2024

April

Read

<p class="is-style-lead">Blockchain security startup CertiK said Telegram’s desktop application poses risks to use due to a media auto-download feature, but the social network challenged such claims.</p> 
<p>CertiK alerted the crypto community to a supposed high-risk vulnerability in images and videos sent on Telegram’s private messaging app. </p> 
<p>Users were advised to turn off automatic download settings to mitigate attacks, but the security provider did not explain how it reached this conclusion.&nbsp;</p> 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper">
   https://twitter.com/CertiKAlert/status/1777632812700713254 
 </div>
</figure> 
<h2 class="wp-block-heading" id="telegram-responds-to-certik-s-claim">Telegram responds to CertiK’s claim</h2> 
<p>Shortly after CertiK’s notice on X, <a href="https://crypto.news/best-telegram-crypto-signals/" target="_blank" rel="">Telegram</a> debunked the assertion that its over 800 million worldwide users might be compromised if they have automatic media downloads turned on. The platform added that participants had not reported cases of remote code execution (RCE) leading to crypto wallet hacks.&nbsp;</p> 
<blockquote class="wp-block-quote"> 
 <p>We can’t confirm that such a vulnerability exists. This video is likely a hoax. Anyone can report potential vulnerabilities in our apps.</p> <cite>Telegram team</cite>
</blockquote> 
<p> You might also like: <a href="https://crypto.news/telegram-rolls-out-ton-based-revenue-sharing-system/" rel=""> Telegram rolls out TON-based revenue sharing system </a> </p> 
<h2 class="wp-block-heading" id="expert-weighs-in">Expert weighs in</h2> 
<p>Following the news, crypto.news contacted Polyzoa founder Kirill Tiufanov about the possibility of an RCE attack vector highlighted by CertiK. Tiufanov, a web3 security veteran, surmised that this vulnerability seemed unlikely.</p> 
<blockquote class="wp-block-quote"> 
 <p>That’s quite an abstract assumption as they don’t give any tech details. Technically everyone can say don’t download unknown files as it might be risky.</p> <cite>Kirill Tiufanov, Polyzoa founder</cite>
</blockquote> 
<p>While the claim remains in contention, CertiK advised users to turn off automatic media downloads to ensure maximum safety on the desktop application.</p> 
<p>Several social media platforms allow users to download files with zero clicks, but Telegram is one of the few messaging providers enabling crypto features. The app’s design has allowed blockchain builders to integrate tools like <a href="https://crypto.news/telegram-bot-bonkbot-tops-250m-in-daily-trading-volume/" target="_blank" rel="">BonkBot</a> and wallets while maintaining security.&nbsp;</p> 
<p>Telegram does not support cryptocurrencies, but it can be used as a gateway for users and merchants to send and receive payments in digital assets. </p> 
<p>Solutions like Binance Labs-backed Grindery have <a href="https://crypto.news/grindery-payments-telegram-users/" target="_blank" rel="">leveraged</a> account abstraction smart contracts to unlock one-click transactions on the social media app. In addition, Telegram has opened up a revenue-sharing system for users backed by parent company The Open Network’s <a href="https://crypto.news/telegram-rolls-out-ton-based-revenue-sharing-system/" rel="">Toncoin</a>, providing users with rewards for displaying ads on channels.</p> 
<p> Read more: <a href="https://crypto.news/grindery-payments-telegram-users/" rel=""> Grindery unlocks one-click payments for 800m Telegram users </a> </p>

Telegram refutes CertiK’s auto-download security risk claim

目次

crypto.news

2024年4月9日公開の他の記事

Celebrating Three Years Of Galxe & Embarking On A New Chapter

‘Bitcoin’s volatility, a feature, not a bug,’ but why exactly?

Bitcoin To $150,000 Is “Programmed” With Halving Approaching: Analyst

Ripple’s Price Climbs Despite Trading Slump

Malicious Chrome Extensions Drain $800K from Crypto Investor

Arkham accuses competitors of spreading ‘false rumors’ amid token sell-off

ニュースレターを購読して暗号資産の最新情報を毎日入手！