Tag: Ethereum

Hackers exploit open json rpc ports to drain $20 million in ether

Hackers Exploit Open JSON-RPC Ports to Drain $20 Million in Ether

Qihoo 360 researchers traced the theft to March, when a first intrusion siphoned 4 ETH from nodes that left port 8545 exposed. The same method resurfaced months later and escalated to a twenty-million-dollar loss.

Attackers scanned the public network for Geth or Parity nodes that bound the JSON-RPC service to 0.0.0.0:8545 without firewall rules; they sent eth_sendTransaction calls to unlocked accounts and redirected balances to wallets under their control.

The Ethereum Foundation warned about the risk in 2018. Core developers repeated the guidance in release notes, blog posts along with pull-request comments – disable personal API, lock every account, bind the port to 127.0.0.1, or close the port completely.

360 Netlab logged the March incident yet many operators never patched. Default images on cloud marketplaces still launch with the port open. Home stakers follow outdated tutorials that omit the flag –http.addr 127.0.0.1. The client prints no warning at startup. As a result, opportunistic scripts continue to harvest funds. Operators who upgrade to Geth 1.10.9 or later gain automatic account locking and a startup banner that lists exposed services. Until every reachable node applies the fix, the attack surface remains.

Digital tokens exhibit extreme price swings. Purchasers risk total loss. The text above conveys observed facts, not investment advice. Consult a licensed adviser before any allocation. The author held BTC but also XRP at publication time.

Sec official declares ether is not a security

SEC Official Declares Ether is Not a Security

Bill Hinman, Director of Corporate Finance at the United States Securities but also Exchange Commission, stated that ether does not qualify as a security.

Hinman spoke at the Yahoo Finance All Market Summit – Crypto. “Based on my understanding of the present state of ether, the ethereum network, its decentralized structure, we believe current offers and sales of ether are not securities transactions,” he said.

Hinman listed the criteria the Commission applies when it classifies a financial instrument as a security. A third party must exert managerial or promotional effort on behalf of an enterprise. Investors must depend on that party for profit. Information asymmetry between promoters and purchasers must persist. “If the network is sufficiently decentralized and purchasers no longer have a reasonable expectation that a third party will carry out entrepreneurial or managerial functions… when the efforts of the third party are no longer seen as key… material information asymmetry recedes,” he said. He added that the bitcoin and ethereum networks have reached that level of decentralization – no single promoter now drives either token.

Hinman offered no comment on XRP, the token issued by Ripple Labs. Critics argue that XRP meets the definition of a security because Ripple Labs promotes the token to banks for cross border transfers. Ripple Labs holds roughly sixty percent of the total XRP supply – its principals profit directly from price appreciation.

Hinman’s statement does not extend to tokens sold through initial coin offerings. SEC officials have repeatedly warned that most ICO tokens fall under federal securities law. Hinman explicitly excluded ether’s 2014 crowd sale from his analysis. SEC Chairman Jay Clayton has declined to draw a similar line for ICO tokens. The Commission therefore retains authority to pursue enforcement actions against tokens that constitute unregistered securities.

Trading or holding digital tokens involves substantial risk. The author does not recommend any specific cryptocurrency or ICO. Readers should consult a licensed financial professional before committing capital. The author held 0.21 bitcoin and 1 litecoin at the time of publication.

Four details about ethereum's shanghai upgrade

Four Details About Ethereum’s Shanghai Upgrade

Traders, analysts along with node operators focus on Ethereum this week. The network will execute a hard fork on Wednesday that unlocks staked ether for the first time. Observers expect immediate selling pressure that could depress the spot price.

Shanghai activates at epoch 194,048 on 12 April 2023. The fork permits validators who locked thirty two ether in the Beacon Chain deposit contract to initiate partial or full withdrawals. Roughly eighteen million ether, fifteen percent of the circulating supply, sits in that contract. Five Ethereum Improvement Proposals accompany the withdrawal logic.

The fork finalizes Ethereum’s transition from proof-of-work to proof-of-stake. Under proof-of-work, miners compete to solve cryptographic puzzles. Under proof-of-stake, validators propose blocks in proportion to the ether they have staked. The Beacon Chain launched on 1 December 2020. The Merge, executed on 15 September 2022, retired the proof-of-work layer. Shanghai completes the architecture.

EIP-4895 introduces the withdrawal mechanism. Validators submit a withdrawal credential change or an exit message. The protocol processes exits through a queue. Each consensus layer slot allows sixteen partial withdrawals. Full exits enter an exit queue that throttles departures to a preset churn limit. IntoTheBlock estimates that twenty percent of validators would need sixty days to exit under current parameters.

CoinDesk analysts project a maximum of 1.4 million ether in immediate selling volume, worth 2.4 billion dollars at a spot price of 1,700 dollars. Liquid staking derivatives such as stETH, rETH in addition to cbETH already trade on secondary markets. Holders of those tokens have sold or hedged exposure for months. Direct Beacon Chain withdrawals therefore represent a subset of latent supply.

