Bitcoin Forum

Ethereum is now calling hackers either ethical or black hat hackers to try and break their Ethereum 2.0 and received a reward.


https://blockchain.news/news/ethereum-calls-hackers-attack-ethereum-exchange-bug-bounty

I think this is a good move in my opinion, they have open the floodgates for others to test it because going full live. At least this is sort of like testing it extremely thorough and careful way instead of releasing it then hackers breaking it and stealing money in the end.

At least they have learned from the hacking incidents in the past. Offering bounty is a good gesture to the hacking community as well, as they recognised that they should be part of the solution and the problem. Huge amount as well, $5k is not that bad, although there are hackers that has been rewarded more than that. And there is also some group of ethical hackers which take this as a job. So let's see who will be the first one of the many that will successfully penetrate ETH 2.0.

$5k is not very generous though.. but in times of crisis, that would be a big help for these hackers. this is smart move from the eth team.
 at least having this bug bounty program, they will see potential issues that may arise once this Eth 2.0 is up. people are already waiting whats in store for us when this Eth 2.0 is finally up and running.
i hope hackers can really help secure the eth network.

What i like the most in Ethereum is that the governor team believe in progress over errors. We saw haw many times Ethereum was hacked, from eth classic to the latest hack of one of it's wallets.
If by not considering this as an arrogant plan, i agree that it's a good move. But 5k$ is not a huge amount as described above.  :D Spending time checking Eth new version would cost more than 5 thousands dollars imo .

I think they need to spend more to attract more people to break in to their new system. And speaking of ETH 2.0

https://i.imgur.com/cgHVO04.png

https://twitter.com/evan_van_ness/status/1285308768843161606

A lot of time for hackers to really look at the code to find bugs and get that measly bounty. And unless a severe bug was found, it seems that October is a decent date to go.

Specially for those name hackers in the industry, $5k is really cheap getting their services right? At least bare minimum should be $10k or at least they should categorised the severity of the bug.

The more severe the bug is, the higher the bounty pay, in my opinion.

This is very good news and indicates that Ethereum 2.0 testing is entering its final stages. Apparently, by the due date - November, we will finally be able to appreciate the benefits of these improvements in ethereum. It is better to immediately experience the vulnerability of these improvements from all sides, so that then there are fewer disruptions in the work. It is a very smart idea to involve hackers in this process.

Right, they could have been in the final stages and they sort of doing some internal testings. So let's see if if will roll out Oct-Nov, the most anticipated event since the bitcoin block halving, everyone is very excited about this release. The offer is cool to let the public breaks their system in exchange for payment. But I do agree that somewhat they should implement a category system as @TravelMug suggested so that they can also prioritise which bugs needed fix ASAP.

Probably a tempting money grabs foe hackers. This will be  a talk of the town for ethereum. They could somehow find their system flaws and giving off rewards to hackers is a good test since they will know what they missed on their upgrade and development. But thinking about it, you think hackers will divuldge all of it. Of course if they found some, they will think that it will beenficial to them if they run the flaws on eth network upgrade that could launch problem.

This only shows that they are serious in strengthening the security of Ethereum's network as they upgrade. Those hackers won't have any trouble and can play with the Eth's network and do what they want to breach. For sure they will take the $5000 as the challenge reward if they will successfully breach the network. Is blockchain.news owned by blockchain.com?

It seems that Ethereum 2.0 is finally getting launched soon, introducing a bug bounty means it's nearly completed, if no single bug is found then it's in perfect stage for launch, the 5000$ bug bounty is kinda low coming from a big project as ethereum, anyways still not bad

They should rewards bounty based on the flaw they found, if it is huge and critical issue then they should receive few grands as an appreciation because if this happen after its launch then it will cost millions of dollars.

I think they made a good call on testing their platform before launching it. Doing a Bug bounty will help them determine if they still need to work into something. We cannot expect any system to be perfect, but this will help them improve it more. The reward seems to low for a bug bounty, but I think some people will still be willing to join because we are in a critical situation.

This is also a golden opportunity for hackers to test their abilities, of course getting lucrative rewards. But I am not sure if they succeeded hacking into the Ethereum 2.0 network so what the rewards for? because I'm sure the hackers will ask for the biggest ransom if they success hack into Ethereum 2.0 network.

