Secured #2: Public Vulnerability Disclosures

At this time, we disclosed the primary set of vulnerabilities from the Ethereum Basis’s Bug Bounty Packages. These vulnerabilities had been beforehand found and reported on to the Ethereum Basis or shopper groups through the Bug Bounty Packages for each the Execution Layer and Consensus Layer.

By its Bug Bounty Packages, which permit the Ethereum Basis (EF) to coordinate and cross-check vulnerabilities throughout shoppers, the EF at the moment accepts vulnerability stories for Nimbus, Teku, Lighthouse, Prysm, Lodestar, Go Ethereum, Nethermind, Erigon and Besu.

New repository & vulnerability record

The complete record of vulnerabilities, together with further info, will be present in a git repository right here.

The brand new disclosures repository catalogues all recognized vulnerabilities that had been patched previous to the most recent hardforks on the Execution Layer and Consensus Layer.

We wish to give an enormous shout out to everybody concerned within the discovery and reporting of vulnerabilities, in addition to to the groups liable for fixing them. Whereas we have now tried to incorporate the names or aliases of the reporters, there are lots of builders and researchers inside the shopper groups and within the Ethereum Basis who discovered and corrected vulnerabilities exterior of the bounty program. There are additionally many unsung heroes reminiscent of shopper staff builders, group members, and plenty of extra who’ve spent numerous hours triaging, cross-checking, and mitigating vulnerabilities earlier than they might be exploited.

For extra info, and to be taught extra about disclosure insurance policies, timelines, and cataloging, head over to the brand new disclosures repository.

Your immense efforts have been instrumental to making sure Ethereum’s safety. Thanks!