Shanghai also lowers execution layer costs. EIP-3651 reorders block construction so that coinbase addresses pay less gas when accessed as the first transaction. EIP-3855 introduces the PUSH0 opcode – shrinking contract bytecode by one byte per occurrence. EIP-3860 caps initcode size at 0xC000 bytes and charges two gas per extra byte. The three proposals reduce calldata cost and contract deployment expense for decentralized applications.

Capella, the consensus layer upgrade, ships in parallel. Capella alters validator reward accounting, adjusts slashing penalties, and cleans historical block roots. Developers bundle Shanghai but also Capella under the portmanteau Shapella.

Proof-of-stake critics argue that liquid staking derivatives concentrate stake among a handful of node operators. Coinbase next to Binance together control more than half of all staked ether. Proponents counter that the energy draw of proof-of-work exceeds the entire consumption of Argentina, whereas proof-of-stake reduces electrical demand by more than 99.9 percent.

After Shanghai, the next scheduled upgrade is Cancun – Deneb, which will introduce proto-danksharding and cut rollup data fees. Core developers convene every two weeks to review pull requests and adjust the public roadmap. The network now upgrades roughly once per calendar year, a cadence that balances stability with feature velocity.

Sec reversal opens door to spot ether etfs

SEC Reversal Opens Door to Spot Ether ETFs

The Securities but also Exchange Commission on Thursday granted a rule change that permits national exchanges to list spot ether exchange traded funds. The order does not activate immediate trading. Each issuer must still secure individual registration statements. Galaxy Digital projects that the first products will reach the market in July or August.

The decision arrived one week after agency staff signaled reluctance to approve the filings. The reversal suggests a recalibration of policy toward crypto assets in the United States.

The forthcoming ETFs will not offer staking rewards. The omission removes a yield stream that many ether holders now receive for locking tokens in the proof-of-stake protocol. The constraint may curb demand from investors who seek both price exposure and network income.

On Thursday the SEC also classified ether as a commodity rather than a security. The classification appears in the order that labels the planned ETF shares as “commodity-based trust shares.” The move ends a multiyear inquiry into whether the token falls under federal securities law.

Political pressure preceded the vote. On 8 May former President Donald Trump told a campaign audience that he would “end Joe Biden’s war on crypto.” The statement reversed his 2019 criticism of bitcoin as a fraud. House Republicans followed with a letter urging the SEC to approve the ether ETFs. Democratic lawmakers, historically skeptical of crypto, offered no coordinated opposition.

The shift in tone may influence corporate location decisions. Crypto exchanges, token issuers along with mining firms have relocated offshore to avoid regulatory uncertainty. A softer stance from the Biden administration could reverse that migration.

Market reaction arrived within minutes. Ether rose from USD 3,100 to USD 3,700 in the 24 hours after the order. Spot bitcoin ETFs added USD 2.4 billion in net inflows during their first month of trading in January. Analysts debate whether ether will match that pace. Grayscale already operates the Grayscale Ethereum Trust, which holds USD 11 billion in assets. Some investors may prefer to keep positions in the older fund to avoid short term capital gains taxes.

The SEC order covers only ether. The agency has not signaled similar leniency toward tokens such as solana, cardano, or polygon. Chair Gary Gensler reiterated that most crypto assets remain under review for possible securities classification.

Sec clears path for spot ether etfs

SEC Clears Path for Spot Ether ETFs

May 23, 2024: The Securities but also Exchange Commission granted a rule change that permits the listing and trading of eight spot Ether exchange traded funds.

The Securities besides Exchange Commission approved the rule change on Thursday. The decision does not authorize immediate trading. Each of the eight funds must still secure individual approval from the regulator. The review of the separate applications will require several weeks.
The vote delivers a long sought victory to the crypto industry. Asset managers have pursued spot Ether ETFs since January, when the Commission approved comparable Bitcoin products.

The Commission approved applications for the listing of eight spot Ether exchange traded funds. Additional approvals remain necessary before trading commences.

A regulator memo assigns listings as follows. NYSE Arca will host the Grayscale Ethereum Trust and the Bitwise Ethereum ETF. Nasdaq will host the iShares Ethereum Trust. CBOE BZX will host the VanEck Ethereum Trust, the ARK 21Shares Ethereum ETF, the Invesco Galaxy Ethereum ETF, the Fidelity Ethereum Fund, and the Franklin Ethereum ETF.

VanEck filed an amended S-1 within minutes of the announcement. The document signals readiness to launch. The Commission must now review each fund’s registration statement. Analysts expect the process to last weeks. Some speculate the regulator will accelerate the timetable.

Investors have scrutinized the approval process amid unresolved questions over the classification of Ether and over staking rewards.