Indeed, rather than rushing things out and launching it asap, it is a wise move to check the code thoroughly.  Probably they have learned their lesson on the DAO incident.  And this mean we need more time until this bug testing is done to see the ETH 2.0 to be officially launch.

I just hope that hackers won't hide any critical exploit or bug they found out and take advantage of it to steal funds from the users when ETH 2.0 runs.

Ethereum announced the launch of the final phase of testnet should happen on August 4th. After successful testing in previous phases Prysm client has been audited by blockchain security and auditing firm Qauntstamp few days ago and preparations for the launch of final multi-client public testnet are underway.


Ethereum 2.0 Final Testnet Set to Launch on August 4 (https://cointelegraph.com/news/ethereum-20-final-testnet-set-to-launch-on-august-4/)

Which I think the Ethereum 2.0 team is aware of. I don't know how they are going to handle this but I don't think that they will let those hackers just do whatever they want. Remember that they have the control over the project (which is why it's not decentralized) and when a hacking happens, they can defend against it.

This is the one that I'm afraid for. Maybe they can see some critical flaw in the code, but won't call it until they release it and then they ruin it for ETH when they hack and take advantage and steal users funds in the millions of dollars.

I do hope that there will be some independent third party to look at the bugs being reported as this might be one way for hackers to mislead and reported it. But in the end, they are not going to report those critical bugs and will want for the right timing to exploit it.

I'm not sure that $5K is big reward. If they want some group of hackers to really test the network, they should have put $50K or $100K. That would attract the best hackers to try to hack the network and collect the prize. This way a group of 10 hackers would receive $500 each which is nothing.

This means that eth 2.0 is getting launched soon, I can't wait to see how ethereum will perform after this long term update, 32 eth sounds too much for mining requirements for staking but I think vitalik understands what he is doing, I can't wait

I guess this is a good step towards security although I believe that there ain't perfect securities now that we're dealing with cryptocurrency.
I thought they already have white hat hackers in their team to handle this kind of penetration test to find bugs and vulnerabilities of Ethereum, it is a good bounty though.

and now already answered why eth core team delay the release for ethereum 2.0 . they want to make sure there is no bug or anything bad that could be  main problem in future and give negative to ethereum price. this bug bounty will help alot eth core developt to accomplish vulnerability in system.

They are not the first to have done that but it'sd guaranteed to give them an edge in the market if they have a hack-proof system they have done this kind of offer, they know the competition is very stiff there are new platform coming up and releasing it with a hackproof platform will give them a good edge.

an innovation to continue to exist in the market. when an update is made it must be supported by a strong market. I think that is what the developer is trying to do.

There is a sense of confidence from the Ethereum developers side about the Ethereum 2.0 development, But I doubt it because the reward is too cheap, I don't think that the top calibre hackers are going to accept that offer, or maybe something will happen in that event thats why let us wait and see how the Ethereum 2.0 security will defend its system.

This is a good impression because the last time i checked the Ethereum developer said ETH2.0 will be delay next while Vitalik dont support the idea and want it to be done this year. I guess they fastrack some process which requires good examine and for them to be optimistic if the process is 100% executed they have to host hacker bounty.

this is a great idea from the project team side. It is important that the system is securely protected. Now the most important thing is security. Investors' money must be safe

At least now they are talking?
for the  whole year  that  people are talking when this will coming out and now here we are,they are challenging hackers  to test their  2.0 version just to prove people about their legitimacy and goodness?

Yeah just like what FortuneJack site did recently  to  try  looking for Bugs  in their gambling sites.

anyway  i am the one who will surely be happy because of this  meaning they are sooner to release  the  ETH 2.0.

Any update or any progress on the bounty? Did someone really break their system or if someone get paid already by Ethereum developers?

Or if white hackers are really interested on their offer? Really be interesting how things will turn about this offerings to the public.

until now I think there is still no one who can hack the ethereum platform that is still newly developed, so I think ethereum 2.0 will be safe when used, hopefully there will be no problems when approaching the launch of the project.

This is just a usual marking way to boast about the security of your network. This is a good move to send a signal toward any hackers out there about how serious ETH 2.0 is and reassure ETH 2.0 investors. Smart move indeed.

