Author

Topic: Ethereum Calls On Hackers to Attack Ethereum 2.0 in Exchange for Bug Bounty (Read 485 times)

full member
Activity: 1750
Merit: 118
@TravelMug - yes, so far no one is claiming that they have broke Eth 2.0, but I'm sure there could be trying to find a loophole as we speak.

I'm a bit hesitant right now, if there's no one coming forward to report or at least find some bugs, then I doubt that there will be someone. I'm under the impression that at least one or two bugs with severities will be found by these white hackers.

Anyhow, let's continue to wait and see, and I do hope the Eth2.0 devs really did a good job and not totally relying to these bounty to test their system. They should do their own testing, just saying.

If there are no reports about the bug then it's either they are not yet attracting capable hackers or their developers are so good that they have created a bug-free platform, it's too early to tell until they announced that there is no bug in their platform and they can proceed in launching it, this is one of the news that adds credibility to Ethereum.

how much is thier reward  ? i didnt visit the link yet and op didnt provide it on the first page  .

maybe the amount is not reasonable to the hackers because we know hacking isnt an easy task unlike to a crypto exchange or banks that they are going to be motivated to hack because there are huge sums inside it waiting for them but the announcement is also new and many may hackers havent notice it yet  . lets wait for several weeks or months before we judge them  .
copper member
Activity: 210
Merit: 1
I must confess that this is a great step in the right direction. It's more like a silent culture in the cryptocurrency space to help the developers detect the errors in the system and strive to fix them before releasing to the public. I'm also glad that the reward is substantial and would be attractive to experienced hackers.
hero member
Activity: 2632
Merit: 833
I have to research and it seems that there are reported exploits that have been patched already:

https://github.com/ethereum/public-attacknets/issues

And now they are going to hire security experts to expand more.



https://twitter.com/drakefjustin/status/1289656431927611398
legendary
Activity: 3080
Merit: 1353
I love it when I see any form of Ethical hacking which only brings out the best in any product. I believe it's worth it if the ETH network is subjected to a stress network test for vulnerabilities so that once ETH 2.0 is launched on proof of stake there are not going to be any issues of the system being hacked.

Stress testing and finding bugs are two different things though. I used to be a part of a quality testing team before, that's why I know such things. Stress testing Eth 2.0 means that they need to overload their system in which they are not offering as of now.

What Ethereum calls is for ethical hackers trying to penetrate their system, to find flaw and exploits. And with stress testing, you can just write a code to to give the system too much that it either it can handle it or not.
sr. member
Activity: 1274
Merit: 260
1A6nybMUHYKS6E6Z3eJFm4KpVDdev8BAJL
I love it when I see any form of Ethical hacking which only brings out the best in any product. I believe it's worth it if the ETH network is subjected to a stress network test for vulnerabilities so that once ETH 2.0 is launched on proof of stake there are not going to be any issues of the system being hacked.
full member
Activity: 1078
Merit: 104
GoMeat - Digitalizing Meat Stores - ICO
Battle testing the new Ethereum 2.0, that is really nice as it shows the team want everything to be perfect. They are just taking their time to ensure there are no unnecessary bugs and loopholes which can be leveraged on to hack the blockchain later on, so I see this as a very good move. Furthermore, this shows that even though there is unforseen delays, although no one want such, but it would be for the best, as it is better taking time to bring about a reliable upgrade free from bugs.
hero member
Activity: 2632
Merit: 833
@TravelMug - yes, so far no one is claiming that they have broke Eth 2.0, but I'm sure there could be trying to find a loophole as we speak.

I'm a bit hesitant right now, if there's no one coming forward to report or at least find some bugs, then I doubt that there will be someone. I'm under the impression that at least one or two bugs with severities will be found by these white hackers.

