Bitcoin Forum
May 11, 2024, 07:11:05 AM
Welcome,
Guest
. Please
login
or
register
.
News
: Latest Bitcoin Core release:
27.0
[
Torrent
]
Home
Help
Search
Login
Register
More
Bitcoin Forum
>
Local
>
中文 (Chinese)
>
中国比特币chbtc交易所存在低级漏洞,黑客可以恶意清空用户所有的币
Pages: [
1
]
« previous topic
next topic »
Print
Author
Topic: 中国比特币chbtc交易所存在低级漏洞,黑客可以恶意清空用户所有的币 (Read 431 times)
eosethbtc
(OP)
Newbie
Offline
Activity: 3
Merit: 0
中国比特币chbtc交易所存在低级漏洞,黑客可以恶意清空用户所有的币
September 01, 2017, 04:17:19 PM
Last edit: September 03, 2017, 02:48:12 AM by eosethbtc
#1
参考这个微信公众号的这篇文章,按道理说csrf这么基本的漏洞不应该有,但是chbtc居然没有修补,我刚用开发者模式看了一下他们的网站,确实和文章里描述的一样,只不过没有指明是chbtc罢了
https://mp.weixin.qq.com/s?__biz=MzI5NTc4OTQ4Nw==&mid=2247483872&idx=1&sn=62964b16729ca99e31cecd915f93d144&chksm=ec4f7720db38fe368f444b21bb412c17ab66f0847b7b850ac9ff6dfe93b223957ab9f6840a4f#rd
1715411465
Hero Member
Offline
Posts: 1715411465
Ignore
1715411465
1715411465
#2
1715411465
Report to moderator
1715411465
Hero Member
Offline
Posts: 1715411465
Ignore
1715411465
1715411465
#2
1715411465
Report to moderator
Every time a block is mined, a certain amount of BTC (called the
subsidy
) is created out of thin air and given to the miner. The subsidy halves every four years and will reach 0 in about 130 years.
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
1715411465
Hero Member
Offline
Posts: 1715411465
Ignore
1715411465
1715411465
#2
1715411465
Report to moderator
taidulvseh78044
Sr. Member
Offline
Activity: 438
Merit: 250
Re: chbtc交易所存在低级漏洞,黑客可以恶意清空用户所有的币
September 01, 2017, 08:02:00 PM
#2
这很危险啊,还好很少在CHBTC交易,感觉现在最容易出事的就是交易平台,有币还是放自己钱包安全
eosethbtc
(OP)
Newbie
Offline
Activity: 3
Merit: 0
Re: chbtc交易所存在低级漏洞,黑客可以恶意清空用户所有的币
September 03, 2017, 02:47:43 AM
#3
Quote from: taidulvseh78044 on September 01, 2017, 08:02:00 PM
这很危险啊,还好很少在CHBTC交易,感觉现在最容易出事的就是交易平台,有币还是放自己钱包安全
是啊,目前还是没有修复
Mr.K
Member
Offline
Activity: 81
Merit: 10
Re: 中国比特币chbtc交易所存在低级漏洞,黑客可以恶意清空用户所有的币
September 12, 2017, 01:28:52 AM
#4
感谢大家对chbtc的关注!对于楼主提出的问题,我们在这里做一下说明:
1、此问题是以前的一个小问题,已经做了防护;
2、此问题的前提是用户自己访问了病毒网站页面,并且点击了病毒网站的链接,并不是说攻击者可以随意发起针对任意用户,在此也提醒操作金融业务的浏览器与普通浏览网页的浏览器要分开,或者电脑直接不要访问不安全网站;
3、即使可能受本问题影响,成交价格也是市场价,不会是谣言给出的地板价;
4、这类问题是同一浏览器浏览不同网站,跨域带来的前端引用问题,不是后端服务漏洞,影响有限,大部分网站都没有做防范措施。
5、再次感谢大家支持与关注。
herehero
Full Member
Offline
Activity: 124
Merit: 100
Re: 中国比特币chbtc交易所存在低级漏洞,黑客可以恶意清空用户所有的币
September 12, 2017, 01:30:12 AM
#5
买买提原则要遵守啊
scutzhang
Member
Offline
Activity: 126
Merit: 10
Re: 中国比特币chbtc交易所存在低级漏洞,黑客可以恶意清空用户所有的币
September 12, 2017, 03:49:09 PM
#6
交易所的风险还是蛮大的,
⚡⚡ PRiVCY ⚡⚡
▂▃▅▆█ ✅ PRiVCY ($PRIV) is a new PoW/PoS revolutionary privacy project ● ☞ ✅ Best privacy crypto-market! ● █▆▅▃▂
Own Your Privacy!
