Earlier today FlexPool posted a message to Reddit about their pool node being under attack. I had planned to write up about the attack after they had everything sorted out and had a moment to answer some questions, but it appears a second pool is under attack as well – PoolChia. Just a few minutes…
Tag: infosec
Lets talk about Nucle and Chia wallet security
Now that Nucle, Chia’s first SPV wallet, is in open beta and anyone can sign up lets talk about Chia wallet security a little bit. I have spoken before about how I don’t think security is very well understood in the cryptocurrency world, with lots of claims being made about one thing being more secure…
People are losing Chia farming rewards – make sure you aren’t one of them
If you spend any time in the Chia focused communities, like Reddit or the discord servers managed by the Chia Pools, you will see a re-occurring problem come up that people have while Chia farming for on chain pools. People on the new on-chain pools are farming blocks but not receiving their 0.25xch. It looks…
Forks.green Chia Fork Exchange is down, possibly hacked
It looks like the Forks.green Chia Fork Exchange has gone down again with very little communication to its userbase. There isn’t any official information I can find, but I am told that the issue is that the website was hacked and the transaction database encrypted and ransomed, with the ransomer asking for 0.15 BTC which…
FlexPool releases FlexFarmer to public, along with bad security practices
FlexPool has released the first major public release of their FlexFarmer software, releasing version 1.0 for Linux and Windows. I did not cover the exact moment of release because I honestly felt the Alpha and Beta versions were quite good and production ready. However, one of the main critiques I had about the process when…
Major hack on Poly Network steals $300 million US dollars worth of cryptocurrency
Edit: there is some conflict about the exact amount, with the security pages I have read saying 300m and the news saying 600m. I am unsure of the exact amount. It’s probably 600m but I will leave the rest of the article as is. While not strictly Chia related, it is worth knowing and understanding…
Is downloading the Chia blockchain OK to do to speed up sync?
This is actually a really tough question. And the answer really is: it depends. Like all security questions it has to start with a threat model: what are you afraid of happening. In order to do that we have to first understand the risks and benefits of downloading an unverified Chia blockchain. The benefits are…
Let’s build a better Windows Chia client, together
So after my conversation with Gene about the Windows client, why they made the choices they made and what could be done to improve it (and a few things that I was wrong about in terms of specific behaviour), I decided to create a community project to commission the development of an enterprise ready Windows…
Some hard truths about the Chia Windows client – and an idea to fix it
“I tell folks that a lot of people have lauded our GUI as the best in crypto and that may be true. That said, Bram and I consider it a piece of poo and is totally the minimum viable product we could ship!” This is the response I get from Gene Hoffman, President and COO…
Why separate your forks into different virtual machines?
With all the different Chia forks coming out right now, including Flax, ChainGreen, SpareCoin, ChiaRose and now Chives there are a lot of farmers right now with multiple blockchains running on the same machine farming the same plots. But is it safe? No. Not it is not. Even if all the applications are safe right…