Anyhow, let's continue to wait and see, and I do hope the Eth2.0 devs really did a good job and not totally relying to these bounty to test their system. They should do their own testing, just saying.
full member
Activity: 2142
Merit: 183
and now already answered why eth core team delay the release for ethereum 2.0 . they want to make sure there is no bug or anything bad that could be  main problem in future and give negative to ethereum price. this bug bounty will help alot eth core developt to accomplish vulnerability in system.
This is a good decision from the ethereum development team. It is better to immediately provide an opportunity to attack the updated ethereum by various hackers than they will do on their own when the improvements are launched. At the same time, it indicates that the improvements are in the final stages and soon, finally, we will be able to see the results of this work.
sr. member
Activity: 1890
Merit: 252
The OGz Club
Good actions from Ethereum, Bug Bounty will certainly provide interesting things for Ethereum 2.0 later, if the hacker success to hack,
I think Ethereum 2.0 will delay again, and make it even better, but this is very risky, I hope a good hacker follows this program,
hero member
Activity: 2842
Merit: 772
I'm sure if any hackers found an exploit in ETH 2.0's network, they would rather use it to making some money first before thinking about report it to receive rewards. Anyways, Ethereum must be really confident about the security of their network.

I'm sure that they are confident about the security of their network, but who knows, we all know that hackers has the capability to find several loopholes and no matter how you developed your program, there could be some vulnerabilities that you can't catch.

But if there are no hackers claiming that bounty, it could be (a), they are not interested on the bounty, (b) the code is perfect or (c) they have found some vulnerabilities but are not willing to disclosed at this time and waiting for the bounty to go up.
hero member
Activity: 2870
Merit: 594
@TravelMug - yes, so far no one is claiming that they have broke Eth 2.0, but I'm sure there could be trying to find a loophole as we speak.

@blue_hurricanger - that's one possibility as well, maybe the hackers doesn't want to come out with their findings because it's going to be worth more than $5k if they found a high severity bug in the new code.
full member
Activity: 653
Merit: 183
I'm sure if any hackers found an exploit in ETH 2.0's network, they would rather use it to making some money first before thinking about report it to receive rewards. Anyways, Ethereum must be really confident about the security of their network.
hero member
Activity: 1372
Merit: 503
maybe until now the hacker is still trying to find a bug, if anyone has managed to break into the ethereum will certainly make an announcement and I agree with you if the real challenge or test when it was launched
Probably there is but I doubt they will publicised this information. Its not that I dont trust Vitalik but this will affect for sure the market price once someone or anyone show that there are some errors or loopholes on their launch. Its too bad for now, to have this cause eth is constantly rising and we could expect more surge when they deploy the mainnet already. I think this will be the highlight of ethereum network since then.
full member
Activity: 728
Merit: 100
Ok thanks for the update, it's just weird though that no one has claim so far if there are really hackers trying to break their system.

So I wouldn't say it is safe though, maybe we find loopholes when they officially release it for public, and there is where the real test will be.
maybe until now the hacker is still trying to find a bug, if anyone has managed to break into the ethereum will certainly make an announcement and I agree with you if the real challenge or test when it was launched
hero member
Activity: 2632
Merit: 833
Any update or any progress on the bounty? Did someone really break their system or if someone get paid already by Ethereum developers?

Or if white hackers are really interested on their offer? Really be interesting how things will turn about this offerings to the public.
until now I think there is still no one who can hack the ethereum platform that is still newly developed, so I think ethereum 2.0 will be safe when used, hopefully there will be no problems when approaching the launch of the project.

Ok thanks for the update, it's just weird though that no one has claim so far if there are really hackers trying to break their system.

So I wouldn't say it is safe though, maybe we find loopholes when they officially release it for public, and there is where the real test will be.
member
Activity: 181
Merit: 10
This is just a usual marking way to boast about the security of your network. This is a good move to send a signal toward any hackers out there about how serious ETH 2.0 is and reassure ETH 2.0 investors. Smart move indeed.
sr. member
Activity: 1162
Merit: 253
Any update or any progress on the bounty? Did someone really break their system or if someone get paid already by Ethereum developers?