─────────────────║
Website
|
Github
|
Bitcointalk
|
Twitter
|
Discord
|
Explorer
║─────────────────
✯✯✯✯✯ ✈✈✈[Free Airdrop - Starts 9th June]✅[Bounty]✈✈✈ ║───────────║ Wallet ➢
✓ Windows
|
✓ macOS
|
✓ Linux
Pages: [
1
]
Print
Bitcoin Forum
>
Local
>
中文 (Chinese)
>
中国比特币chbtc交易所存在低级漏洞,黑客可以恶意清空用户所有的币
« previous topic
next topic »
Jump to:
Please select a destination:
-----------------------------
Bitcoin
-----------------------------
=> Bitcoin Discussion
===> Legal
===> Press
===> Meetups
===> Important Announcements
=> Development & Technical Discussion
===> Wallet software
=====> Electrum
=====> Bitcoin Wallet for Android
=====> BitcoinJ
=====> Armory
=====> Mycelium
=====> Hardware wallets
=> Mining
===> Mining support
===> Pools
===> Mining software (miners)
===> Hardware
=====> Group buys
===> Mining speculation
=> Bitcoin Technical Support
=> Project Development
-----------------------------
Economy
-----------------------------
=> Economics
===> Speculation
=> Marketplace
===> Goods
=====> Computer hardware
=====> Digital goods
=======> Invites & Accounts
=====> Collectibles
===> Services
===> Currency exchange
===> Gambling
=====> Games and rounds
=====> Investor-based games
=====> Gambling discussion
===> Lending
=====> Long-term offers
===> Securities
===> Auctions
===> Service Announcements
=====> Micro Earnings
===> Service Discussion
=====> Web Wallets
=====> Exchanges
=> Trading Discussion
===> Scam Accusations
===> Reputation
-----------------------------
Other
-----------------------------
=> Meta
===> New forum software
===> Bitcoin Wiki
=> Politics & Society
=> Beginners & Help
=> Off-topic
=> Serious discussion
===> Ivory Tower
=> Archival
===> Корзина
===> CPU/GPU Bitcoin mining hardware
===> Chinese students
===> Obsolete (buying)
===> Obsolete (selling)
===> MultiBit
-----------------------------
Alternate cryptocurrencies
-----------------------------
=> Altcoin Discussion
=> Announcements (Altcoins)
===> Tokens (Altcoins)
=> Mining (Altcoins)
===> Pools (Altcoins)
=> Marketplace (Altcoins)
===> Service Announcements (Altcoins)
===> Service Discussion (Altcoins)
===> Bounties (Altcoins)
=> Speculation (Altcoins)
-----------------------------
Local
-----------------------------
=> العربية (Arabic)
===> العملات البديلة (Altcoins)
=====> النقاشات
===> إستفسارات و أسئلة المبتدئين
===> التعدين
===> النقاشات الأخرى
===> منصات التبادل
=> Bahasa Indonesia (Indonesian)
===> Marketplace (Bahasa Indonesia)
===> Mining (Bahasa Indonesia)
===> Altcoins (Bahasa Indonesia)
===> Trading dan Spekulasi
===> Ekonomi, Politik, dan Budaya
===> Topik Lainnya
=> Español (Spanish)
===> Mercado y Economía
=====> Servicios
=====> Trading y especulación
===> Hardware y Minería
===> Esquina Libre
===> Mercadillo
=====> Mexico
=====> Argentina
=====> España
=====> Centroamerica y Caribe
===> Primeros pasos y ayuda
===> Altcoins (criptomonedas alternativas)
=====> Minería de altcoins
=====> Servicios
=====> Tokens (Español)
=> 中文 (Chinese)
===> 跳蚤市场
===> 山寨币
===> 媒体
===> 挖矿
===> 离题万里
=> Hrvatski (Croatian)
===> Trgovina
===> Altcoins (Hrvatski)
=====> Announcements (Hrvatski)
===> Off-topic (Hrvatski)
=> Deutsch (German)
===> Anfänger und Hilfe
