Digital Asset
Intelligence
Security Incident · Exchange

Loopring System design defect

·Historical incident record

Incident Overview

Loopring has appeared a serious front-end error, the private key material is set within a range of 32-bit integer, you can find all user private key pairs by brute force method, due to the user's EdDSA key pair is actually limited to a space of 32-bit integer, the hacker can find out the EdDSA key pair of all users by brute force method. Affected by this, Loopring Exchange shut down for half a day for maintenance and upgrade.

Sources & References

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    Loopring

    Attack methodDDoS Attack
    Reported lossNot disclosed
  2. Incident date
    Target

    Loopring

    Attack methodAccount Compromise
    Reported lossNot disclosed
  3. Incident date
    Target

    Loopring

    Attack methodSecurity Vulnerability
    Reported loss$ 5,000,000
  4. Incident date
    Target

    Youbi

    Attack methodDDoS Attack
    Reported lossNot disclosed
  5. Incident date
    Target

    TBTC

    Attack methodInsufficient testing
    Reported lossNot disclosed