Or if white hackers are really interested on their offer? Really be interesting how things will turn about this offerings to the public.
until now I think there is still no one who can hack the ethereum platform that is still newly developed, so I think ethereum 2.0 will be safe when used, hopefully there will be no problems when approaching the launch of the project.
hero member
Activity: 2632
Merit: 833
Any update or any progress on the bounty? Did someone really break their system or if someone get paid already by Ethereum developers?

Or if white hackers are really interested on their offer? Really be interesting how things will turn about this offerings to the public.
hero member
Activity: 2744
Merit: 541
Campaign Management?"Hhampuz" is the Man
Ethereum is now calling hackers either ethical or black hat hackers to try and break their Ethereum 2.0 and received a reward.

Quote
With Ethereum's plans to launch its 2.0 protocol network, the open-source platform has also decided to tweak its blockchain project to perfection by calling all hackers and challenging them to break into two Ethereum 2.0 attack networks.

https://blockchain.news/news/ethereum-calls-hackers-attack-ethereum-exchange-bug-bounty

I think this is a good move in my opinion, they have open the floodgates for others to test it because going full live. At least this is sort of like testing it extremely thorough and careful way instead of releasing it then hackers breaking it and stealing money in the end.
At least now they are talking?
for the  whole year  that  people are talking when this will coming out and now here we are,they are challenging hackers  to test their  2.0 version just to prove people about their legitimacy and goodness?

this is a great idea from the project team side. It is important that the system is securely protected. Now the most important thing is security. Investors' money must be safe
Yeah just like what FortuneJack site did recently  to  try  looking for Bugs  in their gambling sites.

anyway  i am the one who will surely be happy because of this  meaning they are sooner to release  the  ETH 2.0.
full member
Activity: 840
Merit: 100
Oikos.cash | Decentralized Finance on Tron
this is a great idea from the project team side. It is important that the system is securely protected. Now the most important thing is security. Investors' money must be safe
hero member
Activity: 2660
Merit: 651
Want top-notch marketing for your project, Hire me
This is a good impression because the last time i checked the Ethereum developer said ETH2.0 will be delay next while Vitalik dont support the idea and want it to be done this year. I guess they fastrack some process which requires good examine and for them to be optimistic if the process is 100% executed they have to host hacker bounty.
full member
Activity: 1820
Merit: 107
There is a sense of confidence from the Ethereum developers side about the Ethereum 2.0 development, But I doubt it because the reward is too cheap, I don't think that the top calibre hackers are going to accept that offer, or maybe something will happen in that event thats why let us wait and see how the Ethereum 2.0 security will defend its system.
member
Activity: 430
Merit: 10
terra-credit.com

They are not the first to have done that but it'sd guaranteed to give them an edge in the market if they have a hack-proof system they have done this kind of offer, they know the competition is very stiff there are new platform coming up and releasing it with a hackproof platform will give them a good edge.
an innovation to continue to exist in the market. when an update is made it must be supported by a strong market. I think that is what the developer is trying to do.
full member
Activity: 2324
Merit: 175
Ethereum is now calling hackers either ethical or black hat hackers to try and break their Ethereum 2.0 and received a reward.

Quote
With Ethereum's plans to launch its 2.0 protocol network, the open-source platform has also decided to tweak its blockchain project to perfection by calling all hackers and challenging them to break into two Ethereum 2.0 attack networks.

https://blockchain.news/news/ethereum-calls-hackers-attack-ethereum-exchange-bug-bounty

I think this is a good move in my opinion, they have open the floodgates for others to test it because going full live. At least this is sort of like testing it extremely thorough and careful way instead of releasing it then hackers breaking it and stealing money in the end.

