockDogecoinFixed3015a5258Mixed
Bitcoin PR#11531Check Invalid BlockHorizenACK3015a5258Mixed
Bitcoin PR#11531Check Invalid BlockBitcoin SVACK3015a5258Mixed
Bitcoin PR#11531Check Invalid BlockZcashACK3015a5258Mixed
Bitcoin PR#10345Timeout Header SyncHorizenACK376f74811Mixed
Bitcoin PR#10345Timeout Header SyncDogecoinFixed176f74811Mixed
Bitcoin PR#10345Timeout Header SyncZcashACK376f74811Mixed
Bitcoin PR#10345Timeout Header SyncBitcoin SVPending376f74811Mixed

About

A Summary of Vulnerabilities Found in the BlockScope NDSS'23 Paper

Resources

Readme
Activity
Custom properties

Stars

8 stars

Watchers

2 watching

Forks

0 forks
Report repository

Releases

Packages

Contributors