Ok thanks for the update, it's just weird though that no one has claim so far if there are really hackers trying to break their system.

So I wouldn't say it is safe though, maybe we find loopholes when they officially release it for public, and there is where the real test will be.

maybe until now the hacker is still trying to find a bug, if anyone has managed to break into the ethereum will certainly make an announcement and I agree with you if the real challenge or test when it was launched

Probably there is but I doubt they will publicised this information. Its not that I dont trust Vitalik but this will affect for sure the market price once someone or anyone show that there are some errors or loopholes on their launch. Its too bad for now, to have this cause eth is constantly rising and we could expect more surge when they deploy the mainnet already. I think this will be the highlight of ethereum network since then.

I'm sure if any hackers found an exploit in ETH 2.0's network, they would rather use it to making some money first before thinking about report it to receive rewards. Anyways, Ethereum must be really confident about the security of their network.

@TravelMug - yes, so far no one is claiming that they have broke Eth 2.0, but I'm sure there could be trying to find a loophole as we speak.

@blue_hurricanger - that's one possibility as well, maybe the hackers doesn't want to come out with their findings because it's going to be worth more than $5k if they found a high severity bug in the new code.

I'm sure that they are confident about the security of their network, but who knows, we all know that hackers has the capability to find several loopholes and no matter how you developed your program, there could be some vulnerabilities that you can't catch.

But if there are no hackers claiming that bounty, it could be (a), they are not interested on the bounty, (b) the code is perfect or (c) they have found some vulnerabilities but are not willing to disclosed at this time and waiting for the bounty to go up.

Good actions from Ethereum, Bug Bounty will certainly provide interesting things for Ethereum 2.0 later, if the hacker success to hack,
I think Ethereum 2.0 will delay again, and make it even better, but this is very risky, I hope a good hacker follows this program,

This is a good decision from the ethereum development team. It is better to immediately provide an opportunity to attack the updated ethereum by various hackers than they will do on their own when the improvements are launched. At the same time, it indicates that the improvements are in the final stages and soon, finally, we will be able to see the results of this work.

I'm a bit hesitant right now, if there's no one coming forward to report or at least find some bugs, then I doubt that there will be someone. I'm under the impression that at least one or two bugs with severities will be found by these white hackers.

Anyhow, let's continue to wait and see, and I do hope the Eth2.0 devs really did a good job and not totally relying to these bounty to test their system. They should do their own testing, just saying.

Battle testing the new Ethereum 2.0, that is really nice as it shows the team want everything to be perfect. They are just taking their time to ensure there are no unnecessary bugs and loopholes which can be leveraged on to hack the blockchain later on, so I see this as a very good move. Furthermore, this shows that even though there is unforseen delays, although no one want such, but it would be for the best, as it is better taking time to bring about a reliable upgrade free from bugs.

I love it when I see any form of Ethical hacking which only brings out the best in any product. I believe it's worth it if the ETH network is subjected to a stress network test for vulnerabilities so that once ETH 2.0 is launched on proof of stake there are not going to be any issues of the system being hacked.

Stress testing and finding bugs are two different things though. I used to be a part of a quality testing team before, that's why I know such things. Stress testing Eth 2.0 means that they need to overload their system in which they are not offering as of now.

What Ethereum calls is for ethical hackers trying to penetrate their system, to find flaw and exploits. And with stress testing, you can just write a code to to give the system too much that it either it can handle it or not.

I have to research and it seems that there are reported exploits that have been patched already:

https://github.com/ethereum/public-attacknets/issues

And now they are going to hire security experts to expand more.

https://talkimg.com/images/2023/10/19/RbkUz.png

https://twitter.com/drakefjustin/status/1289656431927611398

I must confess that this is a great step in the right direction. It's more like a silent culture in the cryptocurrency space to help the developers detect the errors in the system and strive to fix them before releasing to the public. I'm also glad that the reward is substantial and would be attractive to experienced hackers.

how much is thier reward  ? i didnt visit the link yet and op didnt provide it on the first page  .

maybe the amount is not reasonable to the hackers because we know hacking isnt an easy task unlike to a crypto exchange or banks that they are going to be motivated to hack because there are huge sums inside it waiting for them but the announcement is also new and many may hackers havent notice it yet  . lets wait for several weeks or months before we judge them  .