Chaos Communication Congress

Dude, Where's My Crypto? - Real World Impact of Weak Cryptocurrency Keys (38x196)

Air date: Dec 30, 2024

We present Milksad, our research on a class of vulnerabilities that exposed over a billion dollars worth of cryptocurrency to anyone willing to 'crunch the numbers'. The fatal flaw? Not enough chaos. Learn how we found and disclosed issues in affected open source wallet software, brute-forced thousands of individual affected wallets on a budget, and traced over a billion US dollars worth of prior transactions through them.