They are not the first to have done that but it'sd guaranteed to give them an edge in the market if they have a hack-proof system they have done this kind of offer, they know the competition is very stiff there are new platform coming up and releasing it with a hackproof platform will give them a good edge.
full member
Activity: 899
Merit: 101
and now already answered why eth core team delay the release for ethereum 2.0 . they want to make sure there is no bug or anything bad that could be  main problem in future and give negative to ethereum price. this bug bounty will help alot eth core developt to accomplish vulnerability in system.
sr. member
Activity: 1610
Merit: 264
I guess this is a good step towards security although I believe that there ain't perfect securities now that we're dealing with cryptocurrency.
I thought they already have white hat hackers in their team to handle this kind of penetration test to find bugs and vulnerabilities of Ethereum, it is a good bounty though.
member
Activity: 420
Merit: 13
$CYBERCASH METAVERSE
This means that eth 2.0 is getting launched soon, I can't wait to see how ethereum will perform after this long term update, 32 eth sounds too much for mining requirements for staking but I think vitalik understands what he is doing, I can't wait
legendary
Activity: 2590
Merit: 1236
At least they have learned from the hacking incidents in the past. Offering bounty is a good gesture to the hacking community as well, as they recognised that they should be part of the solution and the problem. Huge amount as well, $5k is not that bad, although there are hackers that has been rewarded more than that. And there is also some group of ethical hackers which take this as a job. So let's see who will be the first one of the many that will successfully penetrate ETH 2.0.

I'm not sure that $5K is big reward. If they want some group of hackers to really test the network, they should have put $50K or $100K. That would attract the best hackers to try to hack the network and collect the prize. This way a group of 10 hackers would receive $500 each which is nothing.
hero member
Activity: 1344
Merit: 540
I think this is a good move in my opinion, they have open the floodgates for others to test it because going full live. At least this is sort of like testing it extremely thorough and careful way instead of releasing it then hackers breaking it and stealing money in the end.

I just hope that hackers won't hide any critical exploit or bug they found out and take advantage of it to steal funds from the users when ETH 2.0 runs.
This is the one that I'm afraid for. Maybe they can see some critical flaw in the code, but won't call it until they release it and then they ruin it for ETH when they hack and take advantage and steal users funds in the millions of dollars.

I do hope that there will be some independent third party to look at the bugs being reported as this might be one way for hackers to mislead and reported it. But in the end, they are not going to report those critical bugs and will want for the right timing to exploit it.
full member
Activity: 1624
Merit: 163
This is very good news and indicates that Ethereum 2.0 testing is entering its final stages. Apparently, by the due date - November, we will finally be able to appreciate the benefits of these improvements in ethereum. It is better to immediately experience the vulnerability of these improvements from all sides, so that then there are fewer disruptions in the work. It is a very smart idea to involve hackers in this process.
This is also a golden opportunity for hackers to test their abilities, of course getting lucrative rewards. But I am not sure if they succeeded hacking into the Ethereum 2.0 network so what the rewards for? because I'm sure the hackers will ask for the biggest ransom if they success hack into Ethereum 2.0 network.

Which I think the Ethereum 2.0 team is aware of. I don't know how they are going to handle this but I don't think that they will let those hackers just do whatever they want. Remember that they have the control over the project (which is why it's not decentralized) and when a hacking happens, they can defend against it.



sr. member
Activity: 378
Merit: 335
https://t.me/CRYPTOVlKING
Ethereum announced the launch of the final phase of testnet should happen on August 4th. After successful testing in previous phases Prysm client has been audited by blockchain security and auditing firm Qauntstamp few days ago and preparations for the launch of final multi-client public testnet are underway.


Ethereum 2.0 Final Testnet Set to Launch on August 4
legendary
Activity: 3010
Merit: 1280
Get $2100 deposit bonuses & 60 FS
I think this is a good move in my opinion, they have open the floodgates for others to test it because going full live. At least this is sort of like testing it extremely thorough and careful way instead of releasing it then hackers breaking it and stealing money in the end.

