Kreds cryptocurrency hosts global web wallet “Hackathon” …The battle results are in!

Kreds Team (fl3xmedia)
2 min readJun 1, 2018

--

Week long pen testing for Kreds web wallet concluded.

Over the past week (May 23 — May 30) we hosted the Kreds Hackathon against our newly developed WebWallet. The wallet contained a balance of 1000 Kreds and the rules were very simple: If you managed to extract those Kreds to a balance under your control, you would win the prize of 250000 Kreds. We also announced the availability of smaller prizes (at our discretion) for the discovery of any issues in which the wallet would leak information such as user accounts names or IDs, wallet accounts, wallet balances, etc.

Well, the hackathon has passed and it seems that our WebWallet has emerged unscathed from the week-long battering: The initial balance of 1000 Kreds is still safely in the wallet. In order to prove this fact, we will be transferring the 1000 remaining Kreds to the address

KDVKqbzc9DLg3QCjfSNHgLFoVTNGxGZFfB

sometime within 24 hours after publishing this note.

In total, the wallet sustained approximately 500000 malicious hits which covered SQL injection, XSS attempts, malicious form input and a few other techniques. None of these attacks uncovered a significant vulnerability; in fact, none of the smaller prizes for information disclosure issues were claimed. We did however pay out 2 bounties to users who through through crafty combination of input parameters managed to bypass our validation and managed to get the website to display it’s error page (the issues these 2 users reported have since been fixed).

In summary, we would like to thank everybody who participated in the hackathon! We believe that this proves that the Kreds web wallet is ready for production use and that while you should not be using it to store large amounts of Kreds, it is a viable method for sending and receiving intermittent amounts of Kreds.

Kreds currency global channels:

Website: http://www.kredsblockchain.com/
Political news Kreds utility: https://www.krediblepolitics.com/
Kreds GitHub: https://github.com/KredsBlockchain/kreds-core
Twitter: https://twitter.com/kredsblockchain
Facebook: https://www.facebook.com/Fl3xmedia
Bitcointalk Kreds: https://bitcointalk.org/index.php?topic=2886837.0
Kreds Instagram: https://www.instagram.com/kredsblockchain/
Kreds Telegram: https://t.me/KredsBlockchain
Masternode site: https://masternodes.online/currencies/KREDS/
Discord: https://discordapp.com/invite/PE5xbsr

--

--