===> Mining (Deutsch)
===> Trading und Spekulation
===> Projektentwicklung
===> Off-Topic (Deutsch)
===> Treffen
===> Presse
===> Altcoins (Deutsch)
=====> Announcements (Deutsch)
===> Marktplatz
=====> Auktionen
=====> Suche
=====> Biete
=> Ελληνικά (Greek)
===> Αγορά
===> Mining Discussion (Ελληνικά)
===> Altcoins (Ελληνικά)
=====> Altcoin Announcements (Ελληνικά)
=====> Altcoin Mining (Ελληνικά)
=> עברית (Hebrew)
=> Français
===> Actualité et News
===> Débutants
===> Discussions générales et utilisation du Bitcoin
===> Mining et Hardware
===> Économie et spéculation
===> Place de marché
=====> Échanges
=====> Produits et services
=====> Petites annonces
===> Le Bitcoin et la loi
===> Wiki, documentation et traduction
===> Développement et technique
===> Vos sites et projets
===> Hors-sujet
===> Altcoins (Français)
=====> Annonces
=> India
===> Mining (India)
===> Marketplace (India)
===> Regional Languages (India)
===> Press & News from India
===> Alt Coins (India)
===> Buyer/ Seller Reputations (India)
===> Off-Topic (India)
=> Italiano (Italian)
===> Guide (Italiano)
===> Progetti
===> Discussioni avanzate e sviluppo
===> Trading, analisi e speculazione
===> Mercato
=====> Mercato valute
=====> Beni
=====> Servizi
=====> Esercizi commerciali
=====> Hardware/Mining (Italiano)
=====> Gambling (Italiano)
===> Accuse scam/truffe
===> Mining (Italiano)
===> Alt-Currencies (Italiano)
=====> Annunci
===> Raduni/Meeting (Italiano)
===> Crittografia e decentralizzazione
===> Off-Topic (Italiano)
=> 日本語 (Japanese)
===> アルトコイン
=> Nederlands (Dutch)
===> Markt
===> Gokken/lotterijen
===> Mining (Nederlands)
===> Beurzen
===> Alt Coins (Nederlands)
===> Off-topic (Nederlands)
===> Meetings (Nederlands)
=> Nigeria (Naija)
===> Politics and society (Naija)
===> Off-topic (Naija)
=> 한국어 (Korean)
===> 대체코인 Alt Coins (한국어)
=> Pilipinas
===> Altcoins (Pilipinas)
=====> Altcoin Announcements (Pilipinas)
===> Pamilihan
===> Others (Pilipinas)
=> Polski
===> Tablica ogłoszeń
===> Alternatywne kryptowaluty
=====> Nowe kryptowaluty i tokeny
=====> Tablica ogłoszeń (altcoiny)
=> Português (Portuguese)
===> Primeiros Passos (Iniciantes)
===> Economia & Mercado
===> Mineração em Geral
===> Desenvolvimento & Discussões Técnicas
===> Criptomoedas Alternativas
===> Brasil
===> Portugal
=> Русский (Russian)
===> Новички
===> Бизнес
=====> Барахолка
=====> Обменники
===> Идеи
===> Кодеры
===> Майнеры
===> Политика
===> Трейдеры
===> Альтернативные криптовалюты
=====> Токены
=====> Бayнти и aиpдpoпы
===> Хайпы
===> Работа
===> Разное
===> Oбcyждeниe Bitcoin
=====> Новости
=====> Юристы
=> Română (Romanian)
===> Anunturi importante
===> Offtopic
===> Market
=====> Discutii Servicii
===> Minerit
===> Tutoriale
===> Bine ai venit!
===> Presa
===> Altcoins (Monede Alternative)
=====> Anunturi Monede Alternative
=> Skandinavisk
=> Türkçe (Turkish)
===> Bitcoin Haberleri
===> Pazar Alanı
===> Madencilik
===> Ekonomi
===> Servisler
=====> Fonlar
===> Proje Geliştirme
===> Alternatif Kripto-Paralar
=====> Madencilik (Alternatif Kripto-Paralar)
=====> Duyurular (Alternatif Kripto-Paralar)
===> Konu Dışı
===> Yeni Başlayanlar & Yardım
===> Buluşmalar
=> Other languages/locations
Loading...