Indeed, rather than rushing things out and launching it asap, it is a wise move to check the code thoroughly.  Probably they have learned their lesson on the DAO incident.  And this mean we need more time until this bug testing is done to see the ETH 2.0 to be officially launch.

I just hope that hackers won't hide any critical exploit or bug they found out and take advantage of it to steal funds from the users when ETH 2.0 runs.
sr. member
Activity: 1218
Merit: 254
Trphy.io
This is very good news and indicates that Ethereum 2.0 testing is entering its final stages. Apparently, by the due date - November, we will finally be able to appreciate the benefits of these improvements in ethereum. It is better to immediately experience the vulnerability of these improvements from all sides, so that then there are fewer disruptions in the work. It is a very smart idea to involve hackers in this process.
This is also a golden opportunity for hackers to test their abilities, of course getting lucrative rewards. But I am not sure if they succeeded hacking into the Ethereum 2.0 network so what the rewards for? because I'm sure the hackers will ask for the biggest ransom if they success hack into Ethereum 2.0 network.
sr. member
Activity: 1596
Merit: 335
I think they made a good call on testing their platform before launching it. Doing a Bug bounty will help them determine if they still need to work into something. We cannot expect any system to be perfect, but this will help them improve it more. The reward seems to low for a bug bounty, but I think some people will still be willing to join because we are in a critical situation.
sr. member
Activity: 2520
Merit: 280
Hire Bitcointalk Camp. Manager @ r7promotions.com
Ethereum is now calling hackers either ethical or black hat hackers to try and break their Ethereum 2.0 and received a reward.

Quote
With Ethereum's plans to launch its 2.0 protocol network, the open-source platform has also decided to tweak its blockchain project to perfection by calling all hackers and challenging them to break into two Ethereum 2.0 attack networks.

https://blockchain.news/news/ethereum-calls-hackers-attack-ethereum-exchange-bug-bounty

I think this is a good move in my opinion, they have open the floodgates for others to test it because going full live. At least this is sort of like testing it extremely thorough and careful way instead of releasing it then hackers breaking it and stealing money in the end.
They should rewards bounty based on the flaw they found, if it is huge and critical issue then they should receive few grands as an appreciation because if this happen after its launch then it will cost millions of dollars.
member
Activity: 224
Merit: 28
It seems that Ethereum 2.0 is finally getting launched soon, introducing a bug bounty means it's nearly completed, if no single bug is found then it's in perfect stage for launch, the 5000$ bug bounty is kinda low coming from a big project as ethereum, anyways still not bad
hero member
Activity: 3080
Merit: 603
This only shows that they are serious in strengthening the security of Ethereum's network as they upgrade. Those hackers won't have any trouble and can play with the Eth's network and do what they want to breach. For sure they will take the $5000 as the challenge reward if they will successfully breach the network. Is blockchain.news owned by blockchain.com?
full member
Activity: 527
Merit: 113
Probably a tempting money grabs foe hackers. This will be  a talk of the town for ethereum. They could somehow find their system flaws and giving off rewards to hackers is a good test since they will know what they missed on their upgrade and development. But thinking about it, you think hackers will divuldge all of it. Of course if they found some, they will think that it will beenficial to them if they run the flaws on eth network upgrade that could launch problem.
hero member
Activity: 2660
Merit: 551
This is very good news and indicates that Ethereum 2.0 testing is entering its final stages. Apparently, by the due date - November, we will finally be able to appreciate the benefits of these improvements in ethereum. It is better to immediately experience the vulnerability of these improvements from all sides, so that then there are fewer disruptions in the work. It is a very smart idea to involve hackers in this process.

Right, they could have been in the final stages and they sort of doing some internal testings. So let's see if if will roll out Oct-Nov, the most anticipated event since the bitcoin block halving, everyone is very excited about this release. The offer is cool to let the public breaks their system in exchange for payment. But I do agree that somewhat they should implement a category system as @TravelMug suggested so that they can also prioritise which bugs needed fix ASAP.
sr. member
Activity: 2352
Merit: 245
This is very good news and indicates that Ethereum 2.0 testing is entering its final stages. Apparently, by the due date - November, we will finally be able to appreciate the benefits of these improvements in ethereum. It is better to immediately experience the vulnerability of these improvements from all sides, so that then there are fewer disruptions in the work. It is a very smart idea to involve hackers in this process.
hero member
Activity: 2632
Merit: 833
What i like the most in Ethereum is that the governor team believe in progress over errors. We saw haw many times Ethereum was hacked, from eth classic to the latest hack of one of it's wallets.
If by not considering this as an arrogant plan, i agree that it's a good move. But 5k$ is not a huge amount as described above.  Cheesy Spending time checking Eth new version would cost more than 5 thousands dollars imo .


Specially for those name hackers in the industry, $5k is really cheap getting their services right? At least bare minimum should be $10k or at least they should categorised the severity of the bug.

The more severe the bug is, the higher the bounty pay, in my opinion.
hero member
Activity: 2842
Merit: 772
What i like the most in Ethereum is that the governor team believe in progress over errors. We saw haw many times Ethereum was hacked, from eth classic to the latest hack of one of it's wallets.
If by not considering this as an arrogant plan, i agree that it's a good move. But 5k$ is not a huge amount as described above.  Cheesy Spending time checking Eth new version would cost more than 5 thousands dollars imo .


I think they need to spend more to attract more people to break in to their new system. And speaking of ETH 2.0



https://twitter.com/evan_van_ness/status/1285308768843161606

A lot of time for hackers to really look at the code to find bugs and get that measly bounty. And unless a severe bug was found, it seems that October is a decent date to go.
hero member
Activity: 2338
Merit: 757
What i like the most in Ethereum is that the governor team believe in progress over errors. We saw haw many times Ethereum was hacked, from eth classic to the latest hack of one of it's wallets.
If by not considering this as an arrogant plan, i agree that it's a good move. But 5k$ is not a huge amount as described above.  Cheesy Spending time checking Eth new version would cost more than 5 thousands dollars imo .
legendary
Activity: 3122
Merit: 1102
Leading Crypto Sports Betting & Casino Platform
At least they have learned from the hacking incidents in the past. Offering bounty is a good gesture to the hacking community as well, as they recognised that they should be part of the solution and the problem. Huge amount as well, $5k is not that bad, although there are hackers that has been rewarded more than that. And there is also some group of ethical hackers which take this as a job. So let's see who will be the first one of the many that will successfully penetrate ETH 2.0.

$5k is not very generous though.. but in times of crisis, that would be a big help for these hackers. this is smart move from the eth team.
 at least having this bug bounty program, they will see potential issues that may arise once this Eth 2.0 is up. people are already waiting whats in store for us when this Eth 2.0 is finally up and running.
i hope hackers can really help secure the eth network.
legendary
Activity: 2576
Merit: 1655
At least they have learned from the hacking incidents in the past. Offering bounty is a good gesture to the hacking community as well, as they recognised that they should be part of the solution and the problem. Huge amount as well, $5k is not that bad, although there are hackers that has been rewarded more than that. And there is also some group of ethical hackers which take this as a job. So let's see who will be the first one of the many that will successfully penetrate ETH 2.0.
hero member
Activity: 2870
Merit: 594
Ethereum is now calling hackers either ethical or black hat hackers to try and break their Ethereum 2.0 and received a reward.

Quote
With Ethereum's plans to launch its 2.0 protocol network, the open-source platform has also decided to tweak its blockchain project to perfection by calling all hackers and challenging them to break into two Ethereum 2.0 attack networks.

https://blockchain.news/news/ethereum-calls-hackers-attack-ethereum-exchange-bug-bounty

I think this is a good move in my opinion, they have open the floodgates for others to test it because going full live. At least this is sort of like testing it extremely thorough and careful way instead of releasing it then hackers breaking it and stealing money in the